{
  "$schema": "https://json.schemastore.org/claude-code-settings.json",
  "permissions": {
    "allow": [
      "Bash(git status*)",
      "Bash(git diff*)",
      "Bash(git log*)",
      "Bash(git branch*)",
      "Bash(git checkout*)",
      "Bash(git switch*)",
      "Bash(git add*)",
      "Bash(git commit*)",
      "Bash(git pull*)",
      "Bash(git fetch*)",
      "Bash(git stash*)",
      "Bash(git push origin*)",
      "Bash(gh pr*)",
      "Bash(gh issue*)",
      "Bash(gh run*)",
      "Bash(gh workflow*)",
      "Bash(gh auth status*)",
      "Bash(npm install*)",
      "Bash(npm test*)",
      "Bash(npm run*)",
      "Bash(npm audit*)",
      "Bash(npm outdated*)",
      "Bash(pnpm install*)",
      "Bash(pnpm run*)",
      "Bash(pnpm test*)",
      "Bash(bun install*)",
      "Bash(bun test*)",
      "Bash(bun run*)",
      "Bash(pip install*)",
      "Bash(pip list*)",
      "Bash(uv pip*)",
      "Bash(uv run*)",
      "Bash(pytest*)",
      "Bash(ruff*)",
      "Bash(black*)",
      "Bash(mypy*)",
      "Bash(alembic*)",
      "Bash(go build*)",
      "Bash(go test*)",
      "Bash(go vet*)",
      "Bash(go fmt*)",
      "Bash(go mod*)",
      "Bash(go list*)",
      "Bash(make*)",
      "Bash(prisma*)",
      "Bash(npx prisma*)",
      "Bash(docker compose build*)",
      "Bash(docker compose config*)",
      "Bash(docker compose ps*)",
      "Bash(docker compose logs*)",
      "Bash(rg*)",
      "Bash(fd*)",
      "Bash(jq*)",
      "Bash(ls*)",
      "Bash(cat*)",
      "Bash(head*)",
      "Bash(tail*)",
      "Bash(wc*)"
    ],
    "deny": [
      "Bash(git push --force*)",
      "Bash(git push -f*)",
      "Bash(git push origin main*)",
      "Bash(git push origin master*)",
      "Bash(git reset --hard*)",
      "Bash(git clean -fd*)",
      "Bash(git commit --amend*)",
      "Bash(rm -rf /*)",
      "Bash(rm -rf ~*)",
      "Bash(sudo*)",
      "Bash(docker system prune*)",
      "Bash(docker volume rm*)",
      "Bash(terraform destroy*)",
      "Bash(terraform apply*)",
      "Bash(kubectl delete*)",
      "Bash(kubectl apply*)",
      "Bash(az containerapp update*)",
      "Bash(az containerapp delete*)",
      "Bash(alembic downgrade*)",
      "Bash(dropdb*)",
      "Bash(psql*production*)",
      "Read(./**/.env)",
      "Read(./**/.env.*)",
      "Read(./**/secrets/**)",
      "Read(./**/*.pem)",
      "Read(./**/*.key)",
      "Read(./casdoor-internal/conf/app.conf)",
      "Write(./**/.env)",
      "Write(./**/.env.*)",
      "Write(./**/secrets/**)"
    ]
  },
  "env": {
    "DISABLE_TELEMETRY": "0",
    "CLAUDE_CODE_MAX_OUTPUT_TOKENS": "32000"
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "bash $CLAUDE_PROJECT_DIR/.claude/hooks/pre-commit-check.sh"
          }
        ]
      }
    ]
  }
}