Claude Code Permissions

settings.json

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "permissions": {
    "allow": [
      "Edit(**)",
      "Write(**)",
      "Read(**)",
      "Read(~/.claude/**)",
      "Bash(git:*)",
      "Bash(npm:*)",
      "Bash(npx:*)",
      "Bash(node:*)",
      "Bash(python:*)",
      "Bash(python3:*)",
      "Bash(pip:*)",
      "Bash(pip3:*)",
      "Bash(dotnet:*)",
      "Bash(pwsh:*)",
      "Bash(powershell:*)",
      "Bash(claude:*)",
      "Bash(ls:*)",
      "Bash(cat:*)",
      "Bash(grep:*)",
      "Bash(find:*)",
      "Bash(mkdir:*)",
      "Bash(xargs:*)",
      "Bash(chmod:*)",
      "Bash(cp:*)",
      "Bash(mv:*)",
      "Bash(touch:*)",
      "Bash(head:*)",
      "Bash(tail:*)",
      "Bash(wc:*)",
      "Bash(sort:*)",
      "Bash(uniq:*)",
      "Bash(diff:*)",
      "Bash(sed:*)",
      "Bash(awk:*)",
      "Bash(curl:*)",
      "Bash(wget:*)",
      "Bash(yarn:*)",
      "Bash(pnpm:*)",
      "Bash(cargo:*)",
      "Bash(go:*)",
      "Bash(brew:*)",
      "Bash(pytest:*)",
      "Bash(poetry:*)",
      "Bash(uv:*)",
      "Bash(ruff:*)",
      "Bash(black:*)",
      "Bash(mypy:*)",
      "Bash(uvicorn:*)",
      "Bash(gunicorn:*)",
      "Bash(tsc:*)",
      "Bash(eslint:*)",
      "Bash(prettier:*)",
      "Bash(jest:*)",
      "Bash(vitest:*)",
      "Bash(bun:*)",
      "Bash(esbuild:*)",
      "Bash(vite:*)",
      "Bash(gh:*)",
      "Bash(vercel:*)",
      "Bash(open:*)",
      "Bash(pbcopy:*)",
      "Bash(pbpaste:*)",
      "Bash(code:*)",
      "Bash(tar:*)",
      "Bash(zip:*)",
      "Bash(unzip:*)",
      "Bash(gzip:*)",
      "Bash(which:*)",
      "Bash(whoami)",
      "Bash(uname:*)",
      "Bash(lsof:*)",
      "Bash(ps:*)",
      "Bash(netstat:*)",
      "Bash(du:*)",
      "Bash(top:*)",
      "Bash(make:*)",
      "Bash(just:*)",
      "Bash(turbo:*)",
      "Bash(lerna:*)",
      "Bash(supabase:*)",
      "Bash(stripe:*)",
      "Bash(playwright:*)",
      "Bash(drizzle-kit:*)",
      "Bash(where:*)",
      "Bash(dir:*)",
      "Bash(type:*)",
      "Bash(findstr:*)",
      "Bash(tasklist:*)",
      "Bash(systeminfo)",
      "Bash(robocopy:*)",
      "Bash(xcopy:*)",
      "Bash(py:*)",
      "Bash(wsl:*)",
      "Bash(msbuild:*)",
      "WebSearch",
      "WebFetch(domain:*)",
      "Skill(*)",
    ],
    "deny": [
      "Bash(rm -rf /)",
      "Bash(rm -rf ~)",
      "Bash(rm -rf /*)",
      "Bash(rm -rf ~/Library)",
      "Bash(rm -rf /Applications)",
      "Bash(sudo rm -rf:*)",
      "Bash(mkfs:*)",
      "Bash(dd if=/dev/zero:*)",
      "Bash(chmod -R 777 /)",
      "Bash(kill -9 -1)",
      "Bash(shutdown:*)",
      "Bash(reboot:*)",
      "Bash(halt:*)",
      "Bash(git push --force origin main)",
      "Bash(git push --force origin master)",
      "Bash(gh repo delete:*)",
      "Bash(vercel rm:*)",
      "Bash(git reset --hard:*)",
      "Bash(git clean -fdx:*)",
      "Bash(supabase db reset:*)",
      "Bash(drizzle-kit drop:*)",
      "Bash(stripe customers delete:*)",
      "Bash(stripe subscriptions cancel:*)",
      "Bash(format:*)",
      "Bash(diskpart:*)",
      "Bash(reg:*)",
      "Bash(net user:*)",
      "Bash(sc delete:*)"
    ],
    "ask": [
      "Bash(rm:*)",
      "Bash(sudo:*)",
      "Bash(docker:*)",
      "Bash(docker-compose:*)",
      "Bash(git push:*)",
      "Bash(npm publish:*)",
      "Bash(poetry publish:*)",
      "Bash(dotnet nuget push:*)",
      "Bash(gh pr merge:*)",
      "Bash(gh release create:*)",
      "Bash(vercel --prod:*)",
      "Bash(vercel alias:*)",
      "Bash(kill:*)",
      "Bash(pkill:*)",
      "Bash(killall:*)",
      "Bash(npm install -g:*)",
      "Bash(pip install --user:*)",
      "Bash(dotnet tool install -g:*)",
      "Bash(dotnet ef database update:*)",
      "Bash(printenv:*)",
      "Bash(cat .env:*)",
      "Bash(supabase db push:*)",
      "Bash(supabase functions deploy:*)",
      "Bash(supabase secrets:*)",
      "Bash(drizzle-kit push:*)",
      "Bash(playwright test --update-snapshots:*)",
      "Bash(taskkill:*)",
      "Bash(del:*)",
      "Bash(rmdir:*)",
      "Bash(setx:*)",
      "Bash(winget:*)",
      "Bash(sc:*)",
      "Bash(icacls:*)"
    ]
  }
}