chore: initialize my-pi extension bundle

2026-08-28 08:35:57 +00:00 · 2026-08-18 12:30:48 +08:00
parent 7b7b332912
commit 0637139a16
62 changed files with 11055 additions and 1 deletions
@@ -0,0 +1,107 @@
+{
+  "$schema": "https://raw.githubusercontent.com/gotgenes/pi-packages/main/packages/pi-permission-system/schemas/permissions.schema.json",
+  "debugLog": false,
+  "permissionReviewLog": true,
+  "yoloMode": false,
+  "doublePressToConfirm": true,
+  "permission": {
+    "*": "allow",
+    "grep": "allow",
+    "find": "allow",
+    "multi_grep": "allow",
+    "external_directory": {
+      "*": "ask"
+    },
+    "path": {
+      "*": "allow",
+      ".git/*": "ask",
+      "*.env": "deny",
+      "*.env.*": "deny",
+      "*.env.example": "allow",
+      "~/.ssh": "deny",
+      "~/.ssh/*": "deny",
+      "~/.gnupg": "deny",
+      "~/.gnupg/*": "deny",
+      "~/.aws": "deny",
+      "~/.aws/*": "deny",
+      "~/.kube": "deny",
+      "~/.kube/*": "deny",
+      "~/.docker/config.json": "deny",
+      "~/.config/gh/hosts.yml": "deny",
+      "~/.netrc": "deny",
+      "~/.npmrc": "deny",
+      "~/.pypirc": "deny",
+      "~/Library/Keychains": "deny",
+      "~/Library/Keychains/*": "deny",
+      "~/.pi/agent/auth.json": "deny",
+      "~/.pi/agent/models.json": "deny",
+      "~/.pi/agent/models-store.json": "deny"
+    },
+    "bash": {
+      "*": "allow",
+      "rg*": "deny",
+      "grep*": "deny",
+      "find*": "deny",
+      "fd*": "deny",
+      "git *": "ask",
+      "git status*": "allow",
+      "git diff*": "allow",
+      "git log*": "allow",
+      "git show*": "allow",
+      "git rev-parse*": "allow",
+      "git ls-files*": "allow",
+      "git grep*": "deny",
+      "git branch": "allow",
+      "git branch --show-current*": "allow",
+      "git remote -v": "allow",
+      "git remote get-url*": "allow",
+      "rm *": "ask",
+      "/bin/rm *": "ask",
+      "rmdir *": "ask",
+      "/bin/rmdir *": "ask",
+      "unlink *": "ask",
+      "/usr/bin/unlink *": "ask",
+      "mv *": "ask",
+      "/bin/mv *": "ask",
+      "truncate *": "ask",
+      "dd *": "ask",
+      "chmod *": "ask",
+      "chown *": "ask",
+      "sudo *": "ask",
+      "su *": "ask",
+      "kill *": "ask",
+      "pkill *": "ask",
+      "diskutil *": "ask",
+      "security *": "ask",
+      "launchctl *": "ask",
+      "osascript *": "ask",
+      "open *": "ask",
+      "ssh *": "ask",
+      "scp *": "ask",
+      "sftp *": "ask",
+      "rsync *": "ask",
+      "curl *": "ask",
+      "wget *": "ask",
+      "npm install*": "ask",
+      "npm uninstall*": "ask",
+      "npm update*": "ask",
+      "pnpm add*": "ask",
+      "pnpm install*": "ask",
+      "bun add*": "ask",
+      "bun install*": "ask",
+      "pip install*": "ask",
+      "pip3 install*": "ask",
+      "brew install*": "ask",
+      "brew uninstall*": "ask",
+      "printenv*": "ask"
+    },
+    "mcp": {
+      "*": "ask",
+      "mcp_status": "allow",
+      "mcp_list": "allow"
+    },
+    "skill": {
+      "*": "allow"
+    }
+  }
+}