{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(**/.env)",
      "Read(**/.env.*)",
      "Read(**/*.pem)",
      "Read(**/*secret*)",
      "Read(**/secrets/**)",
      "Read(**/.secrets/**)",
      "Bash(env)",
      "Bash(env *)",
      "Bash(printenv*)",
      "Bash(set)",
      "Bash(export -p*)"
    ],
    "ask": [
      "Bash(echo $*)",
      "Bash(cat ./.env*)"
    ],
    "allow": [
      "Bash(python -m venv *)",
      "Bash(python -m pip *)",
      "Bash(pip install *)",
      "Bash(pip freeze*)",
      "Bash(uvicorn *)",
      "Bash(python -m uvicorn *)",
      "Bash(pytest*)",
      "Bash(python -m pytest*)",
      "Bash(ruff*)",
      "Bash(python -m ruff *)",
      "Read",
      "Edit",
      "Write"
    ]
  }
}