Claude Code 2.1.271 gives sandboxed commands per-command allowed_domains and closes four Bash permission-check escapes

GitHub·high signalXBlueskyLinkedInCopy link

Released 2026-09-14, the build adds per-command allowed_domains to Bash, PowerShell and Monitor in auto mode with sandboxing, so the hosts a command needs are reviewed with the command and opened for it alone while other hosts are refused. Alongside it are four separate permission-checker fixes: the checker missed the file that fmt, column and similar commands read when it followed an unrecognized option; it skipped files a wildcard expands to when the wildcard sat in a pattern or option value such as grep -v dir/* file; shell variable declaration flags could misrepresent the command being run; and commands with two directory changes, a subshell, or a cd+git chain skipped the prompt under permissions.blockReadsOutsideWorkingDirectories in bypass and auto mode.