You'll notice Notable
Sessions using ANTHROPIC_UNIX_SOCKET now lose server-side auto mode classification unless connecting over SSH remote
What
The check that decides whether a session counts as first-party (and so gets access to the server-side auto-mode classifier) now treats a session using ANTHROPIC_UNIX_SOCKET as third-party, disabling that server-side classifier, unless CLAUDE_CODE_ENTRYPOINT is set to ssh-remote.
Why
This closes a gap where a unix-socket connection could otherwise be treated as trusted first-party access to the server-side classifier; it's only allowed through when the entry point is specifically the SSH remote case.
Names in the bundleANTHROPIC_UNIX_SOCKETCLAUDE_CODE_ENTRYPOINT