{
  "permissions": {
    "allow": [
      "Bash(rtk *)",
      "Bash(git *)",
      "Bash(gh *)",
      "Bash(firecrawl *)",
      "Bash(pnpm *)",
      "Bash(bun *)"
    ],
    "deny": [
      "Bash(curl *)",
      "Bash(npm install *)",
      "Bash(npm i *)",
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./secrets/**)",
      "Read(~/.config/fish/**)"
    ],
    "defaultMode": "auto"
  },
  "hooks": {
    "SessionStart": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "serena-hooks activate --client=claude-code"
          }
        ]
      }
    ],
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "rtk hook claude"
          }
        ]
      },
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "/Users/humperdoo/.claude/hooks/conventional-commit.sh"
          }
        ]
      },
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "/Users/humperdoo/.claude/hooks/no-commit-on-main.sh"
          }
        ]
      },
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "serena-hooks remind --client=claude-code"
          }
        ]
      },
      {
        "matcher": "mcp__serena__*",
        "hooks": [
          {
            "type": "command",
            "command": "serena-hooks auto-approve --client=claude-code"
          }
        ]
      }
    ],
    "SessionEnd": [
      {
        "matcher": "",
        "hooks": [
          {
            "type": "command",
            "command": "serena-hooks cleanup --client=claude-code"
          }
        ]
      }
    ]
  },
  "statusLine": {
    "type": "command",
    "command": "~/.claude/statusline.sh",
    "padding": 0
  },
  "enabledPlugins": {
    "code-review@claude-plugins-official": true,
    "vercel@claude-plugins-official": true,
    "superpowers@claude-plugins-official": true,
    "serena@claude-plugins-official": false,
    "posthog@claude-plugins-official": false,
    "stripe@claude-plugins-official": false,
    "seo-geo@skills-dir": false,
    "shopify-ai-toolkit@claude-plugins-official": true,
    "skill-creator@claude-plugins-official": true
  },
  "extraKnownMarketplaces": {
    "claude-plugins-official": {
      "source": {
        "source": "github",
        "repo": "anthropics/claude-plugins-official"
      }
    }
  },
  "language": "French",
  "skipDangerousModePermissionPrompt": true,
  "skipWorkflowUsageWarning": true,
  "theme": "dark",
  "editorMode": "normal",
  "switchModelsOnFlag": false,
  "remoteControlAtStartup": true,
  "agentPushNotifEnabled": true,
  "skipAutoPermissionPrompt": true,
  "autoMode": {
    "environment": [
      "### Org-wide",
      "**Organization**: None configured",
      "**Cloud provider(s)**: None configured",
      "**Repository visibility**: assume private (no remote configured — no evidence of public visibility; this repo has no git remotes at all)",
      "**Internal sharing / snippet hosting**: None configured — treat public paste/gist services as outside the trust boundary",
      "**Secrets management**: None configured",
      "**Default / protected branches**: None configured (no remotes, default branch unknown — origin/HEAD unset)",
      "**CI/CD deploy targets**: None configured",
      "**Network posture**: None configured",
      "**Source control**: The trusted repo only — no remotes are configured for /Users/humperdoo/Documents/Advmfr/Spam",
      "**Trusted internal domains**: advmfr.net (mail domain in scope for this project; cPanel host arome.o2switch.net)",
      "**Trusted cloud buckets**: None configured",
      "**Key internal services**: cPanel at https://arome.o2switch.net:2083 (account sc6mixq8738)",
      "**Internal package registry**: None configured",
      "**Sensitive data locations & audiences**: mailbox contents and quarantine data for advmfr.net (87 mailboxes), especially quarantine@advmfr.net; cPanel/DNS credentials for account sc6mixq8738; share only with the client (Bastien) and cleared operators — advmfr.com (Google Workspace) and elevaseo.com are explicitly out of scope and not cleared audiences",
      "**Data retention / declassification**: None configured",
      "**Sensitive remote targets**: any namespace, host, or container whose name carries prod or production as a whole word or name segment; also treat the live advmfr.net mail flow and DNS zone as sensitive given the project's zero-mail-loss principle",
      "**Protected deployment namespaces / environments**: None configured — fall back to the Sensitive remote targets heuristic",
      "**Protected IaC scopes**: IAM, RBAC, networking, quota, and node-pool resources; anything whose name or tag carries prod or production as a whole word or name segment; DNS zone edits for advmfr.net (via cPanel Zone Editor) treated as sensitive infrastructure changes",
      "### User-specific",
      "**Primary use of Claude Code**: software development / sysadmin (email anti-spam hardening project — filter rules, DNS/DMARC configuration, quarantine monitoring)",
      "**Trusted repo**: The working directory /Users/humperdoo/Documents/Advmfr/Spam (no git remotes configured — treat as local-only, not yet published anywhere)",
      "**Org-specific CLIs**: None configured",
      "routine under advmfr.net project files/ prefix: audit, runbook, changelog, and client-facing docs in this repo"
    ]
  }
}