{"name":"blockReadsOutsideWorkingDirectories","slug":"blockreadsoutsideworkingdirectories","family":"setting","title":"Settings keys","noun":"settings key","description":"A new permissions setting blocks any file read outside your working directories, in prompts and in the sandbox.","description_source":"entry","described_by":{"version":"2.1.257","anchor":"new-permission-setting-blockreadsoutsideworkingdirectories"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.319","builds":0,"mined_builds":159,"first_cited":{"version":"2.1.257","released_at":"2026-09-01 17:15:33","spans":6}},"aliases":[],"entries":[{"version":"2.1.319","anchor":"new-managed-permission-setting-denyinsteadofprompting","heading":"New permission setting denyInsteadOfPrompting is carried through settings","line":"Claude Code now passes along a `permissions.denyInsteadOfPrompting` setting when it is set to true, next to the read and write block settings","released_at":"2026-11-06 00:58:56","reason":"found in this entry's text, named in this entry"},{"version":"2.1.319","anchor":"avoid-prompts-mode-now-marks-avoidspromptsbynature-denyinst","heading":"No-prompt permission mode and denyInsteadOfPrompting are treated differently","line":"The mode that avoids permission prompts now marks itself as avoiding them by nature, and `denyInsteadOfPrompting` now counts as a restrictive setting","released_at":"2026-11-06 00:58:56","reason":"found in this entry's text"},{"version":"2.1.315","anchor":"new-permissionsblockreadsexemptpaths-read-only-from-flag-s","heading":"New setting exempts chosen paths from the block on reads outside the working directory","line":"`permissions.blockReadsExemptPaths` lists paths that stay readable when `blockReadsOutsideWorkingDirectories` is on, and is read only from flag settings","released_at":"2026-10-30 21:05:24","reason":"found in this entry's text, named in this entry"},{"version":"2.1.315","anchor":"new-managed-setting-blockreadsexemptpaths","heading":"New setting lets a launching program exempt folders from the read block","line":"The new `blockReadsExemptPaths` setting lists folders Claude Code may still read while reads outside the working directories are blocked","released_at":"2026-10-30 21:05:24","reason":"found in this entry's text, named in this entry"},{"version":"2.1.315","anchor":"restricted-mode-now-also-blocks-reads-outside-the-working-di","heading":"Restricted sandbox mode now blocks file reads outside the working directory","line":"When the sandbox is in restricted mode, Claude Code now blocks reads of files outside your working directories","released_at":"2026-10-30 21:05:24","reason":"found in this entry's text, named in this entry"},{"version":"2.1.314","anchor":"new-setting-blockwritesoutsideworkingdirectories","heading":"New setting blocks Claude's file edits outside your working directories","line":"A new setting, blockWritesOutsideWorkingDirectories, stops Claude's file tools writing outside your working directories in every permission mode","released_at":"2026-10-30 00:12:56","reason":"found in this entry's text"},{"version":"2.1.314","anchor":"remote-sessions-strip-blockwritesoutsideworkingdirectories-a","heading":"Remote runs no longer receive the setting that blocks writes outside the project","line":"Remote runs now drop blockWritesOutsideWorkingDirectories from sandbox settings, as they already did for the read-blocking setting","released_at":"2026-10-30 00:12:56","reason":"found in this entry's text, named in this entry"},{"version":"2.1.299","anchor":"sandbox-read-deny-and-glob-handling-reworked-for-symlinked","heading":"Sandbox handles linked folders and wildcard paths differently when blocking reads","line":"The sandbox now tracks wildcard paths and linked folders in its allow and deny lists, and drops access grants that later point into a denied area","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text"},{"version":"2.1.292","anchor":"attachment-path-checks-now-stat-and-open-using-the-validated","heading":"Attached files are checked again to be the exact path that was approved","line":"Under `--restricted` or the read block, an attached file must open at the same path that was approved, closing a gap through links swapped mid-read","released_at":"2026-10-06 17:10:31","reason":"found in this entry's text"},{"version":"2.1.290","anchor":"instruction-files-claudemd-rules-held-outside-the-workin","heading":"CLAUDE.md and rules files outside allowed folders are skipped when reads are restricted","line":"With reads restricted, Claude Code no longer loads CLAUDE.md, AGENTS.md or rules files that a deny rule covers or that sit outside your working folders","released_at":"2026-10-05 18:12:44","reason":"found in this entry's text, named in this entry"}],"entries_total":25,"docs":[{"source":"claude-code","path":"changelog","title":"Claude Code changelog","documented":false},{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-code","path":"memory","title":"How Claude remembers your project","documented":false},{"source":"claude-code","path":"permission-modes","title":"Choose a permission mode","documented":false},{"source":"claude-code","path":"permissions","title":"Configure permissions","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false},{"source":"claude-docs","path":"cowork\/changelog","title":"Changelog","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/code","title":"Code in Claude Desktop on 3P","documented":false},{"source":"claude-docs","path":"third-party\/claude-desktop\/configuration","title":"Configuration reference","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/blockreadsoutsideworkingdirectories","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}