The first action: "list" call within any session now always requires user confirmation, even if the user has previously allowed artifact listing. A permission prompt appears: "Claude wants to list your published artifacts (titles and links from your earlier sessions)."
Details
suppressAlwaysAllowRuleis set, so "always allow" rules do not bypass this first-listing ask- Subsequent listings in the same session proceed without an additional prompt
- Results are now formatted as
"N published artifact(s) (most recent first):"with title, URL, and last-updated date per entry - A note is appended if the result set was truncated: "(More may exist — pass a higher
limit(up to 50); artifacts not updated recently can be beyond the listing window.)"
Evidence
First-listing confirmation (search for "First artifact listing this session requires confirmation")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.