{
  "sensitivePatterns": [
    "*.env",
    "*.env.*",
    "~/.ssh/*",
    "*.pem",
    "*.key",
    "id_rsa*",
    "credentials.json",
    "secrets*.yaml",
    "~/.aws/*",
    ".npmrc",
    "~/.config/gh/hosts.yml"
  ],
  "envExampleReadAllowed": true,
  "readonlyBashCommands": [
    "cd",
    "pwd",
    "env",
    "which",
    "echo",
    "printf",
    "export",
    "unset",
    "alias",
    "type",
    "command",
    "builtin",
    "hash",
    "set",
    "cat",
    "ls",
    "dir",
    "vdir",
    "tree",
    "find",
    "locate",
    "stat",
    "file",
    "du",
    "df",
    "nl",
    "od",
    "hexdump",
    "xxd",
    "strings",
    "wc",
    "less",
    "more",
    "head",
    "tail",
    "grep",
    "rg",
    "ag",
    "ack",
    "fzf",
    "diff",
    "comm",
    "cmp",
    "sort",
    "uniq",
    "cut",
    "paste",
    "join",
    "tr",
    "sed",
    "jq",
    "ps",
    "top",
    "htop",
    "uptime",
    "date",
    "who",
    "whoami",
    "id",
    "uname",
    "hostname",
    "free",
    "vmstat",
    "iostat",
    "netstat",
    "ss",
    "lsof",
    "sleep",
    "tmux",
    "agent-browser",
    "clear",
    "history"
  ],
  "dangerousBashCommands": [
    "git add",
    "git commit",
    "git push",
    "git pull",
    "git merge",
    "git rebase",
    "git reset",
    "git checkout",
    "git restore",
    "git clean",
    "git branch",
    "git remote",
    "git stash",
    "git tag",
    "git mv",
    "git rm",
    "git switch",
    "git revert",
    "git cherry-pick",
    "git gc",
    "git prune",
    "git repack",
    "git am",
    "git apply",
    "git submodule",
    "git worktree",
    "git update-index",
    "git update-ref",
    "git lfs",
    "git init",
    "git clone",
    "git config",
    "git notes",
    "git replace",
    "git filter-branch",
    "git bisect",
    "sudo",
    "su",
    "dd",
    "mkfs",
    "mkfs.ext2",
    "mkfs.ext3",
    "mkfs.ext4",
    "mkfs.xfs",
    "fdisk",
    "gdisk",
    "parted",
    "wipefs",
    "mount",
    "umount",
    "chroot",
    "shutdown",
    "reboot",
    "halt",
    "poweroff",
    "init",
    "kill",
    "pkill",
    "killall",
    "iptables",
    "ip6tables",
    "ufw",
    "firewall-cmd"
  ],
  "readonlyPowerShellCommands": [
    "get-childitem", "get-content", "get-item", "get-itemproperty", "get-location",
    "get-filehash", "get-authenticodesignature", "get-acl",
    "test-path", "resolve-path", "join-path", "split-path", "format-hex",
    "import-csv", "import-clixml", "import-powershelldatafile",
    "test-connection", "test-netconnection",
    "get-process", "get-service", "get-command", "get-help", "get-member",
    "get-variable", "get-alias", "get-psdrive", "get-psprovider", "get-wmiobject",
    "get-date", "get-random", "get-culture", "get-uiculture", "get-host", "get-verb",
    "get-eventlog", "get-winevent", "get-computerinfo", "get-history", "get-module",
    "get-itempropertyvalue", "get-clipboard",
    "select-string", "select-object", "select-xml", "where-object", "foreach-object",
    "sort-object", "group-object", "measure-object", "measure-command", "compare-object",
    "format-table", "format-list", "format-wide", "format-custom",
    "convertto-json", "convertto-csv", "convertto-html", "convertto-xml",
    "convertfrom-json", "convertfrom-csv", "convertfrom-stringdata",
    "out-string", "out-host", "out-default", "out-null",
    "write-output", "write-host", "write-warning", "write-error",
    "write-verbose", "write-debug", "write-information", "write-progress",
    "clear-host", "start-sleep", "push-location", "pop-location", "exit"
  ],
  "dangerousPowerShellCommands": [
    "start-process", "saps", "new-psdrive",
    "stop-process", "kill", "stop-service", "set-service", "new-service", "start-service",
    "register-scheduledtask", "schtasks", "reg", "wmic", "diskpart", "format-volume",
    "restart-computer", "stop-computer", "clear-eventlog", "remove-computer",
    "add-type", "new-object", "import-module", "invoke-item", "invoke-wmimethod", "invoke-cimmethod",
    "start-job", "receive-job"
  ],
  "trustedExternalPaths": [
    "/tmp"
  ],
  "readonlyTools": [
    "read",
    "grep",
    "find",
    "ls"
  ],
  "strictPlanMode": false,
  "toggleModeShortcut": "alt+p",
  "reviewLog": true,
  "debugLog": false,
  "logDir": "logs/pi-permission"
}