You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
Remote ExecutionArea: what it touches
New FeaturesKind: in v2.1.246,
What probably matters to youSection of the release
What
When an Edit or Write call arrives from another session rather than from your local one, the tools now run an admission check before writing and re-check it after the file path is resolved. A refusal comes back as an invalid_request verdict with the reason served_floor, and nothing is written.
Details
Only reached when the tool call carries a remote-call context; ordinary local edits are untouched.
On the remote path the tools skip local-session side effects: dynamic skill directory triggers, the beforeFileEdited session hook, and change/save notifications to language servers. Those run only when there is no remote call.
The file-permission dialog treats a remote-driven input as a remote workspace.
References to the remote-call context across the bundle went from 13 to 38.
Evidence
Served file call refused at write time
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
