--trust-workspace
A Claude Code CLI flag, read out of the shipped bundle. It has been in the build since v2.1.309, including the newest one read.
--trust-workspace help text now documents a stricter mode that drops repo-committed permission grants
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.268.
In the changelogs
5Releases whose published page names --trust-workspace.
-
v2.1.309
claude ultrareviewcan trust the current folder for one runclaude ultrareview --trust-workspacetrusts the current folder for that run only, without a prompt, so reviews can run in scripts and CInamed in this entry, found in this entry's text
-
v2.1.307
New
CLAUDE_CODE_IGNORE_PERSISTED_TRUSTmakes earlier workspace trust not countWith
CLAUDE_CODE_IGNORE_PERSISTED_TRUSTset, Claude Code ignores every saved record that you trusted a workspacefound in this entry's text
-
v2.1.307
Self-hosted runner options for proxies, checkout hook time limits and nested repositories
The self-hosted runner reads its proxy from --agent-proxy-url, limits checkout hook time and tightens how nested-repository diffs are shown
found in this entry's text
-
v2.1.275
Trust-workspace default variable renamed in help text template
Help text for --trust-workspace now references a renamed internal default variable
found in this entry's text
-
v2.1.268
--trust-workspace gains a stricter mode referencing cli#44151, still on by default
--trust-workspace help text now documents a stricter mode that drops repo-committed permission grants
found in this entry's text
First cited
1The earliest release whose published evidence quoted --trust-workspace was v2.1.307, 21 Oct 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
1Build by build
1One row per release since the first build this name was read out of. Absent means the build was read and the name was not in it, never mined means no bundle for that release was ever archived, and a declared type or a default is only ever what that release's own bundle stated.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the CLI flag does. All CLI flags.