{ "permissions": { "allow": [ "WebFetch(domain:docs.bsky.app)", "Bash(tea actions:*)" ] } }