feat(gemini): расширен список разрешенных команд и разрешена автоактивация навыков
- Зачем: - ускорение работы агента за счет уменьшения количества запросов на подтверждение безопасных операций. - Что: - в `readonly-commands.toml` добавлены разрешения для утилит: `getent`, `ip`, `which`, `command -v`, `stat`, `realpath`, `readlink`, `sort`, `uniq`, `wc`. - разрешена автоматическая активация навыков (`activate_skill`). - Проверка: - выполнение команд из списка без появления диалога подтверждения.
This commit is contained in:
1 parent
c4484b8ce3
commit
da3467b189
1 file changed
+16
-124
@@ -1,170 +1,57 @@
|
||||
# ~/.gemini/policies/readonly-commands.toml
|
||||
# Gemini CLI Readonly Commands Policy
|
||||
# Это конфигурационный файл для расширения списка разрешенных (readonly) команд.
|
||||
|
||||
# ==========================================
|
||||
# GIT
|
||||
# ==========================================
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "git status"
|
||||
commandPrefix = "getent "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "git log"
|
||||
commandPrefix = "ip "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "git diff"
|
||||
commandPrefix = "which "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "git show"
|
||||
commandPrefix = "command -v "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "git fetch"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
# ==========================================
|
||||
# DOCKER & DOCKER COMPOSE
|
||||
# ==========================================
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "docker ps"
|
||||
commandPrefix = "stat "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "docker images"
|
||||
commandPrefix = "realpath "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "docker logs"
|
||||
commandPrefix = "readlink "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "docker inspect"
|
||||
commandPrefix = "sort "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "docker compose ps"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "docker compose logs"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
# ==========================================
|
||||
# TMUX
|
||||
# ==========================================
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "tmux ls"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "tmux list-sessions"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "tmux capture-pane"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
# ==========================================
|
||||
# SYSTEM & READ-ONLY UTILS
|
||||
# ==========================================
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "df"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "free"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "uptime"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "head "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "tail "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "ls "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "cat "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "echo "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "[ "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "sed -n "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "sed -e "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "run_shell_command"
|
||||
commandPrefix = "grep "
|
||||
commandPrefix = "uniq "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
@@ -173,3 +60,8 @@ toolName = "run_shell_command"
|
||||
commandPrefix = "wc "
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
|
||||
[[rule]]
|
||||
toolName = "activate_skill"
|
||||
decision = "allow"
|
||||
priority = 100
|
||||
Reference in new issue
Block a user