{
  "permissions": {
    "allow": ["Read", "Glob", "Grep", "Bash", "Agent"],
    "deny": ["Write", "Edit", "Read:.env", "Read:.env.*"]
  }
}