68 lines
1.5 KiB
JSON
68 lines
1.5 KiB
JSON
{
|
|
"description": "Permission Batching Configuration - Reduce approval prompts by 80%",
|
|
"version": "3.38.0",
|
|
"notes": [
|
|
"Uses 'ask' permission level for fine-grained control",
|
|
"Auto-approves reads, batches writes for user confirmation",
|
|
"Good balance between security and convenience"
|
|
],
|
|
"permissionBatching": {
|
|
"enabled": true,
|
|
"autoApproveSafeReads": true,
|
|
"autoApproveProjectWrites": true,
|
|
"batchWindowSeconds": 5
|
|
},
|
|
"permissions": {
|
|
"allow": [
|
|
"Read(**)",
|
|
"Grep",
|
|
"Glob",
|
|
"Task",
|
|
"WebSearch",
|
|
"TodoWrite",
|
|
"mcp__"
|
|
],
|
|
"deny": [
|
|
"Read(~/.ssh/**)",
|
|
"Read(~/.aws/**)",
|
|
"Read(./.env)",
|
|
"Read(./.env.*)",
|
|
"Read(./secrets/**)",
|
|
"Read(**/credentials/**)",
|
|
"Write(~/.ssh/**)",
|
|
"Write(~/.aws/**)",
|
|
"Write(/etc/**)",
|
|
"Write(/usr/**)",
|
|
"Write(/System/**)",
|
|
"Bash(rm -rf /)",
|
|
"Bash(rm -rf ~)",
|
|
"Bash(sudo:*)",
|
|
"Bash(chmod 777:*)",
|
|
"Bash(eval:*)"
|
|
],
|
|
"ask": [
|
|
"Write(**)",
|
|
"Edit(**)",
|
|
"Bash(:*)",
|
|
"Bash(git push:*)",
|
|
"Bash(git push --force:*)",
|
|
"Bash(npm publish:*)",
|
|
"Bash(pip upload:*)",
|
|
"WebFetch"
|
|
]
|
|
},
|
|
"hooks": {
|
|
"PreToolUse": [
|
|
{
|
|
"matcher": "*",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "python plugins/autonomous-dev/hooks/batch_permission_approver.py"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|