Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
Home / Reference / Settings keys

bashCommandClamp

setting never mined JSON

A Claude Code settings key, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.

If a clamped agent's permission check crashes, the shell command is denied rather than allowed.

Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.227.

First seen — never in a mined build
Last seen — never in a mined build
Builds0 / 149on this box, as of v2.1.308
Written about v2.1.227 first named in a changelog, 10 Aug 2026

In the changelogs

7

Releases whose published page names bashCommandClamp.

  1. v2.1.227
    Command clamps deny rather than fall open

    If a clamped agent's permission check crashes, the shell command is denied rather than allowed.

    found in this entry's text

  2. v2.1.227
    agent() refuses spawns whose tool restrictions cannot be applied

    Spawning a sub-agent fails outright if its disallowed-tools list can't actually be applied.

    found in this entry's text

  3. v2.1.227
    agent() refuses spawns where the Bash command clamp would not bite

    Sub-agent spawns are refused when the Bash command restriction couldn't be enforced.

    found in this entry's text

  4. v2.1.227
    PowerShell is denied for agents with a shell command clamp

    Agents with a shell command restriction can't use PowerShell at all now.

    found in this entry's text

  5. v2.1.227
    Clamped agents are blocked on every execution surface

    Command-restricted agents are now blocked on PowerShell and the Monitor tool too, and fail closed.

    found in this entry's text

  6. v2.1.227
    Spawned agents can be clamped to a fixed set of shell commands

    Spawning an agent with a bad command clamp list now fails immediately instead of running unclamped.

    named in this entry, found in this entry's text

  7. v2.1.227
    Subagents can be locked to a fixed list of Bash commands

    Workflow scripts can restrict a spawned agent's shell to a fixed list of allowed commands.

    named in this entry, found in this entry's text

First cited

5

The earliest release whose published evidence quoted bashCommandClamp was v2.1.227, 10 Aug 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.

ReleaseDateThe span that was quoted
v2.1.22710 Aug 2026agent() bashCommandClamp under a shell toolAlias
v2.1.22710 Aug 2026agent() opts.bashCommandClamp must be an array of non-empty strings
v2.1.22710 Aug 2026agent() opts.bashCommandClamp must be an array of non-empty strings; got
v2.1.22710 Aug 2026bashCommandClamp: no clamp rule matches this command
v2.1.22710 Aug 2026this agent carries a per-spawn bashCommandClamp, which scopes shell execution to a

Presence across releases

0

The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.

Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the settings key does. All settings keys.

Feedback