{"version":"2.1.299","anchor":"strict-inline-shell-rm-prompt-new-env-var-and-tengu-pale-ke","canonical_anchor":"strict-inline-shell-rm-prompt-new-env-var-and-tengu-pale-ke","heading":"Inline shell commands now prompt only when they involve rm or rmdir","tier":"notice","area":"Permissions","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299\/e\/strict-inline-shell-rm-prompt-new-env-var-and-tengu-pale-ke","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.299","markdown":"### Inline shell commands now prompt only when they involve rm or rmdir\n\nPermission prompts for inline shell commands such as bash -c now depend on whether the command contains rm or rmdir\n\n**Unclear.** Whether setting CLAUDE_CODE_STRICT_INLINE_SHELL_RM_PROMPT brings back a prompt for every inline shell command or removes the prompt is not settled.\n\n**What**\n\nAn inline shell command is a command passed as text to a shell, such as `bash -c \"...\"` or a string written with `$'...'` escapes. Before, Claude Code always asked for your permission when it found one. Now, it asks only after checking that the command contains `rm` or `rmdir`, which delete files and folders.\n\nThe check sees through common ways of hiding those commands:\n\n- quotes\n\n- variables that expand into a command\n\n- `$'...'` escapes\n\nSetting `CLAUDE_CODE_STRICT_INLINE_SHELL_RM_PROMPT` turns this rm check off. Otherwise the check is controlled by a remote setting, and when the server sends nothing, Claude Code falls back to running it.\n\n**Why**\n\nSome permission prompts for inline shell commands that you saw before may stop appearing, because prompts are now narrowed to commands that actually delete files or folders.\n\n- Flag `tengu_pale_kestrel`: Not enough to say (read for one account on one subscription tier against v2.1.299; this account: no value returned, anonymous baseline: no value returned, compiled default: on) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: individual\n- Heads-up: no"}