Under the hood
Trust checks for skills, commands, and agents now look across multiple project config roots, not just one
What
When Claude Code decides whether to trust custom commands, agents, and skills defined in .claude/commands, .claude/agents, and .claude/skills, it previously checked a single hardcoded directory. That logic now iterates over a list of locations that includes the working directory and, if configured, a separate project-config-root path.
Why
Projects that keep their .claude configuration in a separate root from the working directory get correct trust checks instead of being evaluated against only the working directory.