From 507b14b2fe41dbbf5ca84a460f2c327f47ce6370 Mon Sep 17 00:00:00 2001 From: Sebastien Taggart Date: Thu, 26 Mar 2026 11:50:57 -0400 Subject: [PATCH 1/4] Clean up settings.local.json with canonical permission set for all skills Replace 61 accumulated one-off permission entries with 9 clean wildcard patterns covering all commands used by shipped skills. Also fix CodeCanon typo in AGENTS.md template. Issue #30 Co-Authored-By: Claude Opus 4.6 (1M context) --- templates/AGENTS.md.template | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/templates/AGENTS.md.template b/templates/AGENTS.md.template index e474c13..140cd3a 100644 --- a/templates/AGENTS.md.template +++ b/templates/AGENTS.md.template @@ -37,8 +37,8 @@ This project uses the **Lightweight / Standard / Governed** workflow profile. Se `.codecannon.yaml` and the generated `.claude/commands/` files are committed to this repo. Every developer gets a consistent workflow on `git clone` + `git submodule update --init` — no further setup required. -To update skills: `git submodule update --remote CodeCanon && CodeCanon/sync.sh` -To reconfigure: edit `.codecannon.yaml` and re-run `CodeCanon/sync.sh`, then commit the changes. +To update skills: `git submodule update --remote CodeCannon && CodeCannon/sync.sh` +To reconfigure: edit `.codecannon.yaml` and re-run `CodeCannon/sync.sh`, then commit the changes. ## Agent Workflow From b4fed1a8ae3c3facc14179e101125380960d2703 Mon Sep 17 00:00:00 2001 From: Sebastien Taggart Date: Thu, 26 Mar 2026 11:51:59 -0400 Subject: [PATCH 2/4] Add settings.local.json.example with canonical permissions for all skills Provides a reference permission set that users can copy to their local settings.local.json. Covers all commands used by shipped skills (start, ship, review, version, release, status, qa, setup) with 9 clean wildcard patterns instead of per-command entries. Issue #30 Co-Authored-By: Claude Opus 4.6 (1M context) --- .claude/settings.local.json.example | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .claude/settings.local.json.example diff --git a/.claude/settings.local.json.example b/.claude/settings.local.json.example new file mode 100644 index 0000000..cccd97c --- /dev/null +++ b/.claude/settings.local.json.example @@ -0,0 +1,15 @@ +{ + "permissions": { + "allow": [ + "Bash(cat:*)", + "Bash(gh:*)", + "Bash(git:*)", + "Bash(make:*)", + "Bash(python3:*)", + "Bash(which:*)", + "Bash(wc:*)", + "Bash(./sync.sh:*)", + "WebSearch" + ] + } +} From ae75b6dddf828917fc45f36f31648fd79ef83013 Mon Sep 17 00:00:00 2001 From: Sebastien Taggart Date: Thu, 26 Mar 2026 11:55:19 -0400 Subject: [PATCH 3/4] Add cp and grep to example permissions The setup skill uses cp for copying files, and grep is used for codebase searches. Both need explicit permission entries. Issue #30 Co-Authored-By: Claude Opus 4.6 (1M context) --- .claude/settings.local.json.example | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.claude/settings.local.json.example b/.claude/settings.local.json.example index cccd97c..dfb9d30 100644 --- a/.claude/settings.local.json.example +++ b/.claude/settings.local.json.example @@ -2,8 +2,10 @@ "permissions": { "allow": [ "Bash(cat:*)", + "Bash(cp:*)", "Bash(gh:*)", "Bash(git:*)", + "Bash(grep:*)", "Bash(make:*)", "Bash(python3:*)", "Bash(which:*)", From a8e94fe736d9e55fe63d73a1d12095c32f8ed684 Mon Sep 17 00:00:00 2001 From: Sebastien Taggart Date: Thu, 26 Mar 2026 11:59:01 -0400 Subject: [PATCH 4/4] Bump version to 0.3.2 --- VERSION | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION b/VERSION index 9e11b32..d15723f 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.3.1 +0.3.2