{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "permissions": {
    "defaultMode": "acceptEdits",
    "allow": [
      "Read",
      "Edit",
      "Write",
      "Glob",
      "Grep",
      "LS",
      "WebSearch",
      "WebFetch(domain:codeberg.org)",
      "WebFetch(domain:github.com)",
      "WebFetch(domain:raw.githubusercontent.com)",
      "WebFetch(domain:docs.python.org)",
      "WebFetch(domain:pypi.org)",

      "Bash(grep:*)", "Bash(rg:*)", "Bash(ag:*)", "Bash(find:*)", "Bash(fd:*)",
      "Bash(awk:*)", "Bash(sed:*)", "Bash(ls:*)", "Bash(cat:*)", "Bash(head:*)",
      "Bash(tail:*)", "Bash(less:*)", "Bash(more:*)", "Bash(wc:*)", "Bash(sort:*)",
      "Bash(uniq:*)", "Bash(cut:*)", "Bash(tr:*)", "Bash(column:*)", "Bash(diff:*)",
      "Bash(comm:*)", "Bash(file:*)", "Bash(stat:*)", "Bash(tree:*)",
      "Bash(realpath:*)", "Bash(readlink:*)", "Bash(basename:*)", "Bash(dirname:*)",
      "Bash(jq:*)", "Bash(yq:*)", "Bash(xxd:*)", "Bash(od:*)", "Bash(strings:*)",

      "Bash(mkdir:*)", "Bash(touch:*)", "Bash(cp:*)", "Bash(mv:*)", "Bash(ln:*)",
      "Bash(tee:*)", "Bash(chmod:*)", "Bash(chown:*)", "Bash(rm:*)", "Bash(rmdir:*)",
      "Bash(truncate:*)", "Bash(mktemp:*)", "Bash(cd:*)", "Bash(pushd:*)", "Bash(popd:*)",

      "Bash(unzip:*)", "Bash(zip:*)", "Bash(tar:*)", "Bash(gzip:*)",
      "Bash(gunzip:*)", "Bash(zcat:*)",

      "Bash(pwd)", "Bash(whoami)", "Bash(id)", "Bash(hostname)", "Bash(uname:*)",
      "Bash(date)", "Bash(env)", "Bash(printenv:*)", "Bash(export:*)", "Bash(echo:*)",
      "Bash(printf:*)", "Bash(which:*)", "Bash(type:*)", "Bash(command -v:*)",
      "Bash(uptime)", "Bash(df:*)", "Bash(du:*)", "Bash(free:*)", "Bash(ps:*)",
      "Bash(kill:*)", "Bash(pkill:*)", "Bash(sleep:*)", "Bash(true)", "Bash(false)",
      "Bash(test:*)", "Bash(xargs:*)", "Bash(watch:*)", "Bash(time:*)",
      "Bash(source:*)", "Bash(ulimit:*)", "Bash(lsof:*)", "Bash(fuser:*)", "Bash(strace:*)",

      "Bash(git status:*)", "Bash(git log:*)", "Bash(git diff:*)", "Bash(git show:*)",
      "Bash(git branch:*)", "Bash(git remote:*)", "Bash(git config:*)", "Bash(git blame:*)",
      "Bash(git rev-parse:*)", "Bash(git describe:*)", "Bash(git stash:*)", "Bash(git tag:*)",
      "Bash(git ls-files:*)", "Bash(git shortlog:*)", "Bash(git add:*)", "Bash(git commit:*)",
      "Bash(git checkout:*)", "Bash(git switch:*)", "Bash(git restore:*)", "Bash(git merge:*)",
      "Bash(git rebase:*)", "Bash(git pull:*)", "Bash(git fetch:*)", "Bash(git push:*)",
      "Bash(git reset:*)", "Bash(git clean:*)", "Bash(git cherry-pick:*)", "Bash(git revert:*)",
      "Bash(git init:*)", "Bash(git clone:*)", "Bash(git worktree:*)",

      "Bash(ssh-add -l)",
      "Bash(ssh -T git@codeberg.org)",
      "Bash(ssh -T git@github.com)",
      "Bash(ssh -T git@gitlab.com)",

      "Bash(pip:*)", "Bash(pip3:*)", "Bash(python:*)", "Bash(python3:*)",
      "Bash(pytest:*)", "Bash(poetry:*)", "Bash(pipenv:*)", "Bash(virtualenv:*)",
      "Bash(uv:*)", "Bash(ruff:*)", "Bash(black:*)", "Bash(flake8:*)", "Bash(mypy:*)",
      "Bash(isort:*)", "Bash(node:*)", "Bash(npm:*)", "Bash(npx:*)", "Bash(yarn:*)",
      "Bash(pnpm:*)", "Bash(make:*)", "Bash(cmake:*)",

      "Bash(.venv/lib/python3.13/site-packages/ziglang/zig:*)",
      "Bash(scripts/gates:*)",
      "Bash(.venv/bin/lint-imports)",
      "Bash(gitleaks detect:*)",
      "Bash(docker run:*)",
      "Bash(QT_QPA_PLATFORM=offscreen .venv/bin/python -m pytest:*)",
      "Bash(curl -s -X POST * https://codeberg.org/api/v1/repos/magogi-admin/*/pulls/*/merge*)"
    ],
    "deny": [
      "Bash(sudo:*)",
      "Bash(rm -rf /:*)",
      "Bash(rm -rf /*:*)",
      "Bash(rm -rf ~:*)",
      "Bash(git push --force:*)",
      "Bash(git push -f:*)",
      "Read(**/.env)",
      "Read(**/.env.*)",
      "Edit(**/.env)",
      "Edit(**/.env.*)",
      "Write(**/.env)",
      "Write(**/.env.*)",
      "Read(/home/bassam/.ssh/**)",
      "Read(/home/bassam/.aws/**)",
      "Read(**/secrets/**)",
      "Read(**/credentials*)"
    ],
    "additionalDirectories": [
      "/tmp",
      "/home/bassam/PycharmProjects"
    ]
  }
}
