Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.222entry #51

Claude Code v2.1.222 ·

Shell tools get an explicit worktree isolation root

Agent commands now have a concrete worktree boundary, so escapes get blocked with a clearer log line.

You'll notice Improvements
JSON All of v2.1.222
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.222,
ImprovementsSection of the release
What

Bash and shell execution paths now take an isolationRoot so the checks that keep agent commands inside their worktree have a concrete boundary to compare against.

Details
  • isolationRoot is resolved from the agent worktree, falling back to the session worktree path.
  • Used by the checks that block commands whose cwd escapes the isolation worktree, and those that redirect git into the shared checkout.
  • Blocked commands log with isolationRoot= in the message and report tengu_agent_worktree_cwd_escape_blocked.
  • The field itself is new in this build.
Evidence

isolationRoot

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.222 →

Feedback