{ ... }:
{
  home.file.".claude/settings.json".text = builtins.toJSON {
    permissions = {
      additionalDirectories = [
        "~/src"
      ];
      allow = [
        "Agent(Plan)"
        "Bash(cargo build *)"
        "Bash(cargo run *)"
        "Bash(cargo test *)"
        "Bash(docker --version)"
        "Bash(docker build *)"
        "Bash(docker pull *)"
        "Bash(env)"
        "Bash(find *)"
        "Bash(git diff *)"
        "Bash(git log *)"
        "Bash(git ls-files *)"
        "Bash(git status)"
        "Bash(grep:*)"
        "Bash(ls *)"
        "Bash(md5 *)"
        "Bash(podman --version)"
        "Bash(podman build *)"
        "Bash(podman pull *)"
        "Bash(pre-commit *)"
        "Bash(tox *)"
        "Bash(tr *)"
        "Bash(uv add *)"
        "Bash(uv run tox *)"
        "Bash(uv sync *)"
        "Bash(uv tool *)"
        "Bash(xargs ls -la)"
        "Edit(~/src/**)"
        "Read(~/.claude/**)"
        "Read(~/src/**)"
        "Read(//tmp/**)"
        "WebFetch(*)"

        "mcp__plugin_atlassian_atlassian__getAccessibleAtlassianResources"
        "mcp__plugin_atlassian_atlassian__getConfluencePage"
        "mcp__plugin_atlassian_atlassian__getIssueLinkTypes"
        "mcp__plugin_atlassian_atlassian__getJiraIssue"
        "mcp__plugin_atlassian_atlassian__getJiraIssueTypeMetaWithFields"
        "mcp__plugin_atlassian_atlassian__searchJiraIssuesUsingJql"

        "mcp__claude_ai_Atlassian__addCommentToJiraIssue"
        "mcp__claude_ai_Atlassian__getAccessibleAtlassianResources"
        "mcp__claude_ai_Atlassian__getConfluencePage"
        "mcp__claude_ai_Atlassian__getJiraIssue"
        "mcp__claude_ai_Atlassian__getJiraIssueTypeMetaWithFields"
        "mcp__claude_ai_Atlassian__getIssueLinkTypes"
        "mcp__claude_ai_Atlassian__getTransitionsForJiraIssue"
      ];
      ask = [
        "mcp__plugin_atlassian_atlassian__addCommentToJiraIssue"
        "mcp__plugin_atlassian_atlassian__createIssueLink"
        "mcp__plugin_atlassian_atlassian__editJiraIssue"

        "mcp__claude_ai_Atlassian__editJiraIssue"
        "mcp__claude_ai_Atlassian__createIssueLink"
        "mcp__claude_ai_Atlassian__transitionJiraIssue"
        "mcp__claude_ai_Atlassian__updateConfluencePage"
      ];
      defaultMode = "plan";
      deny = [
        "Bash(git commit *)"
        "Bash(git push *)"
        "Bash(rm -rf *)"
        "Edit(~/.claude/**)"
        "Read(~/.ssh/**)"
      ];
    };
  };
}