Unclear It is not clear whether a plugin folder that joins mid-session on Windows is brought into the sandbox or refused.
The sandbox is the walled-off space Claude Code can run commands in, so they cannot reach everything on your computer. When it starts on Windows, it now runs several extra steps:
- a check that can refuse to use the current working folder
- deny rules applied through Windows itself
- a lookup of the current user's status
The sandbox setup is also rebuilt when a plugin folder (the folder of an add-on package that extends Claude Code) joins a session that is already running. Claude Code records the result as installed, rebuild failed, or set at start. Before, nothing happened when a plugin folder joined partway through.
Plugins added during a session are now taken into account by the sandbox instead of being left out of its setup. If you use the sandbox on Windows, its startup behaves differently, so check that your usual working folders are still accepted.
It is not clear whether a plugin folder that joins mid-session on Windows is brought into the sandbox or refused.