Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.239 Home All releases ←olderv2.1.238 v2.1.240newer→
Claude Code v2.1.239

Tool calls relayed from a cloud agent run under a restricted permission mode

You'll notice
Useful3 Signal4
Permissions

Tool calls relayed from a cloud agent are judged strictly: your hooks skip and relaxed permission modes are downgraded.

What

When a cloud agent relays a tool call to your local Claude Code, the request is now marked as remote execution and evaluated more strictly. Your hooks do not run, and a locally relaxed permission mode is not inherited: acceptEdits and bypassPermissions are rewritten to default before the permission check.

Details
  • The marker is new in this build; nothing in 2.1.238 sets or reads it.
  • Hooks return immediately for these calls, so a PreToolUse hook cannot approve or block a relayed tool.
  • Bash sandbox auto-allow is skipped, along with several local shortcuts that would otherwise allow a command based on its prefix or leading environment assignments.
  • No separate flag guards the downgrade; it applies whenever a remote agent relays a request.
Evidence

forRemoteExecution

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.239 →