Merge ThinkPad X1 Nano machine notes + permissions allow/deny block from tim-ThinkPad-X1-NanoTS

settings.json

@@ -11,7 +11,78 @@
       "Bash(mj-capture-command *)",
       "Bash(/Users/timevans/bin/mj-gen *)",
       "Bash(/Users/timevans/bin/mj-auth-check *)",
-      "Bash(/Users/timevans/bin/mj-capture-command *)"
+      "Bash(/Users/timevans/bin/mj-capture-command *)",
+      "Read",
+      "Edit",
+      "Write",
+      "Glob",
+      "Grep",
+      "Bash(git status)",
+      "Bash(git diff)",
+      "Bash(git log)",
+      "Bash(git add )",
+      "Bash(git commit )",
+      "Bash(git push)",
+      "Bash(git pull)",
+      "Bash(git branch)",
+      "Bash(git checkout )",
+      "Bash(git stash)",
+      "Bash(git fetch)",
+      "Bash(npm run )",
+      "Bash(npm install)",
+      "Bash(npm test)",
+      "Bash(npm ci)",
+      "Bash(npx )",
+      "Bash(node )",
+      "Bash(ls)",
+      "Bash(dir)",
+      "Bash(mkdir )",
+      "Bash(mv )",
+      "Bash(cp )",
+      "Bash(touch )",
+      "Bash(cat )",
+      "Bash(head )",
+      "Bash(tail )",
+      "Bash(wc )",
+      "Bash(find )",
+      "Bash(grep )",
+      "Bash(sort )",
+      "Bash(uniq )",
+      "Bash(diff )",
+      "Bash(which )",
+      "Bash(where )",
+      "Bash(echo )",
+      "Bash(pwd)",
+      "Bash(cd )",
+      "Bash(type )",
+      "Bash(file )",
+      "Bash(whoami)",
+      "Bash(hostname)",
+      "Bash(date)",
+      "Bash(yarn )",
+      "Bash(pnpm )",
+      "Bash(python )",
+      "Bash(python3 )",
+      "Bash(pip )",
+      "Bash(pip3 )",
+      "Bash(cargo )",
+      "Bash(go )",
+      "Bash(dotnet )"
+    ],
+    "deny": [
+      "Bash(rm -rf )",
+      "Bash(rm -r )",
+      "Bash(rmdir /s)",
+      "Bash(del /s)",
+      "Bash(sudo )",
+      "Bash(chmod 777)",
+      "Bash(format )",
+      "Read(.env)",
+      "Read(**/.env)",
+      "Read(**/.env.*)",
+      "Read(**/credentials*)",
+      "Read(**/*.pem)",
+      "Read(**/*.key)"
     ]
   },
   "model": "opus",