{"name":"permissions.blockFileToolReadsOutsideWorkingDirectories","slug":"permissions-blockfiletoolreadsoutsideworkingdirectories","family":"setting","title":"Settings keys","noun":"settings key","description":"`permissions.blockFileToolReadsOutsideWorkingDirectories` stops Claude's file tools reading outside the folders Claude Code was launched with","description_source":"entry","described_by":{"version":"2.1.323","anchor":"new-permissionsblockfiletoolreadsoutsideworkingdirectories"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.323","builds":0,"mined_builds":162,"first_cited":{"version":"2.1.323","released_at":"2026-11-12 20:29:28","spans":5}},"aliases":[],"entries":[{"version":"2.1.323","anchor":"new-permissionsblockfiletoolreadsoutsideworkingdirectories","heading":"New setting limits file tool reads to the folders Claude Code started in","line":"`permissions.blockFileToolReadsOutsideWorkingDirectories` stops Claude's file tools reading outside the folders Claude Code was launched with","released_at":"2026-11-12 20:29:28","reason":"named in this entry, found in this entry's text"},{"version":"2.1.323","anchor":"read-outside-working-directory-block-settings-named-in-permi","heading":"New setting to block file tools from reading outside your project","line":"`permissions.blockFileToolReadsOutsideWorkingDirectories` can stop file reads outside your working directories from being allowed automatically","released_at":"2026-11-12 20:29:28","reason":"named in this entry, found in this entry's text"},{"version":"2.1.323","anchor":"exitworktree-refuses-to-exitremove-when-launch-folder-permi","heading":"ExitWorktree refuses to leave or remove a worktree when folder limits apply","line":"ExitWorktree now stops rather than return outside the launch folders, or remove some worktrees, when the matching permission settings are on","released_at":"2026-11-12 20:29:28","reason":"found in this entry's text"},{"version":"2.1.323","anchor":"sandbox-new-outside-working-directory-block-status-fields-r","heading":"Session info now reports whether reads and writes outside your folders are blocked","line":"Session info now says whether file reads and writes outside the working directories are blocked, and the sandbox also honours a new read-blocking setting","released_at":"2026-11-12 20:29:28","reason":"found in this entry's text"},{"version":"2.1.323","anchor":"runtime-settings-cant-flip-blockfiletoolreadsoutsideworking","heading":"Blocking file reads outside your project can only be set at launch","line":"permissions.blockFileToolReadsOutsideWorkingDirectories is now ignored when sent to a running session and counts only in --settings at launch","released_at":"2026-11-12 20:29:28","reason":"named in this entry, found in this entry's text"},{"version":"2.1.323","anchor":"teammates-run-in-process-when-file-tool-reads-outside-the-wo","heading":"Teammates stay in the main window when reads outside the project are blocked","line":"With `permissions.blockFileToolReadsOutsideWorkingDirectories` on, teammates always run in-process instead of in tmux or iTerm2 panes","released_at":"2026-11-12 20:29:28","reason":"found in this entry's text"},{"version":"2.1.323","anchor":"permissionsblockfiletoolreadsoutsideworkingdirectories-hono","heading":"Warnings when read-fence settings are put where they are ignored","line":"Claude Code now warns when `permissions.blockFileToolReadsOutsideWorkingDirectories` and related keys are set in a settings file, where they are ignored","released_at":"2026-11-12 20:29:28","reason":"found in this entry's text"},{"version":"2.1.323","anchor":"await-claim-now-refused-with-blockfiletoolreadsoutsidework","heading":"--await-claim no longer starts when file reads are limited to launch folders","line":"Starting with --await-claim now fails if permissions.blockFileToolReadsOutsideWorkingDirectories is on","released_at":"2026-11-12 20:29:28","reason":"named in this entry, found in this entry's text"},{"version":"2.1.323","anchor":"enterworktree-honours-blockfiletoolreadsoutsideworkingdirect","heading":"EnterWorktree now stays inside the folders allowed at launch","line":"With file reads limited to launch folders, EnterWorktree refuses worktrees outside them and moves the session back if a later check fails","released_at":"2026-11-12 20:29:28","reason":"named in this entry, found in this entry's text"}],"entries_total":9,"docs":[],"docs_total":0,"gates":[],"related":[{"name":"permissions","slug":"permissions","description":"Set allow, ask, and deny rules and the default [permission mode](https:\/\/code.claude.com\/docs\/en\/permission-modes.md)"},{"name":"permissions.additionalDirectories","slug":"permissions-additionaldirectories","description":"Give Claude file access to [directories outside the current one](https:\/\/code.claude.com\/docs\/en\/permissions.md#working-directories)"},{"name":"permissions.allow","slug":"permissions-allow","description":"Approve listed [tool uses](https:\/\/code.claude.com\/docs\/en\/permissions.md#permission-rule-syntax) without a prompt"},{"name":"permissions.ask","slug":"permissions-ask","description":"Always prompt before listed [tool uses](https:\/\/code.claude.com\/docs\/en\/permissions.md#permission-rule-syntax)"},{"name":"permissions.blockReadsExemptPaths","slug":"permissions-blockreadsexemptpaths","description":"`permissions.blockReadsExemptPaths` lists paths that stay readable when `blockReadsOutsideWorkingDirectories` is on, and is read only from flag settings"},{"name":"permissions.blockReadsOutsideWorkingDirectories","slug":"permissions-blockreadsoutsideworkingdirectories","description":"Make the file tools refuse reads outside the [working directories](https:\/\/code.claude.com\/docs\/en\/permissions.md#working-directories) in every permission mode"},{"name":"permissions.blockWritesOutsideWorkingDirectories","slug":"permissions-blockwritesoutsideworkingdirectories","description":"Make the `Write`, `Edit`, and `NotebookEdit` tools refuse paths outside the [working directories](https:\/\/code.claude.com\/docs\/en\/permissions.md#working-directories) in every permission mode, apart from [some of Claude Code's own files](#what-the-write-block-refuses-and-what-stays-writable)"},{"name":"permissions.defaultMode","slug":"permissions-defaultmode","description":"Set the default [permission mode](https:\/\/code.claude.com\/docs\/en\/permission-modes.md#which-mode-a-session-starts-in) for new sessions"},{"name":"permissions.deny","slug":"permissions-deny","description":"Block listed [tool uses](https:\/\/code.claude.com\/docs\/en\/permissions.md#permission-rule-syntax), including reads of files that hold secrets"},{"name":"permissions.denyInsteadOfPrompting","slug":"permissions-denyinsteadofprompting","description":"Deny tool calls that would wait on a [permission prompt](https:\/\/code.claude.com\/docs\/en\/permissions.md#permission-system), so a session nobody is watching keeps working"}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/permissions-blockfiletoolreadsoutsideworkingdirectories","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}