|
25 | 25 | "Bash(~/.claude/hooks/*)", |
26 | 26 | "Bash(~/.agents/skills/*)", |
27 | 27 | "Bash(~/.claude/skills/*)", |
| 28 | + "Bash(.claude/skills/**/*)", |
28 | 29 | // File System |
29 | 30 | "Bash(bat *)", |
| 31 | + "Bash(cd /workspaces/*)", |
30 | 32 | "Bash(chmod *)", |
31 | 33 | "Bash(cp *)", |
32 | 34 | "Bash(eza *)", |
|
40 | 42 | "Bash(touch *)", |
41 | 43 | "Bash(tree *)", |
42 | 44 | // Git & Version Control |
| 45 | + "Bash(git add *)", |
| 46 | + "Bash(git branch *)", |
| 47 | + "Bash(git commit *)", |
43 | 48 | "Bash(git diff *)", |
44 | | - "Bash(git status *)", |
45 | 49 | "Bash(git log *)", |
| 50 | + "Bash(git push)", |
| 51 | + "Bash(git remote get-url origin)", |
46 | 52 | "Bash(git rev-parse *)", |
47 | | - "Bash(git branch *)", |
| 53 | + "Bash(git status *)", |
48 | 54 | // Misc |
49 | 55 | "Bash(amp *)", |
50 | 56 | "Bash(atuin *)", |
|
57 | 63 | "Bash(test *)", |
58 | 64 | "Bash(zk *)", |
59 | 65 | // Node.js |
| 66 | + "Bash(pnpm list *)", |
60 | 67 | "Bash(pnpm test-unit *)", |
61 | 68 | "Bash(pnpm test-e2e *)", |
| 69 | + "Bash(pnpm view *)", |
62 | 70 | // Python |
63 | 71 | "Bash(uv run pytest *)", |
64 | 72 | // Text Processing |
|
76 | 84 | "Bash(rg *)", |
77 | 85 | // Research |
78 | 86 | "Bash(gh issue list *)", |
| 87 | + "Bash(gh search *)", |
79 | 88 | "Bash(gh pr view *)", |
80 | | - "Bash(gh pr diff *)" |
| 89 | + "Bash(gh pr diff *)", |
81 | 90 | ], |
82 | 91 | "ask": [ |
83 | 92 | // let's hold off before we let it use the github CLI in any free running allow mode...I don't want it somehow approving PRs with the user's credentials |
|
89 | 98 | "Bash(curl *)", |
90 | 99 | "Bash(ln *)", |
91 | 100 | "WebFetch", |
| 101 | + // Git & Version Control |
| 102 | + "Bash(git reset --hard *)", |
92 | 103 | ], |
93 | 104 | "deny": [ |
94 | 105 | // Exceptions to generally allowed AI tooling |
95 | 106 | "Bash(bd init*)", // we need to control the init process, don't let AI do that in the background |
96 | 107 | // Github |
97 | 108 | // Claude should not ever interfere with the PR process, that is how we gate AI's work |
| 109 | + "Bash(gh pr close *)", |
| 110 | + "Bash(gh pr comment *)", |
98 | 111 | "Bash(gh pr create *)", |
99 | 112 | "Bash(gh pr edit *)", |
| 113 | + "Bash(gh pr merge *)", |
100 | 114 | "Bash(gh pr ready *)", |
101 | 115 | "Bash(gh pr review *)", |
102 | | - "Bash(gh pr merge *)", |
103 | | - "Bash(gh pr close *)", |
104 | | - "Bash(gh pr comment *)", |
105 | 116 | "Bash(gh pr update-branch *)", |
106 | 117 |
|
107 | 118 | // Destructive File Operations |
|
118 | 129 | "Bash(kill -9 *)", |
119 | 130 | "Bash(killall *)", |
120 | 131 | // Git & Version Control |
121 | | - "Bash(git reset --hard *)", |
122 | 132 | "Bash(git push -f *)", |
123 | 133 | "Bash(git push --force*)", |
124 | 134 | // Node.js |
|
0 commit comments