Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.242 Home All releases olderv2.1.241 v2.1.243newer
Claude Code v2.1.242

Permission prompts can be marked so a stray keystroke cannot approve them

You'll notice
Useful2 Signal3
Permissions

SDK hosts are told when a permission prompt must default to no and not pre-select approve.

What

The permission request sent to SDK hosts over the control protocol carries an optional flag saying the prompt must default to no. A terminal-style prompt opens on the decline option and accepts no digit shortcut, and hosts drawing their own approve buttons are told not to pre-select approve.

Details
  • the field is optional, so requests without it keep the existing behaviour
  • it is advisory for custom hosts: the schema states the expectation rather than enforcing it
Evidence

"True when the ask must not be approvable by a single stray keystroke (PermissionAskDecision.defaultToNo): a terminal-style prompt opens on its decline option and takes no digit shortcut. Hosts rendering approve options should not pre-select approve when set."

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.242 →