{
  "permissions": {
    "allow": [
      "Read",
      "Glob",
      "Grep",
      "LS",
      "NotebookRead",
      "NotebookEdit",
      "Edit",
      "Edit($HOME/.okstra/worktrees/**)",
      "Write",
      "Write($HOME/.okstra/worktrees/**)",
      "WebFetch",
      "WebSearch",
      "TodoWrite",
      "Bash(okstra)",
      "Bash(okstra:*)",
      "Bash(npx okstra@latest:*)",
      "Bash(npx -y okstra@latest:*)",
      "Bash($HOME/.okstra/bin/:*)",
      "Bash(codex)",
      "Bash(codex:*)",
      "Bash(agy)",
      "Bash(agy:*)",
      "Bash(claude)",
      "Bash(claude:*)",
      "Bash(grok)",
      "Bash(grok:*)",
      "Bash(kimi)",
      "Bash(kimi:*)",
      "Bash(docker)",
      "Bash(docker:*)"
    ]
  },
  "sandbox": {
    "network": { "allowLocalBinding": true },
    "filesystem": { "allowWrite": ["~/.gemini", "~/.codex"] }
  },
  "hooks": {
    "SessionStart": [
      {
        "matcher": "compact",
        "hooks": [
          {
            "type": "command",
            "command": "$HOME/.okstra/bin/okstra-compact-reminder.sh"
          }
        ]
      }
    ],
    "SessionEnd": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "$HOME/.okstra/bin/okstra-team-reconcile.sh --session-end"
          }
        ]
      }
    ]
  }
}