How to run sandboxed commands without prompts again in Claude Code 2.1.325

Starting with Claude Code 2.1.325, Bash commands that run inside the sandbox go through the normal permission flow like any other command. Before, turning the sandbox on was enough for sandboxed commands to run without asking. If every command started asking for approval after the update, this change is why.

To get the old behavior back, set sandbox.autoAllowBashIfSandboxed to true in settings.json. Picking auto-allow on the Mode tab of /sandbox does the same.

{
  "sandbox": {
    "enabled": true,
    "autoAllowBashIfSandboxed": true
  }
}

Even with this on, commands that can't run in the sandbox still go through the permission flow, and deny rules and content-scoped ask rules such as Bash(git push *) still apply. If your organization turns the sandbox on through managed settings, put this value in your highest-ranking managed source.

The settings reference still lists the default as true; the new default is only in the changelog.