{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "permissions": {
    "allow": [
      "Bash(make check:*)",
      "Bash(scripts/check.sh:*)",
      "Bash(./scripts/check.sh:*)",
      "Bash(uvx ansible-lint:*)",
      "Bash(uvx yamllint:*)",
      "Bash(ansible-lint:*)",
      "Bash(yamllint:*)",
      "Bash(shellcheck:*)",
      "Bash(ansible-doc:*)",
      "Bash(ansible-config:*)",
      "Bash(ansible-inventory:*)",
      "Bash(ansible-galaxy install:*)",
      "Bash(uvx --from ansible-core ansible-playbook --syntax-check:*)",
      "Bash(ansible-playbook --syntax-check:*)",
      "Bash(git status:*)",
      "Bash(git diff:*)",
      "Bash(git log:*)",
      "Bash(git branch:*)"
    ],
    "ask": [
      "Bash(ansible-playbook:*)",
      "Bash(ansible:*)",
      "Bash(ssh:*)",
      "Bash(scp:*)",
      "Bash(rsync:*)"
    ],
    "deny": [
      "Read(./**/.env)",
      "Read(./**/*.env)",
      "Read(./**/vault.yml)",
      "Read(./**/*vault_pass*)",
      "Read(./**/id_rsa*)",
      "Read(./**/id_ed25519*)",
      "Read(./**/*.pem)",
      "Bash(ansible-vault view:*)",
      "Bash(ansible-vault decrypt:*)"
    ]
  }
}