A new environment variable makes every artifact write and republish ask permission again instead of remembering approval.
What's wrong with this entry?
A new environment variable, CLAUDE_CODE_COWORK_FRAME_ARTIFACTS, turns off the "you already approved this in this session" shortcut for artifact database writes and republishes, so each of those decisions is made fresh. It applies only on the local-agent entrypoint and only when CLAUDECODE is not set, and artifact actions fail closed with frame-specific denial text when a permission check cannot complete.
- The value is captured once at startup into the process-info object and is stripped case-insensitively from the environment of child processes, so subprocesses do not inherit it.
- Off by default; nothing else in the build sets it.
- It extends the existing plan-mode artifact consent floor rather than replacing it.
CLAUDE_CODE_COWORK_FRAME_ARTIFACTS=1 claudeCowork-frame artifact consent floor fails closed when its permission check cannot complete, CLAUDE_CODE_COWORK_FRAME_ARTIFACTS
Strings lifted out of the shipped bundle, so the claim above can be checked against them.