What
The check that decides whether a plugin may use the network has been rewritten. It now refuses network access, saying nonessential network traffic is disabled for this session, in more cases:
CLAUDE_CODE_EVAL_CONFINEDis set to true.- The session is in a particular mode and the plugin's name or marketplace is missing or cannot be resolved.
In that mode, Claude Code can also say that the session's credential is withheld. Before, plugins were refused only when nonessential network traffic was turned off.
Why
Confined sessions now keep plugins off the network and keep the session's credential away from them.
Names in the bundleCLAUDE_CODE_EVAL_CONFINED
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Which sessions count as being in the mode that gets the credential-withheld message is not known.