[BUG] `apply-seccomp` binary loses execute bit after auto-update (Linux)

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

• All Bash commands fail inside Claude Code sessions after any update (exit 126)
• The sandbox seccomp filter is non-functional until manually fixed
• Users must run chmod +x after every update — or discover this by trial and error

What Should Happen?

apply-seccomp should have execute bit set, and then bash commands will work

Error Messages/Logs

/bin/bash: line 4: /home/<user>/.nvm/versions/node/<version>/lib/node_modules/@anthropic-ai/claude-code/vendor/seccomp/x64/apply-seccomp: Permission denied
Exit code 126

Steps to Reproduce

1. Install Claude Code globally via npm/nvm on Linux x64

1. Run Claude Code — works fine

1. Claude Code auto-updates (or run claude update)

1. On next launch, all Bash invocations fail:

``
/bin/bash: line 4: /home/<user>/.nvm/versions/node/<version>/lib/node_modules/@anthropic-ai/claude-code/vendor/seccomp/x64/apply-seccomp: Permission denied
Exit code 126
``

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

2.1.91

Claude Code Version

2.1.92

Platform

Anthropic API

Operating System

Ubuntu/Debian Linux

Terminal/Shell

iTerm2

Additional Information

_No response_