What
Startup computes two decisions about whether this process may forward plugins and hooks to a device. Both admit only for a managed cloud worker, and two new environment variables, CLAUDE_CODE_DISABLE_PLUGIN_FORWARDING and CLAUDE_CODE_DISABLE_HOOK_FORWARDING, each force a refusal.
Details
- Managed cloud worker means an SDK URL and a remote session id are set, no environment kind is set, the entrypoint is allowlisted, and the run is not hermetic.
- Refusing plugin forwarding because the environment variable is set logs an event named
plugin_forwarding_worker_disabled.
Evidence
plugin_forwarding_worker_disabled
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundleCLAUDE_CODE_DISABLE_PLUGIN_FORWARDINGCLAUDE_CODE_DISABLE_HOOK_FORWARDING
One source agreesOne thing we can check says the same as this entry.
The name it cites is new in this build
New in this build: CLAUDE_CODE_DISABLE_HOOK_FORWARDING