Claude Code removes the dedicated file search tool and switches to Bash, breaking user permission level approval.

According to Beating Monitoring, Claude Code has removed dedicated Grep (text search) and Glob (filename matching) tools starting from version 2.1.117, and all file operations are now performed through Bash. Bash is a general-purpose command-line tool capable of much more than just searching files, including high-risk operations like deleting, modifying, and installing software. Anthropic engineer Adam Wolff said that the change made the system faster, “It took four months to remove these tools, which was much more difficult than adding them.”

Amp Code CEO Quinn Slack pointed out that this change breaks the existing permission management logic. Previously, users could set permissions based on tool types: read-only tools like Grep and Glob were automatically allowed, while Bash commands required manual approval one by one. Now that all operations go through Bash, this tiered approval system is invalid: users either approve each shell command individually (which is very inefficient) or allow all commands to pass (losing security control).

Slack believes this exposes a more fundamental issue: using deterministic rules to manage agent permissions is ineffective. The model can bypass classification with various equivalent expressions, such as replacing dedicated search tools with commands like bash(grep query | head -n 10), or inline calling sed, perl, or python to perform arbitrary operations. He said the Amp team has tried to automatically parse Bash commands to assess safety, “It probably reduces approval workload by about half, but there are still too many remaining.”