The narrowed delete permission ships with the memory feature, gated on tengu_stone_shell with a false fallback.
The consolidation subagent's ability to delete files was tightened to a specific shape of rm command.
- Only .md files, only inside the memory directory, only outside protected subdirectories such as .git or agents, and with no flags except -f
- Both the tool-permission denial message and the subagent's own prompt were updated to state the narrower rule
- Part of the memory feature, gated on
tengu_stone_shell, fallback false
of .md files inside the memory directory only (outside protected subdirectories like .git or agents
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
tengu_stone_shell Off in both readingsThe flag server returned off for the account this site reads and for the anonymous baseline. A reading of off cannot rule out a rollout these two readings sit outside of.
This account: off · anonymous baseline: off · compiled default in v2.1.219: off
These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.
Read once, for one account on one subscription tier, against v2.1.219. It isn't a statement about your account. What a flag value here can and cannot tell you
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.
A reading is one sample. Claude Code evaluates its flags remotely, so no client sees the targeting rule behind a value and this says nothing about your account.