{"version":"2.1.300","anchor":"new-codeallowedrepositories-setting-accepted-but-not-appl","canonical_anchor":"desktop-enterprise-config-allowedrepositories-for-code","heading":"New managed settings for self-hosted sessions, including a repository allowlist","tier":"use","area":"Managed Settings","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-codeallowedrepositories-setting-accepted-but-not-appl","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300","markdown":"### New managed settings for self-hosted sessions, including a repository allowlist\n\nAdmin config gains a selfHosted block and a codeAllowedRepositories list for self-hosted sessions; the repo list isn't applied on-device yet\n\n**What**\n\nThe managed configuration for Claude Desktop and Cowork (settings an administrator sets for an organization) gains settings for self-hosted sessions, meaning sessions that run on the organization's own machines. Both are tied to the beta feature key `selfHostedSessions` and scoped to third-party setups.\n\n- `selfHosted`: a new block, shown under 'Self-hosted execution', holds the HTTPS address of the self-hosted session host (beta) and a credential kind: `static`, `helper-script` or `external-idp`. It is marked `public-undocumented`. The settings-upload reasons gain a `self_hosted_runner` case.\n\n- `allowedRepositories` (flat key `codeAllowedRepositories`): a list of the git repositories Claude Code may work in, given as GitHub or https git entries with an optional ref and name. It is marked Beta and is read only by self-hosted session hosts. A warning says Claude Desktop does not apply it yet where sessions run on the device.\n\n- Other config changes: the Segment telemetry egress entry was removed, and the 'Default to 1M context' option became 'Only show the 1M option'.\n\n**Why**\n\nAdmins get a way to point sessions at their own infrastructure and to limit which repositories Claude Code works in there. Setting `codeAllowedRepositories` does not restrict sessions that run on a user's own device yet.\n\n- Area: Managed Settings\n- Names: `codeAllowedRepositories`\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 4\/5\n- Scope: org\n- Heads-up: no\n- Present in the build but not switched on"}