Tag

#sandbox

2 posts tagged.

allowUnsandboxedCommands: false does not cover the ! shell-mode prompt (2026)

Claude Code v2.1.260 narrowed strict sandbox mode so it no longer covers commands you type at the ! prompt. Anthropic documents two exceptions the changelog never mentions, and the variable that closes the gap is filed under credential scrubbing.

September 7, 202611 min read213

Tutorials

blockReadsOutsideWorkingDirectories: why setting it to false does nothing (2026)

permissions.blockReadsOutsideWorkingDirectories blocks reads outside your working directories in every permission mode, including bypassPermissions. Writing false does not turn it off, because the key is a logical OR across all settings sources. Plus the 53-hour macOS defect window, dated from the npm registry.

September 4, 202610 min read827

#sandbox · AgentNotebook