cbbdd66c2e
Verified against code.claude.com/docs/en/permission-modes and fixed 6 points: 1. acceptEdits: add PowerShell tool auto-approvals (Set-Content/Add-Content/ Clear-Content/Remove-Item + aliases) and env-prefix/process-wrapper note. 2. Protected paths: .claude exception is ONLY .claude/worktrees (was wrongly widened to commands/agents/skills); add per-mode protected-write table. 3. defaultMode:"auto" ignored from project files since v2.1.142+. 4. dontAsk: read-only Bash commands also run without allow rules; explicit ask rules are denied (not prompted). 5. auto conversational boundary: stays in force until user lifts it; Claude's own judgment doesn't lift it; lost on context compaction; use deny rule for hard. 6. auto consecutive-failure fallback: 3-in-a-row / 20-total pauses & re-prompts; -p non-interactive aborts the session. Plus dropped broad allow-rules on entry. Co-authored-by: chenchen <chenchen@xinghanlab.com> Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>