Tool Permissions

Controls what the headless worker can do when processing submissions.

Add Permission

Global (all projects)

Read

Glob

Grep

Bash(git status:*)

Bash(git log:*)

Bash(git diff:*)

Bash(git add:*)

Bash(git commit:*)

Bash(ls:*)

Bash(cat:*)

Bash(find:*)

Bash(wc:*)

Write

Edit(scripts/core/inbox_worker.sh)

Edit(scripts/core/**)

Edit

Bash(python3:*)

Bash(pip:*)

Per-Project

dashboard

Edit(scripts/dashboard/**)

home-finance

Bash(sqlite3 *)