{
  "permissions": {
    "allow": [
      "Bash(systemctl --user list-units --no-pager)",
      "Bash(ps -o pid,ppid,etime,cmd -p 254)",
      "Bash(systemctl --user restart missioflow-handoff-web)",
      "Bash(systemctl --user status missioflow-handoff-web --no-pager -n 5)",
      "Bash(curl -s http://127.0.0.1:7878/api/plans)",
      "Bash(kill 254)",
      "Bash(curl -s -i http://127.0.0.1:7878/api/plans)",
      "Bash(curl -s -i -A \"Mozilla/5.0\" http://127.0.0.1:7878/api/plans)",
      "Bash(curl -s -o /dev/null -w \"/api/plans      -> %{http_code}\\\\n\" http://127.0.0.1:7878/api/plans)",
      "Bash(curl -s -o /dev/null -w \"/api/plans/     -> %{http_code}\\\\n\" http://127.0.0.1:7878/api/plans/)",
      "Bash(curl -s -o /dev/null -w \"/api/plans?_=1  -> %{http_code}\\\\n\" \"http://127.0.0.1:7878/api/plans?_=1\")",
      "Bash(curl -s -o /dev/null -w 'Browser-like  -> %{http_code}\\\\n' -H 'Accept: */*' -H 'Accept-Encoding: gzip, deflate' -H 'Referer: http://127.0.0.1:7878/' http://127.0.0.1:7878/api/plans)",
      "Bash(sqlite3 '~/projects/missioflow-handoff-mcp/data/handoff.sqlite' 'SELECT id, project, title, status FROM plans; SELECT '\\\\''---'\\\\''; SELECT id, plan_id, position, title, status FROM tasks;')",
      "Bash(node --input-type=module -e ' *)",
      "Bash(MCP_HANDOFF_DB=/tmp/plans-pr3-test.sqlite npm run smoke:plans)",
      "Bash(MCP_HANDOFF_DB=/tmp/smoke-msg-pr3.sqlite npm run smoke)",
      "Bash(node --check src/db.mjs)",
      "Bash(node --check src/web.mjs)",
      "Bash(kill 283)",
      "Bash(ps -p 283 -o pid=)",
      "Bash(node src/web.mjs)",
      "Bash(curl -sS -o /dev/null -w \"GET /api/plans -> %{http_code}\\\\n\" http://127.0.0.1:7878/api/plans)",
      "Bash(curl -sS -X DELETE -w \"\\\\nHTTP %{http_code}\\\\n\" http://127.0.0.1:7878/api/plans/999999)",
      "Bash(kill 34259)",
      "Bash(curl -sS http://127.0.0.1:7878/api/plans)",
      "Bash(python3 -c \"import sys,json; d=json.load\\(sys.stdin\\); [print\\(f\\\\\"plan #{p['id']} '{p['title']}' project={p['project']} status={p['status']}\\\\\"\\) for p in d['plans']]\")",
      "Bash(curl -sS -X POST http://127.0.0.1:7878/api/plans/999999/reopen -w \"\\\\nHTTP %{http_code}\\\\n\")",
      "Bash(curl -sS -X POST http://127.0.0.1:7878/api/plans/999999/close -w \"\\\\nHTTP %{http_code}\\\\n\")"
    ]
  }
}
