More shell commands now need your approval before running
Claude Code's Bash safety check now rejects more shell forms, including some patterns, some here-documents and some locale settings, so more commands prompt
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
Bash SafetyArea: what it touches
ImprovementsKind: in v2.1.309,
ImprovementsSection of the release
What
Claude Code reads each shell command to decide whether it is safe to run without asking you. It now rejects more kinds of command, and these will ask for permission:
brace expressions, extended glob patterns and regular expressions that still contain unexpanded patterns
here-documents, meaning blocks of text passed into a command, whose body zsh would expand differently
a locale setting taken from a path the command chooses
LC_* locale values that Claude Code cannot check
The check on locale settings from a path is controlled by a setting Claude Code reads from the server.
Why
More commands will stop and ask you instead of running on their own. This closes gaps where the shell might run something different from what Claude Code thought it would.
