{"name":"Bash","slug":"bash","family":"tool","title":"Tools","noun":"tool","description":"Spawning an agent with a bad command clamp list now fails immediately instead of running unclamped.","description_source":"entry","described_by":{"version":"2.1.227","anchor":"spawned-agents-can-be-clamped-to-a-fixed-set-of-shell-comman"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":149,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.299","anchor":"eval-harness-gains-disallow-tools-and-per-case-disallowed","heading":"Plugin evals can now take tools away from Claude with --disallow-tools","line":"The plugin eval runner accepts `--disallow-tools` and a per-case `disallowed_tools` list, and scores runs that end on an API error as 0","released_at":"2026-10-14 00:23:19","reason":"found in this entry's text"},{"version":"2.1.293","anchor":"schema-docs-bare-bash-policy-key-also-governs-powershell-e","heading":"Bash policy also covers PowerShell, and an empty allowed-folders list blocks every folder","line":"A bare `Bash` key in `builtinToolPolicy` also governs PowerShell, and an empty `allowedWorkspaceFolders` list now allows no folder at all","released_at":"2026-10-07 17:18:04","reason":"found in this entry's text"},{"version":"2.1.289","anchor":"find-command-safety-check-tightened-for-bash-permission-auto","heading":"Fewer find commands are allowed without asking","line":"Claude Code now asks before running some `find`, `test`, `jobs` and `set` commands that it used to treat as safe to run automatically","released_at":"2026-10-03 20:12:02","reason":"found in this entry's text"},{"version":"2.1.285","anchor":"tools-handling-extracted-into-a-helper","heading":"Handling of the --tools flag reorganized, with the same warnings","line":"The code that reads `--tools` and warns about unknown tool names was moved into one place; the warning text is unchanged","released_at":"2026-09-29 17:32:09","reason":"found in this entry's text"},{"version":"2.1.282","anchor":"bash-permission-rules-with-in-the-middle-are-no-longer","heading":"Bash permission rules with :* in the middle no longer fail to load","line":"Bash permission rules like `Bash(foo:*bar)`, with `:*` not at the end, are no longer rejected as invalid","released_at":"2026-09-24 15:56:22","reason":"found in this entry's text"},{"version":"2.1.280","anchor":"bash-tool-enforces-a-hard-sandbox-requirement-for-remotesdk","heading":"Bash tool enforces a hard sandbox requirement for remote\/SDK-issued calls","line":"Bash\/PowerShell now refuses remote-issued commands if a fully confining sandbox can't be confirmed","released_at":"2026-09-22 15:44:39","reason":"found in this entry's text"},{"version":"2.1.280","anchor":"bash-tool-pre-spawn-failures-can-now-report-a-structured-err","heading":"Bash tool pre-spawn failures can now report a structured error code","line":"Failed Bash commands that never even started now report a structured preSpawnErrorCode","released_at":"2026-09-22 15:44:39","reason":"found in this entry's text"},{"version":"2.1.280","anchor":"bash-tool-validateinput-gets-an-added-asynchronous-host-side","heading":"Bash tool validateInput gets an added asynchronous host-side check","line":"Bash tool input validation adds a second, host-side asynchronous check after the existing one","released_at":"2026-09-22 15:44:39","reason":"found in this entry's text"},{"version":"2.1.277","anchor":"new-tool-backgrounding-field-controls-detachselfnever-ex","heading":"New tool backgrounding field controls detach\/self\/never execution mode","line":"Tools gain a `backgrounding` setting controlling whether they can keep running in the background","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text"},{"version":"2.1.277","anchor":"per-tool-backgrounding-classification-rolled-out-across-ne","heading":"Per-tool 'backgrounding' classification rolled out across nearly all built-in tools","line":"Nearly every built-in tool now carries a 'backgrounding' classification of never, self, or detach","released_at":"2026-09-18 16:22:26","reason":"found in this entry's text"}],"entries_total":33,"docs":[{"source":"api","path":"about-claude\/models\/migration-guide","title":"Or, for the model with the same capabilities and no access approval requirement:","documented":false},{"source":"api","path":"about-claude\/models\/optimizing-for-cost-and-intelligence","title":"optimizing-for-cost-and-intelligence","documented":false},{"source":"api","path":"about-claude\/pricing","title":"pricing","documented":false},{"source":"api","path":"about-claude\/use-case-guides\/customer-support-chat","title":"customer-support-chat","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/best-practices","title":"PDF Processing","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/claude-api-skill","title":"claude-api-skill","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/enterprise","title":"enterprise","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/overview","title":"PDF Processing","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/quickstart","title":"quickstart","documented":false},{"source":"api","path":"agents-and-tools\/mcp-connector","title":"mcp-connector","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/tool\/bash","family_url":"https:\/\/changelogs.core-directive.com\/reference\/tool.json"}