When Claude Code checks whether a bash command needs extra permission because it runs outside your working directory, it now recognizes a specific safe pattern: a compound command (several commands chained together) that starts with cd, chdir, or pushd to a plain relative directory name. The directory can't contain wildcards, environment variables, .., or other shell special characters, and it must already be a directory you're allowed to read. Every command chained after it must also be safe and already permitted.
When all of that holds, Claude Code skips the extra "outside working directory" permission prompt entirely.
This cuts down on unnecessary permission prompts for a common, harmless pattern: changing into a subdirectory you already have access to and then running further already-permitted commands there. It only applies on non-Windows systems.