Permission rules are entries in your settings that allow or deny Claude Code access to files by path. They can use wildcard patterns, such as **, which stands for any number of nested folders. A pattern starting with ! is a negation, meaning "everything except this". Claude Code now prepares these rules differently:
- A negated pattern such as
!**now matches everything below the folder it starts from. - Allow rules that are negations are now placed last when rules are checked.
- An error while matching a rule against ignore patterns is now caught and handled, instead of breaking the check.
- A rule that cannot be read is no longer treated as matching the literal path it spells out.
The new handling falls back to on when the server sends nothing.
This changes which file paths are allowed or denied. If you use negated patterns or ** in your permission rules, check that they still allow and deny what you expect.
tengu_vivid_wreath Not enough to sayNothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.323: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.323. It isn't a statement about your account. What a flag value here can and cannot tell you
New in this build: tengu_vivid_wreath