Claude Code can deny permission prompts instead of waiting on them

Claude Code 2.1.319 (November 6, 2026) adds a setting for unattended runs: permissions.denyInsteadOfPrompting.

What it does

The changelog entry reads: a tool call that would wait on a permission prompt is denied and the turn continues. It applies in terminal sessions, subagents and teammates.

Without it, a call that no rule allows stops and waits for a person. With it, the call is refused and the turn moves on.

Where to set it

The setting lives under permissions, next to your allow, ask and deny rules. A minimal sketch of a settings file:

{
  "permissions": {
    "denyInsteadOfPrompting": true
  }
}

The changelog gives the setting name and its behavior. It does not show a value type or a file location, so the boolean above is an assumption from the name. Check the settings reference before relying on it.

Related permission changes in 2.1.319

The same release tightens several rules. All of these are from the changelog:

• A session's exact Bash or PowerShell ask rule is now refused, not asked about, when a broader deny rule covers the command.
• The Bash tool asks for permission before running which with flags outside a lookup/display set.
• Monitor's WebSocket watch follows a rule on every Bash command. A deny refuses it. Under an ask rule, an allow on Monitor, bypass mode or auto mode no longer skips the prompt.

Sources: Claude Code changelog.