I use Claude Code for routine edits in a repository, but stopping to approve every small action breaks the flow. At the same time, I don’t want to give an agent blanket access to my files or let it run arbitrary commands without asking.

What permission setup has worked for people who want fewer interruptions while keeping risky actions gated? I’m especially interested in how you handle shell commands and changes outside the project directory.