You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
Delegated SessionsArea: what it touches
ImprovementsKind: in v2.1.321,
What probably matters to youSection of the release
Unclear It is not clear what makes a session user-delegated, so it is unclear who is affected.
What
Before Claude Code calls its API, it now checks which route, or address, the call goes to. In a user-delegated session, a call to a route that is not allowed stops with the error "API route not allowed in a user delegated session". The earlier check still runs after this one.
Why
This narrows what a user-delegated session can reach over the network.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear what makes a session user-delegated, so it is unclear who is affected.
