If it's a wrapper that invokes the `claude` binary then I believe it's fine.

Is there a way to legally or even practically prevent this? `claude` CLI execution in a shell is certainly included in the subscription - it’s the product.