{
  "permissions": {
    "allow": [
      "Bash(hugo version *)",
      "Bash(ls -la .claude/ 2>/dev/null; echo \"---SEARCH for hugo sites---\"; find /home/karim -maxdepth 3 -name \"hugo.toml\" -o -maxdepth 3 -name \"config.toml\" 2>/dev/null | grep -v node_modules | head -20; echo \"---shibui---\"; find /home/karim -maxdepth 4 -iname \"*shibui*\" 2>/dev/null | head)",
      "Read(//home/karim/**)",
      "WebFetch(domain:www.baenziger-hug.com)",
      "WebFetch(domain:karimgabrielevarano.xyz)",
      "WebSearch",
      "Bash(hugo --gc --minify)",
      "Bash(hugo server *)",
      "Bash(curl -s -o /dev/null -w \"homepage: HTTP %{http_code}\\\\n\" http://localhost:1313/)",
      "Bash(curl -s -o /dev/null -w \"work page: HTTP %{http_code}\\\\n\" http://localhost:1313/work/)",
      "Bash(sed -n 's/.*<main id=main-content role=main>\\\\\\(.*\\\\\\)<\\\\/main>.*/\\\\1/p' about.html)",
      "Bash(sed -n 's/.*<main id=main-content role=main>\\\\\\(.*\\\\\\)<\\\\/main>.*/\\\\1/p' work.html)",
      "Bash(curl -s -o /dev/null -w \"home HTTP %{http_code}\\\\n\" http://localhost:1313/)",
      "Bash(curl -s -o /dev/null -w \"work HTTP %{http_code}\\\\n\" http://localhost:1313/work/)",
      "WebFetch(domain:git.kgva.ch)",
      "Bash(echo \"=== ssh hosts configured ===\"; sed -n 's/^[Hh]ost //p' ~/.ssh/config 2>/dev/null || echo \"\\(no ~/.ssh/config\\)\"; echo \"=== ssh keys present ===\"; ls ~/.ssh/*.pub 2>/dev/null || echo \"\\(none\\)\"; echo \"=== known_hosts \\(host names only\\) ===\"; cut -d' ' -f1 ~/.ssh/known_hosts 2>/dev/null | tr ',' '\\\\n' | sort -u | head -20 || echo \"\\(none\\)\")",
      "Bash(chmod +x deploy/provision-lxc.sh)",
      "Bash(ssh -o BatchMode=yes -o ConnectTimeout=6 git@git.openbureau.ch)",
      "Bash(bash /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/pssh.sh 'pct exec 104 -- sh -lc \"grep -rn -A4 karimgabrielevarano /etc/caddy/ 2>/dev/null | head -40\"')",
      "Bash(bash /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/pssh.sh 'pct exec 130 -- sh -lc \"\\(nginx -v\\) 2>&1; \\(caddy version\\) 2>&1; echo files:; ls /var/www/karimgabrielevarano.xyz | head\"')",
      "Bash(bash /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/pssh.sh 'ls /var/lib/vz/template/cache/ 2>/dev/null; pveam list local 2>/dev/null | grep -i debian | head')",
      "Bash(bash /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/pssh.sh 'pvesm status 2>/dev/null')",
      "Bash(bash /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/pssh.sh 'bash -lc '\\\\'' *)",
      "Bash(bash /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/pssh.sh 'rm -f /tmp/kgva-site.tgz && echo \"node temp removed\"; echo \"rollback snapshot still present:\"; zfs list -t snapshot | grep kgva-website')",
      "Bash(shred -u /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/ap.sh)",
      "Bash(rm -f __TRACKED_VAR__/site.tgz)",
      "Bash(bash /tmp/claude-1000/-home-karim-kgva/2d6c60c0-d07a-4092-8118-4f88d75db9c3/scratchpad/pssh.sh 'pct exec 120 -- sh -c \"cd /var/lib/gitea && su gitea -s /bin/bash -c \\\\\"/usr/local/bin/gitea admin user list --config /etc/gitea/app.ini\\\\\" 2>&1\"')"
    ],
    "additionalDirectories": [
      "/home/karim/.ssh"
    ]
  }
}
