Unclear Which tools count as a hosted session's desktop tools is not stated.
PermissionRequest hooks, your own scripts that run when a tool call needs a permission decision, can no longer approve a hosted session's desktop tools. Claude Code refuses with the message "hooks cannot approve a hosted session's desktop tools". A tool call is one action Claude takes, such as running a command or editing a file.
Two other hook changes:
- Async rewake hooks, which run in the background and can wake Claude back up, now say when a script failed to open because a path containing a space was not in quotes, so the shell split it in two.
- The message from a stop hook (one that runs when Claude finishes its turn) is different when the hook ran for account memory.
Approving desktop tools in a hosted session now always needs a decision outside your hooks. If a hook command breaks because of an unquoted path, the error tells you to add quotes.
Which tools count as a hosted session's desktop tools is not stated.