The tengu_bash_tool_command_executed and tengu_powershell_tool_command_executed/failed telemetry events now include a user_typed_shell_dispatch field, and sandbox policy checks take a matching userTypedShellDispatch flag to distinguish commands the user typed directly from ones issued by a tool. When a command runs through bash-mode dispatch outside a recognized Claude Code session kind, its tool input now carries userTypedShellDispatch: true.
Names in the bundleuserTypedShellDispatch