Remove hardcoded development paths (ralph-loop, loop-test2) and absolute-path permissions from the allow list, keeping only project-agnostic and relative-path permissions.
49 lines
1.3 KiB
JSON
49 lines
1.3 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(gh api:*)",
|
|
"Bash(jq .[].name)",
|
|
"WebFetch(domain:raw.githubusercontent.com)",
|
|
"WebFetch(domain:github.com)",
|
|
"WebFetch(domain:api.github.com)",
|
|
"Bash(curl:*)",
|
|
"Bash(chmod:*)",
|
|
"Bash(bash -n loop.sh)",
|
|
"Bash(bash -n lib/state.sh)",
|
|
"Bash(bash -n lib/archive.sh)",
|
|
"Bash(bash -n lib/prompt.sh)",
|
|
"Bash(bash -n lib/hooks.sh)",
|
|
"Bash(gh repo:*)",
|
|
"WebFetch(domain:www.anthropic.com)",
|
|
"WebFetch(domain:ghuntley.com)",
|
|
"Bash(gh search:*)",
|
|
"Bash(git remote:*)",
|
|
"Bash(git push:*)",
|
|
"Bash(git add:*)",
|
|
"Bash(git commit:*)",
|
|
"Bash(rm -rf ~/.claude/plugins/cache/agent-loop)",
|
|
"Bash(cat ~/.claude/plugins/cache/agent-loop/agent-loop/*/skills/init/SKILL.md)",
|
|
"Bash(ls ~/.claude/plugins/cache/agent-loop/agent-loop/*/skills/)",
|
|
"Bash(claude --dangerously-skip-permissions --print)",
|
|
"WebSearch",
|
|
"WebFetch(domain:executeautomation.github.io)"
|
|
]
|
|
},
|
|
"enabledPlugins": {
|
|
"agent-loop@agent-loop": true
|
|
},
|
|
"hooks": {
|
|
"Stop": [
|
|
{
|
|
"matcher": "",
|
|
"hooks": [
|
|
{
|
|
"type": "command",
|
|
"command": "kill -INT $PPID || true"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
}
|