harmonize with coredesktop

2026-10-28 14:35:07 -06:00
parent 866720c3c1
commit 9b9f1d5fdd
35 changed files with 1445 additions and 8 deletions
@@ -0,0 +1,85 @@
+{
+  "network": {
+    "allowedDomains": [
+      "anthropic.com",
+      "*.anthropic.com",
+      "openai.com",
+      "*.openai.com",
+      "chatgpt.com",
+      "*.chatgpt.com",
+      "openrouter.ai",
+      "*.openrouter.ai",
+      "nousresearch.com",
+      "*.nousresearch.com",
+      "generativelanguage.googleapis.com",
+      "api.mistral.ai",
+      "api.deepseek.com",
+      "api.x.ai",
+      "api.groq.com",
+      "api.together.xyz",
+      "*.githubcopilot.com",
+
+      "github.com",
+      "*.github.com",
+      "*.githubusercontent.com",
+      "gitea.federated.computer",
+      "gitea.young.computer",
+      "registry.npmjs.org",
+      "registry.yarnpkg.com",
+      "pypi.org",
+      "files.pythonhosted.org",
+      "crates.io",
+      "*.crates.io",
+      "rubygems.org",
+      "*.rubygems.org",
+      "proxy.golang.org",
+      "sum.golang.org",
+      "archlinux.org",
+      "*.archlinux.org"
+    ],
+    "deniedDomains": []
+  },
+  "filesystem": {
+    "denyRead": [
+      "~/.ssh",
+      "~/.gnupg",
+      "~/.password-store",
+      "~/.local/share/keyrings",
+      "~/.netrc",
+      "~/.git-credentials",
+      "~/.aws",
+      "~/.azure",
+      "~/.config/gcloud",
+      "~/.kube",
+      "~/.docker",
+      "~/.config/gh",
+      "~/.config/tea",
+      "~/.config/borg",
+      "~/.config/Bitwarden",
+      "~/.config/Element",
+      "~/.mozilla",
+      "~/.config/chromium",
+      "~/.config/google-chrome",
+      "~/.config/BraveSoftware",
+      "~/.config/net.imput.helium",
+      "~/.var/app",
+      "~/.davfs2",
+      "~/.claude",
+      "~/.claude.json",
+      "~/.hermes",
+      "~/.config/opencode",
+      "~/.local/share/opencode"
+    ],
+    "allowRead": [],
+    "allowWrite": [
+      ".",
+      "/tmp",
+      "~/.npm",
+      "~/.cache/pip",
+      "~/.cargo/registry",
+      "~/.cargo/git",
+      "~/go/pkg/mod"
+    ],
+    "denyWrite": []
+  }
+}
@@ -0,0 +1,26 @@
+{
+  "network": {
+    "allowedDomains": [],
+    "allowAllUnixSockets": true
+  },
+  "filesystem": {
+    "denyRead": [
+      "/run/user",
+      "/run/dbus",
+      "/run/docker.sock",
+      "/run/podman",
+      "/run/tailscale",
+      "/run/ssh-unix-local",
+      "/tmp/.X11-unix",
+      "/tmp/tmux-*",
+      "/tmp/ssh-*",
+      "/tmp/*/SingletonSocket"
+    ],
+    "allowRead": [
+      "~/.hermes"
+    ],
+    "allowWrite": [
+      "~/.hermes"
+    ]
+  }
+}
@@ -0,0 +1,21 @@
+{
+  "network": {
+    "allowedDomains": [
+      "opencode.ai",
+      "*.opencode.ai",
+      "models.dev"
+    ]
+  },
+  "filesystem": {
+    "allowRead": [
+      "~/.config/opencode",
+      "~/.local/share/opencode"
+    ],
+    "allowWrite": [
+      "~/.config/opencode",
+      "~/.local/share/opencode",
+      "~/.local/state/opencode",
+      "~/.cache/opencode"
+    ]
+  }
+}