grok-bot
17a2bc8a45
Add reader vorlagen (permissions, MCP, hooks, plugins, team AGENTS), humanizer skill, and adaptionen for ki-codex; refresh chapters 00–18, resource-path justfile, and dist PDF with full illustration set.
33 lines
825 B
TOML
33 lines
825 B
TOML
# Enge Permission-Baseline für Project- oder User-Config.
|
||
# Primär: .grok/config.toml (team-commitbar) oder ~/.grok/config.toml
|
||
# Stand: Juli–Aug 2026 — Pattern gegen aktuelle Doku prüfen.
|
||
#
|
||
# Deny schlägt Allow und greift auch unter always-approve (siehe Kapitel 13).
|
||
|
||
[permission]
|
||
allow = [
|
||
"Bash(pytest *)",
|
||
"Bash(python -m pytest *)",
|
||
"Bash(python3 -m pytest *)",
|
||
"Bash(ruff *)",
|
||
"Bash(git status *)",
|
||
"Bash(git diff *)",
|
||
"Bash(git log *)",
|
||
"Bash(git branch *)",
|
||
]
|
||
deny = [
|
||
"Bash(rm -rf *)",
|
||
"Bash(curl *)",
|
||
"Bash(wget *)",
|
||
"Bash(git push --force *)",
|
||
"Bash(git push -f *)",
|
||
"Read(**/.env)",
|
||
"Read(**/.env.*)",
|
||
"Read(**/secrets/**)",
|
||
]
|
||
|
||
# Optional UI-Default (meist user-global in ~/.grok/config.toml):
|
||
# [ui]
|
||
# permission_mode = "ask"
|
||
# default_selected_permission = "allow_once"
|