~ / rigs / Carlos-Dominguez-faber / claude-code-tune-kit

Carlos-Dominguez-faber/claude-code-tune-kit

Deja de usar Claude Code como venía en la caja. Semáforo de contexto, modo conciso, 4 hooks que bloquean comandos destructivos y secretos, estilo de salida sin humo, GLM sin secuestrar tu config — y cc-doctor.sh, que audita tu instalación y

↗ GitHub ★ 37 MIT updated 1mo ago personal setup Claude Code
share on X
ARCHETYPE
Fort Knox
Deny lists, pre-tool hooks, sandboxing. Nothing touches prod without a signature.
CONTEXT TAX · EVERY TURN
~0 tokens
Featherweight · median rig: 2.3k · breakdown
GUARDRAILS
4/5
Blocks destructive commands · Protects secrets · Pre-tool screening hook · No YOLO mode · details

Copy this rig

# review before running: this installs third-party code
$ npx degit Carlos-Dominguez-faber/claude-code-tune-kit/hooks ./rig-claude-code-tune-kit/hooks

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.

{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(./.env.*)",
      "Read(./**/.env)",
      "Read(./**/.env.*)",
      "Read(./**/*.pem)",
      "Read(./**/id_rsa)",
      "Read(./**/credentials)"
    ]
  },
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "bash ~/.claude/hooks/freno-de-mano.sh"
          }
        ]
      },
      {
        "matcher": "Edit|Write|NotebookEdit",
        "hooks": [
          {
            "type": "command",
            "command": "bash ~/.claude/hooks/blindaje-env.sh"
          }
        ]
      }
    ]
  }
}

Hooks (5)

eventmatcherruns
PreToolUseBashbash ~/.claude/hooks/freno-de-mano.sh
PreToolUseEdit|Write|NotebookEditbash ~/.claude/hooks/blindaje-env.sh
PostToolUseEdit|Writebash ~/.claude/hooks/formatter.sh
UserPromptSubmit*bash ~/.claude/hooks/aviso.sh
Stop*bash ~/.claude/hooks/aviso.sh

Permissions

deny (7)
Read(./.env)
Read(./.env.*)
Read(./**/.env)
Read(./**/.env.*)
Read(./**/*.pem)
Read(./**/id_rsa)
Read(./**/credentials)
ask (0)
—
allow (0)
—

Similar rigs

copied ✓