@nail00749/agent-gvozd 0.1.8 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (26) hide show
  1. package/README.md +68 -11
  2. package/defaults/agents/back-deep.jsonc +1923 -6
  3. package/defaults/agents/back-fast.jsonc +1908 -3
  4. package/defaults/agents/front-deep.jsonc +1978 -17
  5. package/defaults/agents/front-fast.jsonc +1963 -14
  6. package/defaults/agents/git.jsonc +20 -0
  7. package/defaults/agents/master-trusted.jsonc +32 -0
  8. package/defaults/agents/master.jsonc +0 -1
  9. package/defaults/agents/review-deep.jsonc +2443 -18
  10. package/defaults/agents/review-fast.jsonc +2428 -15
  11. package/defaults/agents/security.jsonc +2213 -29
  12. package/defaults/prompts/back-deep.md +1 -1
  13. package/defaults/prompts/back-fast.md +1 -1
  14. package/defaults/prompts/devops.md +1 -1
  15. package/defaults/prompts/front-deep.md +1 -1
  16. package/defaults/prompts/front-fast.md +1 -1
  17. package/defaults/prompts/master-trusted.md +7 -0
  18. package/defaults/prompts/master.md +2 -2
  19. package/defaults/prompts/review-deep.md +3 -1
  20. package/defaults/prompts/review-fast.md +1 -1
  21. package/defaults/prompts/security.md +3 -1
  22. package/dist/cli.js +303 -114
  23. package/dist/index.js +271 -11
  24. package/dist/tui.js +1080 -0
  25. package/package.json +13 -3
  26. package/defaults/agents/verifier.jsonc +0 -1298
package/defaults/agents/security.jsonc CHANGED
@@ -12,35 +12,2219 @@
12
12
  "gitnexus-taint-analysis",
13
13
  "gitnexus-pdg-query"
14
14
  ],
15
- "mcp": ["context7"],
15
+ "mcp": [
16
+ "context7"
17
+ ],
16
18
  "permissions": [
17
- { "action": "*", "resource": "*", "effect": "deny" },
18
- { "action": "read", "resource": "*", "effect": "allow" },
19
- { "action": "glob", "resource": "*", "effect": "allow" },
20
- { "action": "grep", "resource": "*", "effect": "allow" },
21
- { "action": "shell", "resource": "*", "effect": "ask" },
22
- { "action": "gitnexus_*", "resource": "*", "effect": "allow" },
23
- { "action": "gitnexus_rename", "resource": "*", "effect": "deny" },
24
- { "action": "gitnexus_group_sync", "resource": "*", "effect": "deny" },
25
- { "action": "gitlab_get_*", "resource": "*", "effect": "allow" },
26
- { "action": "gitlab_list_*", "resource": "*", "effect": "allow" },
27
- { "action": "gitlab_search_*", "resource": "*", "effect": "allow" },
28
- { "action": "gitlab_mr_discussions", "resource": "*", "effect": "allow" },
29
- { "action": "gitlab_health_check", "resource": "*", "effect": "allow" },
30
- { "action": "gitlab_get_project_variable", "resource": "*", "effect": "deny" },
31
- { "action": "gitlab_get_group_variable", "resource": "*", "effect": "deny" },
32
- { "action": "gitlab_list_project_variables", "resource": "*", "effect": "deny" },
33
- { "action": "gitlab_list_group_variables", "resource": "*", "effect": "deny" },
34
- { "action": "playwright_*", "resource": "*", "effect": "ask" },
35
- { "action": "playwright_browser_get_config", "resource": "*", "effect": "allow" },
36
- { "action": "playwright_browser_snapshot", "resource": "*", "effect": "allow" },
37
- { "action": "playwright_browser_take_screenshot", "resource": "*", "effect": "allow" },
38
- { "action": "playwright_browser_console_messages", "resource": "*", "effect": "allow" },
39
- { "action": "playwright_browser_network_requests", "resource": "*", "effect": "allow" },
40
- { "action": "playwright_browser_tabs", "resource": "*", "effect": "allow" },
41
- { "action": "playwright_browser_find", "resource": "*", "effect": "allow" },
42
- { "action": "playwright_browser_generate_locator", "resource": "*", "effect": "allow" },
43
- { "action": "playwright_browser_verify_*", "resource": "*", "effect": "allow" },
44
- { "action": "playwright_browser_run_code_unsafe", "resource": "*", "effect": "deny" }
19
+ {
20
+ "action": "*",
21
+ "resource": "*",
22
+ "effect": "deny"
23
+ },
24
+ {
25
+ "action": "read",
26
+ "resource": "*",
27
+ "effect": "allow"
28
+ },
29
+ {
30
+ "action": "glob",
31
+ "resource": "*",
32
+ "effect": "allow"
33
+ },
34
+ {
35
+ "action": "grep",
36
+ "resource": "*",
37
+ "effect": "allow"
38
+ },
39
+ {
40
+ "action": "shell",
41
+ "resource": "*",
42
+ "effect": "ask"
43
+ },
44
+ {
45
+ "action": "shell",
46
+ "resource": "pwd",
47
+ "effect": "allow"
48
+ },
49
+ {
50
+ "action": "shell",
51
+ "resource": "pwd *",
52
+ "effect": "allow"
53
+ },
54
+ {
55
+ "action": "shell",
56
+ "resource": "true",
57
+ "effect": "allow"
58
+ },
59
+ {
60
+ "action": "shell",
61
+ "resource": "true *",
62
+ "effect": "allow"
63
+ },
64
+ {
65
+ "action": "shell",
66
+ "resource": "test",
67
+ "effect": "allow"
68
+ },
69
+ {
70
+ "action": "shell",
71
+ "resource": "test *",
72
+ "effect": "allow"
73
+ },
74
+ {
75
+ "action": "shell",
76
+ "resource": "cat",
77
+ "effect": "allow"
78
+ },
79
+ {
80
+ "action": "shell",
81
+ "resource": "cat *",
82
+ "effect": "allow"
83
+ },
84
+ {
85
+ "action": "shell",
86
+ "resource": "head",
87
+ "effect": "allow"
88
+ },
89
+ {
90
+ "action": "shell",
91
+ "resource": "head *",
92
+ "effect": "allow"
93
+ },
94
+ {
95
+ "action": "shell",
96
+ "resource": "tail",
97
+ "effect": "allow"
98
+ },
99
+ {
100
+ "action": "shell",
101
+ "resource": "tail *",
102
+ "effect": "allow"
103
+ },
104
+ {
105
+ "action": "shell",
106
+ "resource": "wc",
107
+ "effect": "allow"
108
+ },
109
+ {
110
+ "action": "shell",
111
+ "resource": "wc *",
112
+ "effect": "allow"
113
+ },
114
+ {
115
+ "action": "shell",
116
+ "resource": "sort",
117
+ "effect": "allow"
118
+ },
119
+ {
120
+ "action": "shell",
121
+ "resource": "sort *",
122
+ "effect": "allow"
123
+ },
124
+ {
125
+ "action": "shell",
126
+ "resource": "uniq",
127
+ "effect": "allow"
128
+ },
129
+ {
130
+ "action": "shell",
131
+ "resource": "uniq *",
132
+ "effect": "allow"
133
+ },
134
+ {
135
+ "action": "shell",
136
+ "resource": "printf",
137
+ "effect": "allow"
138
+ },
139
+ {
140
+ "action": "shell",
141
+ "resource": "printf *",
142
+ "effect": "allow"
143
+ },
144
+ {
145
+ "action": "shell",
146
+ "resource": "echo",
147
+ "effect": "allow"
148
+ },
149
+ {
150
+ "action": "shell",
151
+ "resource": "echo *",
152
+ "effect": "allow"
153
+ },
154
+ {
155
+ "action": "shell",
156
+ "resource": "grep",
157
+ "effect": "allow"
158
+ },
159
+ {
160
+ "action": "shell",
161
+ "resource": "grep *",
162
+ "effect": "allow"
163
+ },
164
+ {
165
+ "action": "shell",
166
+ "resource": "rg",
167
+ "effect": "allow"
168
+ },
169
+ {
170
+ "action": "shell",
171
+ "resource": "rg *",
172
+ "effect": "allow"
173
+ },
174
+ {
175
+ "action": "shell",
176
+ "resource": "find",
177
+ "effect": "allow"
178
+ },
179
+ {
180
+ "action": "shell",
181
+ "resource": "find *",
182
+ "effect": "allow"
183
+ },
184
+ {
185
+ "action": "shell",
186
+ "resource": "diff",
187
+ "effect": "allow"
188
+ },
189
+ {
190
+ "action": "shell",
191
+ "resource": "diff *",
192
+ "effect": "allow"
193
+ },
194
+ {
195
+ "action": "shell",
196
+ "resource": "cmp",
197
+ "effect": "allow"
198
+ },
199
+ {
200
+ "action": "shell",
201
+ "resource": "cmp *",
202
+ "effect": "allow"
203
+ },
204
+ {
205
+ "action": "shell",
206
+ "resource": "ls",
207
+ "effect": "allow"
208
+ },
209
+ {
210
+ "action": "shell",
211
+ "resource": "ls *",
212
+ "effect": "allow"
213
+ },
214
+ {
215
+ "action": "shell",
216
+ "resource": "du",
217
+ "effect": "allow"
218
+ },
219
+ {
220
+ "action": "shell",
221
+ "resource": "du *",
222
+ "effect": "allow"
223
+ },
224
+ {
225
+ "action": "shell",
226
+ "resource": "df",
227
+ "effect": "allow"
228
+ },
229
+ {
230
+ "action": "shell",
231
+ "resource": "df *",
232
+ "effect": "allow"
233
+ },
234
+ {
235
+ "action": "shell",
236
+ "resource": "stat",
237
+ "effect": "allow"
238
+ },
239
+ {
240
+ "action": "shell",
241
+ "resource": "stat *",
242
+ "effect": "allow"
243
+ },
244
+ {
245
+ "action": "shell",
246
+ "resource": "file",
247
+ "effect": "allow"
248
+ },
249
+ {
250
+ "action": "shell",
251
+ "resource": "file *",
252
+ "effect": "allow"
253
+ },
254
+ {
255
+ "action": "shell",
256
+ "resource": "realpath",
257
+ "effect": "allow"
258
+ },
259
+ {
260
+ "action": "shell",
261
+ "resource": "realpath *",
262
+ "effect": "allow"
263
+ },
264
+ {
265
+ "action": "shell",
266
+ "resource": "basename",
267
+ "effect": "allow"
268
+ },
269
+ {
270
+ "action": "shell",
271
+ "resource": "basename *",
272
+ "effect": "allow"
273
+ },
274
+ {
275
+ "action": "shell",
276
+ "resource": "dirname",
277
+ "effect": "allow"
278
+ },
279
+ {
280
+ "action": "shell",
281
+ "resource": "dirname *",
282
+ "effect": "allow"
283
+ },
284
+ {
285
+ "action": "shell",
286
+ "resource": "shasum",
287
+ "effect": "allow"
288
+ },
289
+ {
290
+ "action": "shell",
291
+ "resource": "shasum *",
292
+ "effect": "allow"
293
+ },
294
+ {
295
+ "action": "shell",
296
+ "resource": "sha256sum",
297
+ "effect": "allow"
298
+ },
299
+ {
300
+ "action": "shell",
301
+ "resource": "sha256sum *",
302
+ "effect": "allow"
303
+ },
304
+ {
305
+ "action": "shell",
306
+ "resource": "md5sum",
307
+ "effect": "allow"
308
+ },
309
+ {
310
+ "action": "shell",
311
+ "resource": "md5sum *",
312
+ "effect": "allow"
313
+ },
314
+ {
315
+ "action": "shell",
316
+ "resource": "uname",
317
+ "effect": "allow"
318
+ },
319
+ {
320
+ "action": "shell",
321
+ "resource": "uname *",
322
+ "effect": "allow"
323
+ },
324
+ {
325
+ "action": "shell",
326
+ "resource": "whoami",
327
+ "effect": "allow"
328
+ },
329
+ {
330
+ "action": "shell",
331
+ "resource": "whoami *",
332
+ "effect": "allow"
333
+ },
334
+ {
335
+ "action": "shell",
336
+ "resource": "hostname",
337
+ "effect": "allow"
338
+ },
339
+ {
340
+ "action": "shell",
341
+ "resource": "hostname *",
342
+ "effect": "allow"
343
+ },
344
+ {
345
+ "action": "shell",
346
+ "resource": "date",
347
+ "effect": "allow"
348
+ },
349
+ {
350
+ "action": "shell",
351
+ "resource": "date *",
352
+ "effect": "allow"
353
+ },
354
+ {
355
+ "action": "shell",
356
+ "resource": "printenv",
357
+ "effect": "allow"
358
+ },
359
+ {
360
+ "action": "shell",
361
+ "resource": "printenv *",
362
+ "effect": "allow"
363
+ },
364
+ {
365
+ "action": "shell",
366
+ "resource": "which",
367
+ "effect": "allow"
368
+ },
369
+ {
370
+ "action": "shell",
371
+ "resource": "which *",
372
+ "effect": "allow"
373
+ },
374
+ {
375
+ "action": "shell",
376
+ "resource": "command -v",
377
+ "effect": "allow"
378
+ },
379
+ {
380
+ "action": "shell",
381
+ "resource": "command -v *",
382
+ "effect": "allow"
383
+ },
384
+ {
385
+ "action": "shell",
386
+ "resource": "mktemp",
387
+ "effect": "allow"
388
+ },
389
+ {
390
+ "action": "shell",
391
+ "resource": "mktemp *",
392
+ "effect": "allow"
393
+ },
394
+ {
395
+ "action": "shell",
396
+ "resource": "tr",
397
+ "effect": "allow"
398
+ },
399
+ {
400
+ "action": "shell",
401
+ "resource": "tr *",
402
+ "effect": "allow"
403
+ },
404
+ {
405
+ "action": "shell",
406
+ "resource": "cut",
407
+ "effect": "allow"
408
+ },
409
+ {
410
+ "action": "shell",
411
+ "resource": "cut *",
412
+ "effect": "allow"
413
+ },
414
+ {
415
+ "action": "shell",
416
+ "resource": "paste",
417
+ "effect": "allow"
418
+ },
419
+ {
420
+ "action": "shell",
421
+ "resource": "paste *",
422
+ "effect": "allow"
423
+ },
424
+ {
425
+ "action": "shell",
426
+ "resource": "column",
427
+ "effect": "allow"
428
+ },
429
+ {
430
+ "action": "shell",
431
+ "resource": "column *",
432
+ "effect": "allow"
433
+ },
434
+ {
435
+ "action": "shell",
436
+ "resource": "node --version",
437
+ "effect": "allow"
438
+ },
439
+ {
440
+ "action": "shell",
441
+ "resource": "node --version *",
442
+ "effect": "allow"
443
+ },
444
+ {
445
+ "action": "shell",
446
+ "resource": "python3 --version",
447
+ "effect": "allow"
448
+ },
449
+ {
450
+ "action": "shell",
451
+ "resource": "python3 --version *",
452
+ "effect": "allow"
453
+ },
454
+ {
455
+ "action": "shell",
456
+ "resource": "python --version",
457
+ "effect": "allow"
458
+ },
459
+ {
460
+ "action": "shell",
461
+ "resource": "python --version *",
462
+ "effect": "allow"
463
+ },
464
+ {
465
+ "action": "shell",
466
+ "resource": "deno --version",
467
+ "effect": "allow"
468
+ },
469
+ {
470
+ "action": "shell",
471
+ "resource": "deno --version *",
472
+ "effect": "allow"
473
+ },
474
+ {
475
+ "action": "shell",
476
+ "resource": "bun test",
477
+ "effect": "allow"
478
+ },
479
+ {
480
+ "action": "shell",
481
+ "resource": "bun test *",
482
+ "effect": "allow"
483
+ },
484
+ {
485
+ "action": "shell",
486
+ "resource": "bun run test",
487
+ "effect": "allow"
488
+ },
489
+ {
490
+ "action": "shell",
491
+ "resource": "bun run test *",
492
+ "effect": "allow"
493
+ },
494
+ {
495
+ "action": "shell",
496
+ "resource": "bun --version",
497
+ "effect": "allow"
498
+ },
499
+ {
500
+ "action": "shell",
501
+ "resource": "bun --version *",
502
+ "effect": "allow"
503
+ },
504
+ {
505
+ "action": "shell",
506
+ "resource": "bun run typecheck",
507
+ "effect": "allow"
508
+ },
509
+ {
510
+ "action": "shell",
511
+ "resource": "bun run typecheck *",
512
+ "effect": "allow"
513
+ },
514
+ {
515
+ "action": "shell",
516
+ "resource": "bun run lint",
517
+ "effect": "allow"
518
+ },
519
+ {
520
+ "action": "shell",
521
+ "resource": "bun run lint *",
522
+ "effect": "allow"
523
+ },
524
+ {
525
+ "action": "shell",
526
+ "resource": "bun run build",
527
+ "effect": "allow"
528
+ },
529
+ {
530
+ "action": "shell",
531
+ "resource": "bun run build *",
532
+ "effect": "allow"
533
+ },
534
+ {
535
+ "action": "shell",
536
+ "resource": "bun run check",
537
+ "effect": "allow"
538
+ },
539
+ {
540
+ "action": "shell",
541
+ "resource": "bun run check *",
542
+ "effect": "allow"
543
+ },
544
+ {
545
+ "action": "shell",
546
+ "resource": "tsc --noEmit",
547
+ "effect": "allow"
548
+ },
549
+ {
550
+ "action": "shell",
551
+ "resource": "tsc --noEmit *",
552
+ "effect": "allow"
553
+ },
554
+ {
555
+ "action": "shell",
556
+ "resource": "npx tsc --noEmit",
557
+ "effect": "allow"
558
+ },
559
+ {
560
+ "action": "shell",
561
+ "resource": "npx tsc --noEmit *",
562
+ "effect": "allow"
563
+ },
564
+ {
565
+ "action": "shell",
566
+ "resource": "eslint",
567
+ "effect": "allow"
568
+ },
569
+ {
570
+ "action": "shell",
571
+ "resource": "eslint *",
572
+ "effect": "allow"
573
+ },
574
+ {
575
+ "action": "shell",
576
+ "resource": "biome check",
577
+ "effect": "allow"
578
+ },
579
+ {
580
+ "action": "shell",
581
+ "resource": "biome check *",
582
+ "effect": "allow"
583
+ },
584
+ {
585
+ "action": "shell",
586
+ "resource": "prettier --check",
587
+ "effect": "allow"
588
+ },
589
+ {
590
+ "action": "shell",
591
+ "resource": "prettier --check *",
592
+ "effect": "allow"
593
+ },
594
+ {
595
+ "action": "shell",
596
+ "resource": "npm test",
597
+ "effect": "allow"
598
+ },
599
+ {
600
+ "action": "shell",
601
+ "resource": "npm test *",
602
+ "effect": "allow"
603
+ },
604
+ {
605
+ "action": "shell",
606
+ "resource": "npm run test",
607
+ "effect": "allow"
608
+ },
609
+ {
610
+ "action": "shell",
611
+ "resource": "npm run test *",
612
+ "effect": "allow"
613
+ },
614
+ {
615
+ "action": "shell",
616
+ "resource": "npm run typecheck",
617
+ "effect": "allow"
618
+ },
619
+ {
620
+ "action": "shell",
621
+ "resource": "npm run typecheck *",
622
+ "effect": "allow"
623
+ },
624
+ {
625
+ "action": "shell",
626
+ "resource": "npm run lint",
627
+ "effect": "allow"
628
+ },
629
+ {
630
+ "action": "shell",
631
+ "resource": "npm run lint *",
632
+ "effect": "allow"
633
+ },
634
+ {
635
+ "action": "shell",
636
+ "resource": "npm run build",
637
+ "effect": "allow"
638
+ },
639
+ {
640
+ "action": "shell",
641
+ "resource": "npm run build *",
642
+ "effect": "allow"
643
+ },
644
+ {
645
+ "action": "shell",
646
+ "resource": "pnpm test",
647
+ "effect": "allow"
648
+ },
649
+ {
650
+ "action": "shell",
651
+ "resource": "pnpm test *",
652
+ "effect": "allow"
653
+ },
654
+ {
655
+ "action": "shell",
656
+ "resource": "pnpm run test",
657
+ "effect": "allow"
658
+ },
659
+ {
660
+ "action": "shell",
661
+ "resource": "pnpm run test *",
662
+ "effect": "allow"
663
+ },
664
+ {
665
+ "action": "shell",
666
+ "resource": "pnpm run build",
667
+ "effect": "allow"
668
+ },
669
+ {
670
+ "action": "shell",
671
+ "resource": "pnpm run build *",
672
+ "effect": "allow"
673
+ },
674
+ {
675
+ "action": "shell",
676
+ "resource": "yarn test",
677
+ "effect": "allow"
678
+ },
679
+ {
680
+ "action": "shell",
681
+ "resource": "yarn test *",
682
+ "effect": "allow"
683
+ },
684
+ {
685
+ "action": "shell",
686
+ "resource": "yarn build",
687
+ "effect": "allow"
688
+ },
689
+ {
690
+ "action": "shell",
691
+ "resource": "yarn build *",
692
+ "effect": "allow"
693
+ },
694
+ {
695
+ "action": "shell",
696
+ "resource": "vitest run",
697
+ "effect": "allow"
698
+ },
699
+ {
700
+ "action": "shell",
701
+ "resource": "vitest run *",
702
+ "effect": "allow"
703
+ },
704
+ {
705
+ "action": "shell",
706
+ "resource": "jest",
707
+ "effect": "allow"
708
+ },
709
+ {
710
+ "action": "shell",
711
+ "resource": "jest *",
712
+ "effect": "allow"
713
+ },
714
+ {
715
+ "action": "shell",
716
+ "resource": "playwright test",
717
+ "effect": "allow"
718
+ },
719
+ {
720
+ "action": "shell",
721
+ "resource": "playwright test *",
722
+ "effect": "allow"
723
+ },
724
+ {
725
+ "action": "shell",
726
+ "resource": "cargo check",
727
+ "effect": "allow"
728
+ },
729
+ {
730
+ "action": "shell",
731
+ "resource": "cargo check *",
732
+ "effect": "allow"
733
+ },
734
+ {
735
+ "action": "shell",
736
+ "resource": "cargo test",
737
+ "effect": "allow"
738
+ },
739
+ {
740
+ "action": "shell",
741
+ "resource": "cargo test *",
742
+ "effect": "allow"
743
+ },
744
+ {
745
+ "action": "shell",
746
+ "resource": "cargo build",
747
+ "effect": "allow"
748
+ },
749
+ {
750
+ "action": "shell",
751
+ "resource": "cargo build *",
752
+ "effect": "allow"
753
+ },
754
+ {
755
+ "action": "shell",
756
+ "resource": "cargo clippy",
757
+ "effect": "allow"
758
+ },
759
+ {
760
+ "action": "shell",
761
+ "resource": "cargo clippy *",
762
+ "effect": "allow"
763
+ },
764
+ {
765
+ "action": "shell",
766
+ "resource": "cargo fmt --check",
767
+ "effect": "allow"
768
+ },
769
+ {
770
+ "action": "shell",
771
+ "resource": "cargo fmt --check *",
772
+ "effect": "allow"
773
+ },
774
+ {
775
+ "action": "shell",
776
+ "resource": "cargo --version",
777
+ "effect": "allow"
778
+ },
779
+ {
780
+ "action": "shell",
781
+ "resource": "cargo --version *",
782
+ "effect": "allow"
783
+ },
784
+ {
785
+ "action": "shell",
786
+ "resource": "go build ./...",
787
+ "effect": "allow"
788
+ },
789
+ {
790
+ "action": "shell",
791
+ "resource": "go build ./... *",
792
+ "effect": "allow"
793
+ },
794
+ {
795
+ "action": "shell",
796
+ "resource": "go test ./...",
797
+ "effect": "allow"
798
+ },
799
+ {
800
+ "action": "shell",
801
+ "resource": "go test ./... *",
802
+ "effect": "allow"
803
+ },
804
+ {
805
+ "action": "shell",
806
+ "resource": "go vet ./...",
807
+ "effect": "allow"
808
+ },
809
+ {
810
+ "action": "shell",
811
+ "resource": "go vet ./... *",
812
+ "effect": "allow"
813
+ },
814
+ {
815
+ "action": "shell",
816
+ "resource": "go version",
817
+ "effect": "allow"
818
+ },
819
+ {
820
+ "action": "shell",
821
+ "resource": "go version *",
822
+ "effect": "allow"
823
+ },
824
+ {
825
+ "action": "shell",
826
+ "resource": "pytest",
827
+ "effect": "allow"
828
+ },
829
+ {
830
+ "action": "shell",
831
+ "resource": "pytest *",
832
+ "effect": "allow"
833
+ },
834
+ {
835
+ "action": "shell",
836
+ "resource": "python3 -m pytest",
837
+ "effect": "allow"
838
+ },
839
+ {
840
+ "action": "shell",
841
+ "resource": "python3 -m pytest *",
842
+ "effect": "allow"
843
+ },
844
+ {
845
+ "action": "shell",
846
+ "resource": "python -m pytest",
847
+ "effect": "allow"
848
+ },
849
+ {
850
+ "action": "shell",
851
+ "resource": "python -m pytest *",
852
+ "effect": "allow"
853
+ },
854
+ {
855
+ "action": "shell",
856
+ "resource": "ruff check",
857
+ "effect": "allow"
858
+ },
859
+ {
860
+ "action": "shell",
861
+ "resource": "ruff check *",
862
+ "effect": "allow"
863
+ },
864
+ {
865
+ "action": "shell",
866
+ "resource": "mypy",
867
+ "effect": "allow"
868
+ },
869
+ {
870
+ "action": "shell",
871
+ "resource": "mypy *",
872
+ "effect": "allow"
873
+ },
874
+ {
875
+ "action": "shell",
876
+ "resource": "pyright",
877
+ "effect": "allow"
878
+ },
879
+ {
880
+ "action": "shell",
881
+ "resource": "pyright *",
882
+ "effect": "allow"
883
+ },
884
+ {
885
+ "action": "shell",
886
+ "resource": "mvn test",
887
+ "effect": "allow"
888
+ },
889
+ {
890
+ "action": "shell",
891
+ "resource": "mvn test *",
892
+ "effect": "allow"
893
+ },
894
+ {
895
+ "action": "shell",
896
+ "resource": "mvn verify",
897
+ "effect": "allow"
898
+ },
899
+ {
900
+ "action": "shell",
901
+ "resource": "mvn verify *",
902
+ "effect": "allow"
903
+ },
904
+ {
905
+ "action": "shell",
906
+ "resource": "gradle test",
907
+ "effect": "allow"
908
+ },
909
+ {
910
+ "action": "shell",
911
+ "resource": "gradle test *",
912
+ "effect": "allow"
913
+ },
914
+ {
915
+ "action": "shell",
916
+ "resource": "gradle check",
917
+ "effect": "allow"
918
+ },
919
+ {
920
+ "action": "shell",
921
+ "resource": "gradle check *",
922
+ "effect": "allow"
923
+ },
924
+ {
925
+ "action": "shell",
926
+ "resource": "./gradlew test",
927
+ "effect": "allow"
928
+ },
929
+ {
930
+ "action": "shell",
931
+ "resource": "./gradlew test *",
932
+ "effect": "allow"
933
+ },
934
+ {
935
+ "action": "shell",
936
+ "resource": "./gradlew check",
937
+ "effect": "allow"
938
+ },
939
+ {
940
+ "action": "shell",
941
+ "resource": "./gradlew check *",
942
+ "effect": "allow"
943
+ },
944
+ {
945
+ "action": "shell",
946
+ "resource": "make test",
947
+ "effect": "allow"
948
+ },
949
+ {
950
+ "action": "shell",
951
+ "resource": "make test *",
952
+ "effect": "allow"
953
+ },
954
+ {
955
+ "action": "shell",
956
+ "resource": "make check",
957
+ "effect": "allow"
958
+ },
959
+ {
960
+ "action": "shell",
961
+ "resource": "make check *",
962
+ "effect": "allow"
963
+ },
964
+ {
965
+ "action": "shell",
966
+ "resource": "make build",
967
+ "effect": "allow"
968
+ },
969
+ {
970
+ "action": "shell",
971
+ "resource": "make build *",
972
+ "effect": "allow"
973
+ },
974
+ {
975
+ "action": "shell",
976
+ "resource": "make --version",
977
+ "effect": "allow"
978
+ },
979
+ {
980
+ "action": "shell",
981
+ "resource": "make --version *",
982
+ "effect": "allow"
983
+ },
984
+ {
985
+ "action": "shell",
986
+ "resource": "just --list",
987
+ "effect": "allow"
988
+ },
989
+ {
990
+ "action": "shell",
991
+ "resource": "just --list *",
992
+ "effect": "allow"
993
+ },
994
+ {
995
+ "action": "shell",
996
+ "resource": "git status",
997
+ "effect": "allow"
998
+ },
999
+ {
1000
+ "action": "shell",
1001
+ "resource": "git status *",
1002
+ "effect": "allow"
1003
+ },
1004
+ {
1005
+ "action": "shell",
1006
+ "resource": "git status --short",
1007
+ "effect": "allow"
1008
+ },
1009
+ {
1010
+ "action": "shell",
1011
+ "resource": "git status --short *",
1012
+ "effect": "allow"
1013
+ },
1014
+ {
1015
+ "action": "shell",
1016
+ "resource": "git status --short --branch",
1017
+ "effect": "allow"
1018
+ },
1019
+ {
1020
+ "action": "shell",
1021
+ "resource": "git status --short --branch *",
1022
+ "effect": "allow"
1023
+ },
1024
+ {
1025
+ "action": "shell",
1026
+ "resource": "git status --porcelain",
1027
+ "effect": "allow"
1028
+ },
1029
+ {
1030
+ "action": "shell",
1031
+ "resource": "git status --porcelain *",
1032
+ "effect": "allow"
1033
+ },
1034
+ {
1035
+ "action": "shell",
1036
+ "resource": "git status --porcelain=v1 --branch",
1037
+ "effect": "allow"
1038
+ },
1039
+ {
1040
+ "action": "shell",
1041
+ "resource": "git status --porcelain=v1 --branch *",
1042
+ "effect": "allow"
1043
+ },
1044
+ {
1045
+ "action": "shell",
1046
+ "resource": "git diff",
1047
+ "effect": "allow"
1048
+ },
1049
+ {
1050
+ "action": "shell",
1051
+ "resource": "git diff *",
1052
+ "effect": "allow"
1053
+ },
1054
+ {
1055
+ "action": "shell",
1056
+ "resource": "git diff --stat",
1057
+ "effect": "allow"
1058
+ },
1059
+ {
1060
+ "action": "shell",
1061
+ "resource": "git diff --stat *",
1062
+ "effect": "allow"
1063
+ },
1064
+ {
1065
+ "action": "shell",
1066
+ "resource": "git diff --cached",
1067
+ "effect": "allow"
1068
+ },
1069
+ {
1070
+ "action": "shell",
1071
+ "resource": "git diff --cached *",
1072
+ "effect": "allow"
1073
+ },
1074
+ {
1075
+ "action": "shell",
1076
+ "resource": "git diff --check",
1077
+ "effect": "allow"
1078
+ },
1079
+ {
1080
+ "action": "shell",
1081
+ "resource": "git diff --check *",
1082
+ "effect": "allow"
1083
+ },
1084
+ {
1085
+ "action": "shell",
1086
+ "resource": "git log",
1087
+ "effect": "allow"
1088
+ },
1089
+ {
1090
+ "action": "shell",
1091
+ "resource": "git log *",
1092
+ "effect": "allow"
1093
+ },
1094
+ {
1095
+ "action": "shell",
1096
+ "resource": "git show",
1097
+ "effect": "allow"
1098
+ },
1099
+ {
1100
+ "action": "shell",
1101
+ "resource": "git show *",
1102
+ "effect": "allow"
1103
+ },
1104
+ {
1105
+ "action": "shell",
1106
+ "resource": "git rev-parse",
1107
+ "effect": "allow"
1108
+ },
1109
+ {
1110
+ "action": "shell",
1111
+ "resource": "git rev-parse *",
1112
+ "effect": "allow"
1113
+ },
1114
+ {
1115
+ "action": "shell",
1116
+ "resource": "git rev-list",
1117
+ "effect": "allow"
1118
+ },
1119
+ {
1120
+ "action": "shell",
1121
+ "resource": "git rev-list *",
1122
+ "effect": "allow"
1123
+ },
1124
+ {
1125
+ "action": "shell",
1126
+ "resource": "git show-ref",
1127
+ "effect": "allow"
1128
+ },
1129
+ {
1130
+ "action": "shell",
1131
+ "resource": "git show-ref *",
1132
+ "effect": "allow"
1133
+ },
1134
+ {
1135
+ "action": "shell",
1136
+ "resource": "git cat-file",
1137
+ "effect": "allow"
1138
+ },
1139
+ {
1140
+ "action": "shell",
1141
+ "resource": "git cat-file *",
1142
+ "effect": "allow"
1143
+ },
1144
+ {
1145
+ "action": "shell",
1146
+ "resource": "git symbolic-ref HEAD",
1147
+ "effect": "allow"
1148
+ },
1149
+ {
1150
+ "action": "shell",
1151
+ "resource": "git symbolic-ref HEAD *",
1152
+ "effect": "allow"
1153
+ },
1154
+ {
1155
+ "action": "shell",
1156
+ "resource": "git symbolic-ref --short HEAD",
1157
+ "effect": "allow"
1158
+ },
1159
+ {
1160
+ "action": "shell",
1161
+ "resource": "git symbolic-ref --short HEAD *",
1162
+ "effect": "allow"
1163
+ },
1164
+ {
1165
+ "action": "shell",
1166
+ "resource": "git ls-files",
1167
+ "effect": "allow"
1168
+ },
1169
+ {
1170
+ "action": "shell",
1171
+ "resource": "git ls-files *",
1172
+ "effect": "allow"
1173
+ },
1174
+ {
1175
+ "action": "shell",
1176
+ "resource": "git ls-remote",
1177
+ "effect": "allow"
1178
+ },
1179
+ {
1180
+ "action": "shell",
1181
+ "resource": "git ls-remote *",
1182
+ "effect": "allow"
1183
+ },
1184
+ {
1185
+ "action": "shell",
1186
+ "resource": "git grep",
1187
+ "effect": "allow"
1188
+ },
1189
+ {
1190
+ "action": "shell",
1191
+ "resource": "git grep *",
1192
+ "effect": "allow"
1193
+ },
1194
+ {
1195
+ "action": "shell",
1196
+ "resource": "git branch",
1197
+ "effect": "allow"
1198
+ },
1199
+ {
1200
+ "action": "shell",
1201
+ "resource": "git branch *",
1202
+ "effect": "allow"
1203
+ },
1204
+ {
1205
+ "action": "shell",
1206
+ "resource": "git tag",
1207
+ "effect": "allow"
1208
+ },
1209
+ {
1210
+ "action": "shell",
1211
+ "resource": "git tag *",
1212
+ "effect": "allow"
1213
+ },
1214
+ {
1215
+ "action": "shell",
1216
+ "resource": "git remote",
1217
+ "effect": "allow"
1218
+ },
1219
+ {
1220
+ "action": "shell",
1221
+ "resource": "git remote *",
1222
+ "effect": "allow"
1223
+ },
1224
+ {
1225
+ "action": "shell",
1226
+ "resource": "git reflog",
1227
+ "effect": "allow"
1228
+ },
1229
+ {
1230
+ "action": "shell",
1231
+ "resource": "git reflog *",
1232
+ "effect": "allow"
1233
+ },
1234
+ {
1235
+ "action": "shell",
1236
+ "resource": "git branch --list",
1237
+ "effect": "allow"
1238
+ },
1239
+ {
1240
+ "action": "shell",
1241
+ "resource": "git branch --list *",
1242
+ "effect": "allow"
1243
+ },
1244
+ {
1245
+ "action": "shell",
1246
+ "resource": "git branch -l",
1247
+ "effect": "allow"
1248
+ },
1249
+ {
1250
+ "action": "shell",
1251
+ "resource": "git branch -l *",
1252
+ "effect": "allow"
1253
+ },
1254
+ {
1255
+ "action": "shell",
1256
+ "resource": "git branch -a",
1257
+ "effect": "allow"
1258
+ },
1259
+ {
1260
+ "action": "shell",
1261
+ "resource": "git branch -a *",
1262
+ "effect": "allow"
1263
+ },
1264
+ {
1265
+ "action": "shell",
1266
+ "resource": "git branch -r",
1267
+ "effect": "allow"
1268
+ },
1269
+ {
1270
+ "action": "shell",
1271
+ "resource": "git branch -r *",
1272
+ "effect": "allow"
1273
+ },
1274
+ {
1275
+ "action": "shell",
1276
+ "resource": "git branch -v",
1277
+ "effect": "allow"
1278
+ },
1279
+ {
1280
+ "action": "shell",
1281
+ "resource": "git branch -v *",
1282
+ "effect": "allow"
1283
+ },
1284
+ {
1285
+ "action": "shell",
1286
+ "resource": "git branch -vv",
1287
+ "effect": "allow"
1288
+ },
1289
+ {
1290
+ "action": "shell",
1291
+ "resource": "git branch -vv *",
1292
+ "effect": "allow"
1293
+ },
1294
+ {
1295
+ "action": "shell",
1296
+ "resource": "git branch --all",
1297
+ "effect": "allow"
1298
+ },
1299
+ {
1300
+ "action": "shell",
1301
+ "resource": "git branch --all *",
1302
+ "effect": "allow"
1303
+ },
1304
+ {
1305
+ "action": "shell",
1306
+ "resource": "git branch --remotes",
1307
+ "effect": "allow"
1308
+ },
1309
+ {
1310
+ "action": "shell",
1311
+ "resource": "git branch --remotes *",
1312
+ "effect": "allow"
1313
+ },
1314
+ {
1315
+ "action": "shell",
1316
+ "resource": "git branch --show-current",
1317
+ "effect": "allow"
1318
+ },
1319
+ {
1320
+ "action": "shell",
1321
+ "resource": "git branch --show-current *",
1322
+ "effect": "allow"
1323
+ },
1324
+ {
1325
+ "action": "shell",
1326
+ "resource": "git branch --contains",
1327
+ "effect": "allow"
1328
+ },
1329
+ {
1330
+ "action": "shell",
1331
+ "resource": "git branch --contains *",
1332
+ "effect": "allow"
1333
+ },
1334
+ {
1335
+ "action": "shell",
1336
+ "resource": "git tag --list",
1337
+ "effect": "allow"
1338
+ },
1339
+ {
1340
+ "action": "shell",
1341
+ "resource": "git tag --list *",
1342
+ "effect": "allow"
1343
+ },
1344
+ {
1345
+ "action": "shell",
1346
+ "resource": "git tag -l",
1347
+ "effect": "allow"
1348
+ },
1349
+ {
1350
+ "action": "shell",
1351
+ "resource": "git tag -l *",
1352
+ "effect": "allow"
1353
+ },
1354
+ {
1355
+ "action": "shell",
1356
+ "resource": "git tag -n",
1357
+ "effect": "allow"
1358
+ },
1359
+ {
1360
+ "action": "shell",
1361
+ "resource": "git tag -n *",
1362
+ "effect": "allow"
1363
+ },
1364
+ {
1365
+ "action": "shell",
1366
+ "resource": "git remote -v",
1367
+ "effect": "allow"
1368
+ },
1369
+ {
1370
+ "action": "shell",
1371
+ "resource": "git remote -v *",
1372
+ "effect": "allow"
1373
+ },
1374
+ {
1375
+ "action": "shell",
1376
+ "resource": "git remote --verbose",
1377
+ "effect": "allow"
1378
+ },
1379
+ {
1380
+ "action": "shell",
1381
+ "resource": "git remote --verbose *",
1382
+ "effect": "allow"
1383
+ },
1384
+ {
1385
+ "action": "shell",
1386
+ "resource": "git remote show",
1387
+ "effect": "allow"
1388
+ },
1389
+ {
1390
+ "action": "shell",
1391
+ "resource": "git remote show *",
1392
+ "effect": "allow"
1393
+ },
1394
+ {
1395
+ "action": "shell",
1396
+ "resource": "git remote get-url",
1397
+ "effect": "allow"
1398
+ },
1399
+ {
1400
+ "action": "shell",
1401
+ "resource": "git remote get-url *",
1402
+ "effect": "allow"
1403
+ },
1404
+ {
1405
+ "action": "shell",
1406
+ "resource": "git reflog show",
1407
+ "effect": "allow"
1408
+ },
1409
+ {
1410
+ "action": "shell",
1411
+ "resource": "git reflog show *",
1412
+ "effect": "allow"
1413
+ },
1414
+ {
1415
+ "action": "shell",
1416
+ "resource": "git stash list",
1417
+ "effect": "allow"
1418
+ },
1419
+ {
1420
+ "action": "shell",
1421
+ "resource": "git stash list *",
1422
+ "effect": "allow"
1423
+ },
1424
+ {
1425
+ "action": "shell",
1426
+ "resource": "git describe",
1427
+ "effect": "allow"
1428
+ },
1429
+ {
1430
+ "action": "shell",
1431
+ "resource": "git describe *",
1432
+ "effect": "allow"
1433
+ },
1434
+ {
1435
+ "action": "shell",
1436
+ "resource": "git worktree list",
1437
+ "effect": "allow"
1438
+ },
1439
+ {
1440
+ "action": "shell",
1441
+ "resource": "git worktree list *",
1442
+ "effect": "allow"
1443
+ },
1444
+ {
1445
+ "action": "shell",
1446
+ "resource": "git config --get",
1447
+ "effect": "allow"
1448
+ },
1449
+ {
1450
+ "action": "shell",
1451
+ "resource": "git config --get *",
1452
+ "effect": "allow"
1453
+ },
1454
+ {
1455
+ "action": "shell",
1456
+ "resource": "git config --get-regexp",
1457
+ "effect": "allow"
1458
+ },
1459
+ {
1460
+ "action": "shell",
1461
+ "resource": "git config --get-regexp *",
1462
+ "effect": "allow"
1463
+ },
1464
+ {
1465
+ "action": "shell",
1466
+ "resource": "git branch *",
1467
+ "effect": "ask"
1468
+ },
1469
+ {
1470
+ "action": "shell",
1471
+ "resource": "git tag *",
1472
+ "effect": "ask"
1473
+ },
1474
+ {
1475
+ "action": "shell",
1476
+ "resource": "git remote *",
1477
+ "effect": "ask"
1478
+ },
1479
+ {
1480
+ "action": "shell",
1481
+ "resource": "git symbolic-ref *",
1482
+ "effect": "ask"
1483
+ },
1484
+ {
1485
+ "action": "shell",
1486
+ "resource": "git reflog *",
1487
+ "effect": "ask"
1488
+ },
1489
+ {
1490
+ "action": "shell",
1491
+ "resource": "git symbolic-ref HEAD",
1492
+ "effect": "allow"
1493
+ },
1494
+ {
1495
+ "action": "shell",
1496
+ "resource": "git symbolic-ref --short HEAD",
1497
+ "effect": "allow"
1498
+ },
1499
+ {
1500
+ "action": "shell",
1501
+ "resource": "git push --force*",
1502
+ "effect": "deny"
1503
+ },
1504
+ {
1505
+ "action": "shell",
1506
+ "resource": "git push -f*",
1507
+ "effect": "deny"
1508
+ },
1509
+ {
1510
+ "action": "shell",
1511
+ "resource": "git reset --hard*",
1512
+ "effect": "deny"
1513
+ },
1514
+ {
1515
+ "action": "shell",
1516
+ "resource": "git clean*",
1517
+ "effect": "deny"
1518
+ },
1519
+ {
1520
+ "action": "shell",
1521
+ "resource": "git filter-branch*",
1522
+ "effect": "deny"
1523
+ },
1524
+ {
1525
+ "action": "shell",
1526
+ "resource": "git filter-repo*",
1527
+ "effect": "deny"
1528
+ },
1529
+ {
1530
+ "action": "shell",
1531
+ "resource": "git rebase*",
1532
+ "effect": "deny"
1533
+ },
1534
+ {
1535
+ "action": "shell",
1536
+ "resource": "git checkout --*",
1537
+ "effect": "deny"
1538
+ },
1539
+ {
1540
+ "action": "shell",
1541
+ "resource": "git restore*",
1542
+ "effect": "deny"
1543
+ },
1544
+ {
1545
+ "action": "shell",
1546
+ "resource": "git branch -D*",
1547
+ "effect": "deny"
1548
+ },
1549
+ {
1550
+ "action": "shell",
1551
+ "resource": "git remote remove*",
1552
+ "effect": "deny"
1553
+ },
1554
+ {
1555
+ "action": "shell",
1556
+ "resource": "git remote set-url*",
1557
+ "effect": "deny"
1558
+ },
1559
+ {
1560
+ "action": "shell",
1561
+ "resource": "git remote add*",
1562
+ "effect": "deny"
1563
+ },
1564
+ {
1565
+ "action": "shell",
1566
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status",
1567
+ "effect": "allow"
1568
+ },
1569
+ {
1570
+ "action": "shell",
1571
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status *",
1572
+ "effect": "allow"
1573
+ },
1574
+ {
1575
+ "action": "shell",
1576
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --short",
1577
+ "effect": "allow"
1578
+ },
1579
+ {
1580
+ "action": "shell",
1581
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --short *",
1582
+ "effect": "allow"
1583
+ },
1584
+ {
1585
+ "action": "shell",
1586
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --short --branch",
1587
+ "effect": "allow"
1588
+ },
1589
+ {
1590
+ "action": "shell",
1591
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --short --branch *",
1592
+ "effect": "allow"
1593
+ },
1594
+ {
1595
+ "action": "shell",
1596
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --porcelain",
1597
+ "effect": "allow"
1598
+ },
1599
+ {
1600
+ "action": "shell",
1601
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --porcelain *",
1602
+ "effect": "allow"
1603
+ },
1604
+ {
1605
+ "action": "shell",
1606
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --porcelain=v1 --branch",
1607
+ "effect": "allow"
1608
+ },
1609
+ {
1610
+ "action": "shell",
1611
+ "resource": "GIT_OPTIONAL_LOCKS=0 git status --porcelain=v1 --branch *",
1612
+ "effect": "allow"
1613
+ },
1614
+ {
1615
+ "action": "shell",
1616
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff",
1617
+ "effect": "allow"
1618
+ },
1619
+ {
1620
+ "action": "shell",
1621
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff *",
1622
+ "effect": "allow"
1623
+ },
1624
+ {
1625
+ "action": "shell",
1626
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff --stat",
1627
+ "effect": "allow"
1628
+ },
1629
+ {
1630
+ "action": "shell",
1631
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff --stat *",
1632
+ "effect": "allow"
1633
+ },
1634
+ {
1635
+ "action": "shell",
1636
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff --cached",
1637
+ "effect": "allow"
1638
+ },
1639
+ {
1640
+ "action": "shell",
1641
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff --cached *",
1642
+ "effect": "allow"
1643
+ },
1644
+ {
1645
+ "action": "shell",
1646
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff --check",
1647
+ "effect": "allow"
1648
+ },
1649
+ {
1650
+ "action": "shell",
1651
+ "resource": "GIT_OPTIONAL_LOCKS=0 git diff --check *",
1652
+ "effect": "allow"
1653
+ },
1654
+ {
1655
+ "action": "shell",
1656
+ "resource": "GIT_OPTIONAL_LOCKS=0 git log",
1657
+ "effect": "allow"
1658
+ },
1659
+ {
1660
+ "action": "shell",
1661
+ "resource": "GIT_OPTIONAL_LOCKS=0 git log *",
1662
+ "effect": "allow"
1663
+ },
1664
+ {
1665
+ "action": "shell",
1666
+ "resource": "GIT_OPTIONAL_LOCKS=0 git show",
1667
+ "effect": "allow"
1668
+ },
1669
+ {
1670
+ "action": "shell",
1671
+ "resource": "GIT_OPTIONAL_LOCKS=0 git show *",
1672
+ "effect": "allow"
1673
+ },
1674
+ {
1675
+ "action": "shell",
1676
+ "resource": "GIT_OPTIONAL_LOCKS=0 git rev-parse",
1677
+ "effect": "allow"
1678
+ },
1679
+ {
1680
+ "action": "shell",
1681
+ "resource": "GIT_OPTIONAL_LOCKS=0 git rev-parse *",
1682
+ "effect": "allow"
1683
+ },
1684
+ {
1685
+ "action": "shell",
1686
+ "resource": "GIT_OPTIONAL_LOCKS=0 git rev-list",
1687
+ "effect": "allow"
1688
+ },
1689
+ {
1690
+ "action": "shell",
1691
+ "resource": "GIT_OPTIONAL_LOCKS=0 git rev-list *",
1692
+ "effect": "allow"
1693
+ },
1694
+ {
1695
+ "action": "shell",
1696
+ "resource": "GIT_OPTIONAL_LOCKS=0 git show-ref",
1697
+ "effect": "allow"
1698
+ },
1699
+ {
1700
+ "action": "shell",
1701
+ "resource": "GIT_OPTIONAL_LOCKS=0 git show-ref *",
1702
+ "effect": "allow"
1703
+ },
1704
+ {
1705
+ "action": "shell",
1706
+ "resource": "GIT_OPTIONAL_LOCKS=0 git cat-file",
1707
+ "effect": "allow"
1708
+ },
1709
+ {
1710
+ "action": "shell",
1711
+ "resource": "GIT_OPTIONAL_LOCKS=0 git cat-file *",
1712
+ "effect": "allow"
1713
+ },
1714
+ {
1715
+ "action": "shell",
1716
+ "resource": "GIT_OPTIONAL_LOCKS=0 git ls-files",
1717
+ "effect": "allow"
1718
+ },
1719
+ {
1720
+ "action": "shell",
1721
+ "resource": "GIT_OPTIONAL_LOCKS=0 git ls-files *",
1722
+ "effect": "allow"
1723
+ },
1724
+ {
1725
+ "action": "shell",
1726
+ "resource": "GIT_OPTIONAL_LOCKS=0 git ls-remote",
1727
+ "effect": "allow"
1728
+ },
1729
+ {
1730
+ "action": "shell",
1731
+ "resource": "GIT_OPTIONAL_LOCKS=0 git ls-remote *",
1732
+ "effect": "allow"
1733
+ },
1734
+ {
1735
+ "action": "shell",
1736
+ "resource": "GIT_OPTIONAL_LOCKS=0 git grep",
1737
+ "effect": "allow"
1738
+ },
1739
+ {
1740
+ "action": "shell",
1741
+ "resource": "GIT_OPTIONAL_LOCKS=0 git grep *",
1742
+ "effect": "allow"
1743
+ },
1744
+ {
1745
+ "action": "shell",
1746
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch",
1747
+ "effect": "allow"
1748
+ },
1749
+ {
1750
+ "action": "shell",
1751
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch *",
1752
+ "effect": "allow"
1753
+ },
1754
+ {
1755
+ "action": "shell",
1756
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag",
1757
+ "effect": "allow"
1758
+ },
1759
+ {
1760
+ "action": "shell",
1761
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag *",
1762
+ "effect": "allow"
1763
+ },
1764
+ {
1765
+ "action": "shell",
1766
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote",
1767
+ "effect": "allow"
1768
+ },
1769
+ {
1770
+ "action": "shell",
1771
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote *",
1772
+ "effect": "allow"
1773
+ },
1774
+ {
1775
+ "action": "shell",
1776
+ "resource": "GIT_OPTIONAL_LOCKS=0 git reflog",
1777
+ "effect": "allow"
1778
+ },
1779
+ {
1780
+ "action": "shell",
1781
+ "resource": "GIT_OPTIONAL_LOCKS=0 git reflog *",
1782
+ "effect": "allow"
1783
+ },
1784
+ {
1785
+ "action": "shell",
1786
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --list",
1787
+ "effect": "allow"
1788
+ },
1789
+ {
1790
+ "action": "shell",
1791
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --list *",
1792
+ "effect": "allow"
1793
+ },
1794
+ {
1795
+ "action": "shell",
1796
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -l",
1797
+ "effect": "allow"
1798
+ },
1799
+ {
1800
+ "action": "shell",
1801
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -l *",
1802
+ "effect": "allow"
1803
+ },
1804
+ {
1805
+ "action": "shell",
1806
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -a",
1807
+ "effect": "allow"
1808
+ },
1809
+ {
1810
+ "action": "shell",
1811
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -a *",
1812
+ "effect": "allow"
1813
+ },
1814
+ {
1815
+ "action": "shell",
1816
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -r",
1817
+ "effect": "allow"
1818
+ },
1819
+ {
1820
+ "action": "shell",
1821
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -r *",
1822
+ "effect": "allow"
1823
+ },
1824
+ {
1825
+ "action": "shell",
1826
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -v",
1827
+ "effect": "allow"
1828
+ },
1829
+ {
1830
+ "action": "shell",
1831
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -v *",
1832
+ "effect": "allow"
1833
+ },
1834
+ {
1835
+ "action": "shell",
1836
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -vv",
1837
+ "effect": "allow"
1838
+ },
1839
+ {
1840
+ "action": "shell",
1841
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -vv *",
1842
+ "effect": "allow"
1843
+ },
1844
+ {
1845
+ "action": "shell",
1846
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --all",
1847
+ "effect": "allow"
1848
+ },
1849
+ {
1850
+ "action": "shell",
1851
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --all *",
1852
+ "effect": "allow"
1853
+ },
1854
+ {
1855
+ "action": "shell",
1856
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --remotes",
1857
+ "effect": "allow"
1858
+ },
1859
+ {
1860
+ "action": "shell",
1861
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --remotes *",
1862
+ "effect": "allow"
1863
+ },
1864
+ {
1865
+ "action": "shell",
1866
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --show-current",
1867
+ "effect": "allow"
1868
+ },
1869
+ {
1870
+ "action": "shell",
1871
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --show-current *",
1872
+ "effect": "allow"
1873
+ },
1874
+ {
1875
+ "action": "shell",
1876
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --contains",
1877
+ "effect": "allow"
1878
+ },
1879
+ {
1880
+ "action": "shell",
1881
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch --contains *",
1882
+ "effect": "allow"
1883
+ },
1884
+ {
1885
+ "action": "shell",
1886
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag --list",
1887
+ "effect": "allow"
1888
+ },
1889
+ {
1890
+ "action": "shell",
1891
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag --list *",
1892
+ "effect": "allow"
1893
+ },
1894
+ {
1895
+ "action": "shell",
1896
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag -l",
1897
+ "effect": "allow"
1898
+ },
1899
+ {
1900
+ "action": "shell",
1901
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag -l *",
1902
+ "effect": "allow"
1903
+ },
1904
+ {
1905
+ "action": "shell",
1906
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag -n",
1907
+ "effect": "allow"
1908
+ },
1909
+ {
1910
+ "action": "shell",
1911
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag -n *",
1912
+ "effect": "allow"
1913
+ },
1914
+ {
1915
+ "action": "shell",
1916
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote -v",
1917
+ "effect": "allow"
1918
+ },
1919
+ {
1920
+ "action": "shell",
1921
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote -v *",
1922
+ "effect": "allow"
1923
+ },
1924
+ {
1925
+ "action": "shell",
1926
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote --verbose",
1927
+ "effect": "allow"
1928
+ },
1929
+ {
1930
+ "action": "shell",
1931
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote --verbose *",
1932
+ "effect": "allow"
1933
+ },
1934
+ {
1935
+ "action": "shell",
1936
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote show",
1937
+ "effect": "allow"
1938
+ },
1939
+ {
1940
+ "action": "shell",
1941
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote show *",
1942
+ "effect": "allow"
1943
+ },
1944
+ {
1945
+ "action": "shell",
1946
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote get-url",
1947
+ "effect": "allow"
1948
+ },
1949
+ {
1950
+ "action": "shell",
1951
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote get-url *",
1952
+ "effect": "allow"
1953
+ },
1954
+ {
1955
+ "action": "shell",
1956
+ "resource": "GIT_OPTIONAL_LOCKS=0 git reflog show",
1957
+ "effect": "allow"
1958
+ },
1959
+ {
1960
+ "action": "shell",
1961
+ "resource": "GIT_OPTIONAL_LOCKS=0 git reflog show *",
1962
+ "effect": "allow"
1963
+ },
1964
+ {
1965
+ "action": "shell",
1966
+ "resource": "GIT_OPTIONAL_LOCKS=0 git stash list",
1967
+ "effect": "allow"
1968
+ },
1969
+ {
1970
+ "action": "shell",
1971
+ "resource": "GIT_OPTIONAL_LOCKS=0 git stash list *",
1972
+ "effect": "allow"
1973
+ },
1974
+ {
1975
+ "action": "shell",
1976
+ "resource": "GIT_OPTIONAL_LOCKS=0 git describe",
1977
+ "effect": "allow"
1978
+ },
1979
+ {
1980
+ "action": "shell",
1981
+ "resource": "GIT_OPTIONAL_LOCKS=0 git describe *",
1982
+ "effect": "allow"
1983
+ },
1984
+ {
1985
+ "action": "shell",
1986
+ "resource": "GIT_OPTIONAL_LOCKS=0 git worktree list",
1987
+ "effect": "allow"
1988
+ },
1989
+ {
1990
+ "action": "shell",
1991
+ "resource": "GIT_OPTIONAL_LOCKS=0 git worktree list *",
1992
+ "effect": "allow"
1993
+ },
1994
+ {
1995
+ "action": "shell",
1996
+ "resource": "GIT_OPTIONAL_LOCKS=0 git config --get",
1997
+ "effect": "allow"
1998
+ },
1999
+ {
2000
+ "action": "shell",
2001
+ "resource": "GIT_OPTIONAL_LOCKS=0 git config --get *",
2002
+ "effect": "allow"
2003
+ },
2004
+ {
2005
+ "action": "shell",
2006
+ "resource": "GIT_OPTIONAL_LOCKS=0 git config --get-regexp",
2007
+ "effect": "allow"
2008
+ },
2009
+ {
2010
+ "action": "shell",
2011
+ "resource": "GIT_OPTIONAL_LOCKS=0 git config --get-regexp *",
2012
+ "effect": "allow"
2013
+ },
2014
+ {
2015
+ "action": "shell",
2016
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch *",
2017
+ "effect": "ask"
2018
+ },
2019
+ {
2020
+ "action": "shell",
2021
+ "resource": "GIT_OPTIONAL_LOCKS=0 git tag *",
2022
+ "effect": "ask"
2023
+ },
2024
+ {
2025
+ "action": "shell",
2026
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote *",
2027
+ "effect": "ask"
2028
+ },
2029
+ {
2030
+ "action": "shell",
2031
+ "resource": "GIT_OPTIONAL_LOCKS=0 git symbolic-ref *",
2032
+ "effect": "ask"
2033
+ },
2034
+ {
2035
+ "action": "shell",
2036
+ "resource": "GIT_OPTIONAL_LOCKS=0 git reflog *",
2037
+ "effect": "ask"
2038
+ },
2039
+ {
2040
+ "action": "shell",
2041
+ "resource": "GIT_OPTIONAL_LOCKS=0 git symbolic-ref HEAD",
2042
+ "effect": "allow"
2043
+ },
2044
+ {
2045
+ "action": "shell",
2046
+ "resource": "GIT_OPTIONAL_LOCKS=0 git symbolic-ref --short HEAD",
2047
+ "effect": "allow"
2048
+ },
2049
+ {
2050
+ "action": "shell",
2051
+ "resource": "GIT_OPTIONAL_LOCKS=0 git push --force*",
2052
+ "effect": "deny"
2053
+ },
2054
+ {
2055
+ "action": "shell",
2056
+ "resource": "GIT_OPTIONAL_LOCKS=0 git push -f*",
2057
+ "effect": "deny"
2058
+ },
2059
+ {
2060
+ "action": "shell",
2061
+ "resource": "GIT_OPTIONAL_LOCKS=0 git reset --hard*",
2062
+ "effect": "deny"
2063
+ },
2064
+ {
2065
+ "action": "shell",
2066
+ "resource": "GIT_OPTIONAL_LOCKS=0 git clean*",
2067
+ "effect": "deny"
2068
+ },
2069
+ {
2070
+ "action": "shell",
2071
+ "resource": "GIT_OPTIONAL_LOCKS=0 git filter-branch*",
2072
+ "effect": "deny"
2073
+ },
2074
+ {
2075
+ "action": "shell",
2076
+ "resource": "GIT_OPTIONAL_LOCKS=0 git filter-repo*",
2077
+ "effect": "deny"
2078
+ },
2079
+ {
2080
+ "action": "shell",
2081
+ "resource": "GIT_OPTIONAL_LOCKS=0 git rebase*",
2082
+ "effect": "deny"
2083
+ },
2084
+ {
2085
+ "action": "shell",
2086
+ "resource": "GIT_OPTIONAL_LOCKS=0 git checkout --*",
2087
+ "effect": "deny"
2088
+ },
2089
+ {
2090
+ "action": "shell",
2091
+ "resource": "GIT_OPTIONAL_LOCKS=0 git restore*",
2092
+ "effect": "deny"
2093
+ },
2094
+ {
2095
+ "action": "shell",
2096
+ "resource": "GIT_OPTIONAL_LOCKS=0 git branch -D*",
2097
+ "effect": "deny"
2098
+ },
2099
+ {
2100
+ "action": "shell",
2101
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote remove*",
2102
+ "effect": "deny"
2103
+ },
2104
+ {
2105
+ "action": "shell",
2106
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote set-url*",
2107
+ "effect": "deny"
2108
+ },
2109
+ {
2110
+ "action": "shell",
2111
+ "resource": "GIT_OPTIONAL_LOCKS=0 git remote add*",
2112
+ "effect": "deny"
2113
+ },
2114
+ {
2115
+ "action": "gitnexus_*",
2116
+ "resource": "*",
2117
+ "effect": "allow"
2118
+ },
2119
+ {
2120
+ "action": "gitnexus_rename",
2121
+ "resource": "*",
2122
+ "effect": "deny"
2123
+ },
2124
+ {
2125
+ "action": "gitnexus_group_sync",
2126
+ "resource": "*",
2127
+ "effect": "deny"
2128
+ },
2129
+ {
2130
+ "action": "gitlab_get_*",
2131
+ "resource": "*",
2132
+ "effect": "allow"
2133
+ },
2134
+ {
2135
+ "action": "gitlab_list_*",
2136
+ "resource": "*",
2137
+ "effect": "allow"
2138
+ },
2139
+ {
2140
+ "action": "gitlab_search_*",
2141
+ "resource": "*",
2142
+ "effect": "allow"
2143
+ },
2144
+ {
2145
+ "action": "gitlab_mr_discussions",
2146
+ "resource": "*",
2147
+ "effect": "allow"
2148
+ },
2149
+ {
2150
+ "action": "gitlab_health_check",
2151
+ "resource": "*",
2152
+ "effect": "allow"
2153
+ },
2154
+ {
2155
+ "action": "gitlab_get_project_variable",
2156
+ "resource": "*",
2157
+ "effect": "deny"
2158
+ },
2159
+ {
2160
+ "action": "gitlab_get_group_variable",
2161
+ "resource": "*",
2162
+ "effect": "deny"
2163
+ },
2164
+ {
2165
+ "action": "gitlab_list_project_variables",
2166
+ "resource": "*",
2167
+ "effect": "deny"
2168
+ },
2169
+ {
2170
+ "action": "gitlab_list_group_variables",
2171
+ "resource": "*",
2172
+ "effect": "deny"
2173
+ },
2174
+ {
2175
+ "action": "playwright_*",
2176
+ "resource": "*",
2177
+ "effect": "ask"
2178
+ },
2179
+ {
2180
+ "action": "playwright_browser_get_config",
2181
+ "resource": "*",
2182
+ "effect": "allow"
2183
+ },
2184
+ {
2185
+ "action": "playwright_browser_snapshot",
2186
+ "resource": "*",
2187
+ "effect": "allow"
2188
+ },
2189
+ {
2190
+ "action": "playwright_browser_take_screenshot",
2191
+ "resource": "*",
2192
+ "effect": "allow"
2193
+ },
2194
+ {
2195
+ "action": "playwright_browser_console_messages",
2196
+ "resource": "*",
2197
+ "effect": "allow"
2198
+ },
2199
+ {
2200
+ "action": "playwright_browser_network_requests",
2201
+ "resource": "*",
2202
+ "effect": "allow"
2203
+ },
2204
+ {
2205
+ "action": "playwright_browser_tabs",
2206
+ "resource": "*",
2207
+ "effect": "allow"
2208
+ },
2209
+ {
2210
+ "action": "playwright_browser_find",
2211
+ "resource": "*",
2212
+ "effect": "allow"
2213
+ },
2214
+ {
2215
+ "action": "playwright_browser_generate_locator",
2216
+ "resource": "*",
2217
+ "effect": "allow"
2218
+ },
2219
+ {
2220
+ "action": "playwright_browser_verify_*",
2221
+ "resource": "*",
2222
+ "effect": "allow"
2223
+ },
2224
+ {
2225
+ "action": "playwright_browser_run_code_unsafe",
2226
+ "resource": "*",
2227
+ "effect": "deny"
2228
+ }
45
2229
  ]
46
2230
  }