{"version":"2.1.269","anchor":"claude-plugin-eval-init-can-delegate-the-authoring-intervi","canonical_anchor":"claude-plugin-eval-now-requires-explicit-trust-confirmatio","heading":"claude plugin eval reaches general availability with a trust-confirmation requirement","tier":"use","area":"Plugin Eval","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269\/e\/claude-plugin-eval-init-can-delegate-the-authoring-intervi","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269","markdown":"### claude plugin eval reaches general availability with a trust-confirmation requirement\n\nclaude plugin eval is now generally available everywhere but requires trusting a plugin directory before it runs, with clearer help text and init delegation\n\n**What**\n\n- `claude plugin eval` now reports itself as generally available for every client type (Bedrock\/Vertex\/Foundry, gateways, telemetry-disabled clients, CI), unless a server-side flag turns it off \u2014 in which case the CLI now says the command exists but is switched off, rather than claiming it doesn't exist.\n\n- Before loading a target, `claude plugin eval` now runs a trust check that must resolve to `trusted: true` \u2014 via an already-installed plugin, an existing trust marker, the `--trust-plugin` flag, or an interactive prompt \u2014 or the command errors out and exits without loading or running anything.\n\n- The command's help text was expanded to explain that it loads and runs a plugin's eval suite on your machine, that sandboxing limits but doesn't guarantee safety, and that the first run against an untrusted plugin directory will prompt for confirmation (use `--trust-plugin` to pre-answer that, e.g. for CI).\n\n- `claude plugin eval init`, when run without a terminal but detected as launched from inside another Claude Code session, can now delegate its authoring interview to that parent session instead of failing with \"no TTY available\". In that delegated interview flow, the interviewer must now explicitly ask whether you trust the plugin directory before piloting eval cases, and only adds `--trust-plugin` on an explicit yes; case files are still written on a no\/no-answer, just not piloted.\n\n**Why** These changes make `claude plugin eval` a supported, documented feature everywhere while making sure a plugin's eval code \u2014 which runs on your machine \u2014 isn't executed against an untrusted directory without your explicit confirmation.\n\n- Area: Plugin Eval\n- Names: `claude plugin eval init`\n- Tier: Use it now\n- Useful: 4\/5\n- Signal: 3\/5"}