{
  "permissions": {
    "defaultMode": "dontAsk",
    "allow": [
      "Read(**)",
      "Glob(**)",
      "Grep(**)",
      "Edit(**)",
      "Write(**)",
      "Bash(nix eval *)",
      "Bash(nix build *)",
      "Bash(nix flake check *)",
      "Bash(nix store diff-closures *)",
      "Bash(git diff *)",
      "Bash(git status *)",
      "Bash(journalctl *)",
      "Bash(systemctl status *)",
      "Bash(systemctl is-active *)",
      "Bash(systemctl is-enabled *)",
      "Bash(systemctl is-system-running*)",
      "Bash(systemctl show *)",
      "Bash(readlink *)",
      "Bash(/etc/scripts/close-my-pane.sh)"
    ],
    "deny": [
      "Bash(sudo *)",
      "Bash(nixos-rebuild switch *)",
      "Bash(nixos-rebuild test *)",
      "Bash(nixos-rebuild dry-activate *)",
      "Bash(git push *)",
      "Bash(git commit *)",
      "Bash(agenix -d *)",
      "Bash(ssh *)",
      "Bash(curl *)"
    ]
  }
}