A ReadNotifications tool delivering GitHub activity, scheduled triggers and other agents' messages exists but only appears when CLAUDE_CODE_REMOTE is set and the session is non-interactive.
A new read-only tool called ReadNotifications lets the model pull notifications the server has queued for a session (GitHub activity, scheduled triggers and messages from other agents), oldest first, marking them delivered and reporting how many are left. It is only offered when the CLAUDE_CODE_REMOTE environment variable is set and the session is non-interactive, so it does not appear in an ordinary terminal session.
- Each notification carries an id, an origin, a queue timestamp and its content, plus a count of those still waiting.
- Subagents are refused: "ReadNotifications can only be called from the main conversation — subagents must not drain the session notification buffer."
- This replaces injecting webhook and trigger activity into the conversation as if you had typed it.
ReadNotifications can only be called from the main conversation — subagents must not drain the session notification buffer., Read the notifications queued for this session
Strings lifted out of the shipped bundle, so the claim above can be checked against them.