ddadmin
063736fed5
- Зачем: - Gemini CLI ожидает конфигурационные файлы политик в ~/.gemini/policies/. - Что: - файлы builtin-readonly.toml и readonly-commands.toml перенесены в новую директорию policies. - Проверка: - проверка структуры директорий ~/.gemini/policies/.
158 lines
2.9 KiB
TOML
158 lines
2.9 KiB
TOML
# ~/.gemini/policies/readonly-commands.toml
|
|
|
|
# ==========================================
|
|
# GIT
|
|
# ==========================================
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "git status"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "git log"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "git diff"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "git show"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "git fetch"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
# ==========================================
|
|
# DOCKER & DOCKER COMPOSE
|
|
# ==========================================
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "docker ps"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "docker images"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "docker logs"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "docker inspect"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "docker compose ps"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "docker compose logs"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
# ==========================================
|
|
# TMUX
|
|
# ==========================================
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "tmux ls"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "tmux list-sessions"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "tmux capture-pane"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
# ==========================================
|
|
# SYSTEM & READ-ONLY UTILS
|
|
# ==========================================
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "df"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "free"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "uptime"
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "head "
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "tail "
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "cat "
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "sed -n "
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "sed -e "
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "grep "
|
|
decision = "allow"
|
|
priority = 100
|
|
|
|
[[rule]]
|
|
toolName = "run_shell_command"
|
|
commandPrefix = "wc "
|
|
decision = "allow"
|
|
priority = 100
|