Phase 6.4 - Modular Architecture: - Add lewooogo-brain adapters for LLM providers - Add lewooogo-data dual memory (Redis + PostgreSQL) - Implement consensus engine for multi-agent decisions - Add incident memory service for historical context Phase 9 - Agent Teams (Claude Agent SDK): - Add base agent class with Claude Sonnet 4 integration - Implement action planner, blast radius, and security agents - Add agent API endpoints and proposal workflow - Integrate ADR-009 OpenClaw Agent Teams architecture DevOps & CI/CD: - Add GitHub Actions CI/CD workflows (ci.yaml, cd.yaml) - Add pre-commit hooks and secrets baseline - Add docker-compose for local development - Update Kubernetes network policies Frontend Improvements: - Add auto-healing error boundary component - Update i18n messages for agent features - Enhance dual-state incident card with execution feedback Documentation: - Add 7 ADRs covering MCP, design system, architecture decisions - Update ARCHITECTURE_MEMORY.md with modular design - Add GLOBAL_RULES.md and SOUL.md for project identity Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
224 lines
5.5 KiB
JSON
224 lines
5.5 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Read(**)",
|
|
"Glob(**)",
|
|
"Grep(**)",
|
|
"Bash(curl *)",
|
|
"Bash(kubectl get *)",
|
|
"Bash(kubectl describe *)",
|
|
"Bash(kubectl logs *)",
|
|
"Bash(kubectl rollout status *)",
|
|
"Bash(docker ps *)",
|
|
"Bash(docker logs *)",
|
|
"Bash(ls *)",
|
|
"Bash(cat *)",
|
|
"Bash(head *)",
|
|
"Bash(tail *)",
|
|
"Bash(grep *)",
|
|
"Bash(find *)",
|
|
"Bash(pwd)",
|
|
"Bash(which *)",
|
|
"Bash(echo *)",
|
|
"Bash(git status *)",
|
|
"Bash(git log *)",
|
|
"Bash(git diff *)",
|
|
"Bash(git branch *)",
|
|
"Bash(git remote *)",
|
|
"Edit(**)",
|
|
"Write(apps/**)",
|
|
"Write(packages/**)",
|
|
"Write(docs/**)",
|
|
"Write(.agents/**)",
|
|
"Write(k8s/**)",
|
|
"Write(scripts/**)",
|
|
"Bash(pnpm *)",
|
|
"Bash(npm *)",
|
|
"Bash(npx *)",
|
|
"Bash(node *)",
|
|
"Bash(python *)",
|
|
"Bash(python3 *)",
|
|
"Bash(pip *)",
|
|
"Bash(cd *)",
|
|
"Bash(mkdir *)",
|
|
"Bash(touch *)",
|
|
"Bash(cp *)",
|
|
"Bash(mv *)",
|
|
"Bash(chmod *)",
|
|
"Bash(pytest *)",
|
|
"Bash(playwright *)",
|
|
"Bash(git add *)",
|
|
"Bash(git commit *)",
|
|
"Bash(git stash *)",
|
|
"Bash(ssh *)",
|
|
"Bash(scp *)",
|
|
"Bash(export KUBECONFIG=*)",
|
|
"Bash(git push:*)",
|
|
"Bash(claude --version)",
|
|
"Bash(git check-ignore:*)",
|
|
"WebSearch",
|
|
"Bash(claude plugin:*)",
|
|
"Bash(claude --channels)",
|
|
"Bash(claude --channels plugin:telegram@claude-plugins-official --help)",
|
|
"Bash(bash)",
|
|
"Bash(source ~/.zshrc)",
|
|
"Bash(~/.bun/bin/bun --version)",
|
|
"Bash(env)",
|
|
"Bash(claude upgrade:*)",
|
|
"Bash(/Users/ogt/.local/bin/claude --help)",
|
|
"Bash(CLAUDE_CODE_EXPERIMENTAL_CHANNELS=1 claude --help)",
|
|
"Bash(claude --channels plugin:telegram@claude-plugins-official --print \"hello\")",
|
|
"Bash(mkdir -p ~/.claude/channels/telegram)",
|
|
"Bash(~/.claude/channels/telegram/.env)",
|
|
"Bash(~/.bun/bin/bun run:*)",
|
|
"Bash(sudo ln:*)",
|
|
"Bash(ln -sf ~/.bun/bin/bun /opt/homebrew/bin/bun)",
|
|
"Bash(xargs python:*)",
|
|
"Bash(uv --version)",
|
|
"Bash(pip3 install:*)",
|
|
"Bash(pip3 show:*)",
|
|
"Bash(ruff *)",
|
|
"Bash(mypy *)",
|
|
"Bash(black *)",
|
|
"Bash(isort *)",
|
|
"Bash(timeout *)",
|
|
"Bash(wc *)",
|
|
"Bash(sort *)",
|
|
"Bash(uniq *)",
|
|
"Bash(awk *)",
|
|
"Bash(sed *)",
|
|
"Bash(tr *)",
|
|
"Bash(tee *)",
|
|
"Bash(xargs *)",
|
|
"Bash(test *)",
|
|
"Bash([ *)",
|
|
"Bash(true)",
|
|
"Bash(false)",
|
|
"Bash(date *)",
|
|
"Bash(sleep *)",
|
|
"Bash(kill *)",
|
|
"Bash(pkill *)",
|
|
"Bash(ps *)",
|
|
"Bash(top *)",
|
|
"Bash(htop *)",
|
|
"Bash(df *)",
|
|
"Bash(du *)",
|
|
"Bash(free *)",
|
|
"Bash(uname *)",
|
|
"Bash(hostname *)",
|
|
"Bash(whoami)",
|
|
"Bash(id *)",
|
|
"Bash(groups *)",
|
|
"Bash(stat *)",
|
|
"Bash(file *)",
|
|
"Bash(realpath *)",
|
|
"Bash(dirname *)",
|
|
"Bash(basename *)",
|
|
"Bash(type *)",
|
|
"Bash(command *)",
|
|
"Bash(hash *)",
|
|
"Bash(alias *)",
|
|
"Bash(set *)",
|
|
"Bash(unset *)",
|
|
"Bash(printenv *)",
|
|
"Bash(diff *)",
|
|
"Bash(cmp *)",
|
|
"Bash(comm *)",
|
|
"Bash(join *)",
|
|
"Bash(paste *)",
|
|
"Bash(cut *)",
|
|
"Bash(rev *)",
|
|
"Bash(nl *)",
|
|
"Bash(fmt *)",
|
|
"Bash(fold *)",
|
|
"Bash(pr *)",
|
|
"Bash(expand *)",
|
|
"Bash(unexpand *)",
|
|
"Bash(od *)",
|
|
"Bash(xxd *)",
|
|
"Bash(hexdump *)",
|
|
"Bash(strings *)",
|
|
"Bash(base64 *)",
|
|
"Bash(md5sum *)",
|
|
"Bash(sha256sum *)",
|
|
"Bash(jq *)",
|
|
"Bash(yq *)",
|
|
"Bash(gh *)",
|
|
"Bash(docker build *)",
|
|
"Bash(docker run *)",
|
|
"Bash(docker exec *)",
|
|
"Bash(docker compose *)",
|
|
"Bash(docker-compose *)",
|
|
"Bash(docker images *)",
|
|
"Bash(docker inspect *)",
|
|
"Bash(docker network *)",
|
|
"Bash(docker volume *)",
|
|
"Bash(kubectl apply *)",
|
|
"Bash(kubectl create *)",
|
|
"Bash(kubectl exec *)",
|
|
"Bash(kubectl port-forward *)",
|
|
"Bash(kubectl config *)",
|
|
"Bash(helm *)",
|
|
"Bash(terraform *)",
|
|
"Bash(ansible *)",
|
|
"Bash(bun *)",
|
|
"Bash(deno *)",
|
|
"Bash(cargo *)",
|
|
"Bash(rustc *)",
|
|
"Bash(go *)",
|
|
"Bash(java *)",
|
|
"Bash(javac *)",
|
|
"Bash(gradle *)",
|
|
"Bash(mvn *)",
|
|
"Bash(make *)",
|
|
"Bash(cmake *)",
|
|
"Bash(ninja *)",
|
|
"Bash(uv *)",
|
|
"Bash(poetry *)",
|
|
"Bash(pipx *)",
|
|
"Bash(virtualenv *)",
|
|
"Bash(venv *)",
|
|
"Bash(conda *)",
|
|
"Bash(brew *)",
|
|
"Bash(apt *)",
|
|
"Bash(apt-get *)",
|
|
"Bash(yum *)",
|
|
"Bash(dnf *)",
|
|
"Bash(pacman *)",
|
|
"Bash(snap *)",
|
|
"Bash(flatpak *)",
|
|
"Bash(systemctl status *)",
|
|
"Bash(journalctl *)",
|
|
"Bash(service * status)",
|
|
"Bash(nc *)",
|
|
"Bash(netstat *)",
|
|
"Bash(ss *)",
|
|
"Bash(lsof *)",
|
|
"Bash(nmap *)",
|
|
"Bash(dig *)",
|
|
"Bash(nslookup *)",
|
|
"Bash(host *)",
|
|
"Bash(ping *)",
|
|
"Bash(traceroute *)",
|
|
"Bash(mtr *)",
|
|
"Bash(wget *)",
|
|
"Bash(http *)",
|
|
"Bash(httpie *)",
|
|
"Bash(hadolint apps/api/Dockerfile)",
|
|
"Bash(docker info:*)",
|
|
"Bash(kubectl cluster-info:*)",
|
|
"Read(//var/run/**)",
|
|
"Bash(open -a Docker)",
|
|
"Bash(git rm:*)",
|
|
"Bash(git reset:*)"
|
|
],
|
|
"deny": [
|
|
"Bash(rm -rf *)",
|
|
"Bash(git push --force *)",
|
|
"Bash(git reset --hard *)",
|
|
"Bash(kubectl delete *)",
|
|
"Bash(docker rm -f *)"
|
|
]
|
|
}
|
|
}
|