Claude Code Configuration Deep Dive Hits 221 Points: Everything the Docs Don't Tell You

Building Better / Hacker News·medium signal

A detailed post reverse-engineering Claude Code's undocumented configuration options hit 221 points and 48 comments on HN. The post covers hidden settings, permission models (allowlist/asklist/denylist), hook configurations, and workflow customization that aren't covered in official documentation. Comes alongside broader security scrutiny — separate research found Claude Code can read .env files despite deny rules, and a new tool 'nopeek' emerged to keep secrets out of agent sessions.