Lucas WintherandClaude Opus 5
e1f152ec3e
README for humans, AGENTS.md for agents and contributors, and the docs that outlive any one platform: architecture, secrets, connectivity, triggering a deploy from another repository. CLAUDE.md, GEMINI.md and .claude/skills/ are pointers rather than copies, so every agent and every human reads the same text. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
44 lines
1.1 KiB
JSON
44 lines
1.1 KiB
JSON
{
|
|
"$schema": "https://json.schemastore.org/claude-code-settings.json",
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(make check:*)",
|
|
"Bash(scripts/check.sh:*)",
|
|
"Bash(./scripts/check.sh:*)",
|
|
"Bash(uvx ansible-lint:*)",
|
|
"Bash(uvx yamllint:*)",
|
|
"Bash(ansible-lint:*)",
|
|
"Bash(yamllint:*)",
|
|
"Bash(shellcheck:*)",
|
|
"Bash(ansible-doc:*)",
|
|
"Bash(ansible-config:*)",
|
|
"Bash(ansible-inventory:*)",
|
|
"Bash(ansible-galaxy install:*)",
|
|
"Bash(uvx --from ansible-core ansible-playbook --syntax-check:*)",
|
|
"Bash(ansible-playbook --syntax-check:*)",
|
|
"Bash(git status:*)",
|
|
"Bash(git diff:*)",
|
|
"Bash(git log:*)",
|
|
"Bash(git branch:*)"
|
|
],
|
|
"ask": [
|
|
"Bash(ansible-playbook:*)",
|
|
"Bash(ansible:*)",
|
|
"Bash(ssh:*)",
|
|
"Bash(scp:*)",
|
|
"Bash(rsync:*)"
|
|
],
|
|
"deny": [
|
|
"Read(./**/.env)",
|
|
"Read(./**/*.env)",
|
|
"Read(./**/vault.yml)",
|
|
"Read(./**/*vault_pass*)",
|
|
"Read(./**/id_rsa*)",
|
|
"Read(./**/id_ed25519*)",
|
|
"Read(./**/*.pem)",
|
|
"Bash(ansible-vault view:*)",
|
|
"Bash(ansible-vault decrypt:*)"
|
|
]
|
|
}
|
|
}
|