Under the hood
New parsers pull file-path operands out of grep and awk arguments so they can be allowlisted for the sandbox.
New helper functions parse grep and awk command-line arguments to extract path-like operands for sandboxing, recognizing flags such as -e/--regexp and -A/--after-context for grep, and -F/--field-separator, -f/--file, -E/--exec for awk. This distinguishes which arguments are file paths versus regex or script content, supporting path-allowlisting tied to the sandbox.ripgrep managed setting.
Names in the bundlesandbox.ripgrep
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up sandbox.ripgrep, on All settings.
| Values taken whole | Takes the value whole from the highest source that sets it, without combining entries or fields from lower sources. When the highest source doesn't set it, takes it whole from the next source down | [`sandbox.credent…settings-reference see the edit
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up sandbox.ripgrep, on All settings.
Anthropic's release notes agree
Changed managedSourcesBehavior: "merge" to take sandbox.credentials.awsPairs and sandbox.ripgrep whole from the highest managed source that…