v2.1.224
2.1.224
- Edit tool does exact-string replacements; edits apply only if file text matches exactly, otherwise no change
Highlights: - Self-hosted runner runs Claude Code sessions on local machines/containers for private, controlled execution
- Edit tool does exact-string replacements; edits apply only if file text matches exactly, otherwise no change
CLI changelog
- Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans
- Added archive plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning
- Added a cancel-and-confirm step when removing an unavailable paste changes a command's text
- Added ANTHROPIC_BEDROCK_REGION_PREFIX env var for Bedrock to prefer a specific cross-region inference profile over the AWS_REGION-derived one
- Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
- Added sandbox credential-masking options: extract and onExtractNoMatch for structured env values, decode: "jwt" with maskClaims for JWT-aware masking, and awsPairs/sigv4 for AWS SigV4 re-signing; these need network.tlsTerminate and are honored only from user, managed, or --settings settings
- Added cross-session SendMessage: Claude Code sessions can now message each other, on any of your machines, with ListAgents to discover them (macOS and Linux)
- Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and /resume no longer cross projects
- Fixed SendMessage reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors
- Fixed sandbox filesystem deny entries written with a trailing slash (e.g. denyRead: "~/.aws/") being silently bypassable on Linux and macOS
- Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why
- Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model
- … +19 more CLI changelog entries
Source: https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md#21224
Metadata
-
Time since 2.1.223 release: 6h 53m 22s
-
Bundle file size: +743.4 kB (+1.8%)
-
Prompt files: -2 (-7.1%)
-
Prompt tokens: +4,281 (+5.6%)
Prompt token mix by kind:
- system: 74.3%→79.6%
- tools: 25.7%→20.4%
Files:
- metadata: f1a1e09/meta/metadata.md#diff-a08dfa163baef97ea4f56d29009ac65f5f7dbc46e3a58e80d7aa06a2a2520899L10-R10
- prompt stats: f1a1e09/meta/prompt-stats.md#diff-fa8e31336ece71d159f37b6fd4ed0c61939849140bd5c08c7ca793b5b2ae7f58L1-R1
Other prompt changes
- Edit tool performs exact string replacements and requires using Read first, with edits preserving the exact indentation after the line-number prefix.
Links: