{
  "cleanupPeriodDays": 36500,
  "env": {
    "CLAUDE_CODE_MAX_TOOL_USE_CONCURRENCY": "3"
  },
  "permissions": {
    "allow": [
      "Bash(ls:*)",
      "Bash(echo:*)",
      "Bash(git log *)",
      "Bash(git add *)",
      "Bash(git commit *)",
      "Bash(git remote get-url:*)",
      "Bash(git check-ignore:*)",
      "Bash(gh run list:*)",
      "Bash(npm install)",
      "Bash(npm view *)",
      "Bash(pnpm install:*)",
      "Bash(pnpm add:*)",
      "Bash(pnpm:*)",
      "Bash(npx tsc:*)",
      "Bash(pnpm tsc:*)",
      "Bash(pnpm typecheck:*)",
      "Bash(pnpm eslint:*)",
      "Bash(pnpm prettier:*)",
      "Bash(brew install:*)"
    ],
    "deny": [
      "Bash(sst secret*)",
      "Bash(npx sst secret*)",
      "Bash(pnpm sst secret*)",
      "Bash(pnpm exec sst secret*)",
      "Bash(bunx sst secret*)",
      "Bash(aws secretsmanager*)",
      "Bash(aws ssm get-parameter*)",
      "Bash(aws ssm get-parameters*)",
      "Bash(cat .env*)",
      "Bash(cat ~/.aws/*)",
      "Bash(cat ~/.ssh/*)",
      "Read(.env)",
      "Read(.env.*)",
      "Read(.env/*)",
      "Read(**/.env)",
      "Read(**/.env.*)",
      "Grep(**/.env)",
      "Grep(**/.env.*)",
      "Read(application.yml)",
      "Read(**/application.yml)",
      "Grep(.env)",
      "Grep(.env.*)",
      "Grep(.env/*)",
      "Grep(application.yml)",
      "Grep(**/application.yml)",
      "Read(~/Desktop/**)",
      "Read(~/Documents/**)",
      "Read(~/Downloads/**)",
      "Read(~/Library/**)",
      "Read(~/Movies/**)",
      "Read(~/Music/**)",
      "Read(~/Pictures/**)",
      "Read(~/Public/**)",
      "Read(~/.aws/**)",
      "Read(~/.ssh/**)",
      "Read(~/.gnupg/**)",
      "Read(~/.gpg/**)",
      "Read(~/.config/**)",
      "Read(~/.docker/**)",
      "Read(~/.kube/**)",
      "Read(~/.npm/**)",
      "Read(~/.local/**)",
      "Read(~/.cargo/**)",
      "Read(~/.rustup/**)",
      "Read(~/.terraform.d/**)",
      "Read(~/.netrc)",
      "Read(~/.npmrc)",
      "Read(~/.env)",
      "Read(~/.env.*)",
      "Read(~/.bash_history)",
      "Read(~/.zsh_history)",
      "Read(~/.node_repl_history)",
      "Read(~/.psql_history)",
      "Grep(~/Desktop/**)",
      "Grep(~/Documents/**)",
      "Grep(~/Downloads/**)",
      "Grep(~/Library/**)",
      "Grep(~/.aws/**)",
      "Grep(~/.ssh/**)",
      "Grep(~/.gnupg/**)",
      "Grep(~/.config/**)",
      "Grep(~/.docker/**)",
      "Grep(~/.kube/**)",
      "Bash(gh pr comment:*)",
      "Bash(gh pr create:*)",
      "Bash(gh pr review:*)",
      "Bash(gh pr edit:*)",
      "Bash(gh pr merge:*)",
      "Bash(gh pr close:*)",
      "Bash(gh pr reopen:*)",
      "Bash(gh pr ready:*)",
      "Bash(gh issue create:*)",
      "Bash(gh issue comment:*)",
      "Bash(gh issue edit:*)",
      "Bash(gh issue close:*)",
      "Bash(gh issue reopen:*)",
      "Bash(gh release create:*)",
      "Bash(gh release edit:*)",
      "Bash(gh release delete:*)",
      "Bash(gh gist create:*)"
    ]
  }
}