Claude Code: إعداد الصلاحيات

Claude wants to execute: npm install lodash
  [Allow / Deny / Always for this session]

# Read: auto-approved
→ Reading src/index.ts ✓ (auto-approved)

# Modify: needs confirmation
→ Modifying src/index.ts
  Allow editing? [y/n/a] y

# Execute: needs confirmation
→ Running: npm test
  Allow executing: npm test? [y/n/a] a
  (Set to auto-allow for this session)

## Permission Configuration
- Auto-allow editing .ts and .test.ts files under src/
- Auto-allow running npm test and npm run lint
- Auto-allow running npm install (adding dependencies)
- Require confirmation: modifying prisma/schema.prisma
- Require confirmation: modifying package.json scripts
- Require confirmation: any git operations
- Deny: executing curl/wget and other network request commands

# Only allow read and write (no command execution)
claude --allowed-tools Read,Write

# Allow read, write, and specific Bash commands
claude --allowed-tools Read,Write,Bash(npm test),Bash(npm run lint)

# Fully auto mode (dangerous!)
claude --allow-full-auto

<!-- Test project CLAUDE.md (relaxed permissions) -->
## Permissions
- Auto-allow: All file edits
- Auto-allow: npm test, npm run build, npm run lint
- Auto-allow: git add, git commit
- Require confirmation: npm publish, git push

<!-- Production project CLAUDE.md (strict permissions) -->
## Permissions
- Auto-allow: Read-only operations
- Require confirmation: All file modifications
- Require confirmation: All command executions
- Deny: git push, npm publish, rm -rf
- Deny: Modifying .env and config files

# Completely read-only, no file modifications
claude --allowed-tools Read

# Read-only + safe Bash commands
claude --allowed-tools Read,Bash(git status),Bash(npm test)

# Run in sandbox, changes don't affect real files
claude --sandbox

# .claudeignore - Exclude sensitive files
.env
.env.*
**/secrets/**
**/credentials/**
**/private-key.*
config/production.*

## Permissions (Strict Mode)
- Auto-allow: Read-only operations
- Require confirmation: All file modifications (including src/)
- Require confirmation: All Bash commands
- Deny: Modify files under src/payment/ and src/billing/
- Deny: Run any database operation commands
- Deny: Modify Docker and CI configuration

# Level 1: Personal experimental projects
claude --allow-full-auto (Fully auto, rapid iteration)

# Level 2: Team development projects
- CLAUDE.md configures auto-edit src/ and tests/
- Auto-run npm test
- Git operations need confirmation

# Level 3: Core business projects
- Read-only mode + manual confirm writes
- .claudeignore protects sensitive directories
- All changes go through git diff review

# Level 4: Production/Financial projects
- Read-only mode
- Output suggestions, don't directly modify
- Human review before manual application