{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./apps/web/.env)",
      "Read(./apps/web/.env.*)",
      "Edit(./.env)",
      "Edit(./.env.*)",
      "Bash(git push --force*)",
      "Bash(git push -f*)",
      "Bash(git push * main*)",
      "Bash(git push * master*)",
      "Bash(git commit *--no-verify*)",
      "Bash(git commit * -n *)",
      "Bash(git reset --hard*)",
      "Bash(git clean*)",
      "Bash(rm -rf*)"
    ],
    "ask": [
      "Edit(./.gitea/workflows/**)",
      "Write(./.gitea/workflows/**)",
      "Edit(./Dockerfile*)",
      "Edit(./docker-compose*)",
      "Bash(git push*)"
    ]
  },
  "hooks": {
    "Stop": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "\"$CLAUDE_PROJECT_DIR\"/.claude/hooks/verify.sh",
            "timeout": 180
          }
        ]
      }
    ]
  }
}