126 lines
2.9 KiB
JSON
126 lines
2.9 KiB
JSON
{
|
|
"description": "Autonomous Dev - Full auto-approval with layered security (RECOMMENDED)",
|
|
"version": "3.38.0",
|
|
"notes": [
|
|
"Layer 1: Native permissions block provides zero-latency auto-approval",
|
|
"Layer 2: PreToolUse hook provides enhanced security validation",
|
|
"Layer 3: Audit logging tracks all approvals/denials",
|
|
"Result: Zero prompts for trusted operations, full security for edge cases"
|
|
],
|
|
"permissions": {
|
|
"allow": [
|
|
"Read(**)",
|
|
"Write(**)",
|
|
"Edit(**)",
|
|
"Glob",
|
|
"Grep",
|
|
"Bash(:*)",
|
|
"Task",
|
|
"WebFetch",
|
|
"WebSearch",
|
|
"TodoWrite",
|
|
"NotebookEdit",
|
|
"ExitPlanMode",
|
|
"BashOutput",
|
|
"KillShell",
|
|
"AskUserQuestion",
|
|
"Skill",
|
|
"SlashCommand",
|
|
"EnterPlanMode",
|
|
"AgentOutputTool",
|
|
"mcp__"
|
|
],
|
|
"deny": [
|
|
"Read(./.env)",
|
|
"Read(./.env.*)",
|
|
"Read(~/.ssh/**)",
|
|
"Read(~/.aws/**)",
|
|
"Read(~/.config/gh/**)",
|
|
"Read(./secrets/**)",
|
|
"Read(**/credentials/**)",
|
|
"Read(**/.git/config)",
|
|
"Write(/etc/**)",
|
|
"Write(/System/**)",
|
|
"Write(/usr/**)",
|
|
"Write(~/.ssh/**)",
|
|
"Write(~/.aws/**)",
|
|
"Bash(rm -rf /)",
|
|
"Bash(rm -rf /*)",
|
|
"Bash(rm -rf ~)",
|
|
"Bash(sudo:*)",
|
|
"Bash(chmod 777:*)",
|
|
"Bash(curl*|*bash)",
|
|
"Bash(wget*|*bash)",
|
|
"Bash(eval:*)",
|
|
"Bash(exec:*)",
|
|
"Bash(dd:*)",
|
|
"Bash(mkfs:*)",
|
|
"Bash(fdisk:*)",
|
|
"Bash(shutdown:*)",
|
|
"Bash(reboot:*)",
|
|
"Bash(kill -9 1)",
|
|
"Bash(killall:*)"
|
|
],
|
|
"ask": [
|
|
"Bash(git push:*)",
|
|
"Bash(git push --force:*)",
|
|
"Bash(npm publish:*)",
|
|
"Bash(pip upload:*)"
|
|
]
|
|
},
|
|
"hooks": {
|
|
"SessionStart": [
|
|
{
|
|
"matcher": "compact",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "bash plugins/autonomous-dev/hooks/SessionStart-batch-recovery.sh",
|
|
"timeout": 5
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"PreToolUse": [
|
|
{
|
|
"matcher": "*",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "MCP_AUTO_APPROVE=true python3 plugins/autonomous-dev/hooks/unified_pre_tool.py",
|
|
"timeout": 5
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"PostToolUse": [
|
|
{
|
|
"matcher": {
|
|
"tools": ["Write", "Edit"]
|
|
},
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python plugins/autonomous-dev/hooks/auto_format.py"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"PreCommit": [
|
|
{
|
|
"matcher": "*",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python plugins/autonomous-dev/hooks/auto_test.py"
|
|
},
|
|
{
|
|
"type": "command",
|
|
"command": "python plugins/autonomous-dev/hooks/security_scan.py"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|