version: 1
mode: scoped

features:
  full_mode_enabled: false

# THE USER DEFINES THE DELEGATED PORTION OF THE VPS HERE.
# "/" is valid if the operator explicitly wants whole-host filesystem authority.
filesystem:
  read:
    - /opt/my-app
  write:
    - /opt/my-app
  actions:
    - list
    - stat
    - read
    - mkdir
    - write
    - patch
    - copy
    - move
    - remove
    - hash
    # Explicitly opt in if wanted:
    # - remove_recursive
    # - chmod
    # - chown

shell:
  enabled: true
  run_as: vps-agent-exec
  cwd_roots:
    - /opt/my-app
  max_runtime_seconds: 900
  max_output_bytes: 1048576
  max_memory_bytes: 1073741824
  max_tasks: 256
  allow_host_read: false

services:
  inspect: []
  manage: []
  actions: []

docker:
  inspect: []
  manage: []
  actions: []

compose:
  inspect: []
  manage: []
  actions: []

network:
  mode: blocked
  destinations: []

diagnostics:
  - system.disk
  - system.memory
  - process.list
  - process.inspect
  - network.listen

packages:
  inspect: []
  manage: []
  actions: []

users:
  inspect: []
  manage: []
  actions: []

groups:
  inspect: []
  manage: []
  actions: []

firewall:
  inspect: []
  manage: []
  actions: []

privilege:
  admin: broker-only

replay:
  require_idempotency_for_safe_writes: true
  blind_retry_non_replay_safe: false

grant:
  required: true
  max_ttl_minutes: 60
  out_of_band_approval: true
  step_up_auth: true