{ "$schema": "https://json.schemastore.org/claude-code-settings.json", "attribution": { "commit": "", "pr": "" }, "permissions": { "allow": [ "Bash", "Read", "Edit", "Write", "Glob", "Grep", "WebFetch", "WebSearch" ], "deny": [ "Read(~/.ssh/**)", "Read(~/.aws/**)", "Read(~/.gnupg/**)", "Read(./.env)", "Read(./.env.*)", "Write(~/.ssh/**)", "Write(~/.aws/**)", "Write(~/.gnupg/**)", "Edit(~/.ssh/**)", "Edit(~/.aws/**)", "Edit(~/.gnupg/**)", "Bash(*.ssh/*)", "Bash(*.aws/*)", "Bash(*.gnupg/*)", "Bash(*.env*)" ], "ask": [ "Bash(rm *)", "Bash(rmdir *)", "Bash(git push --force*)", "Bash(git push -f*)", "Bash(git reset --hard*)", "Bash(git clean *)", "Bash(chmod *)", "Bash(dd *)", "Bash(mkfs*)", "Bash(shred *)", "Bash(kill *)", "Bash(killall *)", "Bash(sudo *)" ], "defaultMode": "acceptEdits" }, "model": "sonnet", "effortLevel": "medium", "claudeMdExcludes": [ ".claude/agent-memory/**" ] }