{"version":"2.1.321","summary":"You can now use the Fable 5.2 and Mythos 5.2 models in Claude Code with the short names `fable-5-2` and `mythos-5-2`. Fable 5.2 is now listed as the latest model, and `fable52` works as an alias too. Plugins can use a new `tool.check` hook to make tool permissions stricter, but never looser for built-in tools. Plugins can also answer or rewrite outgoing web requests, and they are never lent your sign-in. Setting `CLAUDE_CODE_ULTRAREVIEW_PR_AS_MERGED` asks \/ultrareview to review a pull request as it was merged. This release has 418 entries, and 270 of them are usable today.\n\nSome features are in the build but are not switched on yet. A remote switch can make \/privacy-settings open your privacy settings on claude.ai in your browser. Video attachments can carry a preview image, but only in hosted remote environments with a switch on. A skill's `compatibility` note can tell Claude when the skill needs your own computer or network, behind a switch that is off by default. Code editors may show a recommended extension, also behind a remote switch.\n\nStalled secure connections now stop with a clear error instead of hanging. The usual limit is 120 seconds, and the error says to check your network or proxy. The bridge command now loads the settings file you pass with `--settings`. Plugin sync now keeps plugins you already installed when your account's plugin list fails to load. A skills folder created after startup is now picked up and watched. The email address privacy prompt for shell and web actions no longer appears in the list of features.","filter":{"section":null,"tier":null,"area":null},"offset":0,"limit":50,"count":50,"total":418,"next_offset":50,"next_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/entries.json?offset=50","entries":[{"anchor":"mcp-set-servers-accepts-denied-tools-side-question-error-co","heading":"mcp_set_servers accepts denied_tools, and the proxy tells unreachable hosts apart from blocked ones","glance":"Programs driving Claude Code can block specific MCP tools per session, and network errors now separate unreachable hosts from policy blocks","teaser":null,"tier":"use","area":"SDK","section":"What probably matters to you","position":0,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-set-servers-accepts-denied-tools-side-question-error-co","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-set-servers-accepts-denied-tools-side-question-error-co.json"},{"anchor":"mcp-denied-tools-setting-parsing-added","heading":"Claude Code can read a list of MCP tools to deny","glance":"Claude Code can now check and merge a list of blocked MCP tools, called mcpDeniedTools, into its settings","teaser":null,"tier":"use","area":"MCP","section":"What probably matters to you","position":1,"scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-denied-tools-setting-parsing-added","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-denied-tools-setting-parsing-added.json"},{"anchor":"fable-52-and-mythos-52-model-recognition-added","heading":"Fable 5.2 and Mythos 5.2 arrive, and fast mode changes around them","glance":"Claude Code recognises the Fable 5.2 and Mythos 5.2 models, needs an explicit opt-in for fast mode on them, and keeps your model when fast mode supports it","teaser":null,"tier":"use","area":"Models","section":"What probably matters to you","position":2,"scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/fable-52-and-mythos-52-model-recognition-added","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/fable-52-and-mythos-52-model-recognition-added.json"},{"anchor":"stop-hook-git-check-can-be-limited-to-repositories-by-an-env","heading":"Environment variable to limit the built-in git check to git repositories","glance":"Setting `CLAUDE_CODE_GIT_CHECK_ONLY_IN_REPOSITORY` lets Claude Code skip its built-in git check when you are not inside a git repository","teaser":null,"tier":"use","area":"Hooks","section":"What probably matters to you","position":3,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/stop-hook-git-check-can-be-limited-to-repositories-by-an-env","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/stop-hook-git-check-can-be-limited-to-repositories-by-an-env.json"},{"anchor":"claude-code-ccr-requests-by-fetch-routes-axios-through-bun-f","heading":"New CLAUDE_CODE_CCR_REQUESTS_BY_FETCH setting changes how hosted workers send requests","glance":"Setting CLAUDE_CODE_CCR_REQUESTS_BY_FETCH on a hosted worker sends unproxied network requests through Bun's built-in fetch","teaser":null,"tier":"use","area":"Cloud Sessions","section":"What probably matters to you","position":4,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/claude-code-ccr-requests-by-fetch-routes-axios-through-bun-f","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/claude-code-ccr-requests-by-fetch-routes-axios-through-bun-f.json"},{"anchor":"new-fable52-model-alias","heading":"Fable 5.2 added as a model alias and highlighted in a reworked model picker","glance":"A `fable52` model alias is added, and the model picker gains a collapsible 'More models' row with Fable 5.2 highlighted","teaser":null,"tier":"use","area":"Models","section":"What probably matters to you","position":5,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-fable52-model-alias","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-fable52-model-alias.json"},{"anchor":"mcp-tool-delivered-pictures-note-env-gated","heading":"New setting lets chosen MCP servers show pictures to you directly","glance":"MCP servers named in `CLAUDE_CODE_TOOL_PICTURE_SERVERS` can mark pictures as shown to you, and Claude is told it need not send them","teaser":null,"tier":"use","area":"MCP","section":"What probably matters to you","position":6,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-tool-delivered-pictures-note-env-gated","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-tool-delivered-pictures-note-env-gated.json"},{"anchor":"mcp-server-tool-server-garbage-collection-tuning-via-env-var","heading":"New setting tunes memory cleanup for claude mcp serve","glance":"CLAUDE_CODE_MCP_SERVE_GARBAGE_COLLECTIONS controls when mcp serve frees unused memory, and slow cleanups switch it off","teaser":null,"tier":"use","area":"MCP","section":"What probably matters to you","position":7,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-server-tool-server-garbage-collection-tuning-via-env-var","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-server-tool-server-garbage-collection-tuning-via-env-var.json"},{"anchor":"plugin-http-fetch-hook-httpfetch-with-credential-redactio","heading":"Plugins can intercept and rewrite Claude Code&#039;s web requests","glance":"Plugins can now hook outgoing web requests to answer or rewrite them, but are never lent your sign-in","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":8,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-http-fetch-hook-httpfetch-with-credential-redactio","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-http-fetch-hook-httpfetch-with-credential-redactio.json"},{"anchor":"plugin-toolcheck-hook-can-tighten-tool-permissions","heading":"Plugins can now make tool permissions stricter, but never looser","glance":"A new `tool.check` hook lets plugins answer allow, deny or ask on a tool check, and only stricter answers take effect for built-in tools","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":9,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-toolcheck-hook-can-tighten-tool-permissions","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-toolcheck-hook-can-tighten-tool-permissions.json"},{"anchor":"sdk-sdkmcpserverconfigs-accepts-automodeverdicttools","heading":"SDK programs can name which MCP tools give auto mode verdicts","glance":"Programs driving Claude Code through the SDK can now set `autoModeVerdictTools` when registering an MCP server","teaser":null,"tier":"use","area":"SDK","section":"What probably matters to you","position":11,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/sdk-sdkmcpserverconfigs-accepts-automodeverdicttools","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/sdk-sdkmcpserverconfigs-accepts-automodeverdicttools.json"},{"anchor":"ultrareview-can-review-a-pr-as-it-was-merged-via-a-new-env","heading":"Ultrareview can be asked to review a pull request as it was merged","glance":"Setting CLAUDE_CODE_ULTRAREVIEW_PR_AS_MERGED asks \/ultrareview to review a pull request as merged, or refuses if that is unavailable","teaser":null,"tier":"use","area":"Code Review","section":"What probably matters to you","position":12,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/ultrareview-can-review-a-pr-as-it-was-merged-via-a-new-env","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/ultrareview-can-review-a-pr-as-it-was-merged-via-a-new-env.json"},{"anchor":"stop-request-can-spare-background-tasks","heading":"Stopping a turn can leave background tasks running","glance":"A stop, cancel or Esc can now end the current turn without stopping running background agents and workflows","teaser":null,"tier":"use","area":"SDK","section":"What probably matters to you","position":13,"scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/stop-request-can-spare-background-tasks","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/stop-request-can-spare-background-tasks.json"},{"anchor":"new-claude-code-you-should-know-auto-send-env-var","heading":"New <code>CLAUDE_CODE_YOU_SHOULD_KNOW_AUTO_SEND<\/code> environment variable","glance":"Claude Code now reads a `CLAUDE_CODE_YOU_SHOULD_KNOW_AUTO_SEND` environment variable","teaser":null,"tier":"use","area":"Environment Variables","section":"What probably matters to you","position":14,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-claude-code-you-should-know-auto-send-env-var","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-claude-code-you-should-know-auto-send-env-var.json"},{"anchor":"new-claude-plugin-restore-set-aside-command-with-disca","heading":"New command recovers or deletes plugin data set aside after a marketplace swap","glance":"`claude plugin restore-set-aside <plugin>` gives set-aside plugin options and secrets to the current plugin, or deletes them with `--discard`","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":15,"scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-claude-plugin-restore-set-aside-command-with-disca","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-claude-plugin-restore-set-aside-command-with-disca.json"},{"anchor":"new-env-var-claude-code-user-delegated-session-direct-api-in","heading":"New environment variable for user-delegated sessions with its own failure type","glance":"Setting CLAUDE_CODE_USER_DELEGATED_SESSION_DIRECT_API gives remote sessions a separate failure type when their route is refused","teaser":null,"tier":"use","area":"Delegated Sessions","section":"What probably matters to you","position":16,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-env-var-claude-code-user-delegated-session-direct-api-in","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-env-var-claude-code-user-delegated-session-direct-api-in.json"},{"anchor":"plugin-notify-keys-delays-cancel","heading":"Plugin notifications can be delayed, scheduled, replaced and cancelled","glance":"Plugin notifications now take a key, a delay or time, and an until-back option, and can be cancelled","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":17,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-notify-keys-delays-cancel","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-notify-keys-delays-cancel.json"},{"anchor":"plugin-uinotify-gains-key-delayms-at-untilback-and-a-ui","heading":"Plugins can schedule notifications and cancel them","glance":"Plugin `ui.notify` gains delay, time, until-back and key options, a new `ui.cancelNotify` removes notices, and headless sessions pass them to the host","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":18,"scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-uinotify-gains-key-delayms-at-untilback-and-a-ui","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-uinotify-gains-key-delayms-at-untilback-and-a-ui.json"},{"anchor":"theme-api-accepts-colors-as-well-as-backdrop","heading":"Plugins can set theme colours with <code>theme.set<\/code>, not only the backdrop","glance":"The plugin `theme.set` call now accepts colours as well as a backdrop, and needs at least one of the two","teaser":null,"tier":"use","area":"Themes","section":"What probably matters to you","position":19,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/theme-api-accepts-colors-as-well-as-backdrop","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/theme-api-accepts-colors-as-well-as-backdrop.json"},{"anchor":"mcp-set-servers-can-deny-tools-and-reconnect-needs-auth-serv","heading":"Programs driving Claude Code can now deny tools and reconnect servers awaiting sign-in","glance":"Updating MCP servers from a program can now include tools to deny, and servers waiting for sign-in are retried afterwards","teaser":null,"tier":"use","area":"SDK","section":"What probably matters to you","position":21,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-set-servers-can-deny-tools-and-reconnect-needs-auth-serv","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mcp-set-servers-can-deny-tools-and-reconnect-needs-auth-serv.json"},{"anchor":"remote-control-child-sessions-refuse-a-settings-file-that-ch","heading":"Remote Control gets a --settings option and pins what its sessions start with","glance":"`claude remote-control --settings <file>` passes a settings file to spawned sessions, which refuse to start if that file or their start folder changed","teaser":null,"tier":"use","area":"Remote Control","section":"What probably matters to you","position":22,"scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/remote-control-child-sessions-refuse-a-settings-file-that-ch","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/remote-control-child-sessions-refuse-a-settings-file-that-ch.json"},{"anchor":"sdk-mcp-tools-can-be-marked-to-carry-the-server-auto-mode-cl","heading":"SDK-supplied MCP tools can accept the server&#039;s auto mode approval","glance":"A new `autoModeVerdictTools` setting lets SDK-supplied MCP tools be marked as already allowed when the server-side auto mode check approved the exact call","teaser":null,"tier":"use","area":"SDK","section":"What probably matters to you","position":23,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/sdk-mcp-tools-can-be-marked-to-carry-the-server-auto-mode-cl","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/sdk-mcp-tools-can-be-marked-to-carry-the-server-auto-mode-cl.json"},{"anchor":"user-delegated-session-env-vars-forwarded-to-shellcommand-e","heading":"Settings for user delegated sessions are passed on, and some commands refuse to run in them","glance":"Two user delegated session variables are passed to spawned processes, and `--bg` and `plugin eval` refuse to run when the direct API one is set","teaser":null,"tier":"use","area":"Delegated Sessions","section":"What probably matters to you","position":24,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/user-delegated-session-env-vars-forwarded-to-shellcommand-e","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/user-delegated-session-env-vars-forwarded-to-shellcommand-e.json"},{"anchor":"web-search-citations-no-longer-need-the-tengu-jolly-sparrow","heading":"Web search citations now depend only on CLAUDE_CODE_WEBSEARCH_CITATIONS","glance":"Setting CLAUDE_CODE_WEBSEARCH_CITATIONS is now enough to get citations in web search results, with no remote switch also required","teaser":null,"tier":"use","area":"Web Search","section":"What probably matters to you","position":25,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/web-search-citations-no-longer-need-the-tengu-jolly-sparrow","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/web-search-citations-no-longer-need-the-tengu-jolly-sparrow.json"},{"anchor":"remote-control-cli-adds-settings-and-debug-file-rejects","heading":"claude remote-control now accepts --settings with a file path","glance":"`claude remote-control` now takes `--settings` with the path of a JSON settings file, and rejects inline JSON text","teaser":null,"tier":"use","area":"Remote Control","section":"What probably matters to you","position":26,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/remote-control-cli-adds-settings-and-debug-file-rejects","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/remote-control-cli-adds-settings-and-debug-file-rejects.json"},{"anchor":"cyber-verification-program-messages-for-blocked-or-interrupt","heading":"Interruptions for security work now point to the Cyber Verification Program","glance":"Claude Code now has messages suggesting Defense Access or the Cyber Verification Program to reduce interruptions to security work","teaser":null,"tier":"notice","area":"Usage Policy","section":"What probably matters to you","position":27,"scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/cyber-verification-program-messages-for-blocked-or-interrupt","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/cyber-verification-program-messages-for-blocked-or-interrupt.json"},{"anchor":"subfolder-picked-sessions-in-remote-control-bridge","heading":"Remote Control can start sessions in a folder picked on claude.ai","glance":"Remote Control now accepts sessions whose folder was chosen on claude.ai, checking the folder first and refusing with a message when it cannot","teaser":null,"tier":"notice","area":"Remote Control","section":"What probably matters to you","position":28,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/subfolder-picked-sessions-in-remote-control-bridge","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/subfolder-picked-sessions-in-remote-control-bridge.json"},{"anchor":"cloud-session-browse-claudeai-can-list-folders-on-this-com","heading":"claude.ai can now browse folders on your computer to start a session","glance":"claude.ai can ask Claude Code to list folders on your computer to start a session, following your Read deny and ask rules","teaser":null,"tier":"notice","area":"Remote Control","section":"What probably matters to you","position":29,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/cloud-session-browse-claudeai-can-list-folders-on-this-com","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/cloud-session-browse-claudeai-can-list-folders-on-this-com.json"},{"anchor":"new-hook-decisionask-capability-and-new-stderr-free-policy","heading":"Plugin hooks gain an &quot;ask&quot; decision and new guard categories","glance":"The plugin hook system lists a new \"ask\" decision, new guard categories, and refuses hook paths that are not absolute","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":30,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-hook-decisionask-capability-and-new-stderr-free-policy","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/new-hook-decisionask-capability-and-new-stderr-free-policy.json"},{"anchor":"tool-describe-hooks-can-carry-a-cache-breaker-and-placement","heading":"Plugin hooks that rewrite tool descriptions can also signal a cache reset","glance":"When a plugin hook rewrites a tool's description, Claude Code now also keeps the hook's cache-reset marker and whether the tool loads later","teaser":null,"tier":"use","area":"Plugins","section":"What probably matters to you","position":31,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/tool-describe-hooks-can-carry-a-cache-breaker-and-placement","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/tool-describe-hooks-can-carry-a-cache-breaker-and-placement.json"},{"anchor":"bridge-fast-path-now-honours-settings","heading":"The bridge command now applies <code>--settings<\/code>","glance":"Starting the bridge command with `--settings` now loads that settings file, which the command used to ignore","teaser":null,"tier":"use","area":"Remote Control","section":"What probably matters to you","position":33,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/bridge-fast-path-now-honours-settings","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/bridge-fast-path-now-honours-settings.json"},{"anchor":"mod-httpfetch-hook-can-deny-api-requests","heading":"Mod http.fetch hooks can block API requests with a hook_denied error, and attached notes are marked untrusted","glance":"A mod blocking a request now gives a specific hook_denied error, notes you did not write are flagged as untrusted, and a few messages change","teaser":null,"tier":"notice","area":"Mods","section":"What probably matters to you","position":34,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mod-httpfetch-hook-can-deny-api-requests","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/mod-httpfetch-hook-can-deny-api-requests.json"},{"anchor":"auto-mode-gives-a-new-refusal-when-no-allowed-model-can-run","heading":"Auto mode explains when no allowed model can check an action","glance":"Auto mode now refuses an action with a clear message when none of the models allowed to check it can be used","teaser":null,"tier":"notice","area":"Auto Mode","section":"What probably matters to you","position":35,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/auto-mode-gives-a-new-refusal-when-no-allowed-model-can-run","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/auto-mode-gives-a-new-refusal-when-no-allowed-model-can-run.json"},{"anchor":"auto-mode-classifier-turned-offredirected-for-user-delegate","heading":"Auto mode&#039;s safety checker behaves differently for user-delegated direct API sessions","glance":"When `CLAUDE_CODE_USER_DELEGATED_SESSION_DIRECT_API` is set, auto mode switches off a third-party checker role and always checks allowed MCP write tools","teaser":null,"tier":"notice","area":"Auto Mode","section":"What probably matters to you","position":36,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/auto-mode-classifier-turned-offredirected-for-user-delegate","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/auto-mode-classifier-turned-offredirected-for-user-delegate.json"},{"anchor":"endconversation-confirmation-re-prompt","heading":"EndConversation tool reworded, asks for a confirming second call, and records its cause","glance":"Claude's EndConversation tool gets new guidance wording, a two-step confirmation before ending, and a recorded cause when it ends the session","teaser":null,"tier":"notice","area":"Tools","section":"What probably matters to you","position":37,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/endconversation-confirmation-re-prompt","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/endconversation-confirmation-re-prompt.json"},{"anchor":"connector-file-download-size-cap-raised-from-100-mb-to-500-m","heading":"Connector file download refusals now give a 500 MB limit","glance":"Claude Code's message for a refused connector file download now says the limit is 500 MB, up from 100 MB","teaser":null,"tier":"notice","area":"Connectors","section":"What probably matters to you","position":38,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/connector-file-download-size-cap-raised-from-100-mb-to-500-m","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/connector-file-download-size-cap-raised-from-100-mb-to-500-m.json"},{"anchor":"privacy-checkup-prompt-fetched-from-api","heading":"Privacy checkup prompt delivered from Anthropic&#039;s servers","glance":"Claude Code can fetch a privacy checkup notice from Anthropic, show it in the terminal or VS Code, and report whether you saw or dismissed it","teaser":null,"tier":"notice","area":"Privacy","section":"What probably matters to you","position":40,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/privacy-checkup-prompt-fetched-from-api","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/privacy-checkup-prompt-fetched-from-api.json"},{"anchor":"individual-plans-include-ultra-for-transcript-allowed","heading":"Ultra plans now listed alongside Pro and Max for transcript sharing","glance":"The description of `transcript_allowed` now names Pro, Max and Ultra as the individual plans it applies to, where it named only Pro and Max","teaser":null,"tier":"notice","area":"Plans","section":"What probably matters to you","position":41,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/individual-plans-include-ultra-for-transcript-allowed","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/individual-plans-include-ultra-for-transcript-allowed.json"},{"anchor":"privacy-settings-command-can-redirect-to-claudeai-behind-an","heading":"Privacy settings can open on claude.ai, and hosts can record a privacy checkup","glance":"Behind a switch, `\/privacy-settings` can send you to claude.ai, and apps embedding Claude Code can record a privacy checkup as shown or dismissed","teaser":null,"tier":"soon","area":"Privacy","section":"What probably matters to you","position":42,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/privacy-settings-command-can-redirect-to-claudeai-behind-an","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/privacy-settings-command-can-redirect-to-claudeai-behind-an.json"},{"anchor":"ide-hosts-can-offer-an-extension-recommendation-gated-by-te","heading":"Code editors may offer a recommended extension, behind a remote switch","glance":"Claude Code can now tell a code editor to show an extension recommendation, only when a remote switch is set to offer it","teaser":null,"tier":"soon","area":"IDE","section":"What probably matters to you","position":43,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/ide-hosts-can-offer-an-extension-recommendation-gated-by-te","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/ide-hosts-can-offer-an-extension-recommendation-gated-by-te.json"},{"anchor":"three-new-recommend-extension-offer-protocol-methods","heading":"Early groundwork for offering a recommended extension","glance":"Claude Code now contains message formats for offering a recommended extension, including a check on idle time before showing it","teaser":null,"tier":"soon","area":"Extensions","section":"What probably matters to you","position":44,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/three-new-recommend-extension-offer-protocol-methods","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/three-new-recommend-extension-offer-protocol-methods.json"},{"anchor":"hook-modules-gate-tengu-immutable-falcon","heading":"Hook handling prepared for hook modules","glance":"Claude Code's hook handling gains groundwork for hook modules: module-based plugins can count as holding hooks, and module hooks depend on a module capability","teaser":null,"tier":"notice","area":"Hooks","section":"What probably matters to you","position":45,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/hook-modules-gate-tengu-immutable-falcon","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/hook-modules-gate-tengu-immutable-falcon.json"},{"anchor":"skill-compatibility-frontmatter-surfaced-to-the-model-beh","heading":"Skills can tell Claude what environment they need, behind a switch that is off by default","glance":"A skill's `compatibility` note can be shown to Claude, so it says plainly when a skill needs your own computer or network that it cannot reach","teaser":null,"tier":"soon","area":"Skills","section":"What probably matters to you","position":46,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/skill-compatibility-frontmatter-surfaced-to-the-model-beh","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/skill-compatibility-frontmatter-surfaced-to-the-model-beh.json"},{"anchor":"chrome-device-selection-tool-now-asks-permission-before-link","heading":"The Chrome computer-picking tool can now ask before linking a computer","glance":"Claude Code can now ask you which computer to use before linking one to a chat, and denies the request if claude.ai does not answer in time","teaser":null,"tier":"soon","area":"Claude in Chrome","section":"What probably matters to you","position":47,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/chrome-device-selection-tool-now-asks-permission-before-link","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/chrome-device-selection-tool-now-asks-permission-before-link.json"},{"anchor":"vertex-bearer-token-auth-path-added-to-the-vertex-check","heading":"Vertex AI availability check gains a token sign-in mode that cannot be used yet","glance":"Claude Code's Vertex AI model check has a new bearer-token sign-in mode, but nothing in this build can switch it on","teaser":null,"tier":"soon","area":"Cloud Providers","section":"What probably matters to you","position":48,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/vertex-bearer-token-auth-path-added-to-the-vertex-check","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/vertex-bearer-token-auth-path-added-to-the-vertex-check.json"},{"anchor":"video-thumbnails-for-attachment-uploads-behind-tengu-purrin","heading":"Video attachments can be sent with a preview image, behind a switch","glance":"Uploading a video attachment can now include a thumbnail image, only in hosted remote environments and only when a remote switch is on","teaser":null,"tier":"soon","area":"Attachments","section":"What probably matters to you","position":49,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/video-thumbnails-for-attachment-uploads-behind-tengu-purrin","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/video-thumbnails-for-attachment-uploads-behind-tengu-purrin.json"},{"anchor":"no-reply-needed-mcp-tool-added-to-a-tool-allow-set","heading":"A &quot;no reply needed&quot; tool joins a set of special Claude Code tools","glance":"The `no_reply_needed` tool now belongs to a group of tool names that also includes the research report and plan tip tools","teaser":null,"tier":"internal","area":"Tools","section":"What probably matters to you","position":50,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/no-reply-needed-mcp-tool-added-to-a-tool-allow-set","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/no-reply-needed-mcp-tool-added-to-a-tool-allow-set.json"},{"anchor":"gateway-desktop-overlay-validation-rejects-unknown-nested-fi","heading":"Apps gateway refuses desktop policy entries that Claude Desktop cannot read","glance":"The apps gateway now refuses to serve a desktop policy entry with unknown fields that Claude Desktop would drop or misread, instead of only warning","teaser":null,"tier":"notice","area":"Gateways","section":"What probably matters to you","position":52,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/gateway-desktop-overlay-validation-rejects-unknown-nested-fi","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/gateway-desktop-overlay-validation-rejects-unknown-nested-fi.json"},{"anchor":"chrome-unreachable-message-mentions-cloud-browser","heading":"Browser-not-connected message now suggests a cloud browser","glance":"When the Chrome extension is not connected for a request from mobile, the message now offers a cloud browser as well as web search","teaser":null,"tier":"notice","area":"Claude in Chrome","section":"What probably matters to you","position":53,"scope":"individual","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/chrome-unreachable-message-mentions-cloud-browser","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/chrome-unreachable-message-mentions-cloud-browser.json"},{"anchor":"api-calls-from-user-delegated-sessions-are-route-restricted","heading":"User-delegated sessions are blocked from some API routes","glance":"In a user-delegated session, Claude Code now refuses API calls to routes that are not allowed and shows an error","teaser":null,"tier":"notice","area":"Delegated Sessions","section":"What probably matters to you","position":54,"scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/api-calls-from-user-delegated-sessions-are-route-restricted","entry_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/api-calls-from-user-delegated-sessions-are-route-restricted.json"}],"facets":{"sections":[{"value":"What probably matters to you","entries":54},{"value":"Improvements","entries":211},{"value":"Bug Fixes","entries":15},{"value":"In Development","entries":8},{"value":"Internal Changes","entries":129},{"value":"Removed","entries":1}],"tiers":[{"value":"notice","entries":242},{"value":"internal","entries":132},{"value":"use","entries":28},{"value":"soon","entries":16}],"areas":[{"value":"MCP","entries":33},{"value":"Plugins","entries":25},{"value":"Elsewhere","entries":20},{"value":"Remote Control","entries":20},{"value":"Sessions","entries":19},{"value":"Tools","entries":18},{"value":"Permissions","entries":17},{"value":"Telemetry","entries":16},{"value":"Agents","entries":15},{"value":"Hooks","entries":13},{"value":"Artifacts","entries":12},{"value":"Auto Mode","entries":11},{"value":"Connectors","entries":11},{"value":"Network","entries":11},{"value":"Internals","entries":10},{"value":"SDK","entries":10},{"value":"Models","entries":9},{"value":"Auth","entries":8},{"value":"Privacy","entries":8},{"value":"Background Tasks","entries":6},{"value":"Cloud Sessions","entries":6},{"value":"Skills","entries":6},{"value":"Background Jobs","entries":5},{"value":"Bash","entries":5},{"value":"Cloud Providers","entries":5},{"value":"Code Review","entries":5},{"value":"Compaction","entries":5},{"value":"Projects","entries":5},{"value":"Attachments","entries":4},{"value":"Claude in Chrome","entries":4},{"value":"Delegated Sessions","entries":4},{"value":"Gateways","entries":4},{"value":"Streaming","entries":4},{"value":"Terminal UI","entries":4},{"value":"Windows","entries":4},{"value":"Context","entries":3},{"value":"Loops","entries":3},{"value":"Memory Files","entries":3},{"value":"Mods","entries":3},{"value":"Notebooks","entries":3},{"value":"Plans","entries":3},{"value":"Settings","entries":3},{"value":"Slash Commands","entries":3},{"value":"Startup","entries":3},{"value":"Headless Mode","entries":2},{"value":"Sandbox","entries":2},{"value":"System Prompt","entries":2},{"value":"Updates","entries":2},{"value":"Voice","entries":2},{"value":"Worktrees","entries":2},{"value":"Background Requests","entries":1},{"value":"Cost Tracking","entries":1},{"value":"Effort","entries":1},{"value":"Environment Variables","entries":1},{"value":"Extensions","entries":1},{"value":"File Mentions","entries":1},{"value":"IDE","entries":1},{"value":"Kits","entries":1},{"value":"Memory","entries":1},{"value":"Prompt Cache","entries":1},{"value":"Reminders","entries":1},{"value":"Themes","entries":1},{"value":"Usage & Limits","entries":1},{"value":"Usage Policy","entries":1},{"value":"Web Search","entries":1},{"value":"Workflows","entries":1},{"value":"macOS","entries":1}]}}