{
  "$schema": "../packages/core/src/middleware/permissions/PermissionConfig.ts",
  "enabled": true,
  "defaultPolicy": "deny",
  "policies": [
    {
      "type": "whitelist",
      "priority": 40,
      "enabled": true,
      "config": {
        "allowedTools": [
          "Read",
          "Write",
          "Edit",
          "Bash",
          "Glob",
          "Grep",
          "CreateArtifactTool",
          "MemoryWrite",
          "MemoryRecall"
        ]
      }
    },
    {
      "type": "file-operation",
      "priority": 80,
      "enabled": true,
      "config": {
        "allowedPaths": [
          "."
        ],
        "blockedPaths": [
          "/etc",
          "/root",
          "/.git",
          "/node_modules",
          "/.env",
          "/.ssh"
        ],
        "requireApprovalForDelete": true,
        "requireApprovalForWrite": false,
        "maxPathLength": 4096
      }
    },
    {
      "type": "bash-command",
      "priority": 80,
      "enabled": true,
      "config": {
        "allowedCommands": [],
        "blockedCommands": [
          "rm -rf /",
          "sudo rm",
          "format",
          "mkfs",
          "fdisk"
        ],
        "requireApprovalForDangerous": true,
        "customDangerousPatterns": []
      }
    }
  ],
  "approvalHandler": "cli",
  "auditLog": {
    "enabled": true,
    "path": ".cortex/audit/permissions.log",
    "maxFileSizeBytes": 10485760,
    "enableRotation": true,
    "maxRotatedFiles": 5
  },
  "enableLogging": false
}