{
  "$comment": "Defaults fresh de Claude/Codex: trabajo ordinario sin prompts y deny solo de secretos; en Claude, el aviso de guardado de Engram se repite como mucho cada hora. OpenCode v2 y Pi declaran sus reglas nativas en el adapter; configuración existente preservada.",
  "claude-code": {
    "permissions": {
      "defaultMode": "bypassPermissions",
      "deny": [
        "Read(//**/.env)",
        "Read(//**/.env.local)",
        "Read(//**/.env.*.local)",
        "Read(//**/.env.dev)",
        "Read(//**/.env.development)",
        "Read(//**/.env.production)",
        "Read(//**/.env.prod)",
        "Read(//**/.env.staging)",
        "Read(//**/.env.test)",
        "Read(//**/.ssh/**)",
        "Read(//**/.aws/credentials)",
        "Read(//**/.npmrc)",
        "Read(//**/.git-credentials)",
        "Read(//**/id_rsa)",
        "Read(//**/id_ed25519)",
        "Read(//**/*.pem)",
        "Read(//**/*.key)",
        "Edit(//**/.env)",
        "Edit(//**/.env.local)",
        "Edit(//**/.env.*.local)",
        "Edit(//**/.env.dev)",
        "Edit(//**/.env.development)",
        "Edit(//**/.env.production)",
        "Edit(//**/.env.prod)",
        "Edit(//**/.env.staging)",
        "Edit(//**/.env.test)",
        "Edit(//**/.ssh/**)",
        "Edit(//**/.aws/credentials)",
        "Edit(//**/.npmrc)",
        "Edit(//**/.git-credentials)",
        "Edit(//**/id_rsa)",
        "Edit(//**/id_ed25519)",
        "Edit(//**/*.pem)",
        "Edit(//**/*.key)"
      ]
    },
    "skipDangerousModePermissionPrompt": true,
    "env": {
      "ENGRAM_NUDGE_COOLDOWN_SECS": "3600"
    },
    "attribution": {
      "commit": "",
      "pr": ""
    }
  },
  "codex": {
    "approval_policy": "never",
    "default_permissions": "jorgex-yolo"
  }
}