Claude Code 进阶配置指南：5 大配置（CLAUDE.md + MCP + Hooks + Skills + 权限）从"能用"到"好用"

# Build & Test Commands
- Build: `npm run build`
- Test: `npm test`
- Lint: `npm run lint`

# Code Style
- Use TypeScript strict mode
- Prefer functional components
- 2-space indentation

# Architecture
- See @docs/architecture.md for system design
- API handlers in src/api/handlers/

# Workflow
- Always run tests before committing
- Use conventional commit messages

# Common Gotchas
- Database migrations must be backwards compatible
- JWT tokens expire after 24 hours

# Architecture
See @docs/architecture.md for system design
See @docs/api-conventions.md for API conventions

# HTTP 服务器（推荐）
claude mcp add --transport http github https://api.githubcopilot.com/mcp/

# 带认证的 HTTP
claude mcp add --transport http secure-api https://api.example.com/mcp \
  --header "Authorization: Bearer your-token"

# Stdio 本地服务器
claude mcp add --transport stdio --env DB_URL=xxx db \
  -- npx -y @bytebase/dbhub --dsn "postgresql://localhost/mydb"

# 本地作用域（默认，仅自己）
claude mcp add --scope local server-name

# 项目作用域（通过 git 共享）
claude mcp add --scope project server-name

# 用户作用域（全局）
claude mcp add --scope user server-name

{
  "mcpServers": {
    "github": {
      "type": "http",
      "url": "https://api.githubcopilot.com/mcp/"
    },
    "database": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@bytebase/dbhub", "--dsn", "${DB_DSN}"]
    },
    "slack": {
      "type": "http",
      "url": "https://mcp.slack.com/anthropic",
      "headers": {
        "Authorization": "Bearer ${SLACK_TOKEN}"
      }
    }
  }
}

SessionStart → UserPromptSubmit → PreToolUse → [PermissionRequest] →
Tool Execution → PostToolUse/PostToolUseFailure → Stop → SessionEnd

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "Bash",
        "hooks": [
          {
            "type": "command",
            "command": ".claude/hooks/validate-bash.sh"
          }
        ]
      }
    ],
    "PostToolUse": [
      {
        "matcher": "Edit|Write",
        "hooks": [
          {
            "type": "command",
            "command": "npm run lint",
            "timeout": 30
          }
        ]
      }
    ]
  }
}

#!/bin/bash
# .claude/hooks/quality-check.sh

# 读取工具输入
INPUT=$(cat)
FILE_PATH=$(echo"$INPUT" | jq -r '.tool_input.file_path')

# 只检查 TypeScript 文件
if [[ "$FILE_PATH" =~ \.(ts|tsx)$ ]]; then
# 运行 ESLint
if ! npx eslint "$FILE_PATH" --fix; then
    jq -n '{
      hookSpecificOutput: {
        hookEventName: "PostToolUse",
        decision: "block",
        reason: "ESLint found issues that could not be auto-fixed"
      }
    }'
    exit 0
fi
fi

exit 0

---
name:code-reviewer
description:Reviewcodeforbestpracticesandpotentialissues
allowed-tools:Read,Grep,Glob
disable-model-invocation:false
user-invocable:true
---

Review the code following these guidelines:

1.Checkforcommonsecurityvulnerabilities
2.Verifyerrorhandlingiscomprehensive
3.Ensurecodefollowsprojectconventions
4.Identifypotentialperformanceissues

Providespecificlinereferencesandsuggestions.

.claude/
└── skills/
    ├── code-reviewer/
    │   └── SKILL.md
    └── deploy/
        └── SKILL.md

---
name:pr-summary
description:Summarizepullrequestchanges
---

## PR Context
-Diff:!`ghprdiff`
-Comments:!`ghprview--comments`
-Files:!`ghprdiff--name-only`

SummarizethisPR...

{
  "permissions": {
    "allow": [
      "Bash(npm run *)",
      "Bash(git *)",
      "Read(./src/**)"
    ],
    "deny": [
      "Bash(rm -rf *)",
      "Read(./.env)",
      "Read(./secrets/**)"
    ],
    "additionalDirectories": [
      "../shared-config/"
    ]
  }
}

{
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true,
    "excludedCommands": ["docker"],
    "filesystem": {
      "allowWrite": ["//tmp/build", "~/.kube"],
      "denyRead": ["~/.aws/credentials"]
    },
    "network": {
      "allowedDomains": ["github.com", "*.npmjs.org"],
      "allowUnixSockets": ["/var/run/docker.sock"]
    }
  }
}