Scopes & Confirmations

v1.0 · Updated 4 days ago

Scoped Operations

During /first-run you decide which operation categories the plugin may perform on a NAS. These "Scoped Operations" sit as checkboxes in CLAUDE.md and serve as documented intent for the agent:

Volume management (create/delete shared folders)
Mount configuration (NFS/SAMBA)
File operations (copy, move, delete)
Permission management
System monitoring
Backup operations

They signal what should be allowed on a NAS before anything mutating happens. That keeps you in control of the permitted scope per NAS.

Critical compose projects

For especially important stacks there is a hard hurdle in code: if you list project names under critical_compose_projects in the profile, /compose-down refuses to stop those projects — unless the environment variable SM_CONFIRM_CRITICAL=yes is set.

## in the profile
- critical_compose_projects: nextcloud, postgres

## deliberate stop
SM_CONFIRM_CRITICAL=yes /compose-down nextcloud

This way the confirmation makes the intent visible and guards against accidentally halting business-critical services.

Scopes & Confirmations