Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.242 Home All releases ←olderv2.1.241 v2.1.243newer→
Claude Code v2.1.242

Tools can suppress every permission update a hook proposes

You'll notice
Useful3 Signal3
Permissions

Some tools now discard every permission rule a hook proposes and hide "always allow".

What

A tool can now declare that it discards all permission changes returned by hooks or permission handlers, not just "always allow" rules. When it does, those updates are stripped before they reach the session's permission context and the "always allow" option is withheld.

Details
  • The new per-tool method suppressesAllPermissionUpdates(input) sits alongside the existing suppressesAlwaysAllowRule.
  • Available on this build for any tool that implements the method; tools that do not are unaffected.
  • A dedicated refusal message covers the case where a hook tried to inject a machine target into a call: only the model's own input may name a machine.
Evidence

only the model's own input can name a machine, so it was not run.

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.242 →