prefix_rule(pattern=["curl", "-I", "http://localhost:4323/bots/PBT49Wujlx"], decision="allow")
prefix_rule(pattern=["curl", "-s", "http://localhost:4323/api/bots/PBT49Wujlx"], decision="allow")
prefix_rule(pattern=["chromium", "--headless", "--disable-gpu", "--no-sandbox", "--dump-dom"], decision="allow")
prefix_rule(pattern=["curl", "-s", "http://localhost:4323/api/bots"], decision="allow")
prefix_rule(pattern=["curl", "-s", "http://localhost:4323/api/bots/4laMbKGL04"], decision="allow")
prefix_rule(pattern=["git", "add", "-A"], decision="allow")
prefix_rule(pattern=["git", "push", "origin", "main"], decision="allow")
prefix_rule(pattern=["git", "add", "apps/web/src/lib/player.ts", "apps/web/src/components/storefront/TrackCTA.tsx", "apps/web/src/components/storefront/TrackRowActions.tsx", "apps/web/src/components/storefront/SidebarTopChartIsland.tsx", "apps/web/src/components/storefront/ChartSwitcherPanel.tsx", "apps/web/src/components/storefront/ChartDetailIsland.tsx", "apps/web/src/components/storefront/ReleaseCard.astro", "apps/web/src/components/storefront/GlobalAudioPlayer.tsx", "apps/web/src/pages/[locale]/charts/index.astro"], decision="allow")
prefix_rule(pattern=["git", "add", "apps/web/src/components/storefront/ReleaseCard.astro"], decision="allow")
prefix_rule(pattern=["perl", "-0pi", "-e"], decision="allow")
prefix_rule(pattern=["ln", "-sfn"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "backup=\"/tmp/fewtok-codex-skills-backup-$(date +%Y%m%d-%H%M%S)\" && mkdir -p \"$backup\" && tar -C \"/home/user/.codex\" -czf \"$backup/skills-before.tgz\" skills && rsync -a \"/home/user/.claude/skills/\" \"/home/user/.codex/skills/\" && printf 'backup=%s\\n' \"$backup\""], decision="allow")
prefix_rule(pattern=["rsync", "-a", "/home/user/Projects/agents/superpowers/skills/brainstorming/", "/home/user/.codex/skills/brainstorming/"], decision="allow")
prefix_rule(pattern=["virsh", "list"], decision="allow")
prefix_rule(pattern=["virsh", "domblklist"], decision="allow")
prefix_rule(pattern=["ls", "-la", "/run/media/user", "/run/media/user/edad72d3-fa43-4363-af5d-cd2598090e32"], decision="allow")
prefix_rule(pattern=["find", "/run/media/user", "-maxdepth", "6", "-name", "vm1.img", "-o", "-name", "KVM"], decision="allow")
prefix_rule(pattern=["lsblk", "-f"], decision="allow")
prefix_rule(pattern=["sudo", "mount"], decision="allow")
prefix_rule(pattern=["udisksctl", "mount"], decision="allow")
prefix_rule(pattern=["ls", "-la", "/run/media/user/edad72d3-fa43-4363-af5d-cd2598090e321/user/KVM"], decision="allow")
prefix_rule(pattern=["find", "/run/media/user/edad72d3-fa43-4363-af5d-cd2598090e321", "-maxdepth", "5", "-name", "vm1.img"], decision="allow")
prefix_rule(pattern=["udisksctl", "unmount"], decision="allow")
prefix_rule(pattern=["rmdir", "/run/media/user/edad72d3-fa43-4363-af5d-cd2598090e32"], decision="allow")
prefix_rule(pattern=["ps", "-eo", "pid,ppid,stat,rss,etime,cmd", "--sort=-rss"], decision="allow")
prefix_rule(pattern=["git", "add", "ft/src/main.rs", "ft/src/runner.rs"], decision="allow")
prefix_rule(pattern=["git", "add", "-u", "ft/src/main.rs", "ft/src/runner.rs"], decision="allow")
prefix_rule(pattern=["git", "status", "--short"], decision="allow")
prefix_rule(pattern=["git", "diff", "--cached", "--stat"], decision="allow")
prefix_rule(pattern=["git", "commit", "-m"], decision="allow")
prefix_rule(pattern=["git", "log", "--oneline", "origin/main..HEAD"], decision="allow")
prefix_rule(pattern=["git", "add"], decision="allow")
prefix_rule(pattern=["mkdir", "-p", "/home/user/.codex/context-mode/content", "/home/user/.codex/context-mode/sessions"], decision="allow")
prefix_rule(pattern=["node", "-e", "const fs=require(\"fs\"); const p=\"/home/user/.codex/hooks.json\"; const data=JSON.parse(fs.readFileSync(p,\"utf8\")); for (const entries of Object.values(data.hooks||{})) for (const entry of entries||[]) for (const hook of entry.hooks||[]) if (typeof hook.command === \"string\") hook.command = hook.command.replace(\" context-mode hook \", \" /home/user/.npm-global/bin/context-mode hook \"); fs.writeFileSync(p, JSON.stringify(data,null,2)+\"\\n\");"], decision="allow")
prefix_rule(pattern=["rtk", "hf", "download"], decision="allow")
prefix_rule(pattern=["rtk", "env", "OLLAMA_FLASH_ATTENTION=1", "OLLAMA_KV_CACHE_TYPE=q8_0", "ollama", "serve"], decision="allow")
prefix_rule(pattern=["rtk", "ollama", "create"], decision="allow")
prefix_rule(pattern=["rtk", "./run-minicpm5.sh"], decision="allow")
prefix_rule(pattern=["rtk", "./chat-minicpm5.mjs"], decision="allow")
prefix_rule(pattern=["rtk", "git", "clone"], decision="allow")
prefix_rule(pattern=["rtk", "pnpm", "install"], decision="allow")
prefix_rule(pattern=["rtk", "pnpm", "run", "build"], decision="allow")
prefix_rule(pattern=["rtk", "sudo", "apt-get"], decision="allow")
prefix_rule(pattern=["rtk", "pnpm", "exec", "electron-builder"], decision="allow")
prefix_rule(pattern=["rtk", "env", "ELECTRON_DISABLE_SANDBOX=1", "./build/linux-unpacked/freetube"], decision="allow")
prefix_rule(pattern=["mkdir", "-p"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "backup=\"/tmp/fewtok-codex-skills-backup-$(date +%Y%m%d-%H%M%S)\" && mkdir -p \"$backup\" && tar -C \"/home/user/.codex\" -czf \"$backup/skills-before.tgz\" skills && rsync -a \"/home/user/.claude/skills/\" \"/home/user/.codex/skills/\" && printf \"backup=%s\\n\" \"$backup\""], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "CLOUDFLARE_API_TOKEN=\"$(tr -d '\\n' < secrets/cloudflare.token)\" pnpm --dir apps/zync-app exec wrangler whoami"], decision="allow")
prefix_rule(pattern=["node", "-e", "const fs=require(\"fs\"); const p=\"/home/user/.codex/hooks.json\"; const data=JSON.parse(fs.readFileSync(p,\"utf8\")); const dead=\"/home/user/Projects/slopgate/.worktrees/feat/cli-help-stats-dashboard/\"; let removed=0; for (const entries of Object.values(data.hooks||{})) { for (const entry of entries||[]) { if (!Array.isArray(entry.hooks)) continue; const before=entry.hooks.length; entry.hooks=entry.hooks.filter(h => !(typeof h.command === \"string\" && h.command.startsWith(dead))); removed += before - entry.hooks.length; } } fs.writeFileSync(p, JSON.stringify(data,null,2)+\"\\n\"); console.log(`removed=${removed}`);"], decision="allow")
prefix_rule(pattern=["rtk", "proxy", "bash", "-lc"], decision="allow")
prefix_rule(pattern=["rtk", "env", "WRANGLER_LOG_PATH=/tmp/tamlil-wrangler-logs", "workers/tamlil-api/node_modules/.bin/wrangler"], decision="allow")
prefix_rule(pattern=["rtk", "node", "tmp/add-pages-domain.mjs"], decision="allow")
prefix_rule(pattern=["rtk", "npm", "--prefix", "frontend", "run", "dev"], decision="allow")
prefix_rule(pattern=["git", "restore", "frontend/dist/index.html", "frontend/dist/assets/index-ByNNnaHc.js"], decision="allow")
prefix_rule(pattern=["gh", "pr"], decision="allow")
prefix_rule(pattern=["python3", "-m", "http.server"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "VIZ_BASE_URL=http://127.0.0.1:4173 npx playwright test verify-table.spec.js -g \"module card names\" --reporter=line"], decision="allow")
prefix_rule(pattern=["env", "-u", "NO_COLOR", "-u", "FORCE_COLOR", "VIZ_BASE_URL=http://127.0.0.1:4173", "npx", "playwright", "test"], decision="allow")
prefix_rule(pattern=["wrangler", "pages", "deploy"], decision="allow")
prefix_rule(pattern=["env", "-u", "NO_COLOR", "-u", "FORCE_COLOR", "VIZ_BASE_URL=https://a848cc0b.platform-preview.pages.dev", "npx", "playwright", "test"], decision="allow")
prefix_rule(pattern=["env", "-u", "NO_COLOR", "-u", "FORCE_COLOR", "VIZ_BASE_URL=https://platform-preview.pages.dev", "npx", "playwright", "test"], decision="allow")
prefix_rule(pattern=["git", "clone"], decision="allow")
prefix_rule(pattern=["pnpm", "--dir", "web", "test:run"], decision="allow")
prefix_rule(pattern=["node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "--dir", "web", "test:run"], decision="allow")
prefix_rule(pattern=["node", "/home/user/.npm/_npx/e6e0ed1aca658cae/node_modules/pnpm/bin/pnpm.cjs", "install"], decision="allow")
prefix_rule(pattern=["rtk", "node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "install"], decision="allow")
prefix_rule(pattern=["env", "CI=true", "node", "/home/user/.npm/_npx/e6e0ed1aca658cae/node_modules/pnpm/bin/pnpm.cjs", "install"], decision="allow")
prefix_rule(pattern=["git", "restore", "pnpm-lock.yaml"], decision="allow")
prefix_rule(pattern=["rtk", "node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "--dir", "web", "test:run"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "CI=true rtk node /home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs --dir web test:run src/features/daw/timeline/TimelineEditor.test.tsx"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "CI=true rtk node /home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs install --no-frozen-lockfile --store-dir /tmp/pnpm-store"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "CI=true rtk node /home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs --dir web test:run web/src/features/daw/timeline/TimelineEditor.test.tsx"], decision="allow")
prefix_rule(pattern=["rtk", "node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "--dir", "web", "exec", "playwright", "test"], decision="allow")
prefix_rule(pattern=["rtk", "node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "--dir", "web", "e2e"], decision="allow")
prefix_rule(pattern=["rtk", "proxy", "python3", "-m", "uvicorn"], decision="allow")
prefix_rule(pattern=["node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "--dir", "web", "dev"], decision="allow")
prefix_rule(pattern=["chromium", "--headless", "--disable-gpu", "--no-sandbox", "--virtual-time-budget=6000", "--dump-dom", "http://127.0.0.1:8002/"], decision="allow")
prefix_rule(pattern=["python", "/home/user/.codex/skills/scripts/with_server.py", "--help"], decision="allow")
prefix_rule(pattern=["chromium", "--headless", "--disable-gpu", "--no-sandbox", "--virtual-time-budget=5000", "--dump-dom", "http://127.0.0.1:8002/"], decision="allow")
prefix_rule(pattern=["rtk", "git", "add", "-A"], decision="allow")
prefix_rule(pattern=["rtk", "git", "commit", "-m", "build real daw arrangement view"], decision="allow")
prefix_rule(pattern=["rtk", "git", "push", "origin", "main"], decision="allow")
prefix_rule(pattern=["node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "dev"], decision="allow")
prefix_rule(pattern=["python3", "-m", "uvicorn"], decision="allow")
prefix_rule(pattern=["node", "/home/user/.cache/node/corepack/pnpm/11.5.2/bin/pnpm.mjs", "exec", "playwright"], decision="allow")
prefix_rule(pattern=["git", "restore"], decision="allow")
prefix_rule(pattern=["rm", "-rf", "web/playwright-report/data"], decision="allow")
prefix_rule(pattern=["env", "NUMBA_CACHE_DIR=/tmp/numba-cache", "python3", "-m", "pytest"], decision="allow")
prefix_rule(pattern=["ps", "-eo", "pid,stat,etime,cmd"], decision="allow")
prefix_rule(pattern=["bash", "-lc", "set -euo pipefail; ts=$(date +%Y%m%d-%H%M%S); backup=/home/user/.codex/skills-backup-claude-import-$ts; mkdir -p \"$backup/global\" /home/user/.codex/skills /home/user/Projects/platform/.codex/skills; for d in /home/user/.claude/skills/*; do [ -d \"$d\" ] || continue; name=$(basename \"$d\"); if [ -e \"/home/user/.codex/skills/$name\" ]; then cp -a \"/home/user/.codex/skills/$name\" \"$backup/global/\"; fi; cp -a \"$d\" /home/user/.codex/skills/; done; mkdir -p \"$backup/project\"; for d in /home/user/Projects/platform/.claude/skills/*; do [ -d \"$d\" ] || continue; name=$(basename \"$d\"); if [ -e \"/home/user/Projects/platform/.codex/skills/$name\" ]; then cp -a \"/home/user/Projects/platform/.codex/skills/$name\" \"$backup/project/\"; fi; cp -a \"$d\" /home/user/Projects/platform/.codex/skills/; done; printf \"backup=%s\\n\" \"$backup\"; printf \"global_imported=%s\\n\" \"$(find /home/user/.claude/skills -mindepth 1 -maxdepth 1 -type d | wc -l)\"; printf \"project_imported=%s\\n\" \"$(find /home/user/Projects/platform/.claude/skills -mindepth 1 -maxdepth 1 -type d | wc -l)\""], decision="allow")
prefix_rule(pattern=["bash", "-lc", "set -euo pipefail; ts=$(date +%Y%m%d-%H%M%S); backup=/home/user/.codex/skills-backup-claude-overwrite-$ts; mkdir -p \"$backup/global\" \"$backup/project\" /home/user/.codex/skills /home/user/Projects/platform/.codex/skills; import_one() { src=\"$1\"; dstroot=\"$2\"; bdir=\"$3\"; name=$(basename \"$src\"); dst=\"$dstroot/$name\"; if [ -e \"$dst\" ] || [ -L \"$dst\" ]; then cp -a \"$dst\" \"$bdir/\"; rm -rf \"$dst\"; fi; cp -a \"$src\" \"$dstroot/\"; }; for d in /home/user/.claude/skills/*; do [ -d \"$d\" ] || continue; import_one \"$d\" /home/user/.codex/skills \"$backup/global\"; done; for d in /home/user/Projects/platform/.claude/skills/*; do [ -d \"$d\" ] || continue; import_one \"$d\" /home/user/Projects/platform/.codex/skills \"$backup/project\"; done; printf \"backup=%s\\n\" \"$backup\"; printf \"global_imported=%s\\n\" \"$(find /home/user/.claude/skills -mindepth 1 -maxdepth 1 -type d | wc -l)\"; printf \"project_imported=%s\\n\" \"$(find /home/user/Projects/platform/.claude/skills -mindepth 1 -maxdepth 1 -type d | wc -l)\"; printf \"global_codex_total=%s\\n\" \"$(find /home/user/.codex/skills -mindepth 2 -maxdepth 2 -name SKILL.md | wc -l)\"; printf \"project_codex_total=%s\\n\" \"$(find /home/user/Projects/platform/.codex/skills -mindepth 2 -maxdepth 2 -name SKILL.md | wc -l)\""], decision="allow")
prefix_rule(pattern=["bash", "-lc", "set -euo pipefail; add_fm(){ file=\"$1\"; name=\"$2\"; desc=\"$3\"; if head -n 1 \"$file\" | grep -qx -- \"---\"; then return 0; fi; tmp=$(mktemp); { printf -- \"---\\nname: %s\\ndescription: %s\\n---\\n\\n\" \"$name\" \"$desc\"; cat \"$file\"; } > \"$tmp\"; cp -a \"$file\" \"$file.pre-codex-frontmatter.bak\"; mv \"$tmp\" \"$file\"; }; add_fm /home/user/.codex/skills/cloudflareops/SKILL.md cloudflareops \"Use when working with Cloudflare operations, wrangler, Workers deploys, secrets, R2, DNS, Pages, or Cloudflare automation.\"; add_fm /home/user/.codex/skills/ft-cli/SKILL.md ft-cli \"Use when working with the fewtok CLI, token savings, dictionary/cache behavior, proxy commands, or ft command usage.\"; add_fm /home/user/.codex/skills/md-afill/SKILL.md md-afill \"Use when working on Multideal affiliate or referral program logic, config, UI, admin, tracking, payouts, or related tests.\"; printf \"frontmatter_added\\n\""], decision="allow")
prefix_rule(pattern=["rtk", "node", "/home/user/.claude/workflows/run-plan-codex.js"], decision="allow")
prefix_rule(pattern=["rtk", "ps", "-p", "4025886", "-o", "pid=,stat=,etime=,cmd="], decision="allow")
prefix_rule(pattern=["rtk", "ps", "-eo", "pid,stat,etime,cmd"], decision="allow")
prefix_rule(pattern=["rtk", "gh", "pr"], decision="allow")
prefix_rule(pattern=["mv", "/home/user/.codex-tray", "/home/user/.local/state/overdeck/systray/runtime"], decision="allow")
prefix_rule(pattern=["rtk", "node", "/home/user/.codex/skills/.system/openai-docs/scripts/fetch-codex-manual.mjs"], decision="allow")
prefix_rule(pattern=["rtk", "bash", "-lc"], decision="allow")
prefix_rule(pattern=["kill", "3113278"], decision="allow")
prefix_rule(pattern=["rtk", "git", "add"], decision="allow")
prefix_rule(pattern=["rtk", "python3", "-m", "pytest"], decision="allow")
prefix_rule(pattern=["rtk", "sudo", "-n", "/usr/sbin/cryptsetup", "status"], decision="allow")
prefix_rule(pattern=["rtk", "lsblk"], decision="allow")
prefix_rule(pattern=["rtk", "findmnt"], decision="allow")
prefix_rule(pattern=["rtk", "ls", "-la", "/mnt/vm1"], decision="allow")
prefix_rule(pattern=["rtk", "losetup"], decision="allow")
prefix_rule(pattern=["rtk", "git", "worktree"], decision="allow")
prefix_rule(pattern=["rtk", "git", "commit"], decision="allow")
prefix_rule(pattern=["node", "/tmp/create_dev_users.mjs"], decision="allow")
prefix_rule(pattern=["rtk", "git", "push"], decision="allow")
prefix_rule(pattern=["git", "worktree"], decision="allow")
prefix_rule(pattern=["git", "fetch"], decision="allow")
prefix_rule(pattern=["rtk", "pnpm", "--dir", "apps/zync-api", "exec", "wrangler"], decision="allow")
prefix_rule(pattern=["rtk", "pnpm", "--dir", "apps/zync-api", "exec", "node"], decision="allow")
prefix_rule(pattern=["pnpm", "--filter", "@platform-modules/fields", "test"], decision="allow")
prefix_rule(pattern=["rtk", "pnpm", "--dir", "apps/web", "typecheck"], decision="allow")
prefix_rule(pattern=["python3", "/tmp/zync_onboarding_console_repro.py"], decision="allow")
prefix_rule(pattern=["rtk", "/home/user/.claude/bin/agent-process-reaper"], decision="allow")
prefix_rule(pattern=["rtk", "/home/user/.claude/bin/agent-process-report", "--suspects-only"], decision="allow")
prefix_rule(pattern=["systemctl", "--user"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "WRANGLER_LOG_PATH=/tmp/.wrangler rtk wrangler dev --remote --config .tmp-demo-seed/wrangler.toml --ip 127.0.0.1 --port 8799 --inspector-port 0"], decision="allow")
prefix_rule(pattern=["rtk", "node"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "for f in /home/user/.claude/CLAUDE.md /home/user/.codex/RTK.md /home/user/.codex/skills/using-superpowers/SKILL.md /home/user/.codex/skills/brainstorm/SKILL.md /home/user/.codex/skills/plan/SKILL.md /home/user/.codex/skills/debug/SKILL.md /home/user/.codex/skills/tdd/SKILL.md /home/user/.codex/skills/verification-before-completion/SKILL.md /home/user/Projects/zync.is/.codex/skills/zc-ui-dev/SKILL.md; do echo \"--- $f ---\"; sed -n '1,260p' \"$f\"; done"], decision="allow")
prefix_rule(pattern=["rtk", "git", "fetch"], decision="allow")
prefix_rule(pattern=["rtk", "cursor-agent"], decision="allow")
prefix_rule(pattern=["install", "-m", "755", "/home/user/Projects/sync-claude-to-codex.sh", "/home/user/scripts/sync-claude-to-codex.sh"], decision="allow")
prefix_rule(pattern=["rtk", "cdx", "exec"], decision="allow")
prefix_rule(pattern=["git", "-C", "/home/user/Projects/zync.is/.wt-zync-os-desktop-int", "restore"], decision="allow")
prefix_rule(pattern=["rtk", "git", "-C"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "rtk git status --short && rtk proxy find packages/db/scripts -maxdepth 2 -type f -print 2>/dev/null && rtk git diff --check"], decision="allow")
prefix_rule(pattern=["rtk", "pnpm", "exec", "wrangler"], decision="allow")
prefix_rule(pattern=["/bin/bash", "-lc", "WRANGLER_LOG_PATH=/tmp/wrangler-hapantheon rtk pnpm --dir apps/mod-cms exec wrangler whoami"], decision="allow")
prefix_rule(pattern=["pwd"], decision="allow")
prefix_rule(pattern=["rtk", "sed", "-n", "1,8p", "/home/user/.codex/config.toml"], decision="allow")
prefix_rule(pattern=["rtk", "proxy", "bash", "/home/user/Projects/zync.is/.codex/skills/zc-deploy/scripts/deploy.sh", "--app", "--skip-build"], decision="allow")
prefix_rule(pattern=["rtk", "mkdir", "-p"], decision="allow")