{
  "chiron": {
    "description": "Personal AI assistant (Plan Mode). Read-only analysis, planning, and guidance.",
    "mode": "primary",
    "model": "zai-coding-plan/glm-4.7",
    "prompt": "{file:./prompts/chiron.txt}",
    "permission": {
      "external_directory": {
        "~/p/**": "allow",
        "*": "ask"
      },
      "read": {
        "*": "allow",
        "*.env": "deny",
        "*.env.*": "deny",
        "*.env.example": "allow",
        "*/.ssh/*": "deny",
        "*/.gnupg/*": "deny",
        "*credentials*": "deny",
        "*secrets*": "deny",
        "*.pem": "deny",
        "*.key": "deny",
        "*/.aws/*": "deny",
        "*/.kube/*": "deny",
        "/run/agenix/*": "deny",
        ".local/share/*": "deny",
        ".cache/*": "deny",
        "*.db": "deny",
        "*.keychain": "deny",
        "*.p12": "deny"
      },
      "edit": "deny",
      "bash": {
        "*": "deny",
        "bd *": "allow",
        "echo * > *": "deny",
        "cat * > *": "deny",
        "printf * > *": "deny",
        "tee": "deny",
        "*>*": "deny",
        ">*>*": "deny",
        "eval *": "deny",
        "source *": "deny",
        "$(*": "deny",
        "`*": "deny",
        "git add *.env*": "deny",
        "git commit *.env*": "deny",
        "git add *credentials*": "deny",
        "git add *secrets*": "deny"
      },
      "task": {
        "*": "deny",
        "explore": "allow",
        "librarian": "allow",
        "athena": "allow",
        "chiron-forge": "allow"
      },
      "doom_loop": "ask"
    }
  },
  "chiron-forge": {
    "description": "Personal AI assistant (Worker Mode). Full write access with safety prompts.",
    "mode": "primary",
    "model": "zai-coding-plan/glm-4.7",
    "prompt": "{file:./prompts/chiron-forge.txt}",
    "permission": {
      "read": {
        "*": "allow",
        "*.env": "deny",
        "*.env.*": "deny",
        "*.env.example": "allow",
        "*/.ssh/*": "deny",
        "*/.gnupg/*": "deny",
        "*credentials*": "deny",
        "*secrets*": "deny",
        "*.pem": "deny",
        "*.key": "deny",
        "*/.aws/*": "deny",
        "*/.kube/*": "deny",
        "/run/agenix/*": "deny",
        ".local/share/*": "deny",
        ".cache/*": "deny",
        "*.db": "deny",
        "*.keychain": "deny",
        "*.p12": "deny"
      },
      "edit": "allow",
      "bash": {
        "*": "allow",
        "rm *": "ask",
        "rmdir *": "ask",
        "mv *": "ask",
        "chmod *": "ask",
        "chown *": "ask",
        "git status*": "allow",
        "git log*": "allow",
        "git diff*": "allow",
        "git branch*": "allow",
        "git show*": "allow",
        "git stash list*": "allow",
        "git remote -v": "allow",
        "git add *": "allow",
        "git commit *": "allow",
        "git push *": "ask",
        "git config *": "deny",
        "git add *.env*": "deny",
        "git commit *.env*": "deny",
        "git add *credentials*": "deny",
        "git add *secrets*": "deny",
        "jj *": "ask",
        "jj status": "allow",
        "jj log*": "allow",
        "jj diff*": "allow",
        "jj show*": "allow",
        "npm install *": "ask",
        "npm i *": "ask",
        "npx *": "ask",
        "bun install *": "ask",
        "bun i *": "ask",
        "bunx *": "ask",
        "pip install *": "ask",
        "pip3 install *": "ask",
        "uv *": "ask",
        "yarn install *": "ask",
        "yarn add *": "ask",
        "pnpm install *": "ask",
        "pnpm add *": "ask",
        "cargo install *": "ask",
        "go install *": "ask",
        "make install": "ask",
        "dd *": "deny",
        "mkfs*": "deny",
        "fdisk *": "deny",
        "parted *": "deny",
        "eval *": "deny",
        "source *": "deny",
        "$(*": "deny",
        "`*": "deny",
        "curl *|*sh": "deny",
        "wget *|*sh": "deny",
        "sudo *": "deny",
        "su *": "deny",
        "systemctl *": "deny",
        "service *": "deny",
        "shutdown *": "deny",
        "reboot*": "deny",
        "init *": "deny",
        "> /dev/*": "deny",
        "cat * > /dev/*": "deny",
        "echo * > *": "deny",
        "cat * > *": "deny",
        "printf * > *": "deny",
        "tee": "deny",
        "*>*": "deny",
        ">*>*": "deny"
      },
      "external_directory": {
        "~/p/**": "allow",
        "*": "ask"
      },
      "doom_loop": "ask"
    }
  },
  "athena": {
    "description": "Goddess of wisdom and knowledge. Research sub-agent for non-technical investigation and analysis.",
    "mode": "subagent",
    "model": "zai-coding-plan/glm-4.7",
    "temperature": 0.1,
    "prompt": "{file:./prompts/athena.txt}",
    "permission": {
      "read": {
        "*": "allow",
        "*.env": "deny",
        "*.env.*": "deny",
        "*.env.example": "allow",
        "*/.ssh/*": "deny",
        "*/.gnupg/*": "deny",
        "*credentials*": "deny",
        "*secrets*": "deny",
        "*.pem": "deny",
        "*.key": "deny",
        "*/.aws/*": "deny",
        "*/.kube/*": "deny"
      },
      "edit": "deny",
      "bash": "deny",
      "external_directory": "deny",
      "doom_loop": "deny"
    }
  }
}