ai: allow certain tools unconditionally

These tools are harmless and allow tasks
to continue with less user confirmations.

Signed-off-by: Marcel van Lohuizen <[email protected]>
Change-Id: I7482c210ea10235f66a0e2b79aa85ccd0a5c6f43
Reviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1219638
TryBot-Result: CUEcueckoo <[email protected]>
Reviewed-by: Daniel Martí <[email protected]>
Unity-Result: CUE porcuepine <[email protected]>

Author: mpvl

.claude/settings.json

@@ -0,0 +1,36 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(go test:*)",
+      "Bash(go build:*)",
+      "Bash(go list:*)",
+      "Bash(go fmt:*)",
+      "Bash(find:*)",
+      "Bash(grep:*)",
+      "Bash(ls:*)",
+      "Bash(tail:*)",
+      "Bash(awk:*)",
+      "Bash(git status:*)",
+      "Bash(git log:*)",
+      "Bash(git show:*)",
+      "Bash(git diff:*)",
+      "Bash(git branch:*)",
+      "Bash(git ls-files:*)",
+      "Bash(git ls-tree:*)",
+      "Bash(git rev-parse:*)",
+      "Bash(git describe:*)",
+      "Bash(git config --get:*)",
+      "Bash(git config --list:*)",
+      "Bash(git add:*)",
+      "Bash(true:)",
+      "Bash(echo:*)",
+      "Bash(go run:./cmd/cue eval*)",
+      "Bash(go run:./cmd/cue export*)",
+      "Bash(go run:./cmd/cue def*)"
+    ],
+    "deny": [
+      "Bash(go:* -exec*)",
+      "Bash(go:* -toolexec*)"
+    ]
+  }
+}