shell-permissions.yaml
This page is auto-generated. Edit the source to change the content.
# uvilo-shell permanent permissions config
# Version-controlled, human-readable.
# Edited manually or by uvilo-shell when a user grants "always" permission.
# Uncommitted changes here are "always" grants pending /end-session commit.
#
# Structure:
# allowed.commands — base commands the agent may invoke with any arguments
# allowed.subcommands — specific "cmd subverb" pairs (e.g. "pip install")
# allowed.directories — paths the agent may WRITE to
# (reads within /workspace and /tmp are always free)
#
# Hardcoded always-allowed (not listed here):
# cat grep ls find head tail wc sort uniq echo pwd which env
# true false printf cut tr sed awk
allowed:
commands:
- /tmp/railway-bin
- /tmp/venv/bin/python3
- cd
- cp
- curl
- diff
- export
- git
- mkdir
- mv
- node
- python
- python3
- railway
- uvilo-trash
- xargs
subcommands:
- apk add
- do echo
- for f
- import *
- npm install
- npm run
- npx tsx
- pip install
- pip list
- pip show
- uv pip
- xargs sed
directories:
- /tmp
- /workspace
