{
  "about": "The rules every session starts from, before the user's own. Keys are permission keys (a tool's access), values an action or a map of pattern → action; for a pattern the last matching rule wins, across patterns the strictest.",
  "rules": {
    "*": "ask",
    "read": {
      "*": "allow",
      "*.env": "ask",
      "*.env.*": "ask",
      "*.env.example": "allow"
    },
    "glob": "allow",
    "grep": "allow",
    "list": "allow",
    "ask_user": "allow",
    "plan_submit": "allow",
    "task": "allow",
    "tasks": "allow",
    "decisions": "allow",
    "todo": "allow",
    "bash_output": "allow",
    "bash_kill": "allow",
    "web_search": "allow",
    "memory": "allow",
    "session_search": "allow",
    "notes": "allow",
    "knowledge": "allow",
    "skills": "allow",
    "skill_manage": "ask",
    "settings": {
      "*": "ask",
      "list": "allow",
      "get *": "allow"
    },
    "web_fetch": {
      "*": "allow",
      "private:*": "ask"
    },
    "external_directory": "ask",
    "bash": {
      "*": "ask",
      "git status *": "allow",
      "git diff *": "allow",
      "git log *": "allow",
      "git show *": "allow",
      "git branch": "allow",
      "git branch --list *": "allow",
      "git branch -a": "allow",
      "git branch -v": "allow",
      "git branch -vv": "allow",
      "git branch -av": "allow",
      "git rev-parse *": "allow",
      "git blame *": "allow",
      "ls *": "allow",
      "pwd": "allow",
      "cat *": "allow",
      "head *": "allow",
      "tail *": "allow",
      "wc *": "allow",
      "which *": "allow",
      "rg *": "allow",
      "grep *": "allow",
      "file *": "allow",
      "tree *": "allow",
      "git diff *--output*": "ask",
      "git log *--output*": "ask",
      "git show *--output*": "ask",
      "git branch --list *-*": "ask",
      "rg *--pre*": "ask",
      "rg *--hostname-bin*": "ask",
      "rg *--search-zip*": "ask",
      "tree *-o*": "ask",
      "tree *-R*": "ask",
      "file *-C*": "ask"
    }
  }
}