Unclear Which part of the new checking each of the two server flags controls is not clear.
Before Claude runs a shell command that deletes files with rm, Claude Code checks whether the command is safe to allow without asking. It used to judge each command once. It now also rechecks a command under other possible readings of variables set in front of a declaration. A declaration is a shell command such as export or declare that defines variables.
If it cannot check all of those variables, it asks you before running the command, giving the reason "Variables set in front of a declaration in this command can't all be checked before it runs". The code reads two server flags here, and both are on unless switched off remotely.
Some compound shell commands that used to run without a prompt may now ask you first.
tengu_quiet_larkspur On for this account, and not off by defaultThe flag server returned on for the one account this site reads, and nothing in this release compiles it off by default. The compiled default is shown below, and says which it is when we cannot read one: a fifth of gates compile in a string or a number rather than on or off, and most published releases have no gate table behind them at all. No client can see what the server returns for your account.
This account: on · anonymous baseline: on · compiled default in v2.1.290: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
tengu_iridescent_boot Not enough to sayNothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.
This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.290: on
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.290. It isn't a statement about your account. What a flag value here can and cannot tell you
Which part of the new checking each of the two server flags controls is not clear.