From 066126f5c85be8bcbebb802c5c0b2f7a25c9cfa5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Fri, 6 Mar 2026 16:06:58 -0800
Subject: [PATCH 1/5] dev(home): configure claude-code to find local mcp
 gateway

---
 modules/home/development.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/modules/home/development.nix b/modules/home/development.nix
index 06eea491..8ccbb6be 100644
--- a/modules/home/development.nix
+++ b/modules/home/development.nix
@@ -28,6 +28,12 @@ in {
     (mkIf cfg.ai.enable {
       programs.claude-code = {
         enable = true;
+        mcpServers = {
+          glyph = {
+            type = "http";
+            url = "http://glyph:8090/mcp";
+          };
+        };
         settings = {
           model = "opus";
           enableAllProjectMcpServers = true;

From be48341f247761e9227ef74867e836c4b524a258 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Fri, 6 Mar 2026 16:10:54 -0800
Subject: [PATCH 2/5] remove redundant setting

---
 modules/home/development.nix | 1 -
 1 file changed, 1 deletion(-)

diff --git a/modules/home/development.nix b/modules/home/development.nix
index 8ccbb6be..da6d1b8d 100644
--- a/modules/home/development.nix
+++ b/modules/home/development.nix
@@ -37,7 +37,6 @@ in {
         settings = {
           model = "opus";
           enableAllProjectMcpServers = true;
-          enabledMcpjsonServers = ["linear"];
           permissions = {
             allow = [
               "Bash(find *)"

From f3a11d41554f6de0ff889deab74aba142bc81960 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Fri, 6 Mar 2026 16:15:26 -0800
Subject: [PATCH 3/5] enable trusted mcps by default

---
 modules/home/development.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/home/development.nix b/modules/home/development.nix
index da6d1b8d..59d36c36 100644
--- a/modules/home/development.nix
+++ b/modules/home/development.nix
@@ -36,7 +36,7 @@ in {
         };
         settings = {
           model = "opus";
-          enableAllProjectMcpServers = true;
+          enabledMcpjsonServers = ["linear" "figma"];
           permissions = {
             allow = [
               "Bash(find *)"

From d869cf64a673be1d4262c9b489b73d3246e93c23 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Fri, 6 Mar 2026 16:24:24 -0800
Subject: [PATCH 4/5] move claude code settings into global

---
 .claude/settings.local.json  | 14 --------------
 modules/home/development.nix |  5 +++++
 2 files changed, 5 insertions(+), 14 deletions(-)
 delete mode 100644 .claude/settings.local.json

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 49f017c5..00000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(nix flake check)",
-      "Bash(rg:*)",
-      "Bash(mkdir:*)",
-      "Bash(git add:*)",
-      "WebFetch(domain:raw.githubusercontent.com)",
-      "WebFetch(domain:github.com)",
-      "WebSearch"
-    ],
-    "deny": []
-  }
-}
diff --git a/modules/home/development.nix b/modules/home/development.nix
index 59d36c36..05d4bb36 100644
--- a/modules/home/development.nix
+++ b/modules/home/development.nix
@@ -54,9 +54,14 @@ in {
               "Bash(git diff *)"
               "Bash(git status)"
               "Bash(git show *)"
+              "Bash(git add *)"
               "Bash(git branch *)"
+              "Bash(mkdir *)"
               "Bash(* --version)"
               "Bash(* --help *)"
+              "WebFetch(domain:raw.githubusercontent.com)"
+              "WebFetch(domain:github.com)"
+              "WebSearch"
               "mcp__linear__get_project"
               "mcp__linear__list_issues"
               "mcp__linear__get_issue"

From 2c9bb6861791f6b5dd17e17357869873c5ec8f39 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Fri, 6 Mar 2026 16:25:04 -0800
Subject: [PATCH 5/5] remove commands from `deny`

---
 modules/home/development.nix | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/modules/home/development.nix b/modules/home/development.nix
index 05d4bb36..63ec24ac 100644
--- a/modules/home/development.nix
+++ b/modules/home/development.nix
@@ -72,15 +72,7 @@ in {
               "mcp__figma__get_metadata"
               "mcp__figma__get_screenshot"
             ];
-            deny = [
-              "Bash(git push *)"
-              "Bash(git reset *)"
-              "Bash(git checkout *)"
-              "Bash(rm *)"
-              "Bash(sudo *)"
-              "Bash(nixos-rebuild *)"
-              "Bash(darwin-rebuild *)"
-            ];
+            deny = [];
           };
         };
       };