Previously I could allow:
- Read
- Glob
- Grep
- Edit
- Write …and deny Bash entirely. That made code review skills safe to run unattended in cloud sandboxes because the model had zero shell execution capability. Now Glob/Grep were removed from native builds and file traversal/search routes through Bash (bfs/ugrep). So the permission boundary is gone. I do NOT want:
- approving every shell command
- or granting unrestricted Bash Right now the only fully deterministic workaround seems to be pinning to 2.1.116. Why the heck they would do this. submitted by /u/GodsLonenlyMan
Originally posted by u/GodsLonenlyMan on r/ClaudeCode
You must log in or # to comment.