{
  "$schema": "https://opencode.ai/config.json",
  "permissions": [
    { "action": "*", "resource": "*", "effect": "ask" },
    { "action": "read", "resource": "*", "effect": "allow" },
    { "action": "glob", "resource": "*", "effect": "allow" },
    { "action": "grep", "resource": "*", "effect": "allow" },
    { "action": "external_directory", "resource": "*", "effect": "ask" },
    { "action": "read", "resource": "*.env*", "effect": "deny" },
    { "action": "read", "resource": "*service-account*.json", "effect": "deny" },
    { "action": "read", "resource": "*firebase-adminsdk*.json", "effect": "deny" },
    { "action": "read", "resource": "*.pem", "effect": "deny" }
  ]
}