Skip to content

Fix malformed JSON in .claude/settings.json and expand allowlist#723

Merged
aram356 merged 1 commit into
mainfrom
fix/claude-settings-json-trailing-comma
May 20, 2026
Merged

Fix malformed JSON in .claude/settings.json and expand allowlist#723
aram356 merged 1 commit into
mainfrom
fix/claude-settings-json-trailing-comma

Conversation

@aram356
Copy link
Copy Markdown
Collaborator

@aram356 aram356 commented May 20, 2026

Summary

  • Remove the trailing comma after the last array element in .claude/settings.json, which made the file invalid strict JSON (python3 -m json.tool rejected it: Illegal trailing comma before end of array: line 28 column 73). The corruption appears to have been introduced by the Claude VS Code extension editing the file.
  • Add read-only gh CLI permissions so the PR/issue workflows documented in CLAUDE.md stop prompting on every read.
  • Round out the Chrome DevTools MCP allowlist with non-mutating observability tools (page list/snapshot/screenshot, console + network inspection, performance trace), leaving interaction tools (click, fill, type_text, etc.) and destructive tools (close_page) to continue prompting.
  • Add Bash(git show:*) for symmetry with the existing read-only git allowlist.

Closes #721
Closes #722

Test plan

  • python3 -m json.tool .claude/settings.json parses without error
  • Reviewer confirms the expanded allowlist matches the project's risk posture (no mutating commands added)

Remove the trailing comma after the last array element that made the
file invalid strict JSON. Add read-only gh CLI permissions to match
the gh-based PR/issue workflows documented in CLAUDE.md, and round out
the Chrome DevTools MCP allowlist with non-mutating observability
tools (screenshots, console/network inspection, snapshots, perf trace).

Mutating commands (gh pr create/comment/merge, gh issue create, page
interactions like click/fill/type_text) continue to require prompts.

Closes #721
Closes #722
@aram356 aram356 self-assigned this May 20, 2026
@aram356 aram356 merged commit 8250156 into main May 20, 2026
13 checks passed
@aram356 aram356 deleted the fix/claude-settings-json-trailing-comma branch May 20, 2026 18:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add read-only gh CLI permissions to .claude/settings.json Round out Chrome DevTools MCP allowlist in .claude/settings.json

3 participants