{"version":"2.1.246","anchor":"cd-tells-you-what-the-new-directory-would-grant-before-you-t","canonical_anchor":"cd-tells-you-what-the-new-directory-would-grant-before-you-t","heading":"\/cd tells you what the new directory would grant before you trust it","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.246\/e\/cd-tells-you-what-the-new-directory-would-grant-before-you-t","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.246","markdown":"### \/cd tells you what the new directory would grant before you trust it\n\n\/cd into an untrusted folder now lists exactly what its settings would grant before you trust it.\n\n**What**\n\nChanging into a directory Claude Code has not trusted now lists what that folder's `.claude\/settings.json` and `.claude\/settings.local.json` would give it: pre-approved tool permissions, extra accessible directories, hooks that run commands, and helpers that supply auth tokens or request headers. A second variant appears after the move when project grants are held back, ending with a note that they apply only if you trust the directory.\n\n**Details**\n\n- The disclosure is built by reading the target's two settings files; if reading fails the error is logged and the prompt shows less rather than blocking the move.\n- Wording such as \"This directory configures hooks that run commands, declared in\" is new in this build.\n\n**Evidence**\n\n`This directory configures hooks that run commands, declared in`\n\n- Area: Permissions\n- Names: `\/cd`\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5"}