{"version":"2.1.219","anchor":"memory-subagent-s-delete-permission-narrowed","canonical_anchor":"memory-subagent-s-delete-permission-narrowed","heading":"Memory subagent's delete permission narrowed","tier":"soon","area":"Memory","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.219\/e\/memory-subagent-s-delete-permission-narrowed","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.219","markdown":"### Memory subagent's delete permission narrowed\n\nThe memory cleanup agent could only delete plain memory files, never anything with flags or outside the folder.\n\n**What**\n\nThe consolidation subagent's ability to delete files was tightened to a specific shape of `rm` command.\n\n**Details**\n\n- Only .md files, only inside the memory directory, only outside protected subdirectories such as .git or agents, and with no flags except -f\n- Both the tool-permission denial message and the subagent's own prompt were updated to state the narrower rule\n- Part of the memory feature, gated on `tengu_stone_shell`, fallback false\n\n**Evidence**\n\n`of .md files inside the memory directory only (outside protected subdirectories like .git or agents`\n\n- Flag `tengu_stone_shell`: Off in both readings (read for one account on one subscription tier against v2.1.219; this account: off, anonymous baseline: off, compiled default: off) These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.\n- Area: Memory\n- Tier: Nothing to try yet\n- Useful: 2\/5\n- Signal: 2\/5\n- Present in the build but not switched on"}