{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "effortLevel": "high",
  "permissions": {
    "allow": [
      "Read",
      "Write",
      "Edit",
      "MultiEdit",
      "NotebookEdit",
      "Skill(update-config)",

      "Bash(git *)",
      "Bash(git add *)",
      "Bash(git commit *)",
      "Bash(git commit -m ' *)",
      "Bash(git push)",
      "Bash(git push *)",
      "Bash(git push origin *)",
      "Bash(git tag *)",

      "Bash(uv *)",
      "Bash(uv --version)",
      "Bash(uv pip *)",
      "Bash(uv pip install *)",
      "Bash(uv pip sync *)",
      "Bash(uv add *)",
      "Bash(uv remove *)",
      "Bash(uv run *)",
      "Bash(uv sync *)",
      "Bash(uv venv *)",

      "Bash(pip install *)",
      "Bash(pip uninstall *)",
      "Bash(pipx install *)",
      "Bash(npm install *)",
      "Bash(npm uninstall *)",
      "Bash(npm ci *)",

      "Bash(python *)",
      "Bash(python3 *)",
      "Bash(python -m build *)",
      "Bash(python -m build)",
      "Bash(python3 -m json.tool)",
      "Bash(pytest *)",
      "Bash(pytest --tb=short -q)",
      "Bash(mypy *)",
      "Bash(ruff *)",
      "Bash(lint-imports)",
      "Bash(lint-imports *)",
      "Bash(twine check *)",
      "Bash(twine upload *)",

      "Bash(.venv/bin/* *)",

      "Bash(ls)",
      "Bash(ls *)",
      "Bash(cat)",
      "Bash(cat *)",
      "Bash(grep *)",
      "Bash(find *)",
      "Bash(head *)",
      "Bash(tail *)",
      "Bash(wc *)",
      "Bash(echo *)",
      "Bash(curl -s *)",
      "Bash(unzip -l *)",
      "Bash(jq *)",
      "Bash(sed *)",
      "Bash(awk *)",

      "Bash(mkdir *)",
      "Bash(touch *)",
      "Bash(cp *)",
      "Bash(mv *)",
      "Bash(rm *)",
      "Bash(cd *)"
    ],
    "deny": [
      "Bash(git push --force *master*)",
      "Bash(git push --force-with-lease *master*)",
      "Bash(git push -f *master*)",
      "Bash(git push --force origin master)",
      "Bash(git push --force *main*)",
      "Bash(git push --force-with-lease *main*)",
      "Bash(git push -f *main*)",
      "Bash(git push --force origin main)",

      "Bash(git reset --hard origin/master)",
      "Bash(git reset --hard origin/main)",
      "Bash(git branch -D master)",
      "Bash(git branch -D main)",
      "Bash(git tag -d v*)",
      "Bash(git push --delete origin v*)",

      "Bash(rm -rf /)",
      "Bash(rm -rf /etc*)",
      "Bash(rm -rf /usr*)",
      "Bash(rm -rf /var*)",
      "Bash(rm -rf /root*)",
      "Bash(rm -rf /boot*)",
      "Bash(rm -rf /sys*)",
      "Bash(rm -rf /proc*)",
      "Bash(rm -rf /dev*)",
      "Bash(rm -rf /opt*)",
      "Bash(rm -rf /lib*)",
      "Bash(rm -rf /sbin*)",
      "Bash(rm -rf /bin*)",
      "Bash(rm -rf /home/*)",

      "Bash(gh issue close *)",
      "Bash(gh issue delete *)",
      "Bash(gh pr close *)",
      "Bash(gh pr merge *)",
      "Bash(gh release delete *)",
      "Bash(gh release edit *)",

      "Bash(twine upload --skip-existing *)",

      "Bash(sudo *)",
      "Bash(chmod -R 777 *)"
    ]
  }
}