settings.json

{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "includeCoAuthoredBy": false,
  "permissions": {
    "allow": [
      "Read(/tmp/claude/**)",
      "Edit(/tmp/claude/**)",
      "Write(/tmp/claude/**)",
      "Bash(mkdir -p /tmp/claude*)",
      "Bash(claude:*)",
      "Bash(sed -n:*)",
      "Bash(grep:*)",
      "Bash(mcpl:*)",
      "Bash(git -C:*)",
      "Bash(prek:*)",
      "Bash(~/.claude/scripts/session-start-check.sh:*)",
      "Bash(~/.claude/scripts/my-notifier.sh:*)",
      "Bash(uv run ~/.claude/scripts/rule-injector.py:*)",
      "Bash(uv run ~/.claude/scripts/rule-enforcer.py:*)",
      "Bash(uv run ~/.claude/scripts/git-protection.py:*)",
      "Grep",
      "Bash(myk-claude-tools:*)"
    ]
  },
  "hooks": {
    "Notification": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "~/.claude/scripts/my-notifier.sh"
          }
        ]
      }
    ],
    "PreToolUse": [
      {
        "matcher": "TodoWrite|Bash",
        "hooks": [
          {
            "type": "command",
            "command": "uv run ~/.claude/scripts/rule-enforcer.py"
          }
        ]
      },
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "uv run ~/.claude/scripts/git-protection.py"
          }
        ]
      },
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "prompt",
            "prompt": "You are a security gate protecting against catastrophic OS destruction. Analyze: $ARGUMENTS\n\nBLOCK if the command would:\n- Delete system directories: /, /boot, /etc, /usr, /bin, /sbin, /lib, /var, /home\n- Write to disk devices: dd to /dev/sda, /dev/nvme, etc.\n- Format filesystems: mkfs on any device\n- Remove critical files: /etc/fstab, /etc/passwd, /etc/shadow, kernel/initramfs\n- Recursive delete with sudo or as root\n- Chain destructive commands after safe ones using &&, ;, |, ||\n\nASK (requires user confirmation) if:\n- Command uses sudo but is not clearly destructive\n- Deletes files outside system directories but looks risky\n\nALLOW all other commands - this gate only guards against OS destruction.\n\nIMPORTANT: Use your judgment. If a command seems potentially destructive even if not explicitly listed above, ASK the user for confirmation.\n\nRespond with JSON: {\"decision\": \"approve\" or \"block\" or \"ask\", \"reason\": \"brief explanation\"}",
            "timeout": 10000
          }
        ]
      }
    ],
    "UserPromptSubmit": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "uv run ~/.claude/scripts/rule-injector.py"
          }
        ]
      }
    ],
    "SessionStart": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "~/.claude/scripts/session-start-check.sh",
            "timeout": 5000
          }
        ]
      }
    ]
  },
  "statusLine": {
    "type": "command",
    "command": "bash ~/.claude/statusline.sh",
    "padding": 0
  },
  "enabledPlugins": {
    "pyright-lsp@claude-plugins-official": true,
    "jdtls-lsp@claude-plugins-official": true,
    "lua-lsp@claude-plugins-official": true,
    "github@claude-plugins-official": true,
    "myk-review@myk-org": true,
    "myk-github@myk-org": true,
    "code-simplifier@claude-plugins-official": true,
    "playground@claude-plugins-official": true,
    "frontend-design@claude-plugins-official": true,
    "code-review@claude-plugins-official": true,
    "superpowers@claude-plugins-official": true,
    "feature-dev@claude-plugins-official": true,
    "commit-commands@claude-plugins-official": true,
    "security-guidance@claude-plugins-official": true,
    "claude-md-management@claude-plugins-official": true,
    "pr-review-toolkit@claude-plugins-official": true,
    "claude-code-setup@claude-plugins-official": true,
    "gopls-lsp@claude-plugins-official": true,
    "coderabbit@claude-plugins-official": true,
    "cli-anything@cli-anything": true,
    "worktrunk@worktrunk": true,
    "myk-acpx@myk-org": true
  },
  "extraKnownMarketplaces": {
    "cli-anything": {
      "source": {
        "source": "github",
        "repo": "HKUDS/CLI-Anything"
      }
    },
    "worktrunk": {
      "source": {
        "source": "github",
        "repo": "max-sixty/worktrunk"
      }
    }
  },
  "alwaysThinkingEnabled": true,
  "skipDangerousModePermissionPrompt": true,
  "autoDreamEnabled": true,
  "_scriptsNote": "Script entries must be duplicated in both permissions.allow and allowedTools arrays. When adding new scripts, update BOTH locations.",
  "allowedTools": [
    "Edit(/tmp/claude/**)",
    "Write(/tmp/claude/**)",
    "Read(/tmp/claude/**)",
    "Bash(mkdir -p /tmp/claude*)",
    "Bash(claude:*)",
    "Bash(sed -n:*)",
    "Bash(grep:*)",
    "Bash(mcpl:*)",
    "Bash(git -C:*)",
    "Bash(prek:*)",
    "Grep",
    "Bash(~/.claude/scripts/session-start-check.sh:*)",
    "Bash(~/.claude/scripts/my-notifier.sh:*)",
    "Bash(uv run ~/.claude/scripts/rule-injector.py:*)",
    "Bash(uv run ~/.claude/scripts/rule-enforcer.py:*)",
    "Bash(uv run ~/.claude/scripts/git-protection.py:*)",
    "Bash(myk-claude-tools:*)"
  ],
  "env": {
    "DISABLE_TELEMETRY": "1",
    "DISABLE_ERROR_REPORTING": "1",
    "CLAUDE_CODE_DISABLE_FEEDBACK_SURVEY": "1"
  },
  "feedbackSurveyRate": 0,
  "feedbackSurveyState": {
    "lastShownTime": 1754082998309
  }
}