{
  "_comment": "Example Claude Code settings.json — copy relevant sections to ~/.claude/settings.json",
  "_note": "This reflects the actual configuration used across 26+ projects",

  "enabledPlugins": {
    "_comment_core": "CORE — Superpowers is the workflow engine, not optional",
    "superpowers@claude-plugins-official": true,

    "_comment_recommended": "RECOMMENDED — quality and maintenance tools",
    "code-review@claude-plugins-official": true,
    "code-simplifier@claude-plugins-official": true,
    "claude-md-management@claude-plugins-official": true,

    "_comment_optional": "OPTIONAL — enable based on your work",
    "frontend-design@claude-plugins-official": false,
    "skill-creator@claude-plugins-official": false,
    "plugin-dev@claude-plugins-official": false
  },

  "hooks": {
    "PreToolUse": [
      {
        "_comment": "Block git pushes if tracked files contain secrets",
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": "~/.config/git/check-secrets-before-push.sh",
            "timeout": 30,
            "statusMessage": "Checking for secrets before push..."
          }
        ]
      }
    ]
  },

  "_permissions_example": {
    "_comment": "Add to your settings.json top level to block access to sensitive files",
    "permissions": {
      "deny": [
        "Read(~/.ssh/*)",
        "Read(~/.aws/*)",
        "Read(~/.env)",
        "Read(**/credentials*)",
        "Read(**/.env*)",
        "Read(**/*.pem)",
        "Read(**/*.key)",
        "Write(~/.ssh/*)",
        "Write(~/.aws/*)",
        "Write(**/.env*)"
      ]
    }
  },

  "_global_claude_md": {
    "_comment": "Add these lines to your ~/.claude/CLAUDE.md (global instructions)",
    "rules": [
      "Before editing any file, back up the original to a .backup/ directory in the same parent folder."
    ]
  }
}