Unclear It is not clear what condition turns the unwrapping on, so whether it is active by default.
What
Claude Code runs a read-only check on shell commands. A command that passes is treated as safe and can run without asking for your permission. This release lets more commands pass that check:
timeout <N>[smhd]wrappers: a leading wrapper such astimeout 10is stripped off, and the command inside it is checked instead. The unwrapping runs only when an internal check (F6e()) passes. It is not done for[[,alias,cd,help,historyortype. If stripping the wrapper changes the first word of the command, the command is rejected.which: now counts as a safe read-only command when it uses only the allowed flags-a,-s,--all,--skip-dot,--versionand--help. Any other flag, or an argument the check marks as dangerous, makes it fail. Before,whichwas not on the safe list at all.
Why
Commands such as timeout 10 ls or which python may stop asking for permission. Anything outside these narrow rules still goes through the normal permission prompt.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear what condition turns the unwrapping on, so whether it is active by default.