mirror of
https://bitbucket.org/siakitem/my-pi.git
synced 2026-08-28 08:35:57 +00:00
96 lines
2.4 KiB
JSON
96 lines
2.4 KiB
JSON
{
|
|
"$schema": "https://raw.githubusercontent.com/gotgenes/pi-packages/main/packages/pi-permission-system/schemas/permissions.schema.json",
|
|
"debugLog": false,
|
|
"permissionReviewLog": true,
|
|
"yoloMode": false,
|
|
"doublePressToConfirm": true,
|
|
"permission": {
|
|
"*": "allow",
|
|
"grep": "allow",
|
|
"find": "allow",
|
|
"multi_grep": "allow",
|
|
"external_directory": {
|
|
"*": "ask"
|
|
},
|
|
"path": {
|
|
"*": "allow",
|
|
".git/*": "ask",
|
|
"*.env": "deny",
|
|
"*.env.*": "deny",
|
|
"*.env.example": "allow",
|
|
"~/.ssh": "deny",
|
|
"~/.ssh/*": "deny",
|
|
"~/.gnupg": "deny",
|
|
"~/.gnupg/*": "deny",
|
|
"~/.aws": "deny",
|
|
"~/.aws/*": "deny",
|
|
"~/.kube": "deny",
|
|
"~/.kube/*": "deny",
|
|
"~/.docker/config.json": "deny",
|
|
"~/.config/gh/hosts.yml": "deny",
|
|
"~/.netrc": "deny",
|
|
"~/.npmrc": "deny",
|
|
"~/.pypirc": "deny",
|
|
"~/Library/Keychains": "deny",
|
|
"~/Library/Keychains/*": "deny",
|
|
"~/.pi/agent/auth.json": "deny",
|
|
"~/.pi/agent/models.json": "deny",
|
|
"~/.pi/agent/models-store.json": "deny"
|
|
},
|
|
"bash": {
|
|
"*": "allow",
|
|
"rg*": "deny",
|
|
"grep*": "deny",
|
|
"find*": "deny",
|
|
"fd*": "deny",
|
|
"git status*": "allow",
|
|
"git diff*": "allow",
|
|
"git log*": "allow",
|
|
"git show*": "allow",
|
|
"git rev-parse*": "allow",
|
|
"git ls-files*": "allow",
|
|
"git grep*": "deny",
|
|
"git branch": "allow",
|
|
"git branch --show-current*": "allow",
|
|
"git remote -v": "allow",
|
|
"git remote get-url*": "allow",
|
|
"rm *": "ask",
|
|
"/bin/rm *": "ask",
|
|
"rmdir *": "ask",
|
|
"/bin/rmdir *": "ask",
|
|
"unlink *": "ask",
|
|
"/usr/bin/unlink *": "ask",
|
|
"mv *": "ask",
|
|
"/bin/mv *": "ask",
|
|
"truncate *": "ask",
|
|
"dd *": "ask",
|
|
"chmod *": "ask",
|
|
"chown *": "ask",
|
|
"sudo *": "ask",
|
|
"su *": "ask",
|
|
"kill *": "ask",
|
|
"pkill *": "ask",
|
|
"diskutil *": "ask",
|
|
"security *": "ask",
|
|
"launchctl *": "ask",
|
|
"osascript *": "ask",
|
|
"open *": "ask",
|
|
"ssh *": "ask",
|
|
"scp *": "ask",
|
|
"sftp *": "ask",
|
|
"rsync *": "ask",
|
|
"curl *": "ask",
|
|
"wget *": "ask",
|
|
"printenv*": "ask"
|
|
},
|
|
"mcp": {
|
|
"*": "ask",
|
|
"mcp_status": "allow",
|
|
"mcp_list": "allow"
|
|
},
|
|
"skill": {
|
|
"*": "allow"
|
|
}
|
|
}
|
|
}
|