{
  "permissions": {
    "allow": [
      "Skill(commit-commands:commit)",
      "Bash(git push:*)",
      "Bash(git add:*)",
      "WebSearch",
      "mcp__web-search-prime__web_search_prime",
      "mcp__web-reader__webReader",
      "Bash(python3 -c \"import json; json.load\\(open\\('modules/openclaw-config.json'\\)\\); print\\('JSON is valid'\\)\")",
      "mcp__zread__search_doc",
      "mcp__zread__read_file",
      "Bash(sudo podman:*)",
      "Bash(curl:*)",
      "Bash(sudo ls:*)",
      "Bash(sudo systemctl:*)",
      "Bash(sudo mkdir:*)",
      "Bash(sudo chown:*)",
      "Bash(sudo chmod:*)",
      "Read(//var/lib/**)",
      "Bash(sudo cat:*)",
      "Bash(sudo journalctl:*)",
      "Bash(sudo nginx:*)",
      "Bash(systemctl status:*)",
      "Bash(nix-instantiate:*)",
      "Bash(sudo head:*)",
      "Bash(ls:*)",
      "Bash(systemctl show:*)",
      "Bash(nix-store:*)",
      "Read(//etc/**)",
      "Bash(sudo iptables:*)",
      "Bash(sudo find:*)",
      "Bash(sudo grep:*)",
      "Bash(find:*)",
      "Bash(systemctl cat:*)",
      "Bash(readlink:*)",
      "Bash(nixos-option:*)"
    ]
  }
}