From d17e4be85d26340e3206173db6f74c52ab179e9d Mon Sep 17 00:00:00 2001
From: Akshith Gunasekaran <akshithg@users.noreply.github.com>
Date: Thu, 12 Mar 2026 16:15:39 -0700
Subject: [PATCH] Add Write() deny rules for shell configs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Deny Write(~/.bashrc), Write(~/.zshrc), and Write(~/.ssh/**) to match
the existing Edit() rules for those paths. The two tools are separate —
denying Edit does not block Write.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 settings.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/settings.json b/settings.json
index 2aa8d9b..8a99c1e 100644
--- a/settings.json
+++ b/settings.json
@@ -25,6 +25,9 @@
       "Edit(~/.bashrc)",
       "Edit(~/.zshrc)",
       "Edit(~/.ssh/**)",
+      "Write(~/.bashrc)",
+      "Write(~/.zshrc)",
+      "Write(~/.ssh/**)",
 
       "Read(~/.ssh/**)",
       "Read(~/.gnupg/**)",