{
  "$schema": "https://opencode.ai/config.json",
  "permission": {
    "bash": {
      "python": "deny",
      "python *": "deny",
      "make": "deny",
      "make *": "deny",
      "just remote *": "ask"
    },
    "read": {
      ".env": "deny"
    },
    "edit": {
      ".env": "deny"
    }
  }
}