{
  "permissions": {
    "allow": [
      "WebSearch",
      "Bash(rg:*)",
      "Bash(ls:*)",
      "Bash(bundle exec rspec:*)",
      "Bash(bundle exec rake lint)",
      "Bash(bundle exec rake parallel:spec)",
      "Bash(bundle exec rake parallel:setup)",
      "Bash(bundle exec rubocop:*)",
      "Bash(bundle exec erb_lint:*)",
      "Bash(bundle exec rails:*)",
      "Bash(bundle exec rake db:migrate)",
      "Bash(bundle exec rake db:migrate:status)",
      "Bash(bundle install)",
      "Bash(yarn install)",
      "Bash(yarn standard:*)",
      "Bash(yarn prettier:*)",
      "Bash(yarn stylelint:*)",
      "Bash(yarn build:*)",
      "Bash(git fetch)",
      "Bash(git pull)",
      "Bash(git status)",
      "Bash(git diff:*)",
      "Bash(git log:*)",
      "Bash(git show:*)",
      "Bash(git branch:*)",
      "Bash(git checkout:*)",
      "Bash(git add:*)",
      "Bash(git commit:*)",
      "Edit(app/**)",
      "Edit(config/**)",
      "Edit(db/migrate/**)",
      "Edit(lib/**)",
      "Edit(spec/**)",
      "Edit(docs/**)"
    ],
    "deny": [
      "Read(.env*)",
      "Read(config/master.key)",
      "Edit(.env*)",
      "Edit(config/master.key)",
      "Edit(config/credentials.yml.enc)",
      "Edit(db/schema.rb)",
      "Edit(db/structure.sql)",
      "Edit(Gemfile.lock)",
      "Edit(yarn.lock)",
      "Edit(AGENTS.md)",
      "Edit(AI_CONTEXT.md)",
      "Edit(WORKFLOW_AI.md)",
      "Bash(curl:*)",
      "Bash(wget:*)",
      "Bash(sudo:*)",
      "Bash(rm -rf:*)",
      "Bash(chmod:*)",
      "Bash(chown:*)",
      "Bash(echo:*)",
      "Bash(cat:*)",
      "Bash(tail:*)",
      "Bash(head:*)",
      "Bash(gh:*)",
      "Bash(git add .)",
      "Bash(git add --all)",
      "Bash(git add -A)",
      "Bash(git push --force)",
      "Bash(git push --force-with-lease)",
      "Bash(git reset --hard)",
      "Bash(bundle exec rake db:drop)",
      "Bash(bundle exec rake db:reset)"
    ]
  },
  "env": {
    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1"
  }
}