diff --git a/gemini/.gemini/policies/readonly-commands.toml b/gemini/.gemini/policies/readonly-commands.toml index 0392218..205c6f9 100644 --- a/gemini/.gemini/policies/readonly-commands.toml +++ b/gemini/.gemini/policies/readonly-commands.toml @@ -1,170 +1,57 @@ -# ~/.gemini/policies/readonly-commands.toml +# Gemini CLI Readonly Commands Policy +# Это конфигурационный файл для расширения списка разрешенных (readonly) команд. -# ========================================== -# GIT -# ========================================== [[rule]] toolName = "run_shell_command" -commandPrefix = "git status" +commandPrefix = "getent " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "git log" +commandPrefix = "ip " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "git diff" +commandPrefix = "which " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "git show" +commandPrefix = "command -v " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "git fetch" -decision = "allow" -priority = 100 - -# ========================================== -# DOCKER & DOCKER COMPOSE -# ========================================== -[[rule]] -toolName = "run_shell_command" -commandPrefix = "docker ps" +commandPrefix = "stat " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "docker images" +commandPrefix = "realpath " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "docker logs" +commandPrefix = "readlink " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "docker inspect" +commandPrefix = "sort " decision = "allow" priority = 100 [[rule]] toolName = "run_shell_command" -commandPrefix = "docker compose ps" -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "docker compose logs" -decision = "allow" -priority = 100 - -# ========================================== -# TMUX -# ========================================== -[[rule]] -toolName = "run_shell_command" -commandPrefix = "tmux ls" -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "tmux list-sessions" -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "tmux capture-pane" -decision = "allow" -priority = 100 - -# ========================================== -# SYSTEM & READ-ONLY UTILS -# ========================================== -[[rule]] -toolName = "run_shell_command" -commandPrefix = "df" -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "free" -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "uptime" -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "head " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "tail " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "ls " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "cat " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "echo " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "[ " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "sed -n " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "sed -e " -decision = "allow" -priority = 100 - -[[rule]] -toolName = "run_shell_command" -commandPrefix = "grep " +commandPrefix = "uniq " decision = "allow" priority = 100 @@ -173,3 +60,8 @@ toolName = "run_shell_command" commandPrefix = "wc " decision = "allow" priority = 100 + +[[rule]] +toolName = "activate_skill" +decision = "allow" +priority = 100