{
  "permissions": {
    "allow": [
      "Bash(pnpm --filter @ordinarthur-os/db build)",
      "Bash(pnpm --filter @ordinarthur-os/db tsc --noEmit)",
      "Bash(pnpm --filter @ordinarthur-os/api add tsconfig-paths)",
      "Read(//private/tmp/test_ts/pkg/**)",
      "Bash(node -e \"const m = require\\('./a.ts'\\); console.log\\('CJS require result:', m\\);\")",
      "Bash(pnpm --filter @ordinarthur-os/db migrate)",
      "Bash(pnpm --filter @ordinarthur-os/shared build)",
      "Bash(pnpm --filter @ordinarthur-os/shared typecheck)",
      "Bash(pnpm --filter @ordinarthur-os/api typecheck)",
      "Bash(pnpm --filter @ordinarthur-os/pwa typecheck)",
      "Bash(pnpm -r typecheck)",
      "Bash(pnpm --filter pwa build)",
      "Bash(pnpm --filter api build)",
      "Bash(pnpm --filter @ordinarthur-os/pwa add @dnd-kit/core @dnd-kit/sortable @dnd-kit/utilities)",
      "Bash(pnpm --filter @ordinarthur-os/api build)",
      "Bash(grep -v \"^$\")",
      "Bash(node -e \"const m = require\\('./apps/api/dist/main'\\); \")",
      "Bash(kubectl --kubeconfig ~/dev/perso/proxmox/k3s/kubeconfig.yaml get nodes)",
      "Bash(ping -c 2 -W 2 10.10.10.5)",
      "Bash(ssh -o ConnectTimeout=5 root@100.78.114.17 \"qm list\")",
      "Bash(ssh -o ConnectTimeout=10 root@100.78.114.17 \"ssh arthur@10.10.10.5 'sudo journalctl -n 30 -u k3s --no-pager' 2>&1\")",
      "Bash(ssh -o ConnectTimeout=10 root@100.78.114.17 \"qm status 103 && qm agent 103 exec -- bash -c 'df -h / && dmesg | tail -20'\")",
      "Bash(ssh -o ConnectTimeout=10 root@100.78.114.17 \"qm status 103 --verbose\")",
      "Bash(ssh root@100.78.114.17 \"qm terminal 103\")",
      "Bash(kubectl --kubeconfig ~/dev/perso/proxmox/k3s/kubeconfig.yaml get pods -n gitea)",
      "Bash(kubectl --kubeconfig ~/dev/perso/proxmox/k3s/kubeconfig.yaml get svc -n gitea)",
      "Bash(ssh arthur@100.106.59.13 \"sudo systemctl status traefik --no-pager | head -20\")",
      "Bash(ssh arthur@100.106.59.13 \"curl -s http://localhost:8080/api/http/services 2>&1 | head -100\")",
      "Bash(ssh arthur@100.106.59.13 \"cat /etc/traefik/traefik.yml\")",
      "Read(//Users/arthurbarre/.config/gitea/**)",
      "Bash(curl -s -X POST https://git.arthurbarre.fr/api/v1/user/repos -H 'Authorization: token __TRACKED_VAR__' -H 'Content-Type: application/json' -d '{\"name\":\"ordinarthur-os\",\"private\":false,\"auto_init\":false}')",
      "Bash(ssh arthur@100.78.207.119 \"sudo -u postgres psql -c \\\\\"SELECT usename FROM pg_user WHERE usename = 'ordinarthur';\\\\\"\")",
      "Bash(ssh arthur@100.114.242.60 \"sudo -u postgres psql -c \\\\\"\\\\\\\\du\\\\\" 2>&1 | grep -E 'ordinarthur|postgres'\")",
      "Bash(openssl rand:*)",
      "Bash(ssh arthur@100.114.242.60:*)",
      "Bash(ansible-playbook playbooks/gateway.yml)",
      "Bash(docker login:*)",
      "Bash(ssh arthur@100.78.207.119 \"nslookup git.arthurbarre.fr && curl -s -o /dev/null -w '%{http_code}' https://git.arthurbarre.fr/v2/\")",
      "Bash(ssh arthur@100.78.207.119 \"cat /etc/resolv.conf && echo '---' && curl -s -o /dev/null -w '%{http_code}' https://git.arthurbarre.fr/v2/\")",
      "Bash(ssh arthur@100.78.207.119 \"curl -v --max-time 10 https://git.arthurbarre.fr/v2/ 2>&1 | head -30\")",
      "Bash(ssh arthur@100.78.207.119 \"ping -c 2 1.1.1.1 && curl -s -o /dev/null -w '%{http_code}' https://51.38.62.199 -H 'Host: git.arthurbarre.fr' --insecure\")",
      "Bash(ssh arthur@100.78.207.119 \"echo '51.38.62.199 git.arthurbarre.fr' | sudo tee -a /etc/hosts && curl -s -o /dev/null -w '%{http_code}' https://git.arthurbarre.fr/v2/\")",
      "Bash(ssh arthur@100.121.251.87 \"echo '51.38.62.199 git.arthurbarre.fr' | sudo tee -a /etc/hosts && curl -s -o /dev/null -w '%{http_code}' https://git.arthurbarre.fr/v2/\")",
      "Bash(curl -s -X POST https://git.arthurbarre.fr/api/v1/user/repos -H 'Authorization: token __TRACKED_VAR__' -H 'Content-Type: application/json' -d '{\"name\":\"rebours\",\"private\":false,\"auto_init\":false}')"
    ]
  }
}