df70e514e9
Documented explicit prohibition of `migrate:fresh`, `migrate:reset`, `db:wipe`, and raw DROP/TRUNCATE operations in CLAUDE.md. Prose rule clarifies that user phrases like "trust me" or "do the refactor" are not authorisation for schema rebuilds — architectural decision is separate from operational step. Added matching deny patterns to `.claude/settings.json` to block direct inv
31 lines
904 B
JSON
31 lines
904 B
JSON
{
|
|
"permissions": {
|
|
"deny": [
|
|
"Read(./.env)",
|
|
"Read(.env)",
|
|
"Bash(cat .env)",
|
|
"Bash(cat ./.env)",
|
|
"Bash(head .env)",
|
|
"Bash(head ./.env)",
|
|
"Bash(tail .env)",
|
|
"Bash(tail ./.env)",
|
|
"Bash(less .env)",
|
|
"Bash(less ./.env)",
|
|
"Bash(more .env)",
|
|
"Bash(more ./.env)",
|
|
"Bash(grep * .env)",
|
|
"Bash(grep * ./.env)",
|
|
"Bash(rg * .env)",
|
|
"Bash(rg * ./.env)",
|
|
"Bash(awk * .env)",
|
|
"Bash(awk * ./.env)",
|
|
"Bash(php artisan migrate:fresh)",
|
|
"Bash(php artisan migrate:fresh *)",
|
|
"Bash(php artisan migrate:reset)",
|
|
"Bash(php artisan migrate:reset *)",
|
|
"Bash(php artisan db:wipe)",
|
|
"Bash(php artisan db:wipe *)"
|
|
]
|
|
}
|
|
}
|