{
  "network": {
    "allowedDomains": [
      "anthropic.com",
      "*.anthropic.com",
      "openai.com",
      "*.openai.com",
      "chatgpt.com",
      "*.chatgpt.com",
      "openrouter.ai",
      "*.openrouter.ai",
      "nousresearch.com",
      "*.nousresearch.com",
      "generativelanguage.googleapis.com",
      "api.mistral.ai",
      "api.deepseek.com",
      "api.x.ai",
      "api.groq.com",
      "api.together.xyz",
      "*.githubcopilot.com",

      "github.com",
      "*.github.com",
      "*.githubusercontent.com",
      "gitea.federated.computer",
      "gitea.young.computer",
      "registry.npmjs.org",
      "registry.yarnpkg.com",
      "pypi.org",
      "files.pythonhosted.org",
      "crates.io",
      "*.crates.io",
      "rubygems.org",
      "*.rubygems.org",
      "proxy.golang.org",
      "sum.golang.org",
      "archlinux.org",
      "*.archlinux.org"
    ],
    "deniedDomains": []
  },
  "filesystem": {
    "denyRead": [
      "~/.ssh",
      "~/.gnupg",
      "~/.password-store",
      "~/.local/share/keyrings",
      "~/.netrc",
      "~/.git-credentials",
      "~/.aws",
      "~/.azure",
      "~/.config/gcloud",
      "~/.kube",
      "~/.docker",
      "~/.config/gh",
      "~/.config/tea",
      "~/.config/borg",
      "~/.config/Bitwarden",
      "~/.config/Element",
      "~/.mozilla",
      "~/.config/chromium",
      "~/.config/google-chrome",
      "~/.config/BraveSoftware",
      "~/.config/net.imput.helium",
      "~/.var/app",
      "~/.davfs2",
      "~/.claude",
      "~/.claude.json",
      "~/.hermes",
      "~/.config/opencode",
      "~/.local/share/opencode"
    ],
    "allowRead": [],
    "allowWrite": [
      ".",
      "/tmp",
      "~/.npm",
      "~/.cache/pip",
      "~/.cargo/registry",
      "~/.cargo/git",
      "~/go/pkg/mod"
    ],
    "denyWrite": []
  }
}