{"version":"2.1.321","anchor":"lone-security-hook-default-shortcut-behind-tengu-vast-wave","canonical_anchor":"lone-security-hook-default-shortcut-behind-tengu-vast-wave","heading":"Security-hook shortcut now also depends on a server-side switch","tier":"internal","area":"Hooks","scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/lone-security-hook-default-shortcut-behind-tengu-vast-wave","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321","markdown":"### Security-hook shortcut now also depends on a server-side switch\n\nThe shortcut used when only security hooks remain is now also tied to a remote switch; `CLAUDE_CODE_DISABLE_LONE_SEC_DEFAULT_SHORTCUT` still turns it off\n\n**Unclear.** What the shortcut does when the server sends no value for its switch is not known.\n\n**What**\n\nHooks are your own commands that run when certain events happen, and some of them check a tool before it runs. Claude Code has a shortcut that skips the usual handling of those checks when every remaining hook is a security hook. That shortcut now also depends on a switch controlled from Anthropic's servers.\n\nSetting the environment variable `CLAUDE_CODE_DISABLE_LONE_SEC_DEFAULT_SHORTCUT` still turns the shortcut off.\n\n**Why**\n\nThis changes which tool-checking hooks actually run in the plugin runtime. If you rely on every one of those hooks running, set the environment variable.\n\n- Area: Hooks\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: no"}