How to handle permissions without going mad?

So, the local settings json which keeps permissions approach is just plain wrong. Claude still stops many times to ask for permissions for things which already are in the local settings json - even when I ask him why, claude just then recognizes that it's allowed and continues... Why? I don't want to run claude code in docker with dangerously skip permissions but this seriously ruins the interaction. Is there any way to instruct it that: A.) anything which doesn't touch filesystem outside of the project directory (with exception of /tmp) is allowed? B.) break compound bash commands (with && || ;) into separate parts, check the parts and if it passes then continues before asking permission