{"version":"2.1.300","summary":"Sessions can now start in a sandbox VM by default when an option is set. The new `--unsandboxed` flag opts out of that and of cloud-by-default too. Setting `CLAUDE_CODE_ATTACHMENTS_BY_PATH` turns on the send-file tool and stops Claude Code uploading the files it sends you. On self-hosted runners, all session traffic can now go through a proxy you run. Admins get a beta `selfHosted` section in managed settings for self-hosted session hosts. A new `codeAllowedRepositories` setting lists the git repositories Claude Code may work in on those hosts.\n\nClaude Code is now listed as a reader of organization-managed settings, but those settings are not served to it yet. Organization config also gains an Allow Quick Write setting that is not switched on. Claude Desktop accepts `codeAllowedRepositories` but does not apply it to on-device sessions yet. The memory dialog has a new cloud memory option that does nothing yet. A new check for one tool in a permission mode called arbiter stays off unless the server turns it on.\n\nAn MCP tool whose parameter description the API rejects no longer breaks the conversation. Claude Code now blanks that description, warns you and retries, so the tool stays callable. Starting with `--worktree` now loads plugin `WorktreeCreate` hooks first, so a plugin can handle worktree creation. Command hooks now stop when their configured timeout runs out. The `CLAUDE_CODE_FORCE_SANDBOX` environment variable is removed. Passing `--sandbox` or `--no-sandbox` to `claude remote-control` is now an error instead of being silently accepted.","filter":{"section":null,"tier":null,"area":null},"offset":0,"limit":50,"count":50,"total":340,"next_offset":50,"next_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/entries.json?offset=50","entries":[{"anchor":"claude-code-attachments-by-path-env-var-added-attachments-b","heading":"New CLAUDE_CODE_ATTACHMENTS_BY_PATH variable turns on by-path file sending","glance":"Setting CLAUDE_CODE_ATTACHMENTS_BY_PATH enables the send-file tool without its usual checks, skips uploads and counts the session as remote","teaser":null,"tier":"use","area":"Attachments","section":"What probably matters to you","position":0,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/claude-code-attachments-by-path-env-var-added-attachments-b","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/claude-code-attachments-by-path-env-var-added-attachments-b.json"},{"anchor":"prompt-change-hook-dispatcher-with-loop-stall-guard","heading":"A <code>prompt.change<\/code> hook fires when something other than you edits the prompt box","glance":"The `prompt.change` hook runs when a plugin or the landing screen changes the prompt box, and stops itself if plugins keep refilling it","teaser":null,"tier":"use","area":"Hooks","section":"What probably matters to you","position":1,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/prompt-change-hook-dispatcher-with-loop-stall-guard","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/prompt-change-hook-dispatcher-with-loop-stall-guard.json"},{"anchor":"cowork-edr-integration-admin-keys-added","heading":"Admins can install an endpoint security package into the Cowork workspace","glance":"Two new admin settings let organizations supply a signed security vendor package that the Cowork workspace installs as root when it starts, on macOS","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":2,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cowork-edr-integration-admin-keys-added","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cowork-edr-integration-admin-keys-added.json"},{"anchor":"new-mdm-key-disableconnectorsignininapp","heading":"Admins can keep connector sign-in in the system browser in Claude Desktop","glance":"A new Claude Desktop admin setting, `disableConnectorSignInInApp`, keeps sign-in for claude.ai connectors in the system browser","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":3,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-mdm-key-disableconnectorsignininapp","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-mdm-key-disableconnectorsignininapp.json"},{"anchor":"desktop-enterprise-config-allowedrepositories-for-code","heading":"New managed settings for self-hosted sessions, including a repository allowlist","glance":"Admin config gains a selfHosted block and a codeAllowedRepositories list for self-hosted sessions; the repo list isn't applied on-device yet","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":4,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-enterprise-config-allowedrepositories-for-code","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-enterprise-config-allowedrepositories-for-code.json"},{"anchor":"secret-scan-tool-for-the-plugin-authoring-mods-built-in-pl","heading":"Claude Code can scan a mod&#039;s folder for keys and tokens before you share it","glance":"A new built-in tool scans a mod's folder for keys and tokens before it is shared, asks you first, and reports file names and secret types","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":5,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/secret-scan-tool-for-the-plugin-authoring-mods-built-in-pl","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/secret-scan-tool-for-the-plugin-authoring-mods-built-in-pl.json"},{"anchor":"new-unsandboxed-cli-flag-recognised","heading":"New --unsandboxed flag and a sandbox-VM-by-default decision at session start","glance":"Session start can now place a session in a sandbox VM by default, and a new --unsandboxed flag opts out of that and of cloud-by-default","teaser":null,"tier":"use","area":"Sandbox","section":"What probably matters to you","position":6,"scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-unsandboxed-cli-flag-recognised","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-unsandboxed-cli-flag-recognised.json"},{"anchor":"extension-api-composerattribute-and-viewshow","heading":"Extensions gain composer.attribute to tag prompt edits, and the prompt draft gains a text watcher","glance":"The prompt draft can now tag edits with their origin and report changes, and extensions reach it through composer.attribute and attributeDraft","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":7,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/extension-api-composerattribute-and-viewshow","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/extension-api-composerattribute-and-viewshow.json"},{"anchor":"new-env-var-claude-code-hide-reply-server-name","heading":"New <code>CLAUDE_CODE_HIDE_REPLY_SERVER_NAME<\/code> environment variable","glance":"Claude Code now recognises an environment variable, `CLAUDE_CODE_HIDE_REPLY_SERVER_NAME`","teaser":null,"tier":"use","area":"Channels","section":"What probably matters to you","position":8,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-env-var-claude-code-hide-reply-server-name","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-env-var-claude-code-hide-reply-server-name.json"},{"anchor":"new-env-var-claude-code-messages-prompt-cache-ttl-added-to-a","heading":"New CLAUDE_CODE_MESSAGES_PROMPT_CACHE_TTL variable can force 5-minute caching","glance":"Setting CLAUDE_CODE_MESSAGES_PROMPT_CACHE_TTL to 5m forces the main conversation's prompt cache to last 5 minutes","teaser":null,"tier":"use","area":"Prompt Caching","section":"What probably matters to you","position":9,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-env-var-claude-code-messages-prompt-cache-ttl-added-to-a","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-env-var-claude-code-messages-prompt-cache-ttl-added-to-a.json"},{"anchor":"mod-event-table-gains-promptchange-policy-decision-gets-se","heading":"Plugin mods gain a prompt-change event and richer permission decisions","glance":"Plugin mods get a `prompt.change` event, and permission decisions can now name a setting and a decider","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":12,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mod-event-table-gains-promptchange-policy-decision-gets-se","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mod-event-table-gains-promptchange-policy-decision-gets-se.json"},{"anchor":"standalone-agent-proxy-mode-for-self-hosted-runner-sessions","heading":"Self-hosted runner sessions can send all traffic through a customer-run proxy","glance":"New CCR_AGENT_PROXY_RELAY_MODE value agent_proxy_standalone routes all self-hosted session traffic through your own proxy and refuses to start otherwise","teaser":null,"tier":"use","area":"Self-Hosted Runner","section":"What probably matters to you","position":13,"scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/standalone-agent-proxy-mode-for-self-hosted-runner-sessions","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/standalone-agent-proxy-mode-for-self-hosted-runner-sessions.json"},{"anchor":"admin-config-new-microsoftauthdefaultaccount-setting-infer","heading":"Admin settings gain a Microsoft default-account option and wider credential-kind use","glance":"Managed settings add `microsoftAuthDefaultAccount` for silent Microsoft 365 sign-in, and `inferenceCredentialKind` is now also read by Claude Code","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":16,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/admin-config-new-microsoftauthdefaultaccount-setting-infer","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/admin-config-new-microsoftauthdefaultaccount-setting-infer.json"},{"anchor":"desktop-managed-settings-denied-plugin-mcp-servers-and-mor","heading":"Admins can block plugin MCP servers by address, and Claude Code reads more managed settings","glance":"A new managed setting, deniedPluginMcpServers, blocks plugin MCP servers by address, and six more managed settings now list Claude Code as a reader","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":17,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-managed-settings-denied-plugin-mcp-servers-and-mor","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-managed-settings-denied-plugin-mcp-servers-and-mor.json"},{"anchor":"mcp-connect-can-request-toolslist-first-toolslistfirst","heading":"MCP connections can ask for the tool list before setup finishes","glance":"A new connection option can make Claude Code request an MCP server's tool list early on some proxied connections, closing the link if the list stalls","teaser":null,"tier":"use","area":"MCP","section":"What probably matters to you","position":18,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-connect-can-request-toolslist-first-toolslistfirst","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-connect-can-request-toolslist-first-toolslistfirst.json"},{"anchor":"account-memory-coordinator-caller-metadata","heading":"MCP servers can ask for a coordinator&#039;s access to account memory","glance":"An MCP server can now declare a coordinator as its caller, and memory tool access is then granted at none, some or all levels","teaser":null,"tier":"use","area":"MCP","section":"What probably matters to you","position":19,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/account-memory-coordinator-caller-metadata","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/account-memory-coordinator-caller-metadata.json"},{"anchor":"desktop-managed-config-adds-allowedorganizationuuids-and-ban","heading":"New desktop admin settings for limiting Claude.ai import and its banner","glance":"Desktop admins can limit Claude.ai import to listed organizations and cap banner dismissals, and `automatic3pImport` no longer defaults to off","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":20,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-managed-config-adds-allowedorganizationuuids-and-ban","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-managed-config-adds-allowedorganizationuuids-and-ban.json"},{"anchor":"plugin-api-capability-uiview-added","heading":"Plugins can switch the main view to an agent&#039;s transcript with ui.view","glance":"New ui.view plugin capability switches the main view to an agent's transcript, and plugin calls judged under an outdated policy are refused","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":21,"scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/plugin-api-capability-uiview-added","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/plugin-api-capability-uiview-added.json"},{"anchor":"managed-settings-signature-verification-anchored-claims","heading":"Managed-settings token checks gain unanchoredClaims, with more restricted-mode changes","glance":"Signed managed-settings checks gain an `unanchoredClaims` option and return org and account IDs, alongside more restricted-mode handling changes","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":22,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/managed-settings-signature-verification-anchored-claims","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/managed-settings-signature-verification-anchored-claims.json"},{"anchor":"gateway-inference-settings-are-now-read-by-claude-code-cod","heading":"Claude Code now reads many shared managed settings used by Desktop","glance":"Gateway, Bedrock, Vertex, OTLP telemetry, attribution and tool policy settings in the shared managed config now list Claude Code as a reader","teaser":null,"tier":"notice","area":"Managed Settings","section":"What probably matters to you","position":23,"scope":"org","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/gateway-inference-settings-are-now-read-by-claude-code-cod","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/gateway-inference-settings-are-now-read-by-claude-code-cod.json"},{"anchor":"cloud-sessions-can-use-a-console-sign-in-through-an-organiza","heading":"Cloud sessions can now start with a Console sign-in","glance":"A Console sign-in can now be used to start cloud sessions, with clear errors when it can't be used","teaser":null,"tier":"notice","area":"Cloud Sessions","section":"What probably matters to you","position":24,"scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-sessions-can-use-a-console-sign-in-through-an-organiza","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-sessions-can-use-a-console-sign-in-through-an-organiza.json"},{"anchor":"cloud-session-creation-has-a-separate-console-profile-path","heading":"Cloud sessions gain a sign-in path for Console organizations","glance":"Starting a cloud session can now open a browser sign-in for your Console organization instead of requiring a claude.ai login","teaser":null,"tier":"notice","area":"Auth","section":"What probably matters to you","position":25,"scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-session-creation-has-a-separate-console-profile-path","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-session-creation-has-a-separate-console-profile-path.json"},{"anchor":"cloud-sessions-oauth-sign-in-and-token-storage-for-console-s","heading":"Cloud sessions get their own sign-in, so Console accounts can use them","glance":"A separate cloudSessionsOauth sign-in lets Console users reach cloud sessions; logout revokes it, and cloud mode skips local signed caches","teaser":null,"tier":"notice","area":"Auth","section":"What probably matters to you","position":26,"scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-sessions-oauth-sign-in-and-token-storage-for-console-s","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-sessions-oauth-sign-in-and-token-storage-for-console-s.json"},{"anchor":"idle-compaction-gets-a-compact-on-return-mode","heading":"Idle compaction gains a mode that applies the summary when you return","glance":"A new idle compaction mode can swap in a summary written while you were away, off unless it is switched on remotely","teaser":null,"tier":"notice","area":"Compaction","section":"What probably matters to you","position":27,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/idle-compaction-gets-a-compact-on-return-mode","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/idle-compaction-gets-a-compact-on-return-mode.json"},{"anchor":"cloud-session-unattended-consent-up-front-prompt-strings","heading":"One-time question before cloud sessions run commands on this computer","glance":"Claude Code can ask once per computer whether auto-mode cloud sessions may run commands here without asking each time","teaser":null,"tier":"notice","area":"Cloud Sessions","section":"What probably matters to you","position":28,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-session-unattended-consent-up-front-prompt-strings","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/cloud-session-unattended-consent-up-front-prompt-strings.json"},{"anchor":"idle-compaction-can-summarize-instead-of-compacting-through","heading":"Returning after idle can summarize the conversation instead","glance":"Idle compaction gains a mode that summarizes the conversation when you come back, and can skip a ready summary that no longer fits","teaser":null,"tier":"notice","area":"Compaction","section":"What probably matters to you","position":30,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/idle-compaction-can-summarize-instead-of-compacting-through","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/idle-compaction-can-summarize-instead-of-compacting-through.json"},{"anchor":"bidirectional-text-rtlltr-rendering-in-the-terminal-rende","heading":"Terminal display gains groundwork for right-to-left text","glance":"Claude Code's terminal renderer gains a text direction setting that marks and right-aligns right-to-left text such as Hebrew or Arabic","teaser":null,"tier":"notice","area":"Terminal UI","section":"What probably matters to you","position":31,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/bidirectional-text-rtlltr-rendering-in-the-terminal-rende","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/bidirectional-text-rtlltr-rendering-in-the-terminal-rende.json"},{"anchor":"config-schema-claude-code-reader-and-quickwriteenabled-key","heading":"Shared config schema adds a &#039;code&#039; reader for Claude Code, not yet served, plus a quickWriteEnabled setting","glance":"The organization config schema now lists Claude Code as a third reader, marked not served, and adds a quickWriteEnabled setting","teaser":null,"tier":"soon","area":"Managed Settings","section":"What probably matters to you","position":32,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/config-schema-claude-code-reader-and-quickwriteenabled-key","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/config-schema-claude-code-reader-and-quickwriteenabled-key.json"},{"anchor":"new-internal-sdk-user-message-field-text-not-typed-not-ye","heading":"SDK messages can be marked as not typed by a person","glance":"A new internal SDK message field, `text_not_typed`, marks text an app or server wrote, and still runs the turn-start attachment pass","teaser":null,"tier":"internal","area":"SDK","section":"What probably matters to you","position":33,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-internal-sdk-user-message-field-text-not-typed-not-ye","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/new-internal-sdk-user-message-field-text-not-typed-not-ye.json"},{"anchor":"prompt-screening-machinery-added-to-user-prompt-processing","heading":"Submitted prompts can now be held, screened, rewritten or dropped","glance":"New code can hold a submitted prompt for screening and then rewrite or drop it, with hold details passed through slash commands and ultraplan","teaser":null,"tier":"internal","area":"Prompt Input","section":"What probably matters to you","position":34,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/prompt-screening-machinery-added-to-user-prompt-processing","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/prompt-screening-machinery-added-to-user-prompt-processing.json"},{"anchor":"tool-calls-can-be-held-until-a-person-types-no-in-bundle-wr","heading":"Tool calls can be held until a person types, and plugins can&#039;t loosen Cowork web calls","glance":"New permission holds pause tool calls until the user writes, and stop plugin allow verdicts from loosening Cowork cloud web calls","teaser":null,"tier":"notice","area":"Permissions","section":"What probably matters to you","position":35,"scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/tool-calls-can-be-held-until-a-person-types-no-in-bundle-wr","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/tool-calls-can-be-held-until-a-person-types-no-in-bundle-wr.json"},{"anchor":"autofix-pr-slash-command-now-available-to-console-profile-au","heading":"\/teleport, \/remote-env and autofix-pr open to Console-profile sign-ins","glance":"Commands that were limited to claude.ai sign-ins, including `\/teleport`, `\/remote-env` and `autofix-pr`, now also allow Console-profile sign-ins","teaser":null,"tier":"use","area":"Slash Commands","section":"What probably matters to you","position":36,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/autofix-pr-slash-command-now-available-to-console-profile-au","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/autofix-pr-slash-command-now-available-to-console-profile-au.json"},{"anchor":"modelsettingsautocompactwindow-is-now-reported-as-a-setting","heading":"Claude Code tracks where the auto-compact window comes from, including per-model settings","glance":"The auto-compact window can be set per model under `modelSettings`, and Claude Code now records which source decided the window in use","teaser":null,"tier":"use","area":"Compaction","section":"What probably matters to you","position":38,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/modelsettingsautocompactwindow-is-now-reported-as-a-setting","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/modelsettingsautocompactwindow-is-now-reported-as-a-setting.json"},{"anchor":"desktop-claudecodeprocesswrapperenabled-now-also-supported-f","heading":"Desktop process-wrapper setting now also applies to first-party sign-ins","glance":"`claudeCodeProcessWrapperEnabled` now covers the 1p scope from desktop version 2.16120.0, not only the 3p scope","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":39,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-claudecodeprocesswrapperenabled-now-also-supported-f","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/desktop-claudecodeprocesswrapperenabled-now-also-supported-f.json"},{"anchor":"modmcp-schema-new-configuredhostpath-and-vendorid-validato","heading":"Managed configuration accepts a host path and a vendor ID","glance":"The managed configuration format gains two fields: configuredHostPath, an absolute macOS or Linux path, and vendorId, a short lower-case name","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":40,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/modmcp-schema-new-configuredhostpath-and-vendorid-validato","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/modmcp-schema-new-configuredhostpath-and-vendorid-validato.json"},{"anchor":"rewind-allowassistanttarget-and-interrupt-if-running-option","heading":"Rewind requests can target assistant messages and interrupt a running turn","glance":"rewind_conversation accepts allow_assistant_target to rewind to one of Claude's replies and interrupt_if_running to rewind mid-turn","teaser":null,"tier":"use","area":"SDK","section":"What probably matters to you","position":42,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/rewind-allowassistanttarget-and-interrupt-if-running-option","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/rewind-allowassistanttarget-and-interrupt-if-running-option.json"},{"anchor":"mcp-task-end-notification-gets-a-taskkind-field","heading":"MCP task endings are saved to disk and labelled for SDK programs","glance":"The outcome of an MCP server's task is now saved until the model has read it, and its end notification carries taskKind 'mcp-task'","teaser":null,"tier":"use","area":"SDK","section":"What probably matters to you","position":43,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-task-end-notification-gets-a-taskkind-field","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-task-end-notification-gets-a-taskkind-field.json"},{"anchor":"third-party-model-config-new-mindesktopversion-and-1m-seman","heading":"Third-party model settings gain a minimum app version and a new 1M context rule","glance":"Third-party model setups can set a minimum Desktop version, and the 1M setting now uses 1M context wherever it's available","teaser":null,"tier":"use","area":"Managed Settings","section":"What probably matters to you","position":44,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/third-party-model-config-new-mindesktopversion-and-1m-seman","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/third-party-model-config-new-mindesktopversion-and-1m-seman.json"},{"anchor":"tengu-jaunty-umbrella-gate-for-a-tool-arbiter-path-fallback","heading":"A new switched-off check for one tool in the arbiter permission mode","glance":"A new check covers one specific tool in a permission mode named arbiter and stays off unless the server turns it on","teaser":null,"tier":"soon","area":"Permissions","section":"What probably matters to you","position":45,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/tengu-jaunty-umbrella-gate-for-a-tool-arbiter-path-fallback","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/tengu-jaunty-umbrella-gate-for-a-tool-arbiter-path-fallback.json"},{"anchor":"memory-dialog-accepts-pointstocloudmemory","heading":"Memory dialog gains an unused option for cloud memory","glance":"The memory dialog has a new option about cloud memory, but it does not change anything shown yet","teaser":null,"tier":"soon","area":"Memory","section":"What probably matters to you","position":46,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/memory-dialog-accepts-pointstocloudmemory","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/memory-dialog-accepts-pointstocloudmemory.json"},{"anchor":"sandboxtenant-path-handling-for-multi-tenant-mode","heading":"Sandbox protects per-tenant folders in multi-tenant setups","glance":"In a multi-tenant mode, the sandbox uses per-tenant folders and blocks writes to .claude and resume files inside them","teaser":null,"tier":"internal","area":"Sandbox","section":"What probably matters to you","position":48,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/sandboxtenant-path-handling-for-multi-tenant-mode","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/sandboxtenant-path-handling-for-multi-tenant-mode.json"},{"anchor":"mcp-session-serving-tool-hooks-gain-a-per-call-timeout-overr","heading":"Hooks run on request can be given their own time limit","glance":"A request to run a hook can now set a timeout that replaces the hook's own timeout","teaser":null,"tier":"use","area":"Hooks","section":"What probably matters to you","position":49,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-session-serving-tool-hooks-gain-a-per-call-timeout-overr","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-session-serving-tool-hooks-gain-a-per-call-timeout-overr.json"},{"anchor":"arbiter-auto-mode-classifier-eligibility-function-with-a-be","heading":"A check on whether the arbiter classifier can be used, with a retired-beta reason","glance":"Claude Code has a check that can rule out the arbiter classifier, either because a mode doesn't use it or because its beta is retired","teaser":null,"tier":"internal","area":"Auto Mode","section":"What probably matters to you","position":50,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/arbiter-auto-mode-classifier-eligibility-function-with-a-be","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/arbiter-auto-mode-classifier-eligibility-function-with-a-be.json"},{"anchor":"mcp-oauth-refresh-skipped-for-claude-code-server-sessions","heading":"MCP sign-in refresh is skipped in server-hosted sessions with no disk","glance":"In hosted claude-code-server sessions that run without disk storage, Claude Code no longer refreshes MCP sign-in tokens or takes the refresh lock","teaser":null,"tier":"internal","area":"Diskless Sessions","section":"What probably matters to you","position":51,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-oauth-refresh-skipped-for-claude-code-server-sessions","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/mcp-oauth-refresh-skipped-for-claude-code-server-sessions.json"},{"anchor":"memory-extraction-skipped-in-coordinator-mode-when-memory-se","heading":"Memory saving can be skipped in coordinator mode with a memory server","glance":"In coordinator mode with an MCP memory server, Claude Code now skips background memory saving when no suitable tool is visible","teaser":null,"tier":"internal","area":"Memory","section":"What probably matters to you","position":52,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/memory-extraction-skipped-in-coordinator-mode-when-memory-se","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/memory-extraction-skipped-in-coordinator-mode-when-memory-se.json"},{"anchor":"model-capabilities-add-thinkingalwayson","heading":"Models can now be marked as having thinking that is always on","glance":"Claude Code's record of what a model can do now includes whether its thinking is always on","teaser":null,"tier":"internal","area":"Thinking","section":"What probably matters to you","position":53,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/model-capabilities-add-thinkingalwayson","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/model-capabilities-add-thinkingalwayson.json"},{"anchor":"tool-searchmcp-tool-host-request-adds-extra-tools","heading":"Sessions with a tool host interface send Claude extra tools","glance":"When a session uses a tool host interface, Claude Code now adds an extra set of tools to the list sent to Claude","teaser":null,"tier":"internal","area":"Tool Host","section":"What probably matters to you","position":54,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/tool-searchmcp-tool-host-request-adds-extra-tools","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/tool-searchmcp-tool-host-request-adds-extra-tools.json"},{"anchor":"agents-view-background-housekeeping-start-gated-by-tengu-no","heading":"Agents view can wait for folder trust before starting background housekeeping","glance":"When the agents view opens, background housekeeping can now wait until you have trusted the folder instead of starting straight away","teaser":null,"tier":"notice","area":"Agents View","section":"Improvements","position":0,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/agents-view-background-housekeeping-start-gated-by-tengu-no","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/agents-view-background-housekeeping-start-gated-by-tengu-no.json"},{"anchor":"hook-onfailure-continue-contested-marking-and-managed-hook","heading":"Changes to how organisation-managed hooks combine with other hooks","glance":"Hook selection for organisation-managed setups now includes policy hooks delivered by plugins, and hooks that continue on failure can be marked contested","teaser":null,"tier":"notice","area":"Hooks","section":"Improvements","position":1,"scope":"both","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/hook-onfailure-continue-contested-marking-and-managed-hook","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/hook-onfailure-continue-contested-marking-and-managed-hook.json"},{"anchor":"settings-error-dialog-wording-distinguishes-hook-errors","heading":"Settings warning now says plainly when only hooks failed to load","glance":"The settings warning dialog has a separate message for when only hooks failed to load and no settings file was skipped","teaser":null,"tier":"notice","area":"Settings","section":"Improvements","position":2,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/settings-error-dialog-wording-distinguishes-hook-errors","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.300\/e\/settings-error-dialog-wording-distinguishes-hook-errors.json"}],"facets":{"sections":[{"value":"What probably matters to you","entries":47},{"value":"Improvements","entries":142},{"value":"Bug Fixes","entries":18},{"value":"In Development","entries":1},{"value":"Internal Changes","entries":127},{"value":"Removed","entries":5}],"tiers":[{"value":"notice","entries":167},{"value":"internal","entries":142},{"value":"use","entries":27},{"value":"soon","entries":4}],"areas":[{"value":"Hooks","entries":29},{"value":"Managed Settings","entries":28},{"value":"Cloud Sessions","entries":25},{"value":"Plugins","entries":21},{"value":"Elsewhere","entries":17},{"value":"MCP","entries":16},{"value":"Auth","entries":13},{"value":"Permissions","entries":12},{"value":"Compaction","entries":9},{"value":"Sandbox","entries":9},{"value":"Dependencies","entries":8},{"value":"Telemetry","entries":8},{"value":"Diskless Sessions","entries":7},{"value":"Remote Control","entries":7},{"value":"Network","entries":6},{"value":"Subagents","entries":6},{"value":"Workflows","entries":6},{"value":"Artifacts","entries":5},{"value":"Bash Tool","entries":5},{"value":"File Editing","entries":5},{"value":"Internals","entries":5},{"value":"Self-Hosted Runner","entries":5},{"value":"Terminal UI","entries":5},{"value":"WebFetch","entries":5},{"value":"Worktrees","entries":5},{"value":"Git","entries":4},{"value":"Memory","entries":4},{"value":"Prompt Caching","entries":4},{"value":"Prompt Input","entries":4},{"value":"Read Tool","entries":4},{"value":"SDK","entries":4},{"value":"Session Transcripts","entries":4},{"value":"Settings","entries":4},{"value":"Skills","entries":4},{"value":"Thinking","entries":4},{"value":"Attachments","entries":3},{"value":"Bridge","entries":3},{"value":"Claude in Chrome","entries":3},{"value":"Daemon","entries":3},{"value":"Headless Mode","entries":3},{"value":"Prompt History","entries":3},{"value":"Sessions","entries":3},{"value":"System Prompt","entries":3},{"value":"Auto Mode","entries":2},{"value":"Channels","entries":2},{"value":"Agents View","entries":1},{"value":"Hosted Sessions","entries":1},{"value":"Input Queue","entries":1},{"value":"Slash Commands","entries":1},{"value":"Tool Host","entries":1}]}}