{
  "identifier": "run-app",
  "description": "app capability",
  "windows": ["main"],
  "permissions": [
    {
      "identifier": "fs:read",
      "allow": [
        {
          "path": "$HOME/.config/**"
        }
      ]
    },
    "fs:deny-home",
    {
      "identifier": "fs:allow-read-resources",
      "deny": [
        {
          "path": "$RESOURCE/**/*.key"
        }
      ]
    },
    "fs:allow-move-temp",
    {
      "identifier": "fs:allow-app",
      "allow": [
        {
          "path": "$APPDATA/**"
        }
      ],
      "deny": [
        {
          "path": "$APPDATA/*.db"
        }
      ]
    },
    "fs:read-download-dir"
  ]
}