[lachlan_gray]

fwiw there are more granular controls, where you can for example allow/deny specific bash commands, read or write access to specific files, using a glob syntax:

https://code.claude.com/docs/en/settings#permission-settings

You can configure it at the project level

[xnorswap]

Yes, those permissions stick with the project in the settings file. I'd like those same permissions, but configurable per-session / context.