Plugins can ship background monitors that run as persistent unsandboxed tasks; install only trusted ones.
What's wrong with this entry?
Plugins can now ship background monitors. The schema gains a monitors field that is either a path to a JSON file relative to the plugin root or an inline array, defaulting to monitors/monitors.json when omitted. Monitors run as persistent tasks with the same trust as hooks: unsandboxed, so only install them from plugins you trust.
- The host arms declared monitors as long-lived tasks at plugin load.
- Same trust tier as hooks means no sandboxing and no separate consent step.
unsandboxed, same trust tier as hooks
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.242
Session spawn aborts on host-specific write paths committed to a repo
Both mention json
-
v2.1.247
Warning when
~/.claude.jsoncannot be watched for outside editsBoth mention json
-
v2.1.232
Safety monitor covers third-party attacks and remote browser tools
Both mention monitor