One registry per process, every job owned by a session: bash's background commands (and a command still running at its timeout, which now goes to the background instead of being killed) and subagents started with task background: true. job_list, job_output, job_stop (the former bash_list, bash_output, bash_kill) and the new job_send and report; a finished job wakes the owning session in every front end with its marked note. The TUI counts jobs, lists them (/jobs), opens a command's output, enters a subagent and messages it, moves a command to the background (ctrl+b) and asks before quitting with jobs running. The link gains the jobs capability. Subagents get a session row of their own, the spec's preamble and agent texts, and their errors reach the report. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
80 lines
2.2 KiB
JSON
80 lines
2.2 KiB
JSON
{
|
|
"about": "The rules every session starts from, before the user's own. Keys are permission keys (a tool's access), values an action or a map of pattern → action; for a pattern the last matching rule wins, across patterns the strictest. Permission keys are tool names, except `plan`, which covers plan_write and plan_update together (the former `todo` key is read as `plan`).",
|
|
"rules": {
|
|
"*": "ask",
|
|
"read": {
|
|
"*": "allow",
|
|
"*.env": "ask",
|
|
"*.env.*": "ask",
|
|
"*.env.example": "allow"
|
|
},
|
|
"glob": "allow",
|
|
"grep": "allow",
|
|
"list": "allow",
|
|
"ask_user": "allow",
|
|
"plan_submit": "allow",
|
|
"task": "allow",
|
|
"tasks": "allow",
|
|
"decisions": "allow",
|
|
"plan": "allow",
|
|
"job_list": "allow",
|
|
"job_output": "allow",
|
|
"job_stop": "allow",
|
|
"job_send": "allow",
|
|
"report": "allow",
|
|
"web_search": "allow",
|
|
"memory": "allow",
|
|
"session_search": "allow",
|
|
"notes": "allow",
|
|
"knowledge": "allow",
|
|
"skills": "allow",
|
|
"skill_manage": "ask",
|
|
"settings": {
|
|
"*": "ask",
|
|
"list": "allow",
|
|
"get *": "allow"
|
|
},
|
|
"web_fetch": {
|
|
"*": "allow",
|
|
"private:*": "ask"
|
|
},
|
|
"external_directory": "ask",
|
|
"bash": {
|
|
"*": "ask",
|
|
"git status *": "allow",
|
|
"git diff *": "allow",
|
|
"git log *": "allow",
|
|
"git show *": "allow",
|
|
"git branch": "allow",
|
|
"git branch --list *": "allow",
|
|
"git branch -a": "allow",
|
|
"git branch -v": "allow",
|
|
"git branch -vv": "allow",
|
|
"git branch -av": "allow",
|
|
"git rev-parse *": "allow",
|
|
"git blame *": "allow",
|
|
"ls *": "allow",
|
|
"pwd": "allow",
|
|
"cat *": "allow",
|
|
"head *": "allow",
|
|
"tail *": "allow",
|
|
"wc *": "allow",
|
|
"which *": "allow",
|
|
"rg *": "allow",
|
|
"grep *": "allow",
|
|
"file *": "allow",
|
|
"tree *": "allow",
|
|
"git diff *--output*": "ask",
|
|
"git log *--output*": "ask",
|
|
"git show *--output*": "ask",
|
|
"git branch --list *-*": "ask",
|
|
"rg *--pre*": "ask",
|
|
"rg *--hostname-bin*": "ask",
|
|
"rg *--search-zip*": "ask",
|
|
"tree *-o*": "ask",
|
|
"tree *-R*": "ask",
|
|
"file *-C*": "ask"
|
|
}
|
|
}
|
|
}
|