{
  "name": "claude-agent-observability",
  "version": "1.0.0",
  "rules": [
    {
      "type": "file",
      "pattern": "src/**/*.ts",
      "action": "allow",
      "description": "Allow editing source files"
    },
    {
      "type": "file",
      "pattern": "tests/**/*.ts",
      "action": "allow",
      "description": "Allow editing test files"
    },
    {
      "type": "file",
      "pattern": "**/*.env*",
      "action": "deny",
      "description": "Deny access to env files"
    },
    {
      "type": "file",
      "pattern": "**/.ssh/**",
      "action": "deny",
      "description": "Deny access to SSH keys"
    },
    {
      "type": "file",
      "pattern": "**/.aws/**",
      "action": "deny",
      "description": "Deny access to AWS credentials"
    },
    {
      "type": "command",
      "pattern": "git push",
      "action": "warn",
      "description": "Warn on git push"
    },
    {
      "type": "command",
      "pattern": "rm -rf /",
      "action": "deny",
      "description": "Deny destructive rm commands"
    },
    {
      "type": "command",
      "pattern": "rm -rf ~",
      "action": "deny",
      "description": "Deny home directory deletion"
    },
    {
      "type": "network",
      "pattern": "localhost:*",
      "action": "allow",
      "description": "Allow local development servers"
    },
    {
      "type": "network",
      "pattern": "api.openai.com",
      "action": "warn",
      "description": "Warn on OpenAI API calls"
    }
  ],
  "defaultAction": "warn",
  "compression": {
    "enabled": true,
    "maxTrailSize": 50,
    "retentionDays": 30
  },
  "sensitivePatterns": [
    ".env",
    "secrets",
    "password",
    "token",
    "key",
    "credential",
    "private",
    "apikey",
    "secret_key"
  ]
}