From a8d60cdb29b38ef86356280873a3868b43db19d0 Mon Sep 17 00:00:00 2001 From: Claude Date: Mon, 6 Jul 2026 07:06:35 +0000 Subject: [PATCH] docs(claude-code): remove duplicated permissions sections Remove accidentally duplicated "PowerShell rules" and "Agent (subagent) rules" sections in the permissions page. Each appeared twice; the official Claude Code permissions docs list each once. Preserved the one extra detail from the removed PowerShell block (a bare `PowerShell` or `PowerShell(*)` matches every PowerShell command) by merging it into the retained section. Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01XCaWBJaGM8RYkdSoeJbtAp --- docs/claude-code/permissions.md | 30 +----------------------------- 1 file changed, 1 insertion(+), 29 deletions(-) diff --git a/docs/claude-code/permissions.md b/docs/claude-code/permissions.md index f9ac7e4..d741fd7 100644 --- a/docs/claude-code/permissions.md +++ b/docs/claude-code/permissions.md @@ -177,7 +177,7 @@ On Windows, Claude Code uses PowerShell alongside Bash. PowerShell rules follow } ``` -Matching is case-insensitive and common aliases are canonicalized, so `PowerShell(Get-ChildItem *)` also matches `gci`, `ls`, and `dir`. +Matching is case-insensitive and common aliases are canonicalized, so `PowerShell(Get-ChildItem *)` also matches `gci`, `ls`, and `dir`. A bare `PowerShell` or `PowerShell(*)` matches every PowerShell command. ### Built-in read-only commands @@ -187,26 +187,6 @@ Unquoted glob patterns are permitted for commands whose every flag is read-only, A `cd` into a path inside your working directory or an additional directory is also read-only. A compound command like `cd packages/api && ls` runs without a prompt when each part qualifies on its own. -### PowerShell rules - -On Windows, Claude Code uses PowerShell alongside Bash. PowerShell rules follow the same syntax as Bash rules, with case-insensitive matching and canonicalized common aliases: - -```json -{ - "permissions": { - "allow": [ - "PowerShell(Get-ChildItem *)", - "PowerShell(git commit *)" - ], - "deny": [ - "PowerShell(Remove-Item *)" - ] - } -} -``` - -A rule written for a cmdlet name also matches its aliases, so `PowerShell(Get-ChildItem *)` matches `gci`, `ls`, and `dir` as well. A bare `PowerShell` or `PowerShell(*)` matches every PowerShell command. - ### MCP tool rules ```text @@ -235,14 +215,6 @@ Add these to the `deny` array in your settings or use the `--disallowedTools` CL } ``` -### Agent (subagent) rules - -```text -Agent(Explore) # Matches the Explore subagent -Agent(Plan) # Matches the Plan subagent -Agent(my-agent) # Matches a custom subagent -``` - ## Working directories By default, Claude has access to files in the directory where it was launched. Extend access with: