What probably matters to youSection of the release
Unclear What sets the sources value, and which folder the helper now runs from, are not settled.
What
The proxy auth helper is a script Claude Code runs to get credentials for a network proxy. When proxyAuthHelperConfig.sources is set to personAndPolicy:
The helper is skipped where the folder's trust check applies.
Otherwise it runs from a different working folder than before.
Before, the only check was the project and local trust check. The helper still receives CLAUDE_CODE_PROXY_URL, CLAUDE_CODE_PROXY_HOST and CLAUDE_CODE_PROXY_AUTHENTICATE.
Why
This changes when a script that handles credentials is allowed to run, which matters for security.
