What
Claude Code can decide that a shell command is read-only, meaning it only looks at things and changes nothing. The part that decides this changed in two ways:
- It takes a new
offlineEstimateoption. When set, it skips three checks: looking up allowed environment variables, probing for bare repositories or.gitredirects, and checking the sandbox's working folder. - It now rejects a command when later arguments, or the target of a
<redirect (which feeds a file into the command), fail a new check.
Why
The new argument check makes it harder for a command to be treated as read-only when it should not be. The offline mode gives a quicker estimate without the checks that look at the system.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
The finding does not say what the new argument check tests for or when the offline mode is used.