Skip to content

docs: caveat worktrees.md sandbox-allowlist claim, add wt orphan-branch note - #40

Merged
technicalpickles merged 1 commit into
mainfrom
wt-sandbox-denylist-caveat
Sep 14, 2026
Merged

technicalpickles merged 1 commit into
mainfrom
wt-sandbox-denylist-caveat

Conversation

@technicalpickles

Copy link
Copy Markdown
Owner

Summary

  • The "no extra allowlist entry needed" claim in worktrees.md is true for the cwd-allowance mechanism ADR 0051 fixed, but not for Claude Code's separate hardcoded path/basename denylist, which still applies regardless of cwd.
  • Adds the recovery step for when a sandboxed wt switch --create's partial failure leaves an orphan branch that makes a same-named --create retry fail with "Branch already exists".

Test plan

  • Read through worktrees.md once more for accuracy

🤖 Generated with Claude Code

@technicalpickles
technicalpickles enabled auto-merge (squash) September 14, 2026 19:25
…an-branch recovery note

The cwd-allowance sandbox fix this doc documents is real, but a separate
hardcoded path/basename denylist applies regardless of cwd and still bites
repos that ship .claude/agents/*, .claude/commands/*, .mcp.json, or
.git/hooks/*. Also documents the recovery when a sandboxed wt switch
--create's partial failure leaves an orphan branch that makes a retry with
--create fail with "Branch already exists".

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@technicalpickles
technicalpickles force-pushed the wt-sandbox-denylist-caveat branch from a504792 to 9cd1a4a Compare September 14, 2026 19:29
@technicalpickles
technicalpickles merged commit ca11e61 into main Sep 14, 2026
1 check passed
@technicalpickles
technicalpickles deleted the wt-sandbox-denylist-caveat branch September 14, 2026 19:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant