{
  "permissions": {
    "allow": [
      "Bash(git:*)",
      "Bash(ls:*)",
      "Bash(pwd)",
      "Bash(date)",
      "Bash(wc:*)",
      "Bash(cat:*)",
      "Bash(head:*)",
      "Bash(tail:*)",
      "Bash(echo:*)",
      "Bash(node:*)",
      "Bash(npx:*)",
      "Bash(mkdir:*)",
      "Bash(cp:*)",
      "Bash(mv:*)",
      "Bash(touch:*)",
      "Bash(diff:*)",
      "Read",
      "Glob",
      "Grep"
    ],
    "deny": [
      "Bash(rm -rf /)",
      "Bash(rm -rf ~)",
      "Bash(rm -rf $HOME)",
      "Bash(sudo *)",
      "Bash(chmod 777 *)",
      "Bash(chmod -R 777 *)",
      "Bash(curl*|*bash)",
      "Bash(curl*|*sh)",
      "Bash(wget*|*bash)",
      "Bash(wget*|*sh)",
      "Bash(base64*|*bash)",
      "Bash(base64*|*sh)",
      "Bash(eval *)",
      "Bash(mkfs*)",
      "Bash(dd if=*)",
      "Bash(> /dev/sda*)",
      "Bash(shutdown*)",
      "Bash(reboot*)",
      "Bash(init 0*)",
      "Bash(init 6*)",
      "Bash(:(){:|:&};:*)",
      "Bash(nc -e*)",
      "Bash(ncat -e*)",
      "Bash(python*-c*import*socket*)",
      "Bash(export*_KEY=*)",
      "Bash(export*_TOKEN=*)",
      "Bash(export*_SECRET=*)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "bash hooks/pre-tool-use.sh"
          }
        ]
      }
    ],
    "PostToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "bash hooks/post-tool-use.sh"
          }
        ]
      }
    ]
  }
}