Reconcile every managed profile and shared-settings.json to exactly the canonical guardrail model (hooks, disallowedTools, permissions, and the canonical settings keys); preview with --dry-run, and write at a terminal or with --approve-consequential.
#c reconcile-permissions
reconcile every managed profile and shared-settings.json to EXACTLY the canonical guardrail model (hooks, disallowedTools, permissions deny/ask and the canonical settings keys made exact; allow keeps only its non-conflicting entries); prunes all drift and user-added extras. The 'default' profile (~/.claude) is never touched. Pass --dry-run to preview the per-target diff without writing; writing needs a terminal to confirm at, or --approve-consequential.
Effect: mutating ยท consequential (prompts before running; --approve-consequential skips)
#Flags
| Name | Short | Type | Presence | Env | Description |
|---|---|---|---|---|---|
--profile | str | optional | reconcile only this single profile; when given, shared-settings.json is left untouched (omit to reconcile every profile AND shared-settings.json) |