aiolabs/omnixient
9
0
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity Actions

feat: sandboxed claude session launcher scripts

Browse source 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Padreug 2026-06-28 06:48:37 +02:00
commit 1dea5c697c
3 changed files with 176 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

107
scripts/sandbox-settings.json Normal file
View file

@ -0,0 +1,107 @@
{
"permissions": {
"defaultMode": "acceptEdits",
"allow": [
"Read",
"Glob",
"Grep",
"Edit",
"Write",
"NotebookEdit",
"Bash(nix build:*)",
"Bash(nix flake check)",
"Bash(nix flake check:*)",
"Bash(nix flake show)",
"Bash(nix flake show:*)",
"Bash(nix flake info)",
"Bash(nix flake info:*)",
"Bash(nix flake metadata)",
"Bash(nix flake metadata:*)",
"Bash(nix eval:*)",
"Bash(nix log:*)",
"Bash(nix-instantiate:*)",
"Bash(nixos-rebuild build:*)",
"Bash(nixos-rebuild dry-build:*)",
"Bash(nixos-rebuild build-vm:*)",
"Bash(nixfmt:*)",
"Bash(statix:*)",
"Bash(deadnix:*)",
"Bash(nix run nixpkgs#nixfmt:*)",
"Bash(nix run nixpkgs#nixfmt-rfc-style:*)",
"Bash(nix run nixpkgs#statix:*)",
"Bash(nix run nixpkgs#deadnix:*)",
"Bash(find:*)",
"Bash(xargs:*)",
"Bash(git status)",
"Bash(git status:*)",
"Bash(git diff)",
"Bash(git diff:*)",
"Bash(git log)",
"Bash(git log:*)",
"Bash(git show)",
"Bash(git show:*)",
"Bash(git branch)",
"Bash(git branch:*)",
"Bash(git add:*)",
"Bash(git commit:*)",
"Bash(git checkout:*)",
"Bash(git restore:*)",
"Bash(git stash)",
"Bash(git stash:*)",
"Bash(git rev-parse:*)",
"Bash(git worktree list)",
"Bash(ls:*)",
"Bash(pwd)",
"Bash(which:*)",
"Bash(type:*)",
"Bash(env)",
"Bash(echo:*)",
"Bash(file:*)",
"Bash(stat:*)",
"Bash(wc:*)",
"Bash(head:*)",
"Bash(tail:*)",
"Bash(cat:*)"
],
"ask": [
"Bash(rm:*)",
"Bash(rmdir:*)",
"Bash(mv:*)",
"Bash(cp:*)",
"Bash(chmod:*)",
"Bash(chown:*)"
],
"deny": [
"Bash(sudo:*)",
"Bash(sudo)",
"Bash(doas:*)",
"Bash(su:*)",
"Bash(nixos-rebuild switch:*)",
"Bash(nixos-rebuild test:*)",
"Bash(nixos-rebuild boot:*)",
"Bash(omni-rebuild)",
"Bash(omni-rebuild:*)",
"Bash(nh:*)",
"Bash(git push)",
"Bash(git push:*)",
"Bash(git remote:*)",
"Bash(git reset --hard:*)",
"Bash(curl:*)",
"Bash(wget:*)",
"Bash(ssh:*)",
"Bash(scp:*)",
"Bash(rsync:*)",
"Bash(nc:*)",
"Bash(systemctl:*)",
"Bash(docker:*)",
"Bash(podman:*)",
"WebFetch",
"WebSearch"
]
}
}