claude-permissions-plugin
A Claude Code plugin for managing Bash permissions efficiently.
Features
1. Hook: bash-compound-allow
Automatically approves compound Bash commands (joined with &&, ||, ;, |, or newlines) when every individual part matches your existing allow rules — no more per-prompt interruptions.
Solves: anthropics/claude-code#16561
- Reads allow rules from all settings files (
~/.claude/settings.json, ~/.claude/settings.local.json, .claude/settings.json, .claude/settings.local.json)
- Shell builtins (
echo, printf, cd, etc.) and variable assignments are auto-allowed
- Logs every decision to
/tmp/bash-compound-allow.log
- When a part is not allowed, shows a
systemMessage identifying the exact command
- Note: In subagent contexts the hook still fires and enforces rules, but the
systemMessage is not surfaced to the user — check /tmp/bash-compound-allow.log to see what was blocked
2. Skill: /permission-update
Collects allow rule candidates from two sources and lets you pick which to promote to global settings:
- Source A — project settings: rules in
.claude/settings.local.json not yet in global ~/.claude/settings.json
- Source B — hook log: commands that triggered prompts, ranked by frequency
Run periodically to keep your allow list up to date.
Installation
From GitHub (recommended)
In Claude Code, run these two commands:
/plugin marketplace add broven/claude-permissions-plugin
/plugin install claude-permissions-plugin@broven-claude-permissions-plugin
To install for a specific project only (shared with collaborators via .claude/settings.json):
/plugin install claude-permissions-plugin@broven-claude-permissions-plugin --scope project
From a local clone
git clone https://github.com/broven/claude-permissions-plugin.git
Then in Claude Code:
/plugin marketplace add ./claude-permissions-plugin
/plugin install claude-permissions-plugin@claude-permissions-plugin
Log
All hook decisions are written to /tmp/bash-compound-allow.log:
[14:23:01] APPROVE | parts: ['npm install', 'echo "done"']
[14:23:05] PROMPT | not in allow list: 'unknowncmd foo'
Use /permission-update to turn PROMPT entries into allow rules.
broven