Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.248 Home All releases ←olderv2.1.247 v2.1.250newer→
Claude Code v2.1.248

Prompt for remote-machine tools now names the other machine's permission rules

You'll notice
Useful3 Signal4
Remote Tools

Claude is now told remote-machine tool calls run under that machine's own permission rules.

What

The system prompt describing tools that act on an attached machine now says those calls run under that machine's own permission rules, rather than describing the target as files in its project folder. This changes what the model is told about where edits land and which approval prompts apply.

Details
  • The surrounding preamble, saying that machine's own Claude Code decides what may run there and may ask the user first, is unchanged. Only the per-tool sentences moved.
Evidence

on the user's current files there, under that machine's own permission rules

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.248 →