Skip to content

Revert permissive settings in reeve_desk #19

Description

@reubenjohn

Context

Temporarily set permissive permissions in ~/reeve_desk/.claude/settings.json for debugging/development:

{
  "permissions": {
    "allow": [
      "Bash(*)",
      "Edit(*)",
      "Write(*)",
      "mcp__*"
    ]
  }
}

Action Required

Revert to restrictive permissions once debugging is complete:

{
  "permissions": {
    "allow": [
      "mcp__telegram-notifier__send_notification",
      "mcp__pulse-queue__schedule_pulse",
      "mcp__pulse-queue__list_upcoming_pulses",
      "mcp__pulse-queue__cancel_pulse",
      "mcp__pulse-queue__reschedule_pulse"
    ]
  }
}

Why This Matters

  • The reeve_desk settings control what Hapi sessions can do (since they run with cwd=REEVE_DESK_PATH)
  • Wildcard permissions allow arbitrary file edits and command execution
  • Should be restricted to only the MCP tools Reeve needs

🤖 Generated with Claude Code

Metadata

Metadata

Assignees

No one assigned

    Labels

    securitySecurity improvements

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions