shell

glovebox shell

By default, !cmd typed in Claude Code's input box runs on the host — separate from the glovebox sandbox where Claude's tool calls execute. This skill ships a drop-in bash shim (glovebox-bash.sh) that routes those ! commands through the newest running glovebox MSB sandbox so your input-box shell and Claude share the same state.

Activate

Add an env.CLAUDE_CODE_SHELL entry to your project's .claude/settings.json (or .claude/settings.local.json for personal opt-in). The value must be an absolute path — Claude Code does not expand ${CLAUDE_PLUGIN_ROOT} or any other plugin-relative variable inside env.* values (only MCP/LSP/hook command fields support that).

The shim ships with this skill at:

!`echo "${CLAUDE_SKILL_DIR}/glovebox-bash.sh"`

Paste that absolute path into your settings:

{
  "env": {
    "CLAUDE_CODE_SHELL": "<paste the path above>"
  }
}

Start (or restart) Claude Code from this project. From that point on, every ! command in the input box is routed through the glovebox sandbox.

How it works

1. Parses the bash invocation (-c <cmd>, bare command string, script file, interactive). Only -c <cmd> (and the equivalent bare-string form CC sometimes uses) is rewritten — every other form is deferred to real /bin/bash.
2. Skips already-wrapped commands so Bash-tool calls (which the PreToolUse hook has already rewritten as printf '%s' '<b64>' | base64 -d | msb exec '<name>' -- bash) aren't double-wrapped.
3. Looks up the newest running glovebox-* sandbox via msb list. If none is running, falls back to /bin/bash so unrelated terminal usage is unaffected.
4. Otherwise execs msb exec <sandbox> -- bash -c <cmd>.

Deactivate

Remove the CLAUDE_CODE_SHELL entry from .claude/settings.json and restart Claude Code.