{
  "permissions": {
    "allow": ["Bash(npm run test)"],
    "deny": ["Read(.env)"]
  },
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true
  }
}