settings.json

{
  "$comment": "Tracked agent settings — safe, read-only defaults shared across fresh clones. settings.local.json sits next to this file (gitignored) and overrides per-machine. Side-effecting pipeline stages (build, fetch, extract, convert, tighten_variant) are intentionally NOT pre-approved here — those skills carry disable-model-invocation: true and confirmation lives in AGENTS.md.",
  "permissions": {
    "allow": [
      "Bash(python -m scripts.pipeline.status *)",
      "Bash(python -m scripts.pipeline.status)",
      "Bash(python -m scripts.pipeline.validate_manifest *)",
      "Bash(python -m scripts.pipeline.validate_manifest)",
      "Bash(python -m scripts.pipeline.list_datasets *)",
      "Bash(python -m scripts.pipeline.list_datasets)",
      "Bash(python -m scripts.pipeline.docs *)",
      "Bash(python -m scripts.pipeline.docs)",
      "Bash(python -c *)",
      "Bash(python3 -c *)",
      "Bash(.venv/bin/python -c *)",
      "Bash(.venv/bin/python -m scripts.pipeline.status *)",
      "Bash(.venv/bin/python -m scripts.pipeline.validate_manifest *)",
      "Bash(.venv/bin/python -m scripts.pipeline.docs *)",
      "Bash(uv sync*)",
      "Bash(uv run python -m scripts.pipeline.status *)",
      "Bash(uv run python -m scripts.pipeline.validate_manifest *)",
      "Bash(uv run python -m scripts.pipeline.docs *)",
      "Bash(git status*)",
      "Bash(git diff*)",
      "Bash(git log*)",
      "Bash(git show*)",
      "Bash(git branch*)",
      "Bash(git remote*)",
      "Bash(git ls-files*)",
      "Bash(git rev-parse*)",
      "Bash(git blame*)",
      "Bash(ls *)",
      "Bash(wc *)",
      "Bash(du -sh*)",
      "Bash(df -h*)",
      "Bash(file *)",
      "Bash(head -*)",
      "Bash(tail -*)",
      "Bash(jq *)",
      "WebFetch(domain:github.com)",
      "WebFetch(domain:api.github.com)",
      "WebFetch(domain:raw.githubusercontent.com)",
      "WebFetch(domain:agentskills.io)",
      "WebFetch(domain:code.claude.com)",
      "WebFetch(domain:docs.astral.sh)",
      "WebFetch(domain:duckdb.org)",
      "WebFetch(domain:arrow.apache.org)",
      "WebFetch(domain:parquet.apache.org)",
      "WebFetch(domain:vortex.dev)",
      "WebSearch"
    ]
  }
}