odek/profiles.template.json at main · BackendStack21/odek · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
{
  "profiles": {
    "builder": {
      "description": "Write and verify code changes with project build/test commands allowlisted",
      "max_risk": "local_write",
      "allowlist": [
        "go test ./...", "go build ./...", "go vet ./...", "gofmt -l .",
        "npm test", "npm run build", "npm run lint", "pnpm test", "pnpm build", "yarn build",
        "cargo test", "cargo build", "cargo check", "cargo clippy",
        "pytest", "python -m pytest", "ruff check .", "mypy .",
        "make test", "make build", "make lint"
      ],
      "tools": { "disabled": ["browser", "http_batch", "web_search", "transcribe", "vision", "delegate_tasks"] }
    },
    "refactorer": {
      "description": "Restructure existing code behind build/test gates, without adding features",
      "max_risk": "local_write",
      "allowlist": [
        "go test ./...", "go build ./...", "gofmt -l .",
        "npm test", "npm run build",
        "cargo test", "cargo check",
        "pytest",
        "make test"
      ],
      "tools": { "disabled": ["browser", "http_batch", "web_search", "transcribe", "vision", "delegate_tasks"] }
    },
    "test-runner": {
      "description": "Run project test suites and report failures; cannot modify files",
      "max_risk": "code_execution",
      "allowlist": [
        "go test ./...", "go test -race ./...", "go test -count=1 ./...",
        "npm test", "pnpm test", "yarn test",
        "cargo test", "cargo nextest run",
        "pytest", "python -m pytest", "python -m unittest discover",
        "make test"
      ],
      "tools": { "disabled": ["write_file", "patch", "batch_patch", "browser", "http_batch", "web_search", "delegate_tasks"] }
    },
    "bug-investigator": {
      "description": "Diagnose failures by reading code and running build/test commands",
      "max_risk": "local_write",
      "allowlist": [
        "go test ./...", "go build ./...", "go vet ./...",
        "npm test", "npm run build",
        "cargo test", "cargo check",
        "pytest", "python -m pytest",
        "make test"
      ],
      "tools": { "disabled": ["browser", "http_batch", "web_search", "transcribe", "vision", "delegate_tasks"] }
    },
    "perf-profiler": {
      "description": "Run benchmarks and profilers to locate performance bottlenecks",
      "max_risk": "code_execution",
      "allowlist": [
        "go test -bench ./...", "go test -bench=. ./...", "go tool pprof",
        "cargo bench",
        "npm run bench", "make bench"
      ],
      "tools": { "disabled": ["browser", "http_batch", "web_search", "transcribe", "vision", "delegate_tasks"] }
    },
    "migrator": {
      "description": "Upgrade dependencies and migrate configs; may install packages",
      "max_risk": "install",
      "allowlist": [
        "go get", "go mod tidy", "go mod download",
        "npm install", "npm ci", "npm update", "pnpm install", "yarn install",
        "pip install -r requirements.txt", "python -m pip install -r requirements.txt",
        "cargo update", "cargo check", "cargo build"
      ],
      "tools": { "disabled": ["browser", "transcribe", "vision", "delegate_tasks"] }
    },
    "code-reviewer": {
      "description": "Strictly read-only code review with reasoning-capable tools",
      "max_risk": "safe",
      "tools": { "enabled": ["plan", "read_file", "batch_read", "glob", "file_info", "search_files", "multi_grep", "tree", "count_lines", "head_tail", "diff", "word_count", "checksum", "sort", "base64", "tr", "json_query", "math_eval"] }
    },
    "security-auditor": {
      "description": "Read-only security review; no shell, no writes, no network",
      "max_risk": "safe",
      "tools": { "enabled": ["plan", "read_file", "batch_read", "glob", "file_info", "search_files", "multi_grep", "tree", "count_lines", "head_tail", "diff", "word_count", "checksum", "base64", "tr", "json_query"] }
    },
    "ops-inspector": {
      "description": "Read-only infrastructure and service inspection commands",
      "max_risk": "safe",
      "allowlist": ["docker ps", "docker logs", "docker stats", "docker compose ps", "kubectl get", "kubectl logs", "df -h", "du -sh", "ps aux", "git status", "git log", "git diff", "git show"],
      "tools": { "disabled": ["write_file", "patch", "batch_patch", "browser", "http_batch", "web_search", "delegate_tasks"] }
    },
    "release-manager": {
      "description": "Drive git/gh release flows — can push and merge; review its allowlist before trusting it",
      "max_risk": "network_egress",
      "allowlist": ["git status", "git log", "git diff", "git show", "git tag", "git push", "gh pr create", "gh pr view", "gh pr checks", "gh pr merge", "gh release create", "gh release view", "gh run list", "gh run view"],
      "tools": { "disabled": ["write_file", "patch", "batch_patch", "browser", "transcribe", "vision", "delegate_tasks"] }
    },
    "swarm-orchestrator": {
      "description": "Decompose and delegate work via delegate_tasks; inspects nothing itself",
      "max_risk": "safe",
      "tools": { "enabled": ["delegate_tasks", "plan", "read_file", "batch_read", "glob", "search_files", "multi_grep", "tree"] }
    },
    "judge": {
      "description": "Evaluate a proposal or result against given criteria; strictly read-only",
      "max_risk": "safe",
      "tools": { "enabled": ["plan", "read_file", "batch_read", "glob", "file_info", "search_files", "multi_grep", "tree", "diff", "count_lines", "json_query", "math_eval"] }
    },
    "scout": {
      "description": "Fast codebase reconnaissance with a minimal read-only toolkit",
      "max_risk": "safe",
      "tools": { "enabled": ["read_file", "batch_read", "glob", "search_files", "multi_grep", "tree", "head_tail"] }
    },
    "librarian": {
      "description": "Locate and summarize relevant code or documentation; read-only",
      "max_risk": "safe",
      "tools": { "enabled": ["plan", "read_file", "batch_read", "glob", "file_info", "search_files", "multi_grep", "tree", "count_lines", "head_tail", "word_count"] }
    },
    "researcher": {
      "description": "Web research with network egress; no shell",
      "max_risk": "network_egress",
      "tools": { "disabled": ["shell", "parallel_shell", "delegate_tasks", "transcribe", "vision"] }
    },
    "web-reader": {
      "description": "Fetch and extract specific pages; no shell, strict tool whitelist",
      "max_risk": "network_egress",
      "tools": { "enabled": ["browser", "http_batch", "read_file", "batch_read", "glob", "word_count"] }
    },
    "writer": {
      "description": "Author and edit documentation and prose; no shell, no network",
      "max_risk": "local_write",
      "tools": { "disabled": ["shell", "parallel_shell", "browser", "http_batch", "web_search", "delegate_tasks", "transcribe", "vision"] }
    },
    "translator": {
      "description": "Translate content with a minimal read/write toolkit",
      "max_risk": "local_write",
      "tools": { "enabled": ["read_file", "write_file", "batch_read", "glob", "word_count", "tr"] }
    },
    "data-analyst": {
      "description": "Run predefined analysis entry points over local data",
      "max_risk": "code_execution",
      "allowlist": ["make analyze", "npm run analyze", "python main.py", "python3 main.py"],
      "tools": { "disabled": ["browser", "http_batch", "web_search", "transcribe", "vision", "delegate_tasks"] }
    },
    "media-describer": {
      "description": "Transcribe audio and describe images; read-only media toolkit",
      "max_risk": "safe",
      "tools": { "enabled": ["transcribe", "vision", "read_file", "batch_read", "glob", "file_info", "word_count"] }
    },
    "summarizer": {
      "description": "Condense sessions and documents; strictly read-only",
      "max_risk": "safe",
      "tools": { "enabled": ["session_search", "read_file", "batch_read", "glob", "search_files", "tree", "count_lines", "head_tail", "word_count"] }
    }
  }
}