Remove cfg/tasks and all roles except default
This commit is contained in:
parent
cb77f3d3f2
commit
788d97307f
|
|
@ -1,12 +0,0 @@
|
|||
# Admin role: system administration tasks
|
||||
filesystem:
|
||||
ro:
|
||||
- "{CWD}"
|
||||
- "/var/log"
|
||||
rw:
|
||||
- "/etc"
|
||||
- "/usr/local/etc"
|
||||
- "{HOME}"
|
||||
network:
|
||||
enabled: true
|
||||
unrestricted: true
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# Architect role: access to knowledge base and planning documents
|
||||
filesystem:
|
||||
ro:
|
||||
- "{CWD}"
|
||||
- "{XDG_DOCUMENTS_DIR}/agent-kb"
|
||||
- "{HOME}/doc/agent-kb"
|
||||
rw:
|
||||
- "{XDG_DOCUMENTS_DIR}/plans"
|
||||
- "{HOME}/doc/plans"
|
||||
|
|
@ -1,11 +0,0 @@
|
|||
# Developer role configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/doc"
|
||||
rw:
|
||||
- "{CWD}"
|
||||
rwx:
|
||||
- "{HOME}/bin"
|
||||
- "{HOME}/.local/bin"
|
||||
- "{HOME}/src"
|
||||
- "{HOME}/prj"
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Technical editor role: documentation with code access
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/src"
|
||||
- "{XDG_DOCUMENTS_DIR}"
|
||||
- "{HOME}/doc"
|
||||
rw:
|
||||
- "{CWD}"
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
# Research role: access to documentation and knowledge base
|
||||
filesystem:
|
||||
ro:
|
||||
- "{CWD}"
|
||||
- "{HOME}/src"
|
||||
- "{XDG_DOCUMENTS_DIR}"
|
||||
- "{HOME}/doc"
|
||||
rw:
|
||||
- "{XDG_DOCUMENTS_DIR}/agent-kb"
|
||||
- "{HOME}/doc/agent-kb"
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Reviewer role: read-only access to project and dev directories
|
||||
filesystem:
|
||||
ro:
|
||||
- "{CWD}"
|
||||
- "{HOME}/src"
|
||||
rox:
|
||||
- "{HOME}/bin"
|
||||
- "{HOME}/.local/bin"
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Technical editor role: documentation with code access
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/src"
|
||||
rw:
|
||||
- "{CWD}"
|
||||
- "{XDG_DOCUMENTS_DIR}"
|
||||
- "{HOME}/doc"
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# Tester role: execute binaries and read source, no write access
|
||||
filesystem:
|
||||
ro:
|
||||
- "{CWD}"
|
||||
- "{HOME}/src"
|
||||
rox:
|
||||
- "{CWD}"
|
||||
- "{HOME}/bin"
|
||||
- "{HOME}/.local/bin"
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Writer role: documentation and content creation
|
||||
filesystem:
|
||||
ro:
|
||||
- "{CWD}"
|
||||
- "{HOME}/src"
|
||||
rw:
|
||||
- "{XDG_DOCUMENTS_DIR}"
|
||||
- "{HOME}/doc"
|
||||
|
|
@ -1,22 +0,0 @@
|
|||
# Agent Q
|
||||
filesystem:
|
||||
ro:
|
||||
- /etc/magic
|
||||
rox:
|
||||
- "{HOME}/src/mcp/agent-q"
|
||||
- "{HOME}/bin"
|
||||
- "{HOME}/.local/bin"
|
||||
- "{HOME}/go/bin"
|
||||
- "{HOME}/env"
|
||||
rw:
|
||||
- "{HOME}/.gnupg"
|
||||
- "{HOME}/doc/agent-skills"
|
||||
- "{HOME}/src/mcp/agent-q/skills"
|
||||
rwx:
|
||||
- "{HOME}/.npm/"
|
||||
- "{HOME}/.nvm/"
|
||||
env:
|
||||
- AGENT_SKILLS_PATH
|
||||
network:
|
||||
enabled: true
|
||||
unrestricted: true
|
||||
|
|
@ -1,16 +0,0 @@
|
|||
# Ansible configuration management tool
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.ansible"
|
||||
- "{HOME}/.ansible.cfg"
|
||||
- "{HOME}/.ssh/config"
|
||||
- "{HOME}/.ssh/id_*"
|
||||
- "{HOME}/.ssh/id_*.pub"
|
||||
rw:
|
||||
- "{HOME}/.ssh/known_hosts"
|
||||
- "{HOME}/.ansible/tmp"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "22" # SSH
|
||||
- "443" # Galaxy, collections
|
||||
|
|
@ -1,7 +0,0 @@
|
|||
# AWS CLI configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.aws"
|
||||
network:
|
||||
enabled: true
|
||||
unrestricted: true
|
||||
|
|
@ -1,4 +0,0 @@
|
|||
# curl/wget network tools
|
||||
network:
|
||||
enabled: true
|
||||
unrestricted: true
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# Docker container tool configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "/var/run/docker.sock"
|
||||
- "{HOME}/.docker"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # Docker Hub, registries
|
||||
|
|
@ -1,11 +0,0 @@
|
|||
# Text editor configuration (vim, emacs, nano, etc.)
|
||||
filesystem:
|
||||
rw:
|
||||
- "{XDG_CONFIG_HOME}/nvim"
|
||||
- "{XDG_CONFIG_HOME}/vim"
|
||||
- "{XDG_DATA_HOME}/nvim"
|
||||
- "{XDG_STATE_HOME}/nvim"
|
||||
- "{HOME}/.vimrc"
|
||||
- "{HOME}/.vim"
|
||||
- "{HOME}/.emacs.d"
|
||||
- "{HOME}/.config/emacs"
|
||||
|
|
@ -1,24 +0,0 @@
|
|||
# Git task: access to git configuration and system resources
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.gitconfig"
|
||||
- "{XDG_CONFIG_HOME}/git/config"
|
||||
- "{XDG_CONFIG_HOME}/git/ignore"
|
||||
- "{XDG_CONFIG_HOME}/git/attributes"
|
||||
- "{HOME}/.ssh"
|
||||
- "{HOME}/.netrc"
|
||||
- "/etc/gitconfig"
|
||||
- "/etc/gitattributes"
|
||||
- "/etc/ssh/ssh_config"
|
||||
- "/etc/ssh/ssh_known_hosts"
|
||||
rw:
|
||||
- "{HOME}/.ssh/known_hosts"
|
||||
- "{HOME}/.git-credentials"
|
||||
- "{XDG_CONFIG_HOME}/git/credentials"
|
||||
- "{XDG_RUNTIME_DIR}/git/"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "22" # SSH (git@...)
|
||||
- "443" # HTTPS (https://...)
|
||||
- "9418" # Git protocol (git://...)
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
# GitHub CLI (gh) tool configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{XDG_CONFIG_HOME}/gh"
|
||||
- "{XDG_DATA_HOME}/gh/extensions"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # HTTPS API
|
||||
- "22" # SSH (optional)
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Go toolchain configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "{HOME}/go"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # pkg.go.dev, proxy.golang.org
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# GPG encryption tool
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.gnupg"
|
||||
rw:
|
||||
- "{HOME}/.gnupg/trustdb.gpg"
|
||||
- "{HOME}/.gnupg/pubring.kbx"
|
||||
- "{HOME}/.gnupg/random_seed"
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Gradle (Java/Kotlin build tool) configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "{HOME}/.gradle"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # services.gradle.org, Maven Central, other repos
|
||||
|
|
@ -1,14 +0,0 @@
|
|||
# Jenkins CI task configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.jenkins"
|
||||
- "{HOME}/.netrc"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # HTTPS API access
|
||||
- "8080" # Default Jenkins port
|
||||
env:
|
||||
- JENKINS_USER_ID
|
||||
- JENKINS_API_TOKEN
|
||||
- JENKINS_MCP_AUTH
|
||||
|
|
@ -1,15 +0,0 @@
|
|||
# Jira CLI configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.jira.d"
|
||||
rw:
|
||||
- "{XDG_CONFIG_HOME}/.jira"
|
||||
env:
|
||||
- JIRA_API_TOKEN
|
||||
- BITBUCKET_ACCESS_TOKEN
|
||||
- BITBUCKET_TOKEN
|
||||
- BITBUCKET_USERNAME
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # Jira API
|
||||
|
|
@ -1,8 +0,0 @@
|
|||
# Maven (Java build tool) configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "{HOME}/.m2"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # repo.maven.apache.org, Maven Central
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# MySQL client configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.my.cnf"
|
||||
- "{HOME}/.mylogin.cnf"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "3306" # MySQL default port
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
# Node.js package managers (npm, yarn, pnpm) configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "{HOME}/.npm"
|
||||
- "{HOME}/.yarn"
|
||||
- "{HOME}/.pnpm-store"
|
||||
- "{XDG_CONFIG_HOME}/yarn"
|
||||
- "{HOME}/.yarnrc.yml"
|
||||
- "{HOME}/.npmrc"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # registry.npmjs.org, registry.yarnpkg.com
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
# Plan 9 from User Space toolchain configuration
|
||||
filesystem:
|
||||
rwx:
|
||||
- "{PLAN9}"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "564" # 9P protocol
|
||||
env:
|
||||
- PLAN9
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
# Podman container tool configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "{XDG_RUNTIME_DIR}/podman"
|
||||
- "{XDG_DATA_HOME}/containers"
|
||||
- "{XDG_CONFIG_HOME}/containers"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # Container registries
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# PostgreSQL client configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.psqlrc"
|
||||
- "{HOME}/.pgpass"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "5432" # PostgreSQL default port
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# Python pip package manager configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "{XDG_CONFIG_HOME}/pip"
|
||||
- "{HOME}/.pip"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # pypi.org, files.pythonhosted.org
|
||||
|
|
@ -1,13 +0,0 @@
|
|||
# rsync tool configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.ssh/config"
|
||||
- "{HOME}/.ssh/id_*"
|
||||
- "{HOME}/.ssh/id_*.pub"
|
||||
rw:
|
||||
- "{HOME}/.ssh/known_hosts"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "22" # SSH transport
|
||||
- "873" # rsync daemon
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# Rust toolchain (cargo, rustc, rustup) configuration
|
||||
filesystem:
|
||||
rw:
|
||||
- "{HOME}/.cargo"
|
||||
- "{HOME}/.rustup"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "443" # crates.io, static.rust-lang.org
|
||||
|
|
@ -1,12 +0,0 @@
|
|||
# SSH tool configuration
|
||||
filesystem:
|
||||
ro:
|
||||
- "{HOME}/.ssh/config"
|
||||
- "{HOME}/.ssh/id_*"
|
||||
- "{HOME}/.ssh/id_*.pub"
|
||||
rw:
|
||||
- "{HOME}/.ssh/known_hosts"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "22"
|
||||
|
|
@ -1,10 +0,0 @@
|
|||
# systemd tools (systemctl, journalctl, etc.)
|
||||
filesystem:
|
||||
ro:
|
||||
- "/run/systemd"
|
||||
- "/var/log/journal"
|
||||
- "/etc/systemd"
|
||||
network:
|
||||
enabled: true
|
||||
connect_tcp:
|
||||
- "9001" # systemd socket activation (if needed)
|
||||
Reference in New Issue