{
  "permission": {
    "edit": "ask",
    "bash": "ask",
    "webfetch": "allow",
    "external_directory": "deny"
  }
}

{
  "permission": { "edit": "deny" },
  "agent": {
    "plan": { "permission": { "edit": "deny", "bash": "deny" } },
    "build": { "permission": { "edit": "allow", "bash": "ask" } }
  }
}

{
  "agent": {
    "build": {
      "permission": {
        "bash": { "*": "ask", "git status*": "allow", "git push": "ask" }
      }
    }
  }
}