{
  "env": {
    "YOUR_CUSTOM_ENV": "/path/to/your/project"
  },
  "permissions": {
    "allow": [
      "Bash(*)",
      "Read(*)",
      "Write(*)",
      "Edit(*)",
      "Glob(*)",
      "Grep(*)",
      "Task(*)",
      "NotebookEdit(*)",
      "WebSearch",
      "mcp__hyperbrowser__scrape_webpage",
      "mcp__playwright__browser_navigate",
      "mcp__playwright__browser_snapshot",
      "mcp__hyperbrowser__search_with_bing",
      "mcp__exa__web_search_exa",
      "mcp__context7__resolve-library-id",
      "mcp__playwright__browser_take_screenshot",
      "mcp__playwright__browser_click",
      "mcp__playwright__browser_close",
      "mcp__playwright__browser_wait_for",
      "mcp__playwright__browser_evaluate",
      "mcp__playwright__browser_fill_form",
      "mcp__playwright__browser_type",
      "mcp__playwright__browser_press_key",
      "mcp__playwright__browser_tabs",
      "mcp__context7__query-docs",
      "mcp__plugin_oh-my-claudecode_t__lsp_hover",
      "mcp__plugin_oh-my-claudecode_t__lsp_find_references",
      "mcp__plugin_oh-my-claudecode_t__lsp_goto_definition",
      "mcp__plugin_oh-my-claudecode_t__ast_grep_search",
      "mcp__plugin_oh-my-claudecode_t__notepad_write_priority",
      "mcp__plugin_oh-my-claudecode_t__notepad_read",
      "mcp__plugin_oh-my-claudecode_t__notepad_write_working",
      "mcp__plugin_oh-my-claudecode_t__project_memory_add_note"
    ],
    "deny": [
      "mcp__gmail__send_email",
      "WebFetch",
      "WebFetch(*)",
      "Bash(rm -rf /)*",
      "Bash(rm -rf ~)*",
      "Bash(rm -rf .)*",
      "Bash(rm -rf *)*",
      "Bash(sudo:*)",
      "Bash(chmod 777:*)",
      "Bash(>/dev/*)",
      "Bash(curl*|*sh)*",
      "Bash(wget*|*sh)*",
      "Bash(*>~/.ssh/*)",
      "Bash(*>~/.zshrc)*",
      "Bash(*>~/.bashrc)*",
      "Bash(*>~/.profile)*",
      "Bash(*>~/.zprofile)*",
      "Bash(git push --force*main)*",
      "Bash(git push -f*main)*",
      "Bash(git push --force*master)*",
      "Bash(git push -f*master)*",
      "Bash(git push --force-with-lease*main)*",
      "Bash(git push --force-with-lease*master)*",
      "Bash(git push origin +main)*",
      "Bash(git push origin +master)*",
      "Bash(git reset --hard origin/*)*",
      "Bash(git clean -f*)*",
      "Bash(git checkout -- .)*",
      "Bash(git restore .)*",
      "Bash(npm publish)*",
      "Bash(pnpm publish)*",
      "Bash(yarn publish)*",
      "Bash(docker system prune)*",
      "Bash(mkfs*)*",
      "Bash(dd if=*)*",
      "Bash(eval *)*",
      "Bash(bash -c *)*",
      "Bash(sh -c *)*",
      "Bash(osascript*)*",
      "Bash(crontab*)*",
      "Bash(launchctl*)*",
      "Bash(python3 -c *import os*)*",
      "Bash(node -e *)*",
      "Bash(perl -e *)*",
      "Bash(xargs *)*",
      "Bash(open http*)*",
      "Bash(source /dev/*)*"
    ]
  }
}
