Skip to content

v2.1.223

Choose a tag to compare

@marckrenn marckrenn released this 06 Aug 01:06
· 44 commits to main since this release

2.1.223

(☝ Click to see full diff.)

Highlights:

  • owner/* wildcard added to marketplace settings to allow or block all repos in a GitHub org for org policies
  • Permission prompts block commands padded with tabs or invisible Unicode so dialogs display the actual command
  • New tool launches agents to coordinate complex multi-step tasks, enabling automated multi-step workflows

CLI changelog

  • Added owner wildcard entries ("owner/*") to the strictKnownMarketplaces and blockedMarketplaces managed settings for allowing or blocking all marketplace repos under a GitHub org
  • Added a warning when workflow agents, forked skills, slash commands, or resumed background agents' requested subagent model is restricted and the parent model runs instead
  • Added a /teleport hint in cloud sessions showing how to continue locally with claude --teleport
  • Fixed a Bash permission bypass where a crafted command could hide parts of itself from permission checks
  • Fixed permission prompts so commands padded with tabs or invisible Unicode can no longer hide part of the command from the approval dialog
  • Fixed workflow scripts being able to use dynamic import() to run code outside the workflow sandbox
  • Fixed a permission gap where an agent definition's bypassPermissions mode ignored the org bypass-permissions disable policy
  • Fixed resuming a session after a mid-session /cd coming back empty
  • Fixed gateway model discovery hiding Claude models registered under provider-prefixed IDs such as vertex_ai/claude-* or bedrock/anthropic.claude-*
  • Fixed modelOverrides keys that aren't Anthropic model IDs being treated as the session's canonical model ID; unknown keys are now ignored as documented
  • Fixed managed settings: server-delivered settings no longer disable the env block of a machine-local managed-settings.json or MDM profile; admin env now merges per key
  • Fixed sandboxed commands failing to start on Linux when sandbox.filesystem.denyWrite covers the working directory
  • … +7 more CLI changelog entries

Source: https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md#21223

Metadata

  • Time since 2.1.222 release: 1d 16h 48m 26s

  • Bundle file size: +132.5 kB (+0.3%)

  • Prompt files: +3 (+12.0%)

  • Prompt tokens: +9,566 (+14.3%)

Prompt token mix by kind:

  • system: 73.9%→74.3%
  • tools: 26.1%→25.7%

Files:

Other prompt changes

  1. Clarified the Grep tool description and usage—now explicitly states it's ripgrep-based, recommends using Grep for search tasks, and details output modes, head_limit, and offset behavior.
  2. Added a tool description to launch a new agent for handling complex, multi-step tasks.

Links:

  1. 8b4ec67/system-prompts/tool-description-grep.md#diff-98f084cc9ae739dcef3d2c75ea5cf55429dbb647973737f30693e59689d25d58R3
  2. 15d3b00/system-prompts/tool-description-launch-new-handle-complex-multi.md#diff-f9c65488006fcb18d293ebca17f2420fa5b869c7f4fca44e5a4b8ec47d6cad2fR26