Granular Permission Rules: New pattern-based permission system for file operations
Support for glob patterns to allow/deny file access
Separate rules for read vs edit operations
Pattern prefixes:
// - Relative to root directory
~/ - Relative to user's home directory
/ - Relative to configured scope (project, user settings, etc.)
Example usage
# Deny all access to sensitive files
claude code --deny-read "//etc/**" --deny-edit "~/.ssh/**"
# Allow specific directories
claude code --allow-read "/src/**" --allow-edit "/docs/*.md"
