Its theme's rank, 14 days: 27 on the Claude Code sheet
12 people reported
All time, since Sep 17, including 4 thumbs-up on GitHub.
Worktree Bash refusals
“Inside a subagent dispatched with isolation: "worktree", the Bash tool refuses many read-only and worktree-local commands.”
Is this your bug? What gets counted gets fixed. Pile on.
Paste this into your agent. It files your report, with your error and version.
I hit this bug: rapsheet.dev/sheets/claude-code/issues/1080/file Follow it to file my report. Show me the text before you send.
No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends
Bash refuses git-free commands in worktree-isolated sessions. Commands that never run git or leave the worktree are refused as "too complex to verify" or as something that "cannot be shown not to be git".
Is this your bug?
File my report- Where
- Bash tool
- Error text
names git in a form too complex to verify that it stays inside the worktree.- Versions
- 2.1.220 to 2.1.311
- Platforms
- Linux, macOS, Windows
- How bad
- Breaks a normal workflow.
Part of: Worktree guard refuses commands and edits9 bugs
- Worktree guard blocks nested repos4 people
- Subagent Bash refused after worktree2 people
- Heredoc refused in worktree3 people
- Empty .git treated as repo root2 people
- Worktree guard refuses ~ git paths2 people
- Worktree guard refuses rewritten git3 people
- Isolation fence skips Bash writes2 people
- Worktree refuses shell-word args3 people
Original reports9, newest first
- Worktree isolation guard refuses non-git commands whose text contains "git"#105399
- Agent tool isolation:"worktree" spawns a seat whose every Bash call is refused on arrival (analyzer fails closed on plain commands too)#101887
- Worktree isolation guard false positive: substring match on "git" blocks commands#100806
- Worktree-isolation Bash guard overrides an explicit PreToolUse
permissionDecision: allow#100385 - Worktree-isolation Bash check matches "git" inside other words (legit, digit) when a command has $(), a loop or a heredoc#98344
- Worktree-isolation Bash guard refuses a curl command that references a settings.json env var#97760
- Bash tool refuses read-only and worktree-local commands as 'too complex to verify' in git worktree isolation#97474
- Bash tool in a worktree-isolated agent refuses commands that never leave the worktree#97225
- Worktree isolation refuses git-free Bash on 2.1.272/2.1.273: literal-assigned variables, $(…) args, loops, heredocs after && (75 refusals in 3 days)#95122