feat: add comprehensive auto-allow rules for Claude and Codex

2026-05-13 20:00:05 +03:00
parent c42f0d0362
commit 7d85b483fc
2 changed files with 278 additions and 9 deletions
@@ -31,6 +31,149 @@
      }
    }
  },
+  "permissions": {
+    "allow": [
+      "Bash(rtk *)",
+
+      "Bash(ls *)", "Bash(ls)",
+      "Bash(ll *)", "Bash(ll)",
+      "Bash(la *)", "Bash(la)",
+      "Bash(eza *)",
+      "Bash(find *)",
+      "Bash(fd *)",
+      "Bash(pwd)",
+      "Bash(which *)",
+      "Bash(type *)",
+      "Bash(command -v *)",
+      "Bash(whereis *)",
+
+      "Bash(cat *)",
+      "Bash(bat *)",
+      "Bash(head *)",
+      "Bash(tail *)",
+      "Bash(less *)",
+      "Bash(wc *)",
+      "Bash(file *)",
+      "Bash(stat *)",
+
+      "Bash(grep *)",
+      "Bash(rg *)",
+      "Bash(ag *)",
+      "Bash(echo *)",
+      "Bash(printf *)",
+      "Bash(sed *)",
+      "Bash(awk *)",
+      "Bash(cut *)",
+      "Bash(sort *)",
+      "Bash(uniq *)",
+      "Bash(tr *)",
+      "Bash(jq *)",
+
+      "Bash(mkdir *)",
+      "Bash(touch *)",
+      "Bash(cp *)",
+      "Bash(mv *)",
+      "Bash(chmod *)",
+      "Bash(chown *)",
+      "Bash(ln *)",
+
+      "Bash(git status *)", "Bash(git status)",
+      "Bash(git log *)",
+      "Bash(git diff *)",
+      "Bash(git show *)",
+      "Bash(git branch *)",
+      "Bash(git remote *)",
+      "Bash(git stash *)",
+      "Bash(git tag *)",
+      "Bash(git add *)",
+      "Bash(git commit *)",
+      "Bash(git checkout *)",
+      "Bash(git switch *)",
+      "Bash(git restore *)",
+      "Bash(git fetch *)",
+      "Bash(git pull *)",
+      "Bash(git push *)",
+      "Bash(git mv *)",
+      "Bash(git rm *)",
+      "Bash(git config *)",
+      "Bash(git blame *)",
+      "Bash(git describe *)",
+      "Bash(git shortlog *)",
+
+      "Bash(chezmoi *)",
+
+      "Bash(npm *)",
+      "Bash(npx *)",
+      "Bash(yarn *)",
+      "Bash(pnpm *)",
+      "Bash(node *)",
+      "Bash(bun *)",
+
+      "Bash(bundle *)",
+      "Bash(gem *)",
+      "Bash(ruby *)",
+      "Bash(rbenv *)",
+      "Bash(rspec *)",
+      "Bash(rails *)",
+      "Bash(bin/rails *)",
+
+      "Bash(python *)",
+      "Bash(python3 *)",
+      "Bash(pip *)",
+      "Bash(pip3 *)",
+      "Bash(uv *)",
+      "Bash(pytest *)",
+      "Bash(poetry *)",
+
+      "Bash(cargo *)",
+      "Bash(rustc *)",
+      "Bash(rustup *)",
+      "Bash(go *)",
+      "Bash(make *)",
+
+      "Bash(date *)", "Bash(date)",
+      "Bash(uname *)",
+      "Bash(hostname *)",
+      "Bash(whoami)",
+      "Bash(id)",
+      "Bash(env)", "Bash(env *)",
+      "Bash(printenv *)",
+      "Bash(ps *)",
+      "Bash(df *)",
+      "Bash(du *)",
+      "Bash(free *)",
+      "Bash(uptime)",
+      "Bash(lsof *)",
+      "Bash(ss *)",
+      "Bash(ip *)",
+      "Bash(ping *)",
+      "Bash(curl *)",
+      "Bash(wget *)",
+      "Bash(ssh *)",
+      "Bash(ssh-keygen *)",
+
+      "Bash(pacman -Q*)",
+      "Bash(pacman -Si *)",
+      "Bash(pacman -Ss *)",
+      "Bash(paru -Q*)",
+      "Bash(systemctl status *)",
+      "Bash(journalctl *)",
+
+      "Bash(resticprofile *)",
+      "Bash(restic *)",
+      "Bash(rclone *)",
+      "Bash(age *)",
+
+      "Bash(docker ps *)", "Bash(docker ps)",
+      "Bash(docker images *)", "Bash(docker images)",
+      "Bash(docker logs *)",
+      "Bash(docker inspect *)",
+      "Bash(docker exec *)",
+      "Bash(kubectl get *)",
+      "Bash(kubectl describe *)",
+      "Bash(kubectl logs *)"
+    ]
+  },
  "language": "Russian",
  "effortLevel": "high",
  "remoteControlAtStartup": false,