{
  "permissions": {
    "allow": [
      "Read",
      "Edit",
      "Write",
      "Bash(git status*)",
      "Bash(git log*)",
      "Bash(git diff*)",
      "Bash(git add*)",
      "Bash(git commit*)",
      "Bash(git checkout*)",
      "Bash(git branch*)",
      "Bash(git fetch*)",
      "Bash(git stash*)",
      "Bash(git -C:*)",
      "Bash(make*)",
      "Bash(python3*)",
      "Bash(python*)",
      "Bash(pip show*)",
      "Bash(pip list*)",
      "Bash(pip install*)",
      "Bash(npm install*)",
      "Bash(npm run*)",
      "Bash(npx*)",
      "Bash(docker pull*)",
      "Bash(docker build*)",
      "Bash(docker images*)",
      "Bash(docker ps*)",
      "Bash(docker inspect*)",
      "Bash(docker logs*)",
      "Bash(docker create*)",
      "Bash(docker export*)",
      "Bash(docker rm*)",
      "Bash(docker rmi*)",
      "Bash(docker stop*)",
      "Bash(docker compose*)",
      "Bash(docker-compose*)",
      "Bash(docker container prune*)",
      "Bash(grep*)",
      "Bash(find*)",
      "Bash(ls*)",
      "Bash(cat*)",
      "Bash(head*)",
      "Bash(tail*)",
      "Bash(wc*)",
      "Bash(sort*)",
      "Bash(tar*)",
      "Bash(mkdir*)",
      "Bash(cp*)",
      "Bash(mv*)",
      "Bash(jq*)",
      "WebSearch",
      "WebFetch(domain:github.com)",
      "WebFetch(domain:raw.githubusercontent.com)",
      "WebFetch(domain:api.github.com)",
      "WebFetch(domain:docs.docker.com)",
      "WebFetch(domain:pypi.org)",
      "WebFetch(domain:docs.cypress.io)",
      "WebFetch(domain:flask.palletsprojects.com)"
    ],
    "ask": [
      "Bash(git push*)",
      "Bash(docker run*)",
      "Bash(curl*)"
    ],
    "deny": [
      "Bash(git push --force*)",
      "Bash(git reset --hard*)",
      "Bash(rm -rf*)",
      "Bash(sudo*)"
    ]
  },
  "sandbox": {
    "filesystem": {
      "allowWrite": [
        ".",
        "/tmp"
      ],
      "denyRead": [
        "~/.ssh",
        "~/.gnupg",
        "~/.kube",
        "~/.aws",
        "~/.config/gcloud"
      ]
    }
  }
}