{
  "permissions": {
    "allow": [
      "Bash(bundle install)",
      "Bash(bundle exec rspec:*)",
      "Bash(bundle exec rufo:*)",
      "Bash(npm ci)",
      "Bash(npm test)",
      "Bash(pytest:*)",
      "Bash(python -m pytest:*)",
      "Bash(python -m venv:*)",
      "Bash(black:*)",
      "Bash(cargo test:*)",
      "Bash(cargo build:*)",
      "Bash(cargo fmt:*)",
      "Bash(cargo clippy:*)",
      "Bash(cargo doc:*)",
      "Bash(flutter test:*)",
      "Bash(flutter analyze)",
      "Bash(flutter pub get)",
      "Bash(dart format:*)",
      "Bash(git status:*)",
      "Bash(git diff:*)",
      "Bash(git log:*)",
      "Bash(git show:*)",
      "Bash(git branch:*)",
      "Bash(curl http://127.0.0.1:*)"
    ],
    "deny": [
      "Bash(git push --force:*)",
      "Bash(git push -f:*)",
      "Bash(git push --force-with-lease:*)",
      "Bash(rm -rf:*)",
      "Bash(rm -fr:*)",
      "Bash(gem push:*)",
      "Bash(npm publish:*)",
      "Bash(cargo publish:*)",
      "Bash(docker push:*)",
      "Read(./.env)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(git reset --hard:*)",
      "Bash(git clean:*)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          { "type": "command", "command": "python3 \"$CLAUDE_PROJECT_DIR/.claude/hooks/guard-bash.py\"" }
        ]
      },
      {
        "matcher": "Edit|Write|MultiEdit",
        "hooks": [
          { "type": "command", "command": "python3 \"$CLAUDE_PROJECT_DIR/.claude/hooks/guard-edits.py\"" }
        ]
      }
    ]
  }
}
