You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Managed SettingsArea: what it touches
ImprovementsKind: in v2.1.323,
ImprovementsSection of the release
Unclear It is not clear what the extra check looks at or what the wrapper changes about how the command runs.
What
Settings can name helper commands that Claude Code runs for you, such as apiKeyHelper, which fetches an API key. An organization's policy settings can name these commands too. When the configured helper command does not match the one in policy settings, Claude Code now runs an extra check. If that check passes, Claude Code starts the command through a wrapper instead of running it directly.
Why
This may change how helper commands such as apiKeyHelper are launched.