You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.229,
ImprovementsSection of the release
What
Directories created by command-sourced plugins are now treated like .claude config paths, so editing a file inside one is refused with "Claude requested permissions to edit ... which is a sensitive file."
Details
The denied set is built by scanning the installed_plugins.json records across plugin roots, and is also updated directly when a plugin is installed or removed.
The scan result is cached for 5 seconds.
Evidence
installed_plugins.json
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
