{
  "permissions": {
    "defaultMode": "dontAsk",
    "allow": [
      "Read",
      "Glob",
      "Grep",
      "Edit(/workspace/Jyotisha/.worktrees/agent-loop/**)",
      "Write(/workspace/Jyotisha/.worktrees/agent-loop/**)",
      "Bash(git status:*)",
      "Bash(git log:*)",
      "Bash(git show:*)",
      "Bash(git diff:*)",
      "Bash(git fetch:*)",
      "Bash(git checkout:*)",
      "Bash(git switch:*)",
      "Bash(git rev-parse:*)",
      "Bash(git merge-base:*)",
      "Bash(git ls-remote:*)",
      "Bash(git ls-files:*)",
      "Bash(git grep:*)",
      "Bash(git add:*)",
      "Bash(git commit:*)",
      "Bash(git merge --ff-only:*)",
      "Bash(git push origin HEAD:staging)",
      "Bash(git pull --ff-only origin staging)",
      "Bash(grep:*)",
      "Bash(rg:*)",
      "Bash(ls:*)",
      "Bash(wc:*)",
      "Bash(head:*)",
      "Bash(tail:*)",
      "Bash(sort:*)",
      "Bash(npm ci:*)",
      "Bash(npm test:*)",
      "Bash(npm run lint:*)",
      "Bash(npm run build:*)",
      "Bash(npm --prefix frontend:*)",
      "Bash(node --test:*)",
      "Bash(node scripts/run-tests.mjs:*)",
      "Bash(./node_modules/.bin/tsc:*)",
      "Bash(python3 -m pytest:*)",
      "Bash(.venv/bin/python -m pytest:*)",
      "Bash(.venv/bin/python scripts/run_quality_gate.py:*)",
      "Bash(python3 scripts/run_quality_gate.py:*)",
      "Bash(deploy/is-docs-only-range.sh:*)",
      "Bash(curl -s https://staging.jyotisha.chat/api/health:*)"
    ],
    "deny": [
      "Bash(git push --force:*)",
      "Bash(git push -f:*)",
      "Bash(git reset --hard:*)",
      "Bash(git stash:*)",
      "Bash(git push origin HEAD:main)",
      "Read(~/.config/jyotisha-agent/**)",
      "Read(~/.git-credentials)",
      "Read(/opt/**)",
      "WebFetch",
      "WebSearch"
    ]
  }
}