{
  "permissions": {
    "allow": [
      "Bash(ls:*)",
      "Bash(hg status:*)"
    ]
  }
}