# Claude Code v2.1.300

> Claude Code v2.1.300, released 14 Oct 2026 (2026-10-14). 340 entries read out of the shipped bundle. Unofficial, and not affiliated with Anthropic.

[Web version](https://changelogs.core-directive.com/v/2.1.300)

Sessions can now start in a sandbox VM by default when an option is set. The new `--unsandboxed` flag opts out of that and of cloud-by-default too. Setting `CLAUDE_CODE_ATTACHMENTS_BY_PATH` turns on the send-file tool and stops Claude Code uploading the files it sends you. On self-hosted runners, all session traffic can now go through a proxy you run. Admins get a beta `selfHosted` section in managed settings for self-hosted session hosts. A new `codeAllowedRepositories` setting lists the git repositories Claude Code may work in on those hosts.

Claude Code is now listed as a reader of organization-managed settings, but those settings are not served to it yet. Organization config also gains an Allow Quick Write setting that is not switched on. Claude Desktop accepts `codeAllowedRepositories` but does not apply it to on-device sessions yet. The memory dialog has a new cloud memory option that does nothing yet. A new check for one tool in a permission mode called arbiter stays off unless the server turns it on.

An MCP tool whose parameter description the API rejects no longer breaks the conversation. Claude Code now blanks that description, warns you and retries, so the tool stays callable. Starting with `--worktree` now loads plugin `WorktreeCreate` hooks first, so a plugin can handle worktree creation. Command hooks now stop when their configured timeout runs out. The `CLAUDE_CODE_FORCE_SANDBOX` environment variable is removed. Passing `--sandbox` or `--no-sandbox` to `claude remote-control` is now an error instead of being silently accepted.

## Sections

Each section is its own markdown document of whole entries, in pages of about 40 KB. The whole release in one document is [full.md](https://changelogs.core-directive.com/v/2.1.300/full.md).

- [What probably matters to you](https://changelogs.core-directive.com/v/2.1.300/what-probably-matters-to-you.md): 47 entries, 2 pages
- [Improvements](https://changelogs.core-directive.com/v/2.1.300/improvements.md): 142 entries, 4 pages
- [Bug Fixes](https://changelogs.core-directive.com/v/2.1.300/bug-fixes.md): 18 entries
- [In Development](https://changelogs.core-directive.com/v/2.1.300/in-development.md): 1 entry
- [Internal Changes](https://changelogs.core-directive.com/v/2.1.300/internal-changes.md): 127 entries, 3 pages
- [Removed](https://changelogs.core-directive.com/v/2.1.300/removed.md): 5 entries

## What probably matters to you

The first 10 of 47, one line each. The section's own pages have every one in full.

- [New CLAUDE_CODE_ATTACHMENTS_BY_PATH variable turns on by-path file sending](https://changelogs.core-directive.com/v/2.1.300/e/claude-code-attachments-by-path-env-var-added-attachments-b.json): Setting CLAUDE_CODE_ATTACHMENTS_BY_PATH enables the send-file tool without its usual checks, skips uploads and counts the session as remote
- [New managed settings for self-hosted sessions, including a repository allowlist](https://changelogs.core-directive.com/v/2.1.300/e/desktop-enterprise-config-allowedrepositories-for-code.json): Admin config gains a selfHosted block and a codeAllowedRepositories list for self-hosted sessions; the repo list isn't applied on-device yet
- [New --unsandboxed flag and a sandbox-VM-by-default decision at session start](https://changelogs.core-directive.com/v/2.1.300/e/new-unsandboxed-cli-flag-recognised.json): Session start can now place a session in a sandbox VM by default, and a new --unsandboxed flag opts out of that and of cloud-by-default
- [Extensions gain composer.attribute to tag prompt edits, and the prompt draft gains a text watcher](https://changelogs.core-directive.com/v/2.1.300/e/extension-api-composerattribute-and-viewshow.json): The prompt draft can now tag edits with their origin and report changes, and extensions reach it through composer.attribute and attributeDraft
- [Plugins can switch the main view to an agent's transcript with ui.view](https://changelogs.core-directive.com/v/2.1.300/e/plugin-api-capability-uiview-added.json): New ui.view plugin capability switches the main view to an agent's transcript, and plugin calls judged under an outdated policy are refused
- [Shared config schema adds a 'code' reader for Claude Code, not yet served, plus a quickWriteEnabled setting](https://changelogs.core-directive.com/v/2.1.300/e/config-schema-claude-code-reader-and-quickwriteenabled-key.json): The organization config schema now lists Claude Code as a third reader, marked not served, and adds a quickWriteEnabled setting
- [Submitted prompts can now be held, screened, rewritten or dropped](https://changelogs.core-directive.com/v/2.1.300/e/prompt-screening-machinery-added-to-user-prompt-processing.json): New code can hold a submitted prompt for screening and then rewrite or drop it, with hold details passed through slash commands and ultraplan
- [Tool calls can be held until a person types, and plugins can't loosen Cowork web calls](https://changelogs.core-directive.com/v/2.1.300/e/tool-calls-can-be-held-until-a-person-types-no-in-bundle-wr.json): New permission holds pause tool calls until the user writes, and stop plugin allow verdicts from loosening Cowork cloud web calls
- [New CLAUDE_CODE_MESSAGES_PROMPT_CACHE_TTL variable can force 5-minute caching](https://changelogs.core-directive.com/v/2.1.300/e/new-env-var-claude-code-messages-prompt-cache-ttl-added-to-a.json): Setting CLAUDE_CODE_MESSAGES_PROMPT_CACHE_TTL to 5m forces the main conversation's prompt cache to last 5 minutes
- [Self-hosted runner sessions can send all traffic through a customer-run proxy](https://changelogs.core-directive.com/v/2.1.300/e/standalone-agent-proxy-mode-for-self-hosted-runner-sessions.json): New CCR_AGENT_PROXY_RELAY_MODE value agent_proxy_standalone routes all self-hosted session traffic through your own proxy and refuses to start otherwise