احصر كتابة Claude Code داخل مجلد مشروعك بإعداد واحدKeep Claude Code writes inside your project folder

Key terms

Working directory

The folder you launched Claude Code from, plus any folder you added with --add-dir, /add-dir or additionalDirectories.

Permission mode

How Claude Code decides when to ask you before an action, such as default, acceptEdits, plan and auto.

settings.json

The JSON file that holds Claude Code settings. It exists at user level, project level, and as a local file that is not shared.

Deny rule

A permission rule that blocks a tool or command. It only restricts and never grants new access.

The steps

1. 1

   Step 1

   Understand what changes

   Claude Code 2.1.314 (October 30, 2026) added permissions.blockWritesOutsideWorkingDirectories. Once on, the Write, Edit and NotebookEdit tools refuse any path outside the working directories, in every permission mode.

   A matching setting exists for reading: permissions.blockReadsOutsideWorkingDirectories makes the file tools refuse reads outside the working directories.

   The idea is simple. Your project is the boundary. Claude works freely inside it. Anything outside needs your decision.

   code.claude.com

   

   Tip: Both settings govern the file tools. Shell commands have their own permission system and sandbox.