Session permission rules are saved and restored in remote sessions

What

A session permission rule is an allow, deny or ask decision about a tool that applies for the current session only. Claude Code now keeps these rules across restarts of remote sessions:

• Session allow, deny and ask rules are written into an internal metadata record (ccr_kept_session_rules) and restored when the session resumes.
• The saved record is capped by size. If the lists cannot be written or restored in full, this is recorded with the reasons lists_not_written_whole and lists_not_restored_whole.
• Allow rules for MCP tools (rules starting with mcp__, MCP being the way outside tools connect to Claude Code) are skipped.
• The code that told the metadata about changes to session_allow_rules used to be written inline, filtering out mcp__ rules and sending a notice when they changed. It is now a helper that looks at both permission contexts, and a new step also runs when settings are reloaded.

Why

In a remote session that restarts or resumes, permissions you granted or refused earlier in the session can carry over instead of being asked again. Very large rule lists may not be kept in full.