What
Enterprise organizations can now enforce access policies that restrict certain Claude Code features like remote sessions.
Details
- New API endpoint
/api/claude_code/policy_limitsfetches organization-defined restrictions - Policies are cached locally at
~/.config/claude-code/policy-limits.json - Automatic refresh on authentication changes and periodic background polling
- Currently enforces
allow_remote_sessionspolicy for teleport and remote session creation - Only available for enterprise subscription users with proper API scopes
- When blocked, users see: "Remote sessions are disabled by your organization's policy."
Evidence
BB() at line 388033 (enterprise check, uses subscriptionType !== "enterprise"), YP() at line 380468 (policy checker, uses "allow_remote_sessions"), IX2() at line 380287 (API endpoint builder, contains "/api/claude_code/policy_limits")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.