What
Organizations can now configure an admin-controlled helper executable that computes managed settings at startup.
Usage
{
"policyHelper": {
"path": "/usr/local/bin/claude-policy-helper",
"timeoutMs": 5000,
"refreshIntervalMs": 60000
}
}Details
- The helper is honored only from admin-controlled policy sources.
- It can return
managedSettings,claudeMd, andappendSystemPrompt. - Claude Code validates the helper path, rejects non-absolute paths, and can refresh the helper output periodically.
- If refresh fails, Claude Code retains the current policy instead of dropping managed settings.
Evidence
Managed settings helper schema and runtime execution (search for "policyHelper" and "Executable that computes managed settings at startup. Honored only from admin-controlled policy sources.")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.