{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "*": "ask",
    "read": {
      "*": "allow",
      "*.env*": "deny",
      "*service-account*.json": "deny",
      "*firebase-adminsdk*.json": "deny",
      "*.pem": "deny"
    },
    "glob": "allow",
    "grep": "allow",
    "external_directory": "ask"
  }
}