{
  "permissions": {
    "allow": [
      "Bash(lsblk -f)",
      "Bash(findmnt -t btrfs)",
      "Bash(btrfs filesystem *)",
      "Bash(voxtype setup *)",
      "Bash(voxtype config *)",
      "Bash(systemctl --user cat voxtype.service)",
      "Read(//usr/lib/systemd/user/**)",
      "Bash(qs --help)",
      "Bash(qs manifest *)",
      "Bash(qs list *)",
      "Bash(qs -c noctalia-shell --help)",
      "Bash(qs shell *)",
      "Bash(pacman -Ql noctalia-shell)",
      "Bash(chmod +x *)",
      "Bash(systemctl *)",
      "Bash(journalctl --user -u voxtype.service -n 40 --no-pager)",
      "Bash(pactl info *)",
      "Bash(arecord -l)",
      "Bash(pactl list *)",
      "Bash(pacman -Q pipewire-alsa)",
      "Bash(arecord -d 1 -f S16_LE -r 16000 -c 1 /tmp/voxtest.wav)",
      "Bash(ldd /usr/bin/voxtype)",
      "Read(//run/user/1000/**)",
      "Read(//etc/alsa/conf.d/**)",
      "Read(//usr/share/alsa/alsa.conf.d/**)",
      "Bash(arecord -L)",
      "Bash(PIPEWIRE_RUNTIME_DIR=/run/user/1000 arecord -L)",
      "Bash(arecord -d 1 -D pipewire -f S16_LE -r 16000 -c 1 /tmp/voxtest-pw.wav)",
      "Bash(arecord -d 1 -D pulse -f S16_LE -r 16000 -c 1 /tmp/voxtest-pulse.wav)",
      "Bash(journalctl --user -u voxtype.service -n 10 --no-pager)",
      "Bash(journalctl --user -u voxtype.service --since \"1 minute ago\" --no-pager)",
      "Bash(voxtype status *)"
    ]
  }
}