{
  "permissions": {
    "allow": [
      "Read",
      "Edit",
      "Write",
      "Glob",
      "Grep",

      "Bash(ls *)",
      "Bash(cat *)",
      "Bash(head *)",
      "Bash(tail *)",
      "Bash(grep *)",
      "Bash(rg *)",
      "Bash(find *)",
      "Bash(tree *)",
      "Bash(wc *)",
      "Bash(file *)",
      "Bash(stat *)",
      "Bash(du *)",
      "Bash(df *)",
      "Bash(which *)",
      "Bash(diff *)",
      "Bash(jq *)",
      "Bash(sha256sum *)",

      "Bash(mkdir *)",
      "Bash(cp *)",
      "Bash(mv *)",
      "Bash(touch *)",
      "Bash(ln -s *)",
      "Bash(tar *)",

      "Bash(nix *)",
      "Bash(nix-store *)",
      "Bash(nix-instantiate *)",

      "Bash(./tools/test-live-iso.sh *)",
      "Bash(./tools/test-install.sh *)",
      "Bash(./tools/audit-theme-design.py *)",
      "Bash(./tools/check-option-docs.py *)",
      "Bash(./tools/check-theme-contrast.py *)",
      "Bash(./tools/import-palettes.py *)",
      "Bash(./tools/vm/qmp.py *)",
      "Bash(./tools/vm/vncshot.py *)",
      "Bash(./tools/vm/gap-analysis.py *)",
      "Bash(python3 tools/*)",
      "Bash(bash tools/*)",

      "Bash(qemu-system-x86_64 *)",
      "Bash(qemu-img *)",

      "Bash(git status *)",
      "Bash(git diff *)",
      "Bash(git log *)",
      "Bash(git show *)",
      "Bash(git add *)",
      "Bash(git commit *)",
      "Bash(git branch *)",
      "Bash(git switch *)",
      "Bash(git checkout *)",
      "Bash(git restore *)",
      "Bash(git stash *)",
      "Bash(git worktree *)",

      "Bash(systemctl --user status *)",
      "Bash(journalctl --user *)",
      "Bash(pgrep *)",
      "Bash(pkill -f qemu*)"
    ],
    "ask": [
      "Bash(git push *)",
      "Bash(rm *)",
      "Bash(git reset --hard *)",
      "Bash(git clean *)",
      "Bash(nix-collect-garbage *)",
      "Bash(curl *)",
      "Bash(wget *)"
    ],
    "deny": [
      "Bash(sudo *)",
      "Bash(git push --force *)",
      "Bash(git push -f *)"
    ],
    "defaultMode": "default"
  }
}