jorgex-stack 1.9.52 → 1.9.53

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/stack/config/defaults.json +15 -621
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "jorgex-stack",
3
- "version": "1.9.52",
3
+ "version": "1.9.53",
4
4
  "description": "Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI, OpenCode y Pi",
5
5
  "type": "module",
6
6
  "license": "MIT",
package/stack/config/defaults.json CHANGED
@@ -1,8 +1,7 @@
1
1
  {
2
- "$comment": "Permisos por defecto del stack: cada bloque se escribe SOLO en config fresca o vacía; una config existente no se auto-expande jamás. OpenCode fresco permite trabajo ordinario; pide permiso para operaciones sensibles, deniega rutas protegidas y destrucción evidente, y conserva configuraciones existentes.",
2
+ "$comment": "Permisos por defecto del stack: cada bloque se escribe SOLO en config fresca o vacía; una config existente no se auto-expande jamás. OpenCode fresco es permisivo estilo gentle-ai: permite el trabajo ordinario sin prompts; solo pide git sensible y ssh, y deniega destrucción evidente y secretos.",
3
3
  "opencode": {
4
4
  "permission": {
5
- "*": "ask",
6
5
  "edit": {
7
6
  "*": "allow",
8
7
  "*.env": "deny",
@@ -36,340 +35,27 @@
36
35
  },
37
36
  "glob": "allow",
38
37
  "grep": "allow",
39
- "list": "allow",
40
38
  "lsp": "allow",
41
39
  "webfetch": "allow",
42
40
  "websearch": "allow",
43
41
  "task": "allow",
44
42
  "skill": "allow",
45
43
  "todowrite": "allow",
46
- "todoread": "allow",
47
44
  "question": "allow",
48
45
  "bash": {
49
46
  "*": "allow",
50
- "rm": "ask",
51
- "rm *": "ask",
52
- "*/rm": "ask",
53
- "*/rm *": "ask",
54
- "rmdir": "ask",
55
- "rmdir *": "ask",
56
- "*/rmdir": "ask",
57
- "*/rmdir *": "ask",
58
- "del": "ask",
59
- "del *": "ask",
60
- "*/del": "ask",
61
- "*/del *": "ask",
62
- "unlink": "ask",
63
- "unlink *": "ask",
64
- "*/unlink": "ask",
65
- "*/unlink *": "ask",
66
- "sudo": "ask",
67
- "sudo *": "ask",
68
- "*/sudo": "ask",
69
- "*/sudo *": "ask",
70
- "doas": "ask",
71
- "doas *": "ask",
72
- "*/doas": "ask",
73
- "*/doas *": "ask",
74
- "runas": "ask",
75
- "runas *": "ask",
76
- "*/runas": "ask",
77
- "*/runas *": "ask",
78
- "su": "ask",
79
- "su *": "ask",
80
- "*/su": "ask",
81
- "*/su *": "ask",
82
- "env": "ask",
83
- "env *": "ask",
84
- "*/env": "ask",
85
- "*/env *": "ask",
86
- "eval": "ask",
87
- "eval *": "ask",
88
- "*/eval": "ask",
89
- "*/eval *": "ask",
90
- "exec": "ask",
91
- "exec *": "ask",
92
- "*/exec": "ask",
93
- "*/exec *": "ask",
94
- "command": "ask",
95
- "command *": "ask",
96
- "*/command": "ask",
97
- "*/command *": "ask",
98
- "xargs": "ask",
99
- "xargs *": "ask",
100
- "*/xargs": "ask",
101
- "*/xargs *": "ask",
102
- "sh": "ask",
103
- "sh *": "ask",
104
- "*/sh": "ask",
105
- "*/sh *": "ask",
106
- "bash": "ask",
107
- "bash *": "ask",
108
- "*/bash": "ask",
109
- "*/bash *": "ask",
110
- "zsh": "ask",
111
- "zsh *": "ask",
112
- "*/zsh": "ask",
113
- "*/zsh *": "ask",
114
- "fish": "ask",
115
- "fish *": "ask",
116
- "*/fish": "ask",
117
- "*/fish *": "ask",
118
- "pwsh": "ask",
119
- "pwsh *": "ask",
120
- "*/pwsh": "ask",
121
- "*/pwsh *": "ask",
122
- "powershell": "ask",
123
- "powershell *": "ask",
124
- "*/powershell": "ask",
125
- "*/powershell *": "ask",
126
- "python": "ask",
127
- "python *": "ask",
128
- "*/python": "ask",
129
- "*/python *": "ask",
130
- "python3": "ask",
131
- "python3 *": "ask",
132
- "*/python3": "ask",
133
- "*/python3 *": "ask",
134
- "node": "ask",
135
- "node *": "ask",
136
- "*/node": "ask",
137
- "*/node *": "ask",
138
- "ruby": "ask",
139
- "ruby *": "ask",
140
- "*/ruby": "ask",
141
- "*/ruby *": "ask",
142
- "perl": "ask",
143
- "perl *": "ask",
144
- "*/perl": "ask",
145
- "*/perl *": "ask",
146
- "deno": "ask",
147
- "deno *": "ask",
148
- "*/deno": "ask",
149
- "*/deno *": "ask",
150
- "git *reset*": "ask",
151
- "*/git *reset*": "ask",
152
- "git.exe *reset*": "ask",
153
- "*/git.exe *reset*": "ask",
154
- "*\\git.exe *reset*": "ask",
155
- "git *clean*": "ask",
156
- "*/git *clean*": "ask",
157
- "git.exe *clean*": "ask",
158
- "*/git.exe *clean*": "ask",
159
- "*\\git.exe *clean*": "ask",
160
- "git *push*": "ask",
161
- "*/git *push*": "ask",
162
- "git.exe *push*": "ask",
163
- "*/git.exe *push*": "ask",
164
- "*\\git.exe *push*": "ask",
165
- "git *checkout*--*": "ask",
166
- "*/git *checkout*--*": "ask",
167
- "git.exe *checkout*--*": "ask",
168
- "*/git.exe *checkout*--*": "ask",
169
- "*\\git.exe *checkout*--*": "ask",
170
- "git *checkout* -f*": "ask",
171
- "*/git *checkout* -f*": "ask",
172
- "git.exe *checkout* -f*": "ask",
173
- "*/git.exe *checkout* -f*": "ask",
174
- "*\\git.exe *checkout* -f*": "ask",
175
- "git *restore*": "ask",
176
- "*/git *restore*": "ask",
177
- "git.exe *restore*": "ask",
178
- "*/git.exe *restore*": "ask",
179
- "*\\git.exe *restore*": "ask",
180
- "git *switch*--discard-changes*": "ask",
181
- "*/git *switch*--discard-changes*": "ask",
182
- "git.exe *switch*--discard-changes*": "ask",
183
- "*/git.exe *switch*--discard-changes*": "ask",
184
- "*\\git.exe *switch*--discard-changes*": "ask",
185
- "git *rebase*": "ask",
186
- "*/git *rebase*": "ask",
187
- "git.exe *rebase*": "ask",
188
- "*/git.exe *rebase*": "ask",
189
- "*\\git.exe *rebase*": "ask",
190
- "* git *checkout*--*": "ask",
191
- "* git.exe *checkout*--*": "ask",
192
- "* git *checkout* -f*": "ask",
193
- "* git.exe *checkout* -f*": "ask",
194
- "* git *restore*": "ask",
195
- "* git.exe *restore*": "ask",
196
- "* git *switch*--discard-changes*": "ask",
197
- "* git.exe *switch*--discard-changes*": "ask",
198
- "* git *rebase*": "ask",
199
- "* git.exe *rebase*": "ask",
200
- "git -c *": "ask",
201
- "*/git -c *": "ask",
202
- "git.exe -c *": "ask",
203
- "*/git.exe -c *": "ask",
204
- "*\\git.exe -c *": "ask",
205
- "git * -c *": "ask",
206
- "*/git * -c *": "ask",
207
- "git.exe * -c *": "ask",
208
- "*/git.exe * -c *": "ask",
209
- "*\\git.exe * -c *": "ask",
210
- "git --config-env*": "ask",
211
- "*/git --config-env*": "ask",
212
- "git.exe --config-env*": "ask",
213
- "*/git.exe --config-env*": "ask",
214
- "*\\git.exe --config-env*": "ask",
215
- "git *--output*": "ask",
216
- "*/git *--output*": "ask",
217
- "git.exe *--output*": "ask",
218
- "*/git.exe *--output*": "ask",
219
- "*\\git.exe *--output*": "ask",
220
- "git *--ext-diff*": "ask",
221
- "*/git *--ext-diff*": "ask",
222
- "git.exe *--ext-diff*": "ask",
223
- "*/git.exe *--ext-diff*": "ask",
224
- "*\\git.exe *--ext-diff*": "ask",
225
- "git *--textconv*": "ask",
226
- "*/git *--textconv*": "ask",
227
- "git.exe *--textconv*": "ask",
228
- "*/git.exe *--textconv*": "ask",
229
- "*\\git.exe *--textconv*": "ask",
230
- "git *--show-signature*": "ask",
231
- "*/git *--show-signature*": "ask",
232
- "git.exe *--show-signature*": "ask",
233
- "*/git.exe *--show-signature*": "ask",
234
- "*\\git.exe *--show-signature*": "ask",
235
- "git *%G*": "ask",
236
- "*/git *%G*": "ask",
237
- "git.exe *%G*": "ask",
238
- "*/git.exe *%G*": "ask",
239
- "*\\git.exe *%G*": "ask",
240
- "pnpm exec*": "ask",
241
- "pnpm dlx*": "ask",
242
- "truncate": "ask",
243
- "truncate *": "ask",
244
- "*/truncate": "ask",
245
- "*/truncate *": "ask",
246
- "Remove-Item": "ask",
247
- "Remove-Item *": "ask",
248
- "*/Remove-Item": "ask",
249
- "*/Remove-Item *": "ask",
250
- "remove-item": "ask",
251
- "remove-item *": "ask",
252
- "*/remove-item": "ask",
253
- "*/remove-item *": "ask",
254
- "ri": "ask",
255
- "ri *": "ask",
256
- "*/ri": "ask",
257
- "*/ri *": "ask",
258
- "erase": "ask",
259
- "erase *": "ask",
260
- "*/erase": "ask",
261
- "*/erase *": "ask",
262
- "rd": "ask",
263
- "rd *": "ask",
264
- "*/rd": "ask",
265
- "*/rd *": "ask",
266
- "Clear-Content": "ask",
267
- "Clear-Content *": "ask",
268
- "*/Clear-Content": "ask",
269
- "*/Clear-Content *": "ask",
270
- "clear-content": "ask",
271
- "clear-content *": "ask",
272
- "*/clear-content": "ask",
273
- "*/clear-content *": "ask",
274
- "find *-delete*": "ask",
275
- "find *-exec*": "ask",
276
- "find *-ok*": "ask",
277
- "*/find *-delete*": "ask",
278
- "*/find *-exec*": "ask",
279
- "*/find *-ok*": "ask",
280
- "* rm": "ask",
281
- "* rm *": "ask",
282
- "* rmdir": "ask",
283
- "* rmdir *": "ask",
284
- "* del": "ask",
285
- "* del *": "ask",
286
- "* unlink": "ask",
287
- "* unlink *": "ask",
288
- "* sudo": "ask",
289
- "* sudo *": "ask",
290
- "* doas": "ask",
291
- "* doas *": "ask",
292
- "* runas": "ask",
293
- "* runas *": "ask",
294
- "* su": "ask",
295
- "* su *": "ask",
296
- "* env": "ask",
297
- "* env *": "ask",
298
- "* eval": "ask",
299
- "* eval *": "ask",
300
- "* exec": "ask",
301
- "* exec *": "ask",
302
- "* command": "ask",
303
- "* command *": "ask",
304
- "* xargs": "ask",
305
- "* xargs *": "ask",
306
- "* sh": "ask",
307
- "* sh *": "ask",
308
- "* bash": "ask",
309
- "* bash *": "ask",
310
- "* zsh": "ask",
311
- "* zsh *": "ask",
312
- "* fish": "ask",
313
- "* fish *": "ask",
314
- "* pwsh": "ask",
315
- "* pwsh *": "ask",
316
- "* powershell": "ask",
317
- "* powershell *": "ask",
318
- "* python": "ask",
319
- "* python *": "ask",
320
- "* python3": "ask",
321
- "* python3 *": "ask",
322
- "* node": "ask",
323
- "* node *": "ask",
324
- "* ruby": "ask",
325
- "* ruby *": "ask",
326
- "* perl": "ask",
327
- "* perl *": "ask",
328
- "* deno": "ask",
329
- "* deno *": "ask",
330
- "* git *reset*": "ask",
331
- "* git.exe *reset*": "ask",
332
- "* git *clean*": "ask",
333
- "* git.exe *clean*": "ask",
334
- "* git *push*": "ask",
335
- "* git.exe *push*": "ask",
336
- "* git -c *": "ask",
337
- "* git.exe -c *": "ask",
338
- "* git * -c *": "ask",
339
- "* git.exe * -c *": "ask",
340
- "* git --config-env*": "ask",
341
- "* git.exe --config-env*": "ask",
342
- "* git *--output*": "ask",
343
- "* git.exe *--output*": "ask",
344
- "* git *--ext-diff*": "ask",
345
- "* git.exe *--ext-diff*": "ask",
346
- "* git *--textconv*": "ask",
347
- "* git.exe *--textconv*": "ask",
348
- "* git *--show-signature*": "ask",
349
- "* git.exe *--show-signature*": "ask",
350
- "* git *%G*": "ask",
351
- "* git.exe *%G*": "ask",
352
- "* pnpm exec*": "ask",
353
- "* pnpm dlx*": "ask",
354
- "* truncate": "ask",
355
- "* truncate *": "ask",
356
- "* Remove-Item": "ask",
357
- "* Remove-Item *": "ask",
358
- "* remove-item": "ask",
359
- "* remove-item *": "ask",
360
- "* ri": "ask",
361
- "* ri *": "ask",
362
- "* erase": "ask",
363
- "* erase *": "ask",
364
- "* rd": "ask",
365
- "* rd *": "ask",
366
- "* Clear-Content": "ask",
367
- "* Clear-Content *": "ask",
368
- "* clear-content": "ask",
369
- "* clear-content *": "ask",
370
- "* find *-delete*": "ask",
371
- "* find *-exec*": "ask",
372
- "* find *-ok*": "ask",
47
+ "git rebase": "ask",
48
+ "git rebase *": "ask",
49
+ "git reset --hard": "ask",
50
+ "git reset --hard *": "ask",
51
+ "ssh": "ask",
52
+ "ssh *": "ask",
53
+ "scp": "ask",
54
+ "scp *": "ask",
55
+ "sftp": "ask",
56
+ "sftp *": "ask",
57
+ "rsync": "ask",
58
+ "rsync *": "ask",
373
59
  "format": "deny",
374
60
  "format *": "deny",
375
61
  "*/format": "deny",
@@ -387,300 +73,8 @@
387
73
  "*/shred": "deny",
388
74
  "*/shred *": "deny",
389
75
  "mkfs.*": "deny",
390
- "*/mkfs.*": "deny",
391
- "rm /": "deny",
392
- "rm * /": "deny",
393
- "rm * / *": "deny",
394
- "rm /etc": "deny",
395
- "rm * /etc": "deny",
396
- "rm * /etc *": "deny",
397
- "rm /usr": "deny",
398
- "rm * /usr": "deny",
399
- "rm * /usr *": "deny",
400
- "rm /bin": "deny",
401
- "rm * /bin": "deny",
402
- "rm * /bin *": "deny",
403
- "rm /sbin": "deny",
404
- "rm * /sbin": "deny",
405
- "rm * /sbin *": "deny",
406
- "rm /boot": "deny",
407
- "rm * /boot": "deny",
408
- "rm * /boot *": "deny",
409
- "rm /dev": "deny",
410
- "rm * /dev": "deny",
411
- "rm * /dev *": "deny",
412
- "rm /proc": "deny",
413
- "rm * /proc": "deny",
414
- "rm * /proc *": "deny",
415
- "rm /sys": "deny",
416
- "rm * /sys": "deny",
417
- "rm * /sys *": "deny",
418
- "*/rm /": "deny",
419
- "*/rm * /": "deny",
420
- "*/rm * / *": "deny",
421
- "*/rm /etc": "deny",
422
- "*/rm * /etc": "deny",
423
- "*/rm * /etc *": "deny",
424
- "*/rm /usr": "deny",
425
- "*/rm * /usr": "deny",
426
- "*/rm * /usr *": "deny",
427
- "*/rm /bin": "deny",
428
- "*/rm * /bin": "deny",
429
- "*/rm * /bin *": "deny",
430
- "*/rm /sbin": "deny",
431
- "*/rm * /sbin": "deny",
432
- "*/rm * /sbin *": "deny",
433
- "*/rm /boot": "deny",
434
- "*/rm * /boot": "deny",
435
- "*/rm * /boot *": "deny",
436
- "*/rm /dev": "deny",
437
- "*/rm * /dev": "deny",
438
- "*/rm * /dev *": "deny",
439
- "*/rm /proc": "deny",
440
- "*/rm * /proc": "deny",
441
- "*/rm * /proc *": "deny",
442
- "*/rm /sys": "deny",
443
- "*/rm * /sys": "deny",
444
- "*/rm * /sys *": "deny",
445
- "rmdir /": "deny",
446
- "rmdir * /": "deny",
447
- "rmdir * / *": "deny",
448
- "rmdir /etc": "deny",
449
- "rmdir * /etc": "deny",
450
- "rmdir * /etc *": "deny",
451
- "rmdir /usr": "deny",
452
- "rmdir * /usr": "deny",
453
- "rmdir * /usr *": "deny",
454
- "rmdir /bin": "deny",
455
- "rmdir * /bin": "deny",
456
- "rmdir * /bin *": "deny",
457
- "rmdir /sbin": "deny",
458
- "rmdir * /sbin": "deny",
459
- "rmdir * /sbin *": "deny",
460
- "rmdir /boot": "deny",
461
- "rmdir * /boot": "deny",
462
- "rmdir * /boot *": "deny",
463
- "rmdir /dev": "deny",
464
- "rmdir * /dev": "deny",
465
- "rmdir * /dev *": "deny",
466
- "rmdir /proc": "deny",
467
- "rmdir * /proc": "deny",
468
- "rmdir * /proc *": "deny",
469
- "rmdir /sys": "deny",
470
- "rmdir * /sys": "deny",
471
- "rmdir * /sys *": "deny",
472
- "*/rmdir /": "deny",
473
- "*/rmdir * /": "deny",
474
- "*/rmdir * / *": "deny",
475
- "*/rmdir /etc": "deny",
476
- "*/rmdir * /etc": "deny",
477
- "*/rmdir * /etc *": "deny",
478
- "*/rmdir /usr": "deny",
479
- "*/rmdir * /usr": "deny",
480
- "*/rmdir * /usr *": "deny",
481
- "*/rmdir /bin": "deny",
482
- "*/rmdir * /bin": "deny",
483
- "*/rmdir * /bin *": "deny",
484
- "*/rmdir /sbin": "deny",
485
- "*/rmdir * /sbin": "deny",
486
- "*/rmdir * /sbin *": "deny",
487
- "*/rmdir /boot": "deny",
488
- "*/rmdir * /boot": "deny",
489
- "*/rmdir * /boot *": "deny",
490
- "*/rmdir /dev": "deny",
491
- "*/rmdir * /dev": "deny",
492
- "*/rmdir * /dev *": "deny",
493
- "*/rmdir /proc": "deny",
494
- "*/rmdir * /proc": "deny",
495
- "*/rmdir * /proc *": "deny",
496
- "*/rmdir /sys": "deny",
497
- "*/rmdir * /sys": "deny",
498
- "*/rmdir * /sys *": "deny",
499
- "*.env*": "deny",
500
- "*/.ssh*": "deny",
501
- "*/.aws/credentials*": "deny",
502
- "*.npmrc*": "deny",
503
- "*.git-credentials*": "deny",
504
- "*id_rsa*": "deny",
505
- "*id_ed25519*": "deny",
506
- "*.pem*": "deny",
507
- "*.key*": "deny",
508
- "*rm /etc/*": "deny",
509
- "*rm * /etc/*": "deny",
510
- "*rm /usr/*": "deny",
511
- "*rm * /usr/*": "deny",
512
- "*rm /bin/*": "deny",
513
- "*rm * /bin/*": "deny",
514
- "*rm /sbin/*": "deny",
515
- "*rm * /sbin/*": "deny",
516
- "*rm /boot/*": "deny",
517
- "*rm * /boot/*": "deny",
518
- "*rm /dev/*": "deny",
519
- "*rm * /dev/*": "deny",
520
- "*rm /proc/*": "deny",
521
- "*rm * /proc/*": "deny",
522
- "*rm /sys/*": "deny",
523
- "*rm * /sys/*": "deny",
524
- "*rm /": "deny",
525
- "*rm * /": "deny",
526
- "*rm * / *": "deny",
527
- "*rmdir /etc/*": "deny",
528
- "*rmdir * /etc/*": "deny",
529
- "*rmdir /usr/*": "deny",
530
- "*rmdir * /usr/*": "deny",
531
- "*rmdir /bin/*": "deny",
532
- "*rmdir * /bin/*": "deny",
533
- "*rmdir /sbin/*": "deny",
534
- "*rmdir * /sbin/*": "deny",
535
- "*rmdir /boot/*": "deny",
536
- "*rmdir * /boot/*": "deny",
537
- "*rmdir /dev/*": "deny",
538
- "*rmdir * /dev/*": "deny",
539
- "*rmdir /proc/*": "deny",
540
- "*rmdir * /proc/*": "deny",
541
- "*rmdir /sys/*": "deny",
542
- "*rmdir * /sys/*": "deny",
543
- "*rmdir /": "deny",
544
- "*rmdir * /": "deny",
545
- "*rmdir * / *": "deny",
546
- "find / *-delete*": "deny",
547
- "find * / *-delete*": "deny",
548
- "find //* *-delete*": "deny",
549
- "find * //* *-delete*": "deny",
550
- "find /etc *-delete*": "deny",
551
- "find * /etc *-delete*": "deny",
552
- "find /etc/* *-delete*": "deny",
553
- "find * /etc/* *-delete*": "deny",
554
- "find /usr *-delete*": "deny",
555
- "find * /usr *-delete*": "deny",
556
- "find /usr/* *-delete*": "deny",
557
- "find * /usr/* *-delete*": "deny",
558
- "find /bin *-delete*": "deny",
559
- "find * /bin *-delete*": "deny",
560
- "find /bin/* *-delete*": "deny",
561
- "find * /bin/* *-delete*": "deny",
562
- "find /sbin *-delete*": "deny",
563
- "find * /sbin *-delete*": "deny",
564
- "find /sbin/* *-delete*": "deny",
565
- "find * /sbin/* *-delete*": "deny",
566
- "find /boot *-delete*": "deny",
567
- "find * /boot *-delete*": "deny",
568
- "find /boot/* *-delete*": "deny",
569
- "find * /boot/* *-delete*": "deny",
570
- "find /dev *-delete*": "deny",
571
- "find * /dev *-delete*": "deny",
572
- "find /dev/* *-delete*": "deny",
573
- "find * /dev/* *-delete*": "deny",
574
- "find /proc *-delete*": "deny",
575
- "find * /proc *-delete*": "deny",
576
- "find /proc/* *-delete*": "deny",
577
- "find * /proc/* *-delete*": "deny",
578
- "find /sys *-delete*": "deny",
579
- "find * /sys *-delete*": "deny",
580
- "find /sys/* *-delete*": "deny",
581
- "find * /sys/* *-delete*": "deny",
582
- "* format": "deny",
583
- "* format *": "deny",
584
- "* mkfs": "deny",
585
- "* mkfs *": "deny",
586
- "* dd": "deny",
587
- "* dd *": "deny",
588
- "* shred": "deny",
589
- "* shred *": "deny",
590
- "* mkfs.*": "deny",
591
- "* rm /": "deny",
592
- "* rm * /": "deny",
593
- "* rm * / *": "deny",
594
- "* rm /etc": "deny",
595
- "* rm * /etc": "deny",
596
- "* rm * /etc *": "deny",
597
- "* rm /usr": "deny",
598
- "* rm * /usr": "deny",
599
- "* rm * /usr *": "deny",
600
- "* rm /bin": "deny",
601
- "* rm * /bin": "deny",
602
- "* rm * /bin *": "deny",
603
- "* rm /sbin": "deny",
604
- "* rm * /sbin": "deny",
605
- "* rm * /sbin *": "deny",
606
- "* rm /boot": "deny",
607
- "* rm * /boot": "deny",
608
- "* rm * /boot *": "deny",
609
- "* rm /dev": "deny",
610
- "* rm * /dev": "deny",
611
- "* rm * /dev *": "deny",
612
- "* rm /proc": "deny",
613
- "* rm * /proc": "deny",
614
- "* rm * /proc *": "deny",
615
- "* rm /sys": "deny",
616
- "* rm * /sys": "deny",
617
- "* rm * /sys *": "deny",
618
- "* rmdir /": "deny",
619
- "* rmdir * /": "deny",
620
- "* rmdir * / *": "deny",
621
- "* rmdir /etc": "deny",
622
- "* rmdir * /etc": "deny",
623
- "* rmdir * /etc *": "deny",
624
- "* rmdir /usr": "deny",
625
- "* rmdir * /usr": "deny",
626
- "* rmdir * /usr *": "deny",
627
- "* rmdir /bin": "deny",
628
- "* rmdir * /bin": "deny",
629
- "* rmdir * /bin *": "deny",
630
- "* rmdir /sbin": "deny",
631
- "* rmdir * /sbin": "deny",
632
- "* rmdir * /sbin *": "deny",
633
- "* rmdir /boot": "deny",
634
- "* rmdir * /boot": "deny",
635
- "* rmdir * /boot *": "deny",
636
- "* rmdir /dev": "deny",
637
- "* rmdir * /dev": "deny",
638
- "* rmdir * /dev *": "deny",
639
- "* rmdir /proc": "deny",
640
- "* rmdir * /proc": "deny",
641
- "* rmdir * /proc *": "deny",
642
- "* rmdir /sys": "deny",
643
- "* rmdir * /sys": "deny",
644
- "* rmdir * /sys *": "deny",
645
- "* find / *-delete*": "deny",
646
- "* find * / *-delete*": "deny",
647
- "* find //* *-delete*": "deny",
648
- "* find * //* *-delete*": "deny",
649
- "* find /etc *-delete*": "deny",
650
- "* find * /etc *-delete*": "deny",
651
- "* find /etc/* *-delete*": "deny",
652
- "* find * /etc/* *-delete*": "deny",
653
- "* find /usr *-delete*": "deny",
654
- "* find * /usr *-delete*": "deny",
655
- "* find /usr/* *-delete*": "deny",
656
- "* find * /usr/* *-delete*": "deny",
657
- "* find /bin *-delete*": "deny",
658
- "* find * /bin *-delete*": "deny",
659
- "* find /bin/* *-delete*": "deny",
660
- "* find * /bin/* *-delete*": "deny",
661
- "* find /sbin *-delete*": "deny",
662
- "* find * /sbin *-delete*": "deny",
663
- "* find /sbin/* *-delete*": "deny",
664
- "* find * /sbin/* *-delete*": "deny",
665
- "* find /boot *-delete*": "deny",
666
- "* find * /boot *-delete*": "deny",
667
- "* find /boot/* *-delete*": "deny",
668
- "* find * /boot/* *-delete*": "deny",
669
- "* find /dev *-delete*": "deny",
670
- "* find * /dev *-delete*": "deny",
671
- "* find /dev/* *-delete*": "deny",
672
- "* find * /dev/* *-delete*": "deny",
673
- "* find /proc *-delete*": "deny",
674
- "* find * /proc *-delete*": "deny",
675
- "* find /proc/* *-delete*": "deny",
676
- "* find * /proc/* *-delete*": "deny",
677
- "* find /sys *-delete*": "deny",
678
- "* find * /sys *-delete*": "deny",
679
- "* find /sys/* *-delete*": "deny",
680
- "* find * /sys/* *-delete*": "deny"
681
- },
682
- "engram_*": "allow",
683
- "context7_*": "allow"
76
+ "*/mkfs.*": "deny"
77
+ }
684
78
  }
685
79
  },
686
80
  "claude-code": {