From 23878737ba9e0699d6d40b3fa402583cb07e1713 Mon Sep 17 00:00:00 2001
From: Moritz Johner <beller.moritz@googlemail.com>
Date: Sun, 29 Mar 2026 15:46:25 +0000
Subject: [PATCH] chore: remediate vulnerabilities

---
 .cursor/cli.json | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 .cursor/cli.json

diff --git a/.cursor/cli.json b/.cursor/cli.json
new file mode 100644
index 0000000..6a6979e
--- /dev/null
+++ b/.cursor/cli.json
@@ -0,0 +1,28 @@
+{
+  "permissions": {
+    "allow": [
+      "Read(**)",
+      "Write(.patchpilot/output.json)",
+      "Shell(ls)",
+      "Shell(find)",
+      "Shell(rg)",
+      "Shell(grep)",
+      "Shell(cat)",
+      "Shell(head)",
+      "Shell(tail)",
+      "Shell(sed)",
+      "Shell(awk)"
+    ],
+    "deny": [
+      "Shell(git)",
+      "Shell(gh)",
+      "Shell(curl)",
+      "Shell(wget)",
+      "Shell(rm)",
+      "Shell(mv)",
+      "Shell(cp)",
+      "Shell(sh)",
+      "Shell(bash)"
+    ]
+  }
+}