-
v2.1.277New 'Local tools' row in cloud session sync status
Cloud session sync status now tracks a fourth category: 'Local tools'
found in this entry's text
-
v2.1.273New OAuth scope
user:plugins gated by PLUGINS_SCOPE_REGISTERED
A new OAuth scope, user:plugins, is requested for accounts with plugin access registered
found in this entry's text
-
v2.1.269OAuth token refresh now requests and reports the user:plugins scope
Token refresh now also asks for the user:plugins permission scope and logs whether it was granted
found in this entry's text
-
v2.1.269Refresh retries once with the full scope set if the server rejects an expanded scope request
If a server rejects the new expanded OAuth scope request, Claude Code retries once with the old scopes
found in this entry's text
-
v2.1.269OAuth refresh now tracks whether the plugins scope was requested/granted, with automatic downgrade retry on invalid_scope
OAuth token refresh now requests a plugins scope and retries without it if the server rejects the scope
found in this entry's text
-
v2.1.269New plugin-search scope gate: skip_no_scope decision function Qt()
New gate decides whether to skip plugin/skill search requests based on OAuth scope and session type
found in this entry's text
-
v2.1.267New "safeguards" permission-context capability
Permission settings gained a new 'safeguards' flag alongside remote tools, hooks, and plugins
found in this entry's text
-
v2.1.267Remote control now filters/strips forwarded plugin and safeguard settings per capability
Remote control now strips plugin and safeguard settings from forwarded requests unless explicitly permitted
found in this entry's text
-
v2.1.267Automatic OAuth plugin-scope expansion now skipped in non-interactive sessions
Automatic OAuth plugin-scope refresh no longer runs silently in non-interactive sessions
found in this entry's text
-
v2.1.267New 'safeguards' trust category added to the remote-io flag-settings filter, with skip reporting
Remote connections get a new 'safeguards' trust category that blocks unverified attempts to disable protections
found in this entry's text
-
v2.1.261New SDK launch flag: --await-initialize
A new SDK CLI flag makes the process wait for an initialize request over stdin before starting.
found in this entry's text
-
v2.1.261SDK session init accepts a
plugins field over stdin
The SDK's initialize request can now carry plugin paths over stdin instead of one flag per plugin.
found in this entry's text
-
v2.1.261initialize control request can now report whether requested plugins loaded
The initialize request now reports whether plugins you asked for actually loaded.
found in this entry's text
-
v2.1.260Remote session now propagates skills/plugins list from worker init
Remote session init now also captures the skills and plugins list, not just commands and model.
found in this entry's text
-
v2.1.260SDK init frame now reports skills and plugins in use
SDK init handshake now reports which skills and plugins are in use.
found in this entry's text
-
v2.1.246Marketplace clones get a whole-tree address form that nothing calls yet
Storage can now address any file inside a marketplace clone, though nothing uses that form yet.
found in this entry's text
-
v2.1.238New storage area for cached plugin assets
Cached plugin assets got their own storage area, keyed by content hash.
found in this entry's text
-
v2.1.224Eval-authoring guidance had two wrong field names
Plugin eval guidance now names the real fields, suite.plugins and costUsd.
found in this entry's text
-
v2.1.223Plugin and skill search requests a new
user:plugins OAuth scope
Signing in can request an extra permission for plugin search, though search itself remains policy-gated.
found in this entry's text
-
v2.1.213SDK Protocol: Plugin Version Field
found in this entry's text
-
v2.1.140Plugin Folder-Shadowing Warnings
found in this entry's text
-
v2.1.15Cowork Plugins Directory Support [Hidden]
found in this entry's text
