{"version":"2.1.323","anchor":"remote-execution-permission-mode-strips-a-new-blockfiletoolr","canonical_anchor":"remote-execution-permission-mode-strips-a-new-blockfiletoolr","heading":"blockFileToolReadsOutsideWorkingDirectories handled in remote execution and \/add-dir","tier":"use","area":"Permissions","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/remote-execution-permission-mode-strips-a-new-blockfiletoolr","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### blockFileToolReadsOutsideWorkingDirectories handled in remote execution and \/add-dir\n\nRemote execution now removes blockFileToolReadsOutsideWorkingDirectories, and \/add-dir warns that file tools still refuse a folder added later\n\n**Unclear.** It is not clear whether `blockFileToolReadsOutsideWorkingDirectories` is something you can set yourself, or what sets it.\n\n**What**\n\n`blockFileToolReadsOutsideWorkingDirectories` is a setting that stops Claude's file tools reading outside the working directories, the folders a session works in. Two places now take it into account.\n\n- Remote execution: when Claude Code prepares permissions for a remote run, it now removes `blockFileToolReadsOutsideWorkingDirectories`. It already removed `blockReadsOutsideWorkingDirectories` and `blockWritesOutsideWorkingDirectories`.\n\n- A new helper turns on `blockWritesOutsideWorkingDirectories` when `blockFileToolReadsOutsideWorkingDirectories` is true and a check passes. Otherwise it forces `blockWritesOutsideWorkingDirectories` on and adds deny rules that narrow which tools can be used.\n\n- `\/add-dir` adds a working directory during a session. With the setting on, its result now notes: \"The file tools still refuse it: they count only the folders that this session was launched with\".\n\n**Why**\n\nWith this setting on, adding a folder with `\/add-dir` does not let the file tools read it. You now get a warning instead of a quiet mismatch. Remote runs do not carry this setting over as it is.\n\n- Area: Permissions\n- Names: `blockFileToolReadsOutsideWorkingDirectories`, `blockReadsOutsideWorkingDirectories`, `blockWritesOutsideWorkingDirectories`\n- Tier: Use it now\n- Useful: 4\/5\n- Signal: 2\/5\n- Scope: both\n- Heads-up: no"}