Template
Toolchain fixes (all previously broken): - npm run lint: next lint was removed in Next 16 -> eslint with flat config - .eslintrc.json was ignored by ESLint 9 -> eslint.config.mjs - npm test / test:e2e exited 1 with no tests -> passWithNoTests - Vitest scanned tests/ and would have run Playwright specs -> scoped to src/ - Playwright targeted Mobile Safari while docs installed only chromium - reuseExistingServer silently tested a foreign server on :3000 -> E2E_PORT - 11 high-severity vulns -> npm audit fix - deny rule Read(**/.env*) also blocked .env.example -> precise patterns Stack changes: - Tailwind v3 -> v4 (CSS-first, no tailwind.config.ts, tw-animate-css) - shadcn regenerated for v4; 33 components -> 6 core, bundled radix-ui - Supabase removed entirely; data layer is now chosen per project - Vercel removed; Docker Compose self-hosting with scripts/update.sh - Better Auth + passkey plugin as the binding auth standard - ThemeProvider and Sonner mounted; dark mode and toasts now actually work Workflow system: - Sub-agents wired: /frontend, /backend, /qa delegate to .claude/agents - Checklists folded into their SKILL.md; one file per skill - Rules rewritten: DB-agnostic backend, passkey security, v4 frontend - Spec language settled as German, skill instructions English
57 lines
1.5 KiB
JSON
57 lines
1.5 KiB
JSON
{
|
|
"permissions": {
|
|
"deny": [
|
|
"Bash(git push --force:*)",
|
|
"Bash(git push -f:*)",
|
|
"Read(**/.env)",
|
|
"Read(**/.env.local)",
|
|
"Read(**/.env.development)",
|
|
"Read(**/.env.production)",
|
|
"Read(**/.env.test)",
|
|
"Read(**/.env.*.local)",
|
|
"Read(**/*.pem)",
|
|
"Read(**/*.key)",
|
|
"Read(**/secrets/**)",
|
|
"Read(**/credentials/**)",
|
|
"Read(**/.aws/**)",
|
|
"Read(**/.ssh/**)",
|
|
"Read(**/.npmrc)",
|
|
"Edit(**/.env)",
|
|
"Edit(**/.env.local)",
|
|
"Edit(**/.env.development)",
|
|
"Edit(**/.env.production)",
|
|
"Edit(**/.env.test)",
|
|
"Edit(**/.env.*.local)",
|
|
"Edit(**/secrets/**)",
|
|
"Edit(**/.ssh/**)"
|
|
],
|
|
"allow": [
|
|
"Bash(npm install)",
|
|
"Bash(npm ci)",
|
|
"Bash(npm run dev:*)",
|
|
"Bash(npm run build:*)",
|
|
"Bash(npm run lint:*)",
|
|
"Bash(npm run typecheck:*)",
|
|
"Bash(npm run start:*)",
|
|
"Bash(npm test:*)",
|
|
"Bash(npm run test:*)",
|
|
"Bash(npx shadcn@latest add:*)",
|
|
"Bash(npx playwright install:*)",
|
|
"Bash(git add:*)",
|
|
"Bash(git commit:*)",
|
|
"Bash(git push:*)",
|
|
"Bash(git tag:*)",
|
|
"Bash(git log:*)",
|
|
"Bash(git diff:*)",
|
|
"Bash(git status:*)",
|
|
"Bash(git ls-files:*)",
|
|
"Bash(docker compose build:*)",
|
|
"Bash(docker compose up:*)",
|
|
"Bash(docker compose down:*)",
|
|
"Bash(docker compose ps:*)",
|
|
"Bash(docker compose logs:*)",
|
|
"Bash(ls:*)"
|
|
]
|
|
}
|
|
}
|