pebbleagent/permission_rules.json at main · 5235aa-web/pebbleagent · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
{
  "mode": "auto",
  "allow": [
    "read_file",
    "list_directory",
    "get_file_info",
    "ls",
    "grep",
    "glob",
    "search_in_file",
    "search_files",
    "find_files",
    "git_status",
    "git_log",
    "git_diff",
    "todo_read",
    "todo_write",
    "get_plan",
    "create_plan",
    "enter_plan_mode",
    "exit_plan_mode",
    "list_skills",
    "load_skill",
    "tool_search",
    "list_tools",
    "clarify",
    "get_env_var",
    "get_system_info",
    "list_processes",
    "execute_shell:git *",
    "execute_shell:ls",
    "execute_shell:dir",
    "execute_shell:python --version",
    "execute_shell:node --version",
    "execute_shell:npm --version"
  ],
  "deny": [
    "execute_shell:npm run tauri build*",
    "execute_shell:npm run build*",
    "execute_shell:npm run release*",
    "execute_shell:npm run publish*",
    "execute_shell:npx tauri build*",
    "execute_shell:npx vite build*",
    "execute_shell:vite build*",
    "execute_shell:cargo tauri build*",
    "execute_shell:pnpm build*",
    "execute_shell:yarn build*",
    "execute_shell:*yinstaller*",
    "powershell:npm run tauri build*",
    "powershell:npm run build*",
    "powershell:npm run release*",
    "powershell:npm run publish*",
    "powershell:npx tauri build*",
    "powershell:npx vite build*",
    "powershell:vite build*",
    "powershell:cargo tauri build*",
    "powershell:pnpm build*",
    "powershell:yarn build*",
    "powershell:*yinstaller*"
  ],
  "ask": [
    "execute_shell:rm *",
    "execute_shell:del *",
    "execute_shell:rmdir *",
    "execute_shell:sudo *",
    "execute_shell:chmod *",
    "execute_shell:chown *",
    "execute_shell:mkfs *",
    "execute_shell:dd *",
    "execute_shell:shutdown *",
    "execute_shell:reboot *",
    "execute_shell:taskkill *",
    "write_file:.env",
    "write_file:*.pem",
    "write_file:*.key",
    "write_file:.git/*",
    "write_file:*.secret",
    "write_file:credentials*",
    "delete_file",
    "kill_process",
    "set_env_var",
    "notebook_edit"
  ]
}