Claude Code v2.1.281 · 23 Sep 2026
Session permission rules can now carry added directories
Session permission rules can now hold an optional addDirs list next to allow and deny
Use it now Tier: how much it should matter to you
3 Useful: my rating, 1 to 5
2 Signal: worth watching, 1 to 5
Permissions Area: what it touches
Improvements Kind: in v2.1.281, 23 Sep 26
What probably matters to you Section of the release
Unclear The finding does not say how addDirs gets filled in or what effect the listed directories have.
What
A session is one conversation with Claude Code. Permission rules for a session are stored under sessionPermissionRules . They now accept an optional addDirs list, which sits alongside the existing allow and deny lists.
Why
In practice, extra directories (folders) can now be recorded in the same place as a session's allow and deny rules.
How sure we are
Something disagrees Something we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt The finding does not say how `addDirs` gets filled in or what effect the listed directories have.
See this entry in the whole of v2.1.281 →
23 Sep 2026 · 1,065 entries, this one is #97.
Use it now72 You'll notice488 Nothing to try yet55 Under the hood450
Open the release →
Names in this entry
setting addDirs Session permission rules can now hold an optional addDirs list next to allow and deny
setting sessionPermissionRules Session permission rules can now hold an optional addDirs list next to allow and deny
setting allow Malformed or sneaky owner/repo names are rejected before any gh command is built.
setting deny Sandbox credential masking now documents that it falls back to deny on macOS and Windows.
Is this right?
0
0
Feedback
What's wrong with this entry?
Hard to understand Too vague Looks wrong Not relevant to me Too long Missing the detail I wanted Duplicate of another card
Clear Learned something new I can act on this Good catch
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
← Previous · 96 of 1,065
SDK/CLI --managed-settings payload is now loaded at startup alongside --settings
Use it now Managed Settings
In v2.1.281 What probably matters to you release-page order
Next → · 98 of 1,065
Cloud sessions now accept --disallowed-tools when starting, with clear errors on attach…
Use it now Cloud Sessions