git tool's allowed-subcommand shim gains git grep and worktree…

You'll notice

The restricted git wrapper now parses -C and --work-tree flags and fully handles git grep.

The sandboxed git command allowlist now parses -C, --work-tree, and --work-tree= flags before the subcommand and resolves relative paths against that worktree. It also adds a full handler for git grep, alongside the existing expanded handling for git diff. This applies to everyone using the restricted git wrapper.

How sure we are

One source agreesOne thing we can check says the same as this entry.

Anthropic's release notes agreeFixed Bash Read() deny rules not covering files given as option values (--ignore-revs-file=.env, -f.env, @file), git diff/git grep file…

See this entry in the whole of v2.1.259 →

The build it came inv2.1.259

2 Sep 2026 · 195 entries, this one is #74.

Use it now22
You'll notice89
Nothing to try yet24
Under the hood60

Open the release →

Anthropic's note

Upstream's own release notes for v2.1.259 name something this entry names, so the two are probably about the same change. Probably: the pairing is made on a shared name rather than on the words around it.

Fixed Bash Read() deny rules not covering files given as option values (--ignore-revs-file=.env, -f.env, @file), git diff/git grep file operands, or cd DIR && cat FILE compounds; grep -r/cp -r over a directory holding a denied file now asks

Either side of it

v2.1.258Older
v2.1.260Newer

Is this right?

git tool's allowed-subcommand shim gains git grep and worktree flag parsing

git tool's allowed-subcommand shim gains `git grep` and worktree flag parsing