Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
40 lines
1.1 KiB
JSON
40 lines
1.1 KiB
JSON
{
|
|
"_comment": "Allowlist for unattended Grok. mode=dontAsk denies anything not listed. Rule syntax must be confirmed against `grok --help` on install (install-grok.ps1 step 0); fix the rules here, never switch to bypassPermissions.",
|
|
"mode": "dontAsk",
|
|
"allow": [
|
|
"Read",
|
|
"Edit",
|
|
"Write",
|
|
"Glob",
|
|
"Grep",
|
|
"Bash(git status:*)",
|
|
"Bash(git log:*)",
|
|
"Bash(git show:*)",
|
|
"Bash(git diff:*)",
|
|
"Bash(git add:*)",
|
|
"Bash(git commit:*)",
|
|
"Bash(git rev-parse:*)",
|
|
"Bash(git ls-remote:*)",
|
|
"Bash(git ls-files:*)",
|
|
"Bash(git grep:*)",
|
|
"Bash(git fetch:*)",
|
|
"Bash(git push origin HEAD:refs/heads/codex/*)",
|
|
"Bash(npm run lint:*)",
|
|
"Bash(npm run test:db:*)",
|
|
"Bash(node node_modules/tsx/dist/cli.mjs --test:*)",
|
|
"Bash(frontend\\node_modules\\.bin\\tsc:*)",
|
|
"Bash(.venv\\Scripts\\python -m pytest:*)",
|
|
"Bash(docker info:*)"
|
|
],
|
|
"deny": [
|
|
"Bash(git push --force:*)",
|
|
"Bash(git push -f:*)",
|
|
"Bash(git push --no-verify:*)",
|
|
"Bash(git config:*)",
|
|
"Bash(git reset --hard:*)",
|
|
"Bash(git stash:*)",
|
|
"Read(~/.config/jyotisha-agent/**)",
|
|
"Read(~/.git-credentials)"
|
|
]
|
|
}
|