av1155/.dotfiles
My dynamic and universal .dotfiles currently for Linux (Arch and Debian), macOS, WSL.
ARCHETYPE
Fort Knox
Deny lists, pre-tool hooks, sandboxing. Nothing touches prod without a signature.
GUARDRAILS
4/5
Blocks destructive commands · Protects secrets · No YOLO mode · Sandbox or ask-first rules · details
Copy this rig
# review before running: this installs third-party code $ claude mcp add context-mode -- npx -y context-mode $ claude mcp add --transport http stitch https://stitch.googleapis.com/mcp $ npx degit av1155/.dotfiles/Claude/.claude ./rig-.dotfiles # inspect, then merge into .claude/
MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ claude mcp add context-mode -- npx -y context-mode $ claude mcp add --transport http stitch https://stitch.googleapis.com/mcp
$ npx degit av1155/.dotfiles/Agents/.agents/skills/agentic-coding-harnesses .claude/skills/agentic-coding-harnesses $ npx degit av1155/.dotfiles/Agents/.agents/skills/build-loop .claude/skills/build-loop $ npx degit av1155/.dotfiles/Agents/.agents/skills/catchup .claude/skills/catchup $ npx degit av1155/.dotfiles/Agents/.agents/skills/caveman .claude/skills/caveman $ npx degit av1155/.dotfiles/Agents/.agents/skills/commenting .claude/skills/commenting $ npx degit av1155/.dotfiles/Agents/.agents/skills/coordinator .claude/skills/coordinator $ npx degit av1155/.dotfiles/Agents/.agents/skills/deep-audit .claude/skills/deep-audit $ npx degit av1155/.dotfiles/Agents/.agents/skills/diagnose .claude/skills/diagnose $ npx degit av1155/.dotfiles/Agents/.agents/skills/doc-coauthoring .claude/skills/doc-coauthoring $ npx degit av1155/.dotfiles/Agents/.agents/skills/end-to-end .claude/skills/end-to-end $ npx degit av1155/.dotfiles/Agents/.agents/skills/evidence-driven-engineering .claude/skills/evidence-driven-engineering $ npx degit av1155/.dotfiles/Agents/.agents/skills/find-docs .claude/skills/find-docs $ npx degit av1155/.dotfiles/Agents/.agents/skills/firecrawl-cli .claude/skills/firecrawl-cli $ npx degit av1155/.dotfiles/Agents/.agents/skills/firecrawl-map .claude/skills/firecrawl-map $ npx degit av1155/.dotfiles/Agents/.agents/skills/firecrawl-scrape .claude/skills/firecrawl-scrape $ npx degit av1155/.dotfiles/Agents/.agents/skills/fix-issue .claude/skills/fix-issue $ npx degit av1155/.dotfiles/Agents/.agents/skills/frontend-design-global .claude/skills/frontend-design-global $ npx degit av1155/.dotfiles/Agents/.agents/skills/grill-me .claude/skills/grill-me $ npx degit av1155/.dotfiles/Agents/.agents/skills/grill-with-docs .claude/skills/grill-with-docs $ npx degit av1155/.dotfiles/Agents/.agents/skills/handoff .claude/skills/handoff $ npx degit av1155/.dotfiles/Agents/.agents/skills/improve-codebase-architecture .claude/skills/improve-codebase-architecture $ npx degit av1155/.dotfiles/Agents/.agents/skills/merge .claude/skills/merge $ npx degit av1155/.dotfiles/Agents/.agents/skills/open-pr .claude/skills/open-pr $ npx degit av1155/.dotfiles/Agents/.agents/skills/playwright-cli .claude/skills/playwright-cli $ npx degit av1155/.dotfiles/Agents/.agents/skills/prototype .claude/skills/prototype $ npx degit av1155/.dotfiles/Agents/.agents/skills/python .claude/skills/python $ npx degit av1155/.dotfiles/Agents/.agents/skills/rebase .claude/skills/rebase $ npx degit av1155/.dotfiles/Agents/.agents/skills/refine .claude/skills/refine $ npx degit av1155/.dotfiles/Agents/.agents/skills/review .claude/skills/review $ npx degit av1155/.dotfiles/Agents/.agents/skills/scalability .claude/skills/scalability $ npx degit av1155/.dotfiles/Agents/.agents/skills/security .claude/skills/security $ npx degit av1155/.dotfiles/Agents/.agents/skills/setup-matt-pocock-skills .claude/skills/setup-matt-pocock-skills $ npx degit av1155/.dotfiles/Agents/.agents/skills/ship .claude/skills/ship $ npx degit av1155/.dotfiles/Agents/.agents/skills/skill-creator-global .claude/skills/skill-creator-global $ npx degit av1155/.dotfiles/Agents/.agents/skills/tdd .claude/skills/tdd $ npx degit av1155/.dotfiles/Agents/.agents/skills/to-issues .claude/skills/to-issues $ npx degit av1155/.dotfiles/Agents/.agents/skills/to-prd .claude/skills/to-prd $ npx degit av1155/.dotfiles/Agents/.agents/skills/triage .claude/skills/triage $ npx degit av1155/.dotfiles/Agents/.agents/skills/typescript .claude/skills/typescript $ npx degit av1155/.dotfiles/Agents/.agents/skills/webapp-testing .claude/skills/webapp-testing
$ curl -fsSL --create-dirs -o .claude/agents/refine-lens-deep.md https://raw.githubusercontent.com/av1155/.dotfiles/main/Claude/.claude/agents/refine-lens-deep.md $ curl -fsSL --create-dirs -o .claude/agents/refine-lens.md https://raw.githubusercontent.com/av1155/.dotfiles/main/Claude/.claude/agents/refine-lens.md
Merge into .claude/settings.json (project) or ~/.claude/settings.json (user). Hook commands reference scripts in the source repo — copy those too.
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(./.env.local)",
"Read(./.env.*.local)",
"Read(**/.env.local)",
"Read(**/.env.*.local)",
"Read(./secrets/**)",
"Read(**/credentials*)",
"Read(**/*.pem)",
"Read(~/.ssh/**)",
"Read(~/.aws/**)",
"Read(~/.gnupg/**)",
"Read(~/.docker/config.json)",
"Read(~/.npmrc)",
"Read(~/.config/gh/**)"
],
"ask": [
"Edit(./.env)",
"Edit(./.env.local)",
"Edit(./.env.*.local)",
"Edit(**/.env.local)",
"Edit(**/.env.*.local)",
"Bash(sudo *)",
"Bash(chmod 777 *)",
"Bash(git push *)",
"Bash(git merge *)",
"Bash(git reset --hard*)",
"Bash(curl *| sh)",
"Bash(wget *| sh)",
"Bash(pnpm install *)",
"Bash(pnpm add *)",
"Bash(pnpm remove *)",
"Bash(pnpm publish *)",
"Bash(npm publish *)",
"Bash(drop table*)",
"Bash(DROP TABLE*)",
"Bash(dd *)",
"Bash(mkfs *)"
]
}
} MCP servers (3)
| server | source | est. tokens |
|---|---|---|
| context-mode | npm | 2.5k |
| magic | local / custom | 2.5k |
| stitch.googleapis.com · "stitch" | remote · remote | 2.5k |
Skills (44)
agentic-coding-harnessesbuild-loopcatchupcavemancommentingcoordinatordeep-auditdiagnosedoc-coauthoringend-to-endevidence-driven-engineeringfind-docsfirecrawl-clifirecrawl-mapfirecrawl-scrapefix-issuefrontend-design-globalgrill-megrill-with-docshandoffimprove-codebase-architecturemergeopen-prplaywright-cliprototypepythonrebaserefinereviewscalabilitysecuritysetup-matt-pocock-skillsshipskill-creator-globaltddto-issuesto-prdtriagetypescriptwebapp-testingworkmuxworktreewrite-emailzoom-out
Subagents (2)
| refine-lens-deep model: inherit | Read-only altitude lens for the refine skill on large staged diffs, run at higher effort. Launch only from the refine skill. |
| refine-lens model: inherit | Read-only review lens for the refine skill. Reports reuse, simplification, efficiency, altitude or combined findings on one shard of a staged diff. Launch only from the refine skill. |
Hooks (6)
| event | matcher | runs |
|---|---|---|
| Notification | permission_prompt|elicitation_dialog | workmux set-window-status waiting |
| PostToolUse | * | workmux set-window-status working |
| Stop | * | workmux set-window-status done |
| UserPromptSubmit | * | workmux set-window-status working |
| SessionStart | * | bash "$HOME"'/.config/tmux/plugins/tmux-assistant-resurrect/hooks/claude-session-track.sh' |
| SessionEnd | * | bash "$HOME"'/.config/tmux/plugins/tmux-assistant-resurrect/hooks/claude-session-cleanup.sh' |
Plugins (10)
code-review@claude-plugins-officialfrontend-design@claude-plugins-officiallua-lsp@claude-plugins-officialpyright-lsp@claude-plugins-officialsecurity-guidance@claude-plugins-officialskill-codex@skill-codextypescript-lsp@claude-plugins-officialsemgrep@claude-plugins-officialfigma@claude-plugins-officialclaude-notifications-go@claude-notifications-go
Permissions
deny (14)
Read(./.env)
Read(./.env.local)
Read(./.env.*.local)
Read(**/.env.local)
Read(**/.env.*.local)
Read(./secrets/**)
Read(**/credentials*)
Read(**/*.pem)
Read(~/.ssh/**)
Read(~/.aws/**)
Read(~/.gnupg/**)
Read(~/.docker/config.json)
Read(~/.npmrc)
Read(~/.config/gh/**)
ask (21)
Edit(./.env)
Edit(./.env.local)
Edit(./.env.*.local)
Edit(**/.env.local)
Edit(**/.env.*.local)
Bash(sudo *)
Bash(chmod 777 *)
Bash(git push *)
Bash(git merge *)
Bash(git reset --hard*)
Bash(curl *| sh)
Bash(wget *| sh)
Bash(pnpm install *)
Bash(pnpm add *)
Bash(pnpm remove *)
Bash(pnpm publish *)
Bash(npm publish *)
Bash(drop table*)
Bash(DROP TABLE*)
Bash(dd *)
Bash(mkfs *)
allow (0)
—
Similar rigs
johnstegeman/haven
—
Skill Collector 4.2k tok ·
Cloonar/coding-lab
Self-hosted, phone-first control panel for coding agents — interactive sessions and unattended issue-to-PR runs on your git repos.
Skill Collector 1.1k tok ·
laiyangli001/claude-config
gloable config of claude code
MCP Hoarder 33.0k tok ·
webdevtodayjason/dev-kit
Portable Claude Code dev workflow — skills, commands, agents, security hooks, and a CLAUDE.md template. One-install onboarding; ships zero credentials.
Skill Collector 2.4k tok ·