Claude Code, end to end: zero to power-user.

1# 1. Install globally
2npm install -g @anthropic-ai/claude-code
3 
4# 2. Verify
5claude --version
6 
7# 3. Authenticate (opens browser)
8claude
9# → choose "Claude.ai (Pro/Max)" — uses your $20/mo subscription, no API key needed

1{
2  "permissions": {
3    "allow": [
4      "Bash(git status)",
5      "Bash(git diff:*)",
6      "Bash(git log:*)",
7      "Bash(npm run *)",
8      "Bash(npm install:*)",
9      "Bash(ls:*)",
10      "Bash(cat:*)",
11      "Bash(grep:*)",
12      "Bash(rg:*)",
13      "Bash(find:*)",
14      "Bash(jq:*)",
15      "Read",
16      "Glob",
17      "Grep"
18    ],
19    "deny": [
20      "Bash(rm -rf:*)",
21      "Bash(git push --force:*)"
22    ]
23  },
24  "model": "claude-sonnet-4-6",
25  "env": {
26    "BASH_DEFAULT_TIMEOUT_MS": "120000"
27  }
28}

1# Project — `my-saas`
2 
3## Stack
4- Next.js 16 App Router · React 19 · TypeScript · Tailwind v4
5- Supabase (Postgres + auth) · Stripe · Vercel
6- Tests: Vitest
7 
8## Conventions
9- Server Components by default. `'use client'` only when you need state/effects.
10- Import alias: `@/*` → `./src/*`
11- Database access: only in server code. Never expose service-role keys.
12- All API routes return `{ ok: boolean, data?, error? }`.
13 
14## Commands
15```bash
16npm run dev      # localhost:3000
17npm run build    # production build
18npm run test     # Vitest
19```
20 
21## What you must NOT do
22- Don't commit .env files.
23- Don't auto-format files outside the diff scope.
24- Don't add new dependencies without asking.
25 
26## Where things live
27- src/app/         — routes
28- src/components/  — UI
29- src/lib/         — server utils
30- supabase/        — migrations

1Run this checklist before I open a PR:
2 
31. `npm run lint` — fix every warning, don't skip
42. `npm run test` — every test passes
53. `npm run build` — clean build with no errors
64. Run `git diff main` and review for:
7   - debug `console.log` left behind
8   - commented-out code
9   - hard-coded secrets or local URLs
105. Write a one-paragraph PR description with:
11   - what changed
12   - why
13   - how I tested it
146. Stage everything, create commit, push branch.
15 
16If any check fails, STOP and tell me what broke. Do not proceed.

1---
2description: Independent code review of staged changes — security, perf, conventions
3tools: Read, Grep, Glob, Bash(git diff:*)
4---
5 
6You are a senior code reviewer. Read the staged diff with `git diff --cached`.
7 
8Check for:
9- Security issues (XSS, SQL injection, exposed secrets, unvalidated input)
10- N+1 queries, missing indexes, sync work in async paths
11- Project conventions (see CLAUDE.md)
12- Tests covering the new behavior
13 
14Report a punch list — issues found, severity, file:line. No code suggestions, just findings.

1{
2  "hooks": {
3    "PostToolUse": [
4      {
5        "matcher": "Edit|Write",
6        "hooks": [
7          {
8            "type": "command",
9            "command": "npx prettier --write $CLAUDE_FILE_PATH 2>/dev/null || true"
10          }
11        ]
12      }
13    ],
14    "Stop": [
15      {
16        "hooks": [
17          {
18            "type": "command",
19            "command": "cd $CLAUDE_PROJECT_DIR && npm run test --silent 2>&1 | tail -5"
20          }
21        ]
22      }
23    ]
24  }
25}

1# Add Supabase MCP — query your db from inside Claude
2claude mcp add supabase npx @supabase/mcp-server
3 
4# Add Vercel MCP — deploy + check logs
5claude mcp add vercel npx @vercel/mcp-server
6 
7# Add GitHub MCP — issues, PRs, code search
8claude mcp add github npx @github/mcp-server
9 
10# List active servers
11claude mcp list