{
  "attribution": {
    "commit": "",
    "pr": ""
  },
  "permissions": {
    "deny": [
      "Bash(git push)",
      "Bash(git push:*)",
      "Bash(git commit)",
      "Bash(git commit:*)",
      "Bash(git reset --hard)",
      "Bash(git reset --hard:*)",
      "Bash(git clean)",
      "Bash(git clean:*)",
      "Read(**/.env)",
      "Read(**/.env.*)",
      "Read(**/*.env)",
      "Read(**/*.pem)",
      "Read(**/*.key)",
      "Read(**/*.p12)",
      "Read(**/*.pfx)",
      "Read(**/*.keystore)",
      "Read(**/id_rsa*)",
      "Read(**/.ssh/**)",
      "Read(**/.aws/**)",
      "Read(**/.npmrc)",
      "Read(**/.netrc)",
      "Read(**/.git-credentials)",
      "Read(**/.claude/.credentials.json)",
      "Read(**/secrets.fish)",
      "Read(**/*.token)",
      "Read(**/.envrc)"
    ],
    "defaultMode": "auto"
  },
  "model": "claude-fable-5[1m]",
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Edit|Write|MultiEdit",
        "hooks": [
          {
            "type": "command",
            "command": "/usr/bin/env python3 ~/.claude/hooks/format.py",
            "timeout": 20,
            "statusMessage": "format"
          }
        ]
      }
    ]
  },
  "worktree": {
    "baseRef": "fresh"
  },
  "enableWorkflows": false,
  "statusLine": {
    "type": "command",
    "command": "/usr/bin/env python3 ~/.claude/statusline.py",
    "padding": 0,
    "hideVimModeIndicator": true
  },
  "enabledPlugins": {
    "typescript-lsp@claude-plugins-official": true,
    "frontend-design@claude-plugins-official": true
  },
  "effortLevel": "xhigh",
  "advisorModel": "fable",
  "tui": "fullscreen",
  "skipWorkflowUsageWarning": true,
  "theme": "dark",
  "editorMode": "vim",
  "verbose": true,
  "autoCompactEnabled": true,
  "remoteControlAtStartup": false,
  "inputNeededNotifEnabled": false,
  "agentPushNotifEnabled": false,
  "skipAutoPermissionPrompt": true,
  "autoMode": {
    "environment": [
      "### Org-wide",
      "**Organization**: None configured",
      "**Cloud provider(s)**: None configured",
      "**Repository visibility**: private (wingman-ai/c2, via gh)",
      "**Internal sharing / snippet hosting**: None configured — treat public paste/gist services as outside the trust boundary",
      "**Secrets management**: None configured",
      "**Default / protected branches**: Default branch master; protected branches: none listed (rulesets not queryable here — do not assume unprotected)",
      "**CI/CD deploy targets**: None configured",
      "**Network posture**: None configured",
      "**Source control**: The trusted repo (wingman-ai/c2, origin github.com:wingman-ai/c2.git) and its remote(s) only",
      "**Trusted internal domains**: None configured",
      "**Trusted cloud buckets**: None configured",
      "**Key internal services**: None configured",
      "**Internal package registry**: None configured",
      "**Sensitive data locations & audiences**: any file or store holding personal data, confidential business data, credentials, regulated data, or similarly sensitive material; preserve exact handles when known and share only with audiences cleared at the [named+specifics] bar; note .env, .env.dev, .env.example are gitignored/tracked as sensitive-looking paths in this repo",
      "**Data retention / declassification**: None configured",
      "**Sensitive remote targets**: any namespace, host, or container whose name carries `prod` or `production` as a whole word or name segment",
      "**Protected deployment namespaces / environments**: None configured — fall back to the Sensitive remote targets heuristic",
      "**Protected IaC scopes**: IAM, RBAC, networking, quota, and node-pool resources; anything whose name or tag carries `prod` or `production` as a whole word or name segment",
      "### User-specific",
      "**Primary use of Claude Code**: software development (Electron/Vite/React/TypeScript UAV client controller, wm-drone-controller / c2-building)",
      "**Trusted repo**: /home/coja/projects/wingman/wm-clients/c2/c2-building (origin github.com:wingman-ai/c2.git), private — confidential material is fine here; content ported from outside this session's repo is not this repo's own work",
      "**Org-specific CLIs**: None configured",
      "routine under this repo's Makefile/pnpm targets (make all, make prepare, make fnm-node, pnpm scripts) is expected local development activity"
    ]
  }
}