Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.242 ·

Tools can suppress every permission update a hook proposes

Some tools now discard every permission rule a hook proposes and hide "always allow".

You'll notice New Features
JSON All of v2.1.242
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
New FeaturesKind: in v2.1.242,
New FeaturesSection of the release
What

A tool can now declare that it discards all permission changes returned by hooks or permission handlers, not just "always allow" rules. When it does, those updates are stripped before they reach the session's permission context and the "always allow" option is withheld.

Details
  • The new per-tool method suppressesAllPermissionUpdates(input) sits alongside the existing suppressesAlwaysAllowRule.
  • Available on this build for any tool that implements the method; tools that do not are unaffected.
  • A dedicated refusal message covers the case where a hook tried to inject a machine target into a call: only the model's own input may name a machine.
Evidence

only the model's own input can name a machine, so it was not run.

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.242 →

Feedback