Add the documentation and the agent instructions

README for humans, AGENTS.md for agents and contributors, and the docs that outlive any one platform: architecture, secrets, connectivity, triggering a deploy from another repository. CLAUDE.md, GEMINI.md and .claude/skills/ are pointers rather than copies, so every agent and every human reads the same text. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
2026-09-16 03:58:24 +02:00
parent 971034e630
commit e1f152ec3e
12 changed files with 1307 additions and 0 deletions
@@ -0,0 +1,43 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "permissions": {
+    "allow": [
+      "Bash(make check:*)",
+      "Bash(scripts/check.sh:*)",
+      "Bash(./scripts/check.sh:*)",
+      "Bash(uvx ansible-lint:*)",
+      "Bash(uvx yamllint:*)",
+      "Bash(ansible-lint:*)",
+      "Bash(yamllint:*)",
+      "Bash(shellcheck:*)",
+      "Bash(ansible-doc:*)",
+      "Bash(ansible-config:*)",
+      "Bash(ansible-inventory:*)",
+      "Bash(ansible-galaxy install:*)",
+      "Bash(uvx --from ansible-core ansible-playbook --syntax-check:*)",
+      "Bash(ansible-playbook --syntax-check:*)",
+      "Bash(git status:*)",
+      "Bash(git diff:*)",
+      "Bash(git log:*)",
+      "Bash(git branch:*)"
+    ],
+    "ask": [
+      "Bash(ansible-playbook:*)",
+      "Bash(ansible:*)",
+      "Bash(ssh:*)",
+      "Bash(scp:*)",
+      "Bash(rsync:*)"
+    ],
+    "deny": [
+      "Read(./**/.env)",
+      "Read(./**/*.env)",
+      "Read(./**/vault.yml)",
+      "Read(./**/*vault_pass*)",
+      "Read(./**/id_rsa*)",
+      "Read(./**/id_ed25519*)",
+      "Read(./**/*.pem)",
+      "Bash(ansible-vault view:*)",
+      "Bash(ansible-vault decrypt:*)"
+    ]
+  }
+}