Claude Code — permission denied on file write or bash execution

{
  "permissions": {
    "allow": [
      // Read anything in the project
      "Read(./**)",

      // Write and edit source but not lockfiles or infra secrets
      "Write(./src/**)",
      "Write(./tests/**)",
      "Edit(./src/**)",
      "Edit(./tests/**)",

      // Common bash commands used in this repo
      "Bash(git status:*)",
      "Bash(git diff:*)",
      "Bash(git log:*)",
      "Bash(git add:*)",
      "Bash(git commit:*)",
      "Bash(npm test:*)",
      "Bash(npm run:*)",
      "Bash(npm install:*)",
      "Bash(pnpm:*)",
      "Bash(pytest:*)",
      "Bash(ruff:*)",
      "Bash(black:*)",

      // Docs — read-only
      "WebFetch(domain:docs.python.org)",
      "WebFetch(domain:developer.mozilla.org)",
      "WebFetch(domain:github.com)"
    ],
    "deny": [
      // Never let the agent touch these, even by accident
      "Write(./.env)",
      "Write(./.env.local)",
      "Write(./secrets/**)",
      "Edit(./.env)",
      "Edit(./.env.local)",
      "Edit(./secrets/**)",

      // No destructive git or shell
      "Bash(git push --force:*)",
      "Bash(git reset --hard:*)",
      "Bash(rm -rf:*)",
      "Bash(sudo:*)"
    ]
  },

  // (Optional) Additional dev settings
  "hooks": {},
  "env": {
    "NODE_ENV": "development"
  }
}

{
  "permissions": {
    "allow": [
      // BAD — will prompt whenever args differ
      // "Bash(git status)",
      // "Bash(git diff)",
      // "Bash(git log)",

      // GOOD — prefix match on the git subcommand
      "Bash(git status:*)",
      "Bash(git diff:*)",
      "Bash(git log:*)",

      // Whole-family allow — trust all git except explicit deny patterns
      // Use with care; combine with deny for destructive subcommands
      "Bash(git:*)",

      // Specific script always OK
      "Bash(./scripts/lint.sh:*)",
      "Bash(make test:*)",
      "Bash(make build:*)"
    ],
    "deny": [
      // Even under "Bash(git:*)", deny wins for these
      "Bash(git push --force:*)",
      "Bash(git push --force-with-lease:*)",
      "Bash(git reset --hard:*)",
      "Bash(git filter-branch:*)",
      "Bash(git rebase --root:*)"
    ]
  }
}

# 1) Start Claude Code and observe prompts
claude

# In a fresh project you will get prompts like:
#   Bash(npm test)  → Approve? [1] Allow once [2] Allow always for "npm test" [3] ...

# 2) Choose "Allow always" for trusted patterns.
# Claude writes to .claude/settings.local.json:
cat .claude/settings.local.json
# {
#   "permissions": {
#     "allow": ["Bash(npm test:*)", "Read(./src/**)"]
#   }
# }

# 3) Periodically review and promote to the shared config
git diff .claude/settings.local.json  # what have I approved this week?

# Promote to the shared file so the team benefits:
jq -s ".[0].permissions.allow + .[1].permissions.allow | unique" \
  .claude/settings.json .claude/settings.local.json

# Move the deduplicated allow list to .claude/settings.json,
# then clear settings.local.json to just personal overrides.