107 lines
2.4 KiB
JSON
107 lines
2.4 KiB
JSON
{
|
|
"permissions": {
|
|
"defaultMode": "acceptEdits",
|
|
"allow": [
|
|
"Read",
|
|
"Glob",
|
|
"Grep",
|
|
"Edit",
|
|
"Write",
|
|
"NotebookEdit",
|
|
|
|
"Bash(nix build:*)",
|
|
"Bash(nix flake check)",
|
|
"Bash(nix flake check:*)",
|
|
"Bash(nix flake show)",
|
|
"Bash(nix flake show:*)",
|
|
"Bash(nix flake info)",
|
|
"Bash(nix flake info:*)",
|
|
"Bash(nix flake metadata)",
|
|
"Bash(nix flake metadata:*)",
|
|
"Bash(nix eval:*)",
|
|
"Bash(nix log:*)",
|
|
"Bash(nix-instantiate:*)",
|
|
"Bash(nixos-rebuild build:*)",
|
|
"Bash(nixos-rebuild dry-build:*)",
|
|
"Bash(nixos-rebuild build-vm:*)",
|
|
|
|
"Bash(nixfmt:*)",
|
|
"Bash(statix:*)",
|
|
"Bash(deadnix:*)",
|
|
"Bash(nix run nixpkgs#nixfmt:*)",
|
|
"Bash(nix run nixpkgs#nixfmt-rfc-style:*)",
|
|
"Bash(nix run nixpkgs#statix:*)",
|
|
"Bash(nix run nixpkgs#deadnix:*)",
|
|
|
|
"Bash(find:*)",
|
|
"Bash(xargs:*)",
|
|
|
|
"Bash(git status)",
|
|
"Bash(git status:*)",
|
|
"Bash(git diff)",
|
|
"Bash(git diff:*)",
|
|
"Bash(git log)",
|
|
"Bash(git log:*)",
|
|
"Bash(git show)",
|
|
"Bash(git show:*)",
|
|
"Bash(git branch)",
|
|
"Bash(git branch:*)",
|
|
"Bash(git add:*)",
|
|
"Bash(git commit:*)",
|
|
"Bash(git checkout:*)",
|
|
"Bash(git restore:*)",
|
|
"Bash(git stash)",
|
|
"Bash(git stash:*)",
|
|
"Bash(git rev-parse:*)",
|
|
"Bash(git worktree list)",
|
|
|
|
"Bash(ls:*)",
|
|
"Bash(pwd)",
|
|
"Bash(which:*)",
|
|
"Bash(type:*)",
|
|
"Bash(env)",
|
|
"Bash(echo:*)",
|
|
"Bash(file:*)",
|
|
"Bash(stat:*)",
|
|
"Bash(wc:*)",
|
|
"Bash(head:*)",
|
|
"Bash(tail:*)",
|
|
"Bash(cat:*)"
|
|
],
|
|
"ask": [
|
|
"Bash(rm:*)",
|
|
"Bash(rmdir:*)",
|
|
"Bash(mv:*)",
|
|
"Bash(cp:*)",
|
|
"Bash(chmod:*)",
|
|
"Bash(chown:*)"
|
|
],
|
|
"deny": [
|
|
"Bash(sudo:*)",
|
|
"Bash(sudo)",
|
|
"Bash(doas:*)",
|
|
"Bash(su:*)",
|
|
"Bash(nixos-rebuild switch:*)",
|
|
"Bash(nixos-rebuild test:*)",
|
|
"Bash(nixos-rebuild boot:*)",
|
|
"Bash(omni-rebuild)",
|
|
"Bash(omni-rebuild:*)",
|
|
"Bash(nh:*)",
|
|
"Bash(git push)",
|
|
"Bash(git push:*)",
|
|
"Bash(git remote:*)",
|
|
"Bash(git reset --hard:*)",
|
|
"Bash(curl:*)",
|
|
"Bash(wget:*)",
|
|
"Bash(ssh:*)",
|
|
"Bash(scp:*)",
|
|
"Bash(rsync:*)",
|
|
"Bash(nc:*)",
|
|
"Bash(systemctl:*)",
|
|
"Bash(docker:*)",
|
|
"Bash(podman:*)",
|
|
"WebFetch",
|
|
"WebSearch"
|
|
]
|
|
}
|
|
}
|