fix(agent): isolate conversation workspaces

2026-08-25 13:18:39 +08:00
parent 004c9bb72d
commit ce04704af2
18 changed files with 621 additions and 48 deletions
@@ -44,6 +44,12 @@
    "bash": {
      "*": "ask",
      "rm *": "ask",
+      "rm -rf *": "deny",
+      "rm -fr *": "deny",
+      "rm -r -f *": "deny",
+      "rm -f -r *": "deny",
+      "rm --recursive --force *": "deny",
+      "rm --force --recursive *": "deny",
      "rmdir *": "ask",
      "mv *": "ask",
      "chmod *": "ask",
@@ -51,13 +57,7 @@
      "sudo *": "ask",
      "curl *": "ask",
      "wget *": "ask",
-      "*.env*": "deny",
-      "*data/*": "deny",
-      "* data": "deny",
-      "*/data": "deny",
-      "*logs/*": "deny",
-      "* logs": "deny",
-      "*/logs": "deny"
+      "*.env*": "deny"
    },
    "question": "allow",
    "task": "deny",