Control shell commands
Dedicated hooks for intercepting shell/terminal command execution — block dangerous commands, audit, or inject env vars
Baseline Widely available Fully supported by every tracked agent since Mar 2026, when Codex added it. Based on web.dev's Baseline
Tool-Specific Hooks Hooks & Lifecycle
Supported
Partial
No
Unknown
Not released
1.0.38 - 2.1.311
0.117.0 - 0.164.0
0.0.396 - 1.0.103
2.4 - 3.27
0.3.114 - 1.19.4
0.2.31 - 1.0.37
0.2.0 - 0.116.0
0.0.374 - 0.0.395
1.7 - 2.0
0.1.30 - 0.3.102
—
—
—
0.45 - 1.3
—
Supported by all 5 agents.
HoverTap any cell for version details.
Agent event mapping
Sub-capabilities
- Block dangerous commands before they execute
- Cursor: dedicated events with command string in context
- Claude Code: uses generic PreToolUse with matcher pattern 'Bash'