Internal rework of the sandbox 'reads outside working directory' deny dialog, same message and behavior
The code path that shows the deny message for permissions.blockReadsOutsideWorkingDirectories (which blocks file tools from reading outside your working directories) was internally restructured, and a new host_dialog tag is now passed along when the dialog is shown. The message itself, which tells you to add the directory with /add-dir, is unchanged.
This is an internal refactor with no visible change in behavior; the same deny message and recovery path (/add-dir) still apply when a tool tries to read outside your allowed directories.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
* Fixed the `/add-dir` path input: the left and right arrow keys now move the cursor, and Enter adds only the typed path instead of also adding the highlighted completionchangelog see the edit
what the new host_dialog tag is used for beyond being passed into the dialog flow
Anthropic's documentation has since written up /add-dir, on Claude Code changelog.