Bash permission checks now say which command was not read-only

Before running a shell command, Claude Code checks whether it only reads things. Commands that do are allowed more freely, and others need further permission checks. When a command fails this check, the result now carries the text of the exact command that was not read-only, along with a reason.

In a session that runs shell commands only in its cloud environment, the reason says that no command can be verified as read-only there.