Settings keys, all 1,548.

remoteHomeSettings ◇ Switching off remoteHomeSettings can now be blocked, with a reason given, instead of always going aheadnever mined ·never mined remoteTools ◇ A new 'safeguards' remote-control security channel exists but its rule list is empty, so it currently blocks nothingv2.1.259 → v2.1.283 ○gone remoteTools.allowUnattendedServing ◇ A new settings key turns off unattended remote tool serving, at org or user level.never mined ·never mined removeErrorsOf ◇ Toggling a plugin on, off, or uninstalling it now clears its stale error messages from the settings UInever mined ·never mined removeFiles ◇ You can remove files when publishing an artifact instead of re-listing everything you keep.never mined ·never mined removeMcpServer ◇ Headless SDK sessions expose a session object for MCP servers with addMcpServer, removeMcpServer, toast, status and refreshContext.never mined ·never mined replace ◇ Conversation messages flow through one store with an estimated token count; nothing changes on screen.never mined ·never mined replace_needs_fresh_listing ◇ claude plugin install in replace mode can now fail with "replace_unavailable"; other refusal codes are mostly switched offv2.1.301 ○gone replace_needs_full_id ◇ No description from anybody.v2.1.301 ○gone replace_unavailable ◇ claude plugin install in replace mode can now fail with "replace_unavailable"; other refusal codes are mostly switched offv2.1.301 ○gone replaceBuiltInOptions ◇ A new modelPicker setting curates or replaces the model list you see in /model.v2.1.242 → v2.1.283 ○gone replBindingsKept ◇ Compaction can now note that REPL variable state was preserved, though this is not yet activenever mined ·never mined replies ◇ Artifact comment actions are respelled: read replaces comments, watch with on false replaces unwatch, and old names now error.never mined ·never mined replPrimitiveGrant ◇ A session setup option has been renamed from replPrimitiveGrant to primitiveToolGrantnever mined ·never mined reported ◇ No description from anybody.v2.1.301 ○gone repository ◇ Plugin manifests can now be auto-filled from marketplace listing metadatav2.1.284 → v2.1.308 ◆in the build repositoryTrust ◇ Remote-attach flow now feeds served-tools info into repository-trust and directory-sync statenever mined ·never mined repoVisibility ◇ Auto mode's awareness of whether your repo is public now has its own environment variable and config field.never mined ·never mined republishPendingAction ◇ SDK now republishes a surviving pending permission request during session teardown instead of rejecting everythingnever mined ·never mined requestMessages ◇ The SDK's internal session bridge gained savedAgentMessages and requestMessages callbacksnever mined ·never mined requestShape ◇ Agent spawn telemetry now records workflow phase and non-interactive request detailsnever mined ·never mined requestTimeout ◇ Language server configs accept a requestTimeout in milliseconds, defaulting to 60000never mined ·never mined required ◇ Plugins your administrator requires or auto-installs are now labelled as admin installs.never mined ·never mined requiredMaximumVersion Refuse to start on a version newer than your organization allowsv2.1.163 → v2.1.283 ○gone requiredMinimumVersion Refuse to start on a version older than your organization requiresv2.1.163 → v2.1.283 ○gone requireVersion ◇ Artifact database writes gain optional version-conflict protection, with automatic fallback if unsupportednever mined ·never mined reseed ◇ Artifact publishes can delete files and set per-file live state, but only in patch publishes.never mined ·never mined resolvePermissionModeInCli ◇ SDK callers can let the CLI pick the permission mode from settings instead of forcing "default".never mined ·never mined resource ◇ Gateway OIDC auth can now send an RFC 8707 resource-indicator URL to audience-restrict tokens.never mined ·never mined resourceLinks ◇ Resource links returned by an MCP server are no longer dropped from the tool result.never mined ·never mined respawn ◇ CLI help now lists attach, logs, stop, respawn and rm for background sessions.never mined ·never mined respectGitignore Keep gitignored files out of the @ file pickerv2.1.138 or earlier → v2.1.283 ○gone respondToBashCommands Stop Claude from responding after a ! shell command runsv2.1.186 → v2.1.283 ○gone restoredCostUsd ◇ Resuming a session now restores its accumulated cost from the saved history instead of resetting to zeronever mined ·never mined restoredMemoryPause ◇ Session state now tracks a restored memory pause flag in resume telemetrynever mined ·never mined restricted ◇ Diffs now explain that withheld hunks are held by a provenance check stricter than read permissions.never mined ·never mined resultDelivery ◇ Session transport now tracks a resultDelivery object so 'result' messages can be numberednever mined ·never mined resultsOnly ◇ Resuming a subagent now notes whether the main conversation started it, and resuming accepts a new resultsOnly optionnever mined ·never mined resumeFromRunId ◇ Workflow's resumeFromRunId now actually reloads a saved run and restarts the script from itnever mined ·never mined resumeReason ◇ Query telemetry can now record a resume_reason when a query is triggered by resuming a sessionnever mined ·never mined resumeTouches ◇ The activity keep-alive settings now include a resumeTouches option, which is off unless set otherwisenever mined ·never mined retries ◇ Claude Code now warns if onFailure or retries is set on the singular policyHelper entry, since those are ignored therenever mined ·never mined reuseOutcomeBranch ◇ Teleporting a session can carry a title through, skipping auto-generated branch names when reusing a branch.never mined ·never mined rev ◇ Many more text utilities, from tac and rev to comm and numfmt, are now recognized as file-reading commands.never mined ·never mined ripgrep ◇ Changing sandbox binary paths now re-prompts for approval, like status line and hook commands already did.never mined ·never mined rm ◇ CLI help now lists attach, logs, stop, respawn and rm for background sessions.never mined ·never mined roomyDescription ◇ Tool-call cards can now show taller descriptions when a new 'roomyDescription' flag is setnever mined ·never mined rootReal ◇ No description from anybody.v2.1.301 ○gone routeIndependent ◇ No description from anybody.v2.1.301 ○gone rows ◇ Organizations can bill your reported spend at contracted rates everywhere costs appear.never mined ·never mined runCommands ◇ The bundled claude-test plugin drops its read-only code-mapping agent and now lists claude-test as a command it may runnever mined ·never mined runsAlone ◇ Queued messages marked to run alone are no longer combined with others into a single turnnever mined ·never mined runScriptOn ◇ New per-organization capability flags for database verbs and run-script support in Artifacts, off by defaultnever mined ·never mined s ◇ In the effort picker, press s to use a level for this session only instead of saving it as your default.never mined ·never mined safeguards ◇ Permission settings gained a new 'safeguards' flag alongside remote tools, hooks, and pluginsnever mined ·never mined safetyCheck ◇ Copying files from another artifact is now blocked outright when no one is present to consent.never mined ·never mined sandbox Isolate Bash commands from your filesystem and network on macOS, Linux, and WSL2v2.1.138 or earlier → v2.1.301 ○gone sandbox.allowNestedUserNamespaces Let sandboxed commands create user namespaces on Linux and WSL2never mined ·never mined sandbox.bwrapPath Point the sandbox at a bubblewrap binary outside PATHnever mined ·never mined sandbox.credentials Hide or mask credential files and variables inside the sandboxnever mined ·never mined sandbox.credentials.awsPairs Link custom-named AWS key variables into one credential for re-signingnever mined ·never mined sandbox.credentials.files Block or mask reads of a credential file inside the sandboxnever mined ·never mined sandbox.enabled Turn on Bash sandboxing on macOS, Linux, and WSL2never mined ·never mined sandbox.excludedCommands Name commands Claude Code can run outside the sandboxnever mined ·never mined sandbox.failIfUnavailable Refuse to start when the sandbox can't, instead of running unsandboxednever mined ·never mined sandbox.filesystem Control which paths sandboxed commands can read and writenever mined ·never mined sandbox.filesystem.allowRead Re-open reading inside a region denyRead blocksnever mined ·never mined sandbox.network Control which hosts, ports, and sockets sandboxed commands reachnever mined ·never mined sandbox.network.allowedDomains Pre-allow domains so sandboxed commands don't prompt for themnever mined ·never mined sandbox.network.allowLocalBinding Let sandboxed commands listen on network ports and connect to localhost on macOSnever mined ·never mined sandbox.network.allowManagedDomainsOnly Lock the network allowlist to managed settingsnever mined ·never mined sandbox.network.deniedDomains Block domains for sandboxed commands, even inside an allowed wildcardnever mined ·never mined sandbox.network.strictAllowlist Deny hosts outside the allowlist instead of promptingnever mined ·never mined sandbox.network.tlsTerminate Have the sandbox proxy terminate TLS so it can read HTTPS requestsnever mined ·never mined sandbox.ripgrep Use your own ripgrep binary inside the sandboxnever mined ·never mined sandbox.socatPath Point the sandbox proxy at a socat binary outside PATHnever mined ·never mined sandboxDenyRead ◇ Shell execution accepts per-command sandboxDenyRead and sandboxDenyWrite path lists on top of the global sandbox config.never mined ·never mined sandboxDenyWrite ◇ Shell execution accepts per-command sandboxDenyRead and sandboxDenyWrite path lists on top of the global sandbox config.never mined ·never mined sandboxNetworkLists ◇ Background and monitored Bash commands now carry the same per-command network allowlistnever mined ·never mined savedAgentMessages ◇ The SDK's internal session bridge gained savedAgentMessages and requestMessages callbacksnever mined ·never mined savedModelSuccessorShown ◇ Claude Code's global config gains a new key, savedModelSuccessorShown, stored alongside the records of notifications already seennever mined ·never mined scale ◇ Zoom takes a scale for the returned image, and batched actions can now return screenshots inline.never mined ·never mined schema ◇ The artifact tool's schema option now lists whatever schemas your session actually registered.never mined ·never mined scope ◇ Pressing Esc to cancel a turn no longer kills your background tasks.never mined ·never mined scope_on_refresh ◇ Gateway OIDC config gains an option to control whether scope resends on token refresh.v2.1.287 → v2.1.306 ○gone scopes ◇ Legacy managed MCP server config fields now have a formal deprecation and rewrite system.v2.1.287 → v2.1.306 ○gone scratchpad ◇ Artifact publish can now pull local files from the session scratchpad directory, not just the working directorynever mined ·never mined screenshots ◇ No description from anybody.v2.1.284 → v2.1.308 ◆in the build script ◇ Auto-mode is stricter: text you asked Claude to review can't grant permission on your behalf.never mined ·never mined scriptPath ◇ Windows device paths and network automount roots are now refused in more places, like memory files and edits.never mined ·never mined sdk ◇ Headless runs decide more carefully whether to wait for MCP servers before starting.never mined ·never mined sdkMcpServerManifests ◇ SDK MCP servers can now skip live handshakes by supplying a pre-captured manifest at initializationnever mined ·never mined sdkMcpServerManifestsOrigin ◇ A new sdkMcpServerManifestsOrigin option lets an SDK host mark MCP manifests so remote sessions accept them, if under five minutes oldnever mined ·never mined sdkResultVerdict ◇ Headless sessions gain a result-verdict option, and a polling tool can be added back to SDK tools.never mined ·never mined secDefault ◇ A new sec-default hooks module blocks plugins from bypassing policy settings and MCP server allowlists on managed and Team/Enterprise accountsv2.1.267 ○gone seededThread ◇ Publish results can note when an artifact was seeded from a comment thread, prompting a reply.never mined ·never mined selfHosted ◇ Managed settings gain a beta selfHosted section with a host URL and a credential type, shown under "Self-hosted execution"never mined ·never mined sendQueuedNow ◇ New keyboard action sends a queued message immediately instead of waitingnever mined ·never mined seq ◇ Folder sync now carries its own git-style object store and packfiles instead of the old journal.never mined ·never mined serveOnly ◇ A new 'attach' session-opening path supports a reduced serveOnly feature setnever mined ·never mined