Claude Code 2.1.271 gives sandboxed commands per-command allowed domains and closes four more Bash permission escapes.

Released September 14 (GitHub). Bash, PowerShell and Monitor in auto mode with sandboxing now take per-command allowed_domains, so the hosts a command needs are reviewed with the command and opened for it alone. The four permission-checker fixes: the checker missed the file that fmt and column read when it followed an unrecognized option; it skipped files a wildcard expands to when the wildcard sat in a pattern or option value like grep -v dir/* file; shell variable declaration flags could misrepresent the command being run; and commands with two directory changes, a subshell, or a cd+git chain skipped the prompt under permissions.blockReadsOutsideWorkingDirectories.