Full Local Development Permissions Config

When to use this

Use for trusted local development workflows where agents need broad command execution access while safeguarding secret files.

The template

{
  "permissions": {
    "file_system": {
      "read": [
        "${workspaceRoot}/**"
      ],
      "write": [
        "${workspaceRoot}/**"
      ],
      "deny": [
        "**/.env*",
        "**/*.key",
        "**/*.p12",
        "~/.aws/**"
      ]
    },
    "commands": {
      "allowed": [
        "*"
      ],
      "require_approval": [
        "git push*",
        "npm publish*"
      ],
      "forbidden": [
        "rm -rf /",
        "mkfs*"
      ]
    }
  }
}

How to use

Save to your local agent configuration directory.