Skip to content

Add destructive-command safety hook and expand allowlist - #156

Merged
fcakyon merged 1 commit into
mainfrom
feature/destructive-command-gatekeeper
Apr 10, 2026
Merged

Add destructive-command safety hook and expand allowlist#156
fcakyon merged 1 commit into
mainfrom
feature/destructive-command-gatekeeper

Conversation

@fcakyon

@fcakyon fcakyon commented Apr 10, 2026

Copy link
Copy Markdown
Owner
  • Adds a safety hook to all 3 settings files that auto-allows safe Bash commands and flags dangerous ones (rm, kill, git push, git reset, subprocess, etc.) for manual review before running
  • Adds 9 new auto-allow entries across settings and Codex rules: git show, tmux has-session, tmux new-session, python -c, python3 -c, python -m json.tool, sleep, source .venv/bin/activate, mkdir -p
  • Aligns WebFetch allowed domains in settings-minimax.json to match the other two settings files
  • Renames Codex rules file from claude-readonly-import.rules to nondestructive-allowlist.rules to better describe its purpose

might be useful for you @Y-T-G 👍🏻

Adds a PreToolUse hook that auto-allows safe Bash commands and flags
destructive ones (rm, kill, git push, git reset, etc.) for manual review.
Also adds 9 new allowlist entries (git show, tmux, python, sleep, mkdir)
and aligns WebFetch domains across all settings files.
@fcakyon fcakyon self-assigned this Apr 10, 2026
@fcakyon
fcakyon merged commit 9861b82 into main Apr 10, 2026
1 check passed
@fcakyon
fcakyon deleted the feature/destructive-command-gatekeeper branch April 10, 2026 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant