Skip to main content

Claude Code

Permission prompts I can't get rid of

I looked at where approval prompts actually come from. The top offenders were:

CommandApprovals
ddev wp eval225
ddev wp eval-file76
ddev wp db66
php <file>many

None of these can be safely allowlisted. They all execute arbitrary code, so an entry in settings.json permitting them would permit anything. There's no clever pattern that fixes this, and it's not worth more time trying.

/fewer-permission-prompts is a built-in Claude Code skill, not something in my dotfiles. It's useful for the read-only commands that can be allowlisted.

settings.json holds more than permissions

The same file also holds MCP server config and plugin config. Anything that writes to it has to merge rather than overwrite, or it takes those out with it.

What carries between sessions

Sessions start blank. Three things persist:

WhatScopeReliable?
~/.claude/CLAUDE.mdEvery project, every sessionYes
A repo's own CLAUDE.mdSessions running in that projectYes, travels with the code
Claude's memory filesKeyed to the directory the session started inNo, doesn't follow a mid-session directory change

For anything project-specific, the repo's CLAUDE.md is the one to use.

Past session transcripts can be searched on request, they just aren't loaded automatically.