Hooks run for cloud sessions get a full environment, and an untrusted CLAUDE_CODE_SHELL_PREFIX is dropped with a warning.
What's wrong with this entry?
Hooks run on your machine for a cloud session now get a composed environment rather than just a PATH. If CLAUDE_CODE_SHELL_PREFIX is set but is not an absolute path outside what the cloud session can write, it is left out of the hook's environment and you are warned that the hook ran unwrapped.
- PATH entries that the session can write to, or that cannot be resolved on this machine, are stripped and reported.
- The old host-path/search-path plumbing is replaced by host environment composition, child environment construction, and explicit path placement and program resolution.
Hooks marked cloud: "device" run for the cloud session WITHOUT your CLAUDE_CODE_SHELL_PREFIX here: this machine cannot vouch for that wrapper (it is not an absolute path outside what the session can write).
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.246
Hooks run under the calling side's shell prefix and environment
Both mention shell prefix