Cloud sessions could register hooks that run on your device, blocked by two off flags.
Device hook forwarding is now implemented but needs two account flags that default off, and an env var refuses it.
tengu_violin_amati Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.239: on
tengu_violin_wood Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.239: on
Read once, for one account on one subscription tier, against v2.1.239. It isn't a statement about your account. What a flag value here can and cannot tell you
What's wrong with this entry?
The previous build had only the message shape for registering device hooks; this one adds the working half, letting a cloud session register hooks that run on your device. Nothing forwards in practice: it requires two account flags that both default to off, and setting CLAUDE_CODE_DISABLE_HOOK_FORWARDING refuses it outright.
- The SDK control loop now routes the
register_device_hooksrequest to a worker holding a hook registry, lease handling and an admission check. - Admission requires an SDK URL,
CLAUDE_CODE_REMOTE_SESSION_IDset,CLAUDE_CODE_ENVIRONMENT_KINDunset, an allowlisted entrypoint, non-hermetic mode, and the kill switch unset; otherwise the request is refused with a reason string. - Even when admitted the worker reads
tengu_violin_amatiandtengu_violin_woodand clears the registry unless both are on; both fall back to false on error. - Managed settings that restrict hooks to plugins, disable customization, allow managed hooks only, or disable all hooks also refuse it.
hook_forwarding_disabled: flag_off
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.247
Plugin forwarding now tells the cloud worker which directories it can reach
Both mention disable forwarding
-
v2.1.229
Repositories can declare that all hooks are off
Both mention disable hook
-
v2.1.242
Managed hook skip message now says SDK callback hooks still run
Both mention disable hook