{
  "$schema": "https://json-schema.org/claude-code-settings.json",
  "permissions": {
    "deny": [
      "Bash(rm -rf /:*)",
      "Bash(rm -rf ~:*)",
      "Bash(rm -rf /*)",
      "Bash(git push --force:*)",
      "Bash(git push -f:*)",
      "Bash(git reset --hard:*)",
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(**/.env)",
      "Read(**/*service_role*)",
      "Read(**/secrets/**)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(supabase db push:*)",
      "Bash(supabase link:*)",
      "Bash(npm publish:*)"
    ],
    "disableBypassPermissionsMode": "disable",
    "defaultMode": "default"
  }
}