Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.248 ·

Path heuristics no longer auto-allow remotely served tool calls

Remotely served tool calls no longer get auto-allowed by path guessing; they hit normal rules.

You'll notice Improvements
JSON All of v2.1.248
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.248,
ImprovementsSection of the release
What

The filesystem probe that can grant a tool call permission on its own now has its allow result discarded when the call was served from a remote client, so those calls go through the normal rule and ask path instead.

Details
  • Applied at both the read decision site and the edit decision site.
  • Non-allow probe outcomes are unaffected.
Evidence

servedCall

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.248 →

Feedback