{
  "$schema": "../schemas/permissions.schema.json",

  "debugLog": false,
  "permissionReviewLog": true,
  "yoloMode": false,

  "piInfrastructureReadPaths": [],

  "permission": {
    "*": "ask",
    "path": {
      "*": "allow",
      "*.env": "deny",
      "*.env.*": "deny",
      "*.env.example": "allow"
    },
    "read": "allow",
    "write": "deny",
    "edit": "deny",
    "bash": {
      "*": "ask",
      "git status": "allow",
      "git diff": "allow",
      "git *": "ask"
    },
    "mcp": { "*": "ask", "mcp_status": "allow", "mcp_list": "allow" },
    "skill": { "*": "ask" },
    "external_directory": {
      "*": "ask",
      "~/development/*": "allow"
    }
  }
}