What
When a session run through the Agent SDK starts, Claude Code sends a start-up message describing it. This message can now include two optional fields, marked as internal:
original_cwd: the folder that file permission checks start fromadditional_directories: folders added to the session with--add-dir, through settings and in similar ways
Both fields are left out on redacted connections and for organizations covered by HIPAA, the US health-privacy rules. Folders added only by settings that come with the repository are not listed. The saved session state now holds these two values too, when they are set.
Why
Programs that host Claude Code can learn from the start-up message which folder permissions are based on and which extra folders are open.