{
  "sandbox": {
    "allowed_roots": ["C:/work/project", "C:/work/shared"],
    "blocked_paths": ["**/.env", "**/secrets/**", "**/*.key"],
    "allow_symlink_escape": false,
    "follow_symlinks_within_roots": true,
    "read_enabled": true,
    "write_enabled": true,
    "max_read_bytes": 1048576,
    "max_write_bytes": 1048576,
    "eol_policy": "preserve",
    "encoding": "utf-8"
  },
  "permissions": {
    "mode": "whitelist",
    "remember_decisions": true,
    "remember_ttl_secs": 86400,
    "scope": "per_connector",
    "whitelist": {
      "write_paths": ["C:/work/project/**"],
      "execute_commands": ["cargo", "npm", "git", "python"]
    }
  },
  "terminal": {
    "enabled": true,
    "default_cwd": "C:/work/project",
    "env_allowlist": ["RUST_LOG", "NODE_ENV", "PATH"],
    "command_blocklist": ["rm", "rd", "format", "mkfs*", "del /f /q *"],
    "output_byte_limit": 200000,
    "max_runtime_secs": 3600
  },
  "search": {
    "max_results": 5000,
    "max_bytes": 1000000,
    "default_include_globs": [],
    "default_exclude_globs": [
      "**/target/**",
      "**/.git/**",
      "**/node_modules/**",
      "**/__pycache__/**",
      "**/.venv/**"
    ]
  },
  "embedding": {
    "max_embed_bytes": 256000,
    "allow_resource_link": true,
    "redact_patterns": [
      "(?i)(api[_-]?key|password|secret|token)[:\\s]*['\"]?([a-zA-Z0-9_\\-\\.]+)['\"]?"
    ],
    "snippet_strategy": "head_tail",
    "max_files_per_prompt": 10
  }
}