{"version":"2.1.248","anchor":"remote-host-tool-classification-extended-beyond-bash","canonical_anchor":"remote-host-tool-classification-extended-beyond-bash","heading":"Remote host tool classification extended beyond Bash","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248\/e\/remote-host-tool-classification-extended-beyond-bash","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.248","markdown":"### Remote host tool classification extended beyond Bash\n\nRemote hosts now classify more than just Bash calls when deciding what's allowed.\n\n**What**\n\nWhen a remote host decides whether a tool call is allowed, the check now runs for a set of tool names rather than only Bash commands, and the host's explanation is inserted as a shell comment only when there is an actual command string. Whether the host's allow-rules are honoured depends on the connection type, not a setting: they are honoured only for session-kind transports.\n\n**Details**\n\n- New abort reason `ask_level_raised`, used when the permission-prompting level rises while a classification is in flight.\n- The `tengu_remote_tool_classifier` telemetry event now reports how many rules the host has in each list and whether allow-rules were honoured.\n\n**Evidence**\n\n`host_rules_allow_honoured`\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5"}