Remove cfg/tasks and all roles except default

This commit is contained in:
Levi Neely 2026-03-01 00:17:13 +01:00
parent cb77f3d3f2
commit 788d97307f
33 changed files with 0 additions and 351 deletions

View File

@ -1,12 +0,0 @@
# Admin role: system administration tasks
filesystem:
ro:
- "{CWD}"
- "/var/log"
rw:
- "/etc"
- "/usr/local/etc"
- "{HOME}"
network:
enabled: true
unrestricted: true

View File

@ -1,9 +0,0 @@
# Architect role: access to knowledge base and planning documents
filesystem:
ro:
- "{CWD}"
- "{XDG_DOCUMENTS_DIR}/agent-kb"
- "{HOME}/doc/agent-kb"
rw:
- "{XDG_DOCUMENTS_DIR}/plans"
- "{HOME}/doc/plans"

View File

@ -1,11 +0,0 @@
# Developer role configuration
filesystem:
ro:
- "{HOME}/doc"
rw:
- "{CWD}"
rwx:
- "{HOME}/bin"
- "{HOME}/.local/bin"
- "{HOME}/src"
- "{HOME}/prj"

View File

@ -1,8 +0,0 @@
# Technical editor role: documentation with code access
filesystem:
ro:
- "{HOME}/src"
- "{XDG_DOCUMENTS_DIR}"
- "{HOME}/doc"
rw:
- "{CWD}"

View File

@ -1,10 +0,0 @@
# Research role: access to documentation and knowledge base
filesystem:
ro:
- "{CWD}"
- "{HOME}/src"
- "{XDG_DOCUMENTS_DIR}"
- "{HOME}/doc"
rw:
- "{XDG_DOCUMENTS_DIR}/agent-kb"
- "{HOME}/doc/agent-kb"

View File

@ -1,8 +0,0 @@
# Reviewer role: read-only access to project and dev directories
filesystem:
ro:
- "{CWD}"
- "{HOME}/src"
rox:
- "{HOME}/bin"
- "{HOME}/.local/bin"

View File

@ -1,8 +0,0 @@
# Technical editor role: documentation with code access
filesystem:
ro:
- "{HOME}/src"
rw:
- "{CWD}"
- "{XDG_DOCUMENTS_DIR}"
- "{HOME}/doc"

View File

@ -1,9 +0,0 @@
# Tester role: execute binaries and read source, no write access
filesystem:
ro:
- "{CWD}"
- "{HOME}/src"
rox:
- "{CWD}"
- "{HOME}/bin"
- "{HOME}/.local/bin"

View File

@ -1,8 +0,0 @@
# Writer role: documentation and content creation
filesystem:
ro:
- "{CWD}"
- "{HOME}/src"
rw:
- "{XDG_DOCUMENTS_DIR}"
- "{HOME}/doc"

View File

@ -1,22 +0,0 @@
# Agent Q
filesystem:
ro:
- /etc/magic
rox:
- "{HOME}/src/mcp/agent-q"
- "{HOME}/bin"
- "{HOME}/.local/bin"
- "{HOME}/go/bin"
- "{HOME}/env"
rw:
- "{HOME}/.gnupg"
- "{HOME}/doc/agent-skills"
- "{HOME}/src/mcp/agent-q/skills"
rwx:
- "{HOME}/.npm/"
- "{HOME}/.nvm/"
env:
- AGENT_SKILLS_PATH
network:
enabled: true
unrestricted: true

View File

@ -1,16 +0,0 @@
# Ansible configuration management tool
filesystem:
ro:
- "{HOME}/.ansible"
- "{HOME}/.ansible.cfg"
- "{HOME}/.ssh/config"
- "{HOME}/.ssh/id_*"
- "{HOME}/.ssh/id_*.pub"
rw:
- "{HOME}/.ssh/known_hosts"
- "{HOME}/.ansible/tmp"
network:
enabled: true
connect_tcp:
- "22" # SSH
- "443" # Galaxy, collections

View File

@ -1,7 +0,0 @@
# AWS CLI configuration
filesystem:
ro:
- "{HOME}/.aws"
network:
enabled: true
unrestricted: true

View File

@ -1,4 +0,0 @@
# curl/wget network tools
network:
enabled: true
unrestricted: true

View File

@ -1,9 +0,0 @@
# Docker container tool configuration
filesystem:
rw:
- "/var/run/docker.sock"
- "{HOME}/.docker"
network:
enabled: true
connect_tcp:
- "443" # Docker Hub, registries

View File

@ -1,11 +0,0 @@
# Text editor configuration (vim, emacs, nano, etc.)
filesystem:
rw:
- "{XDG_CONFIG_HOME}/nvim"
- "{XDG_CONFIG_HOME}/vim"
- "{XDG_DATA_HOME}/nvim"
- "{XDG_STATE_HOME}/nvim"
- "{HOME}/.vimrc"
- "{HOME}/.vim"
- "{HOME}/.emacs.d"
- "{HOME}/.config/emacs"

View File

@ -1,24 +0,0 @@
# Git task: access to git configuration and system resources
filesystem:
ro:
- "{HOME}/.gitconfig"
- "{XDG_CONFIG_HOME}/git/config"
- "{XDG_CONFIG_HOME}/git/ignore"
- "{XDG_CONFIG_HOME}/git/attributes"
- "{HOME}/.ssh"
- "{HOME}/.netrc"
- "/etc/gitconfig"
- "/etc/gitattributes"
- "/etc/ssh/ssh_config"
- "/etc/ssh/ssh_known_hosts"
rw:
- "{HOME}/.ssh/known_hosts"
- "{HOME}/.git-credentials"
- "{XDG_CONFIG_HOME}/git/credentials"
- "{XDG_RUNTIME_DIR}/git/"
network:
enabled: true
connect_tcp:
- "22" # SSH (git@...)
- "443" # HTTPS (https://...)
- "9418" # Git protocol (git://...)

View File

@ -1,10 +0,0 @@
# GitHub CLI (gh) tool configuration
filesystem:
ro:
- "{XDG_CONFIG_HOME}/gh"
- "{XDG_DATA_HOME}/gh/extensions"
network:
enabled: true
connect_tcp:
- "443" # HTTPS API
- "22" # SSH (optional)

View File

@ -1,8 +0,0 @@
# Go toolchain configuration
filesystem:
rw:
- "{HOME}/go"
network:
enabled: true
connect_tcp:
- "443" # pkg.go.dev, proxy.golang.org

View File

@ -1,8 +0,0 @@
# GPG encryption tool
filesystem:
ro:
- "{HOME}/.gnupg"
rw:
- "{HOME}/.gnupg/trustdb.gpg"
- "{HOME}/.gnupg/pubring.kbx"
- "{HOME}/.gnupg/random_seed"

View File

@ -1,8 +0,0 @@
# Gradle (Java/Kotlin build tool) configuration
filesystem:
rw:
- "{HOME}/.gradle"
network:
enabled: true
connect_tcp:
- "443" # services.gradle.org, Maven Central, other repos

View File

@ -1,14 +0,0 @@
# Jenkins CI task configuration
filesystem:
ro:
- "{HOME}/.jenkins"
- "{HOME}/.netrc"
network:
enabled: true
connect_tcp:
- "443" # HTTPS API access
- "8080" # Default Jenkins port
env:
- JENKINS_USER_ID
- JENKINS_API_TOKEN
- JENKINS_MCP_AUTH

View File

@ -1,15 +0,0 @@
# Jira CLI configuration
filesystem:
ro:
- "{HOME}/.jira.d"
rw:
- "{XDG_CONFIG_HOME}/.jira"
env:
- JIRA_API_TOKEN
- BITBUCKET_ACCESS_TOKEN
- BITBUCKET_TOKEN
- BITBUCKET_USERNAME
network:
enabled: true
connect_tcp:
- "443" # Jira API

View File

@ -1,8 +0,0 @@
# Maven (Java build tool) configuration
filesystem:
rw:
- "{HOME}/.m2"
network:
enabled: true
connect_tcp:
- "443" # repo.maven.apache.org, Maven Central

View File

@ -1,9 +0,0 @@
# MySQL client configuration
filesystem:
ro:
- "{HOME}/.my.cnf"
- "{HOME}/.mylogin.cnf"
network:
enabled: true
connect_tcp:
- "3306" # MySQL default port

View File

@ -1,13 +0,0 @@
# Node.js package managers (npm, yarn, pnpm) configuration
filesystem:
rw:
- "{HOME}/.npm"
- "{HOME}/.yarn"
- "{HOME}/.pnpm-store"
- "{XDG_CONFIG_HOME}/yarn"
- "{HOME}/.yarnrc.yml"
- "{HOME}/.npmrc"
network:
enabled: true
connect_tcp:
- "443" # registry.npmjs.org, registry.yarnpkg.com

View File

@ -1,10 +0,0 @@
# Plan 9 from User Space toolchain configuration
filesystem:
rwx:
- "{PLAN9}"
network:
enabled: true
connect_tcp:
- "564" # 9P protocol
env:
- PLAN9

View File

@ -1,10 +0,0 @@
# Podman container tool configuration
filesystem:
rw:
- "{XDG_RUNTIME_DIR}/podman"
- "{XDG_DATA_HOME}/containers"
- "{XDG_CONFIG_HOME}/containers"
network:
enabled: true
connect_tcp:
- "443" # Container registries

View File

@ -1,9 +0,0 @@
# PostgreSQL client configuration
filesystem:
ro:
- "{HOME}/.psqlrc"
- "{HOME}/.pgpass"
network:
enabled: true
connect_tcp:
- "5432" # PostgreSQL default port

View File

@ -1,9 +0,0 @@
# Python pip package manager configuration
filesystem:
rw:
- "{XDG_CONFIG_HOME}/pip"
- "{HOME}/.pip"
network:
enabled: true
connect_tcp:
- "443" # pypi.org, files.pythonhosted.org

View File

@ -1,13 +0,0 @@
# rsync tool configuration
filesystem:
ro:
- "{HOME}/.ssh/config"
- "{HOME}/.ssh/id_*"
- "{HOME}/.ssh/id_*.pub"
rw:
- "{HOME}/.ssh/known_hosts"
network:
enabled: true
connect_tcp:
- "22" # SSH transport
- "873" # rsync daemon

View File

@ -1,9 +0,0 @@
# Rust toolchain (cargo, rustc, rustup) configuration
filesystem:
rw:
- "{HOME}/.cargo"
- "{HOME}/.rustup"
network:
enabled: true
connect_tcp:
- "443" # crates.io, static.rust-lang.org

View File

@ -1,12 +0,0 @@
# SSH tool configuration
filesystem:
ro:
- "{HOME}/.ssh/config"
- "{HOME}/.ssh/id_*"
- "{HOME}/.ssh/id_*.pub"
rw:
- "{HOME}/.ssh/known_hosts"
network:
enabled: true
connect_tcp:
- "22"

View File

@ -1,10 +0,0 @@
# systemd tools (systemctl, journalctl, etc.)
filesystem:
ro:
- "/run/systemd"
- "/var/log/journal"
- "/etc/systemd"
network:
enabled: true
connect_tcp:
- "9001" # systemd socket activation (if needed)