What probably matters to youSection of the release
What
Hook processes now take their shell prefix, MCP shell prefix and MCP path from the context of the call that triggered them. For a call served from elsewhere, hooks run with the serving side's prefix and environment; locally the fallback is still the CLAUDE_CODE_SHELL_PREFIX environment variable.
Details
The base environment comes from the context, minus an explicit omit list, instead of the raw process environment.
The context builder now takes the call's origin explicitly and derives its own-sources set from that origin's distrusted sources.
Evidence
Hooks: a served call's hooks run without
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
