{
  "permissions": {
    "defaultMode": "default",
    "disableBypassPermissionsMode": "disable",
    "disableAutoMode": "disable",
    "allow": [
      "mcp__negsplit",
      "mcp__ens-forecast",
      "Read(~/.local/share/negsplit/charts/**)"
    ],
    "deny": [
      "Read(~/.config/**)",
      "Read(~/.claude/**)",
      "Read(~/.claude.json)",
      "Edit(~/.config/**)",
      "Edit(~/.claude/**)",
      "Edit(~/.claude.json)",
      "Edit(./.claude/**)",
      "Edit(./.mcp.json)",
      "WebFetch",
      "WebSearch"
    ]
  },
  "sandbox": {
    "enabled": true,
    "failIfUnavailable": true,
    "allowUnsandboxedCommands": false,
    "autoAllowBashIfSandboxed": true,
    "filesystem": {
      "denyRead": ["~/.config", "~/.claude", "~/.claude.json"],
      "denyWrite": ["./.claude", "./.mcp.json"]
    },
    "network": {
      "allowedDomains": []
    }
  }
}