From 38cf82c2191fb2d4e5dbabcc78c6087de0adf545 Mon Sep 17 00:00:00 2001
From: Yan Lin <github@yanlincs.com>
Date: Mon, 19 Jan 2026 16:12:47 +0100
Subject: [PATCH] minor adjust claude code permissions

---
 modules/claude-code.nix | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/modules/claude-code.nix b/modules/claude-code.nix
index 5c9dc06..839ac9b 100644
--- a/modules/claude-code.nix
+++ b/modules/claude-code.nix
@@ -66,11 +66,6 @@ let
     ];
     
     deny = [
-      # Prevent access to sensitive files
-      "Read(.env*)"
-      "Read(*.env*)"
-      "Read(./.env*)"
-      
       # Prevent dangerous system operations
       "Bash(rm -rf:*)"
       "Bash(sudo:*)"
@@ -132,6 +127,10 @@ let
 
       "Bash(curl:*)"
       "Bash(wget:*)"
+
+      "Read(.env*)"
+      "Read(*.env*)"
+      "Read(./.env*)"
     ];
   };