7 repositorios
Defines granular allow, deny, or prompt-based access rules for system commands.
Distinct from Permission Systems: Focuses on command-level permission rules, distinct from general permission system logic.
Explore 7 awesome GitHub repositories matching security & cryptography · Command Access Rules. Refine with filters or upvote what's useful.
Claude Code Templates is a comprehensive framework for orchestrating specialized AI agents and automating development workflows within local environments. It provides a structured system for defining, configuring, and deploying AI personas that handle specific technical tasks, ranging from backend architecture and frontend implementation to security auditing and infrastructure management. The project distinguishes itself through a configuration-driven approach that allows teams to standardize development environments and share reusable agent definitions across projects. It includes a robust C
Secures the development environment by defining granular access rules for system commands and file operations.
This project provides a system for managing agent context and session memory, featuring an agent context compactor, an AI session memory manager, and a tool output sandbox. It functions as a middleware layer and server extension for the Model Context Protocol to optimize context windows and reduce token usage. The system optimizes agent performance by sandboxing tool outputs and externalizing large data sets, replacing raw I/O with pointers and concise summaries. It employs a persistent knowledge base that indexes session history and tool outputs for retrieval via full-text search, ensuring s
Enforces granular allow and deny rules for shell commands and file access to prevent unauthorized operations.
Pumpkin is a high-performance Minecraft game server implementation designed to host shared virtual worlds. It is specifically built to support multiple client editions, allowing different game versions to interact within a single world. The project distinguishes itself through a flexible plugin architecture that supports extensions written in Go and Python. These extensions are loaded as portable binary modules, enabling developers to implement custom game logic and modify server behavior without altering the core codebase. The server covers a broad range of operational capabilities, includi
Defines custom text commands and assigns specific permissions required for users to execute them.
Webmin is a web-based administration interface for Unix systems. It provides a centralized console for managing the full range of server administration tasks — users and groups, software packages, storage, network configuration, system services, and security — all through a browser. Its modular architecture allows separate modules to handle databases (MySQL, MariaDB, PostgreSQL), web servers (Apache), DNS (BIND), email (Sendmail, Dovecot), file sharing (Samba, NFS), and more, with a unified access control system that restricts what each administrator can see and do. What sets Webmin apart is
Lets an admin limit which custom commands and file editors a Webmin user can see and run, preventing unauthorized command execution.
Koishi is an open-source framework for building multi-platform chatbots, designed around an adapter-driven architecture that lets a single bot connect to multiple messaging services with consistent logic. It provides a plugin-based development platform with hot reload support, enabling developers to write and update bot extensions using TypeScript without restarting the application. A web-based management console offers a graphical interface for configuring plugins, commands, permissions, and monitoring runtime status. What distinguishes Koishi is its combination of a dynamic plugin lifecycle
Provides a hierarchical command system with configurable prefix triggers, parameter validation, and permission levels for fine-grained access control.
Red-DiscordBot is a modular framework for building and self-hosting Discord bots. It functions as a server management tool and community moderation bot that can be tailored by enabling or disabling specific feature modules. The system is distinguished by its extensible plugin architecture, which allows for the integration of third-party modules and the development of custom functional packages. Users can manage bot behavior through a chat-based interface, enabling them to assemble custom bots and define unique responses and behaviors without writing new code. The framework covers a broad ran
Defines granular access rules to restrict specific bot commands to authorized administrative roles.
Este proyecto proporciona una guía y un framework integral para implementar asistentes de codificación de IA autónomos dentro de entornos de desarrollo locales. Se centra en orquestar equipos de agentes múltiples que pueden planificar, ejecutar y verificar tareas complejas de ingeniería de software, como refactorización, resolución de errores y generación de pruebas, mientras mantienen una conciencia profunda del contexto y la memoria específicos del proyecto. El sistema se distingue por una arquitectura robusta centrada en la seguridad que aplica controles de acceso granulares, aislamiento de ejecución y aprobaciones obligatorias con intervención humana para todas las modificaciones de archivos y llamadas a herramientas externas. Admite la automatización de flujos de trabajo sofisticados permitiendo a los desarrolladores definir habilidades personalizadas y reutilizables e instrucciones jerárquicas que persisten a través de las sesiones, asegurando un comportamiento consistente y la retención de conocimiento a lo largo del ciclo de vida del desarrollo de software. Más allá de la automatización central, la plataforma ofrece herramientas extensas de observabilidad y gestión, incluyendo seguimiento del uso de tokens en tiempo real, visualización interactiva de diferencias de código (diffs) y monitoreo de sesiones en segundo plano. Se integra directamente en flujos de trabajo basados en terminal y admite diversos proveedores de inteligencia artificial, permitiendo a los usuarios optimizar el rendimiento y los costos operativos a través de la selección de modelos y ajustes de razonamiento específicos de la tarea. El repositorio sirve tanto como recurso educativo para dominar el desarrollo integrado con IA como un kit de herramientas funcional para desplegar agentes autónomos que operan dentro de límites de seguridad definidos.
Enables definition of specific allow, ask, or deny policies for shell commands, file operations, and network requests.