Start Debugging

permissions

3 posts

2026-09-15 errors claude-code ai-agents

Fix: a PreToolUse hook returns "allow" but a deny rule still blocks the tool call in Claude Code

Since Claude Code 2.1.77 a PreToolUse hook's allow cannot override a deny or ask rule. Find the matching rule with /permissions, then move the policy into the hook.

2026-08-13 migration claude-code ai-agents

Migrate a Claude Code Setup to Manual Permission Mode Without Breaking Headless Runs

Tightening a team's default permission mode to Manual is a one-line settings change interactively and a silent outage in CI, because headless runs turn every ask into a deny and still report success. Measured on Claude Code 2.1.224, including the trust gate that drops your allowlist but keeps your mode.

2026-08-04 comparison claude-code ai-agents

Auto Mode vs Manual Approval in Claude Code: What Each Mode Actually Allows Through

Manual gates every tool call on you. Auto mode gates them on a classifier with 32 built-in block rules. The mode that surprises people is neither: acceptEdits auto-approves rm, mv, and sed, not just file edits. Measured on Claude Code 2.1.123.