{ "permissions": { "allow": [ "Read(//home/jashton/.local/state/nix/profiles/**)", "Read(//nix/var/nix/profiles/**)", "Read(//nix/store/**)", "Bash(systemctl --user show-environment)", "Bash(nix eval *)", "Bash(nix-instantiate --parse /home/jashton/.dotfiles/home/jashton.nix)" ] } }