Agent support · Hooks & Lifecycle

Control shell commands

Dedicated hooks for intercepting shell/terminal command execution — block dangerous commands, audit, or inject env vars

Baseline Widely available Fully supported by every tracked agent since Mar 2026, when Codex added it. Based on web.dev's Baseline
Tool-Specific Hooks Hooks & Lifecycle
Supported
Partial
No
Unknown
Not released
Claude Code Current · Oct 2026
Codex Current · Oct 2026
GitHub Copilot Current · Oct 2026
Cursor Current · Oct 2026
OpenCode Current · Oct 2026
1.0.38 - 2.1.311
0.117.0 - 0.164.0
0.0.396 - 1.0.103
2.4 - 3.27
0.3.114 - 1.19.4
0.2.31 - 1.0.37
0.2.0 - 0.116.0
0.0.374 - 0.0.395
1.7 - 2.0
0.1.30 - 0.3.102
—
—
—
0.45 - 1.3
—

Supported by all 5 agents.

HoverTap any cell for version details.

Agent event mapping

  • claude-code PreToolUse with Bash matcher
  • codex PreToolUse (shell-only initially)
  • copilot preToolUse (bash tool)
  • cursor beforeShellExecution, afterShellExecution
  • opencode tool.execute.before (bash), shell.env

Sub-capabilities

  • Block dangerous commands before they execute
  • Cursor: dedicated events with command string in context
  • Claude Code: uses generic PreToolUse with matcher pattern 'Bash'