Claude Code 发布 v2.1.314：企业权限管控与闲置压缩等十余项更新

v2.1.314

What's changed Added permissions.blockWritesOutsideWorkingDirectories : Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode Added an optional groups list to Claude apps gateway upstreams: only developers in the listed IdP groups are sent to that upstream, on failover too Added guardrail_trace to Claude apps gateway Bedrock upstreams, to log which Amazon Bedrock guardrail filter fired on a request, without the matched text Added idle compaction to VS Code and Claude Desktop's Code tab: a 200K+ token conversation left idle is summarized, and the summary is used on your next message if the prompt cache has expired Fixed sessions failing turn after turn with "Invalid effort level" when an organization's admin caps a model's effort: Claude Code now lowers the effort, retries, and says which level it uses Fixed claude -p exiting with code 0 and no output when startup failed; it now prints the error and exits 1 Fixed Bedrock sessions with many images failing every turn and /compact with "400 Input is too long." instead of removing older images and compacting Fixed Microsoft Foundry sessions failing when the resource has no deployment for the default Sonnet, Opus or Haiku model: Claude Code now falls back to an older model of that family Fixed repeated refused requests behind a gateway that doesn't accept tool search's tool_reference blocks: the request is sent again once without tool search, and the session remembers Fixed TLS connections failing with UNABLE_TO_GET_ISSUER_CERT when the system certificate store holds a renewed root certificate that is cross-signed with its predecessor Fixed MCP servers that also work without sign-in showing "needs authentication" after their stored sign-in stopped working; they are now used signed out Fixed claude mcp logout reporting success when the MCP sign-in was not removed, for example while the macOS keychain is locked over SSH Fixed extra sign-in renewals when several sessions share an Anthropic profile login and the credentials lock is busy Fixed claude ultrareview and claude remote-control asking the workspace trust question in a CI job that has a terminal; with CI set they now refuse an untrusted folder at once Fixed an administrator's TLS trust settings in managed settings not being applied in Claude Desktop sessions Fixed model switching being refused on machines with managed plugin settings when one of your own --plugin-dir or --plugin-url plugins had a broken manifest or failed to download Fixed the Bedrock and Vertex model upgrade offer coming back at every start when managed settings pin the model Fixed forceRemoteSettingsRefresh set only in remote managed settings no longer applying once the stored copy had expired, which let sessions start without policy when the server could not be reached Fixed "Continue automatically at usage limit" continuing more than three times without a prompt from you when a task restarted itself between waits (a /goal check-in, a background or scheduled task) Fixed background and cloud sessions started with Ultracode turning it back on at their next start after it had been switched off Fixed the last broken reply and its retry prompts staying in the conversation after Claude gave up on a tool call that could not be parsed Fixed a PreCompact hook with very large output making compaction fail or repeat; each hook's output is now cut at 10,000 characters Fixed background diff refreshes briefly taking the repository's index lock, which could make a git command run at the same moment fail with "Unable to create '.git/index.lock': File exists" Fixed markdown tables jumping between grid and stacked layouts on half-typed rows while streaming, and long tables falling back to raw pipes Fixed the /resume picker showing the text of CLAUDE.md or CLAUDE.local.md as a session's title when the session only ran slash commands Fixed /btw answering from the main conversation when asked from a subagent's open transcript Fixed pasting an image over SSH to a Linux machine doing nothing silently; the prompt now says to copy the file over and paste its path Fixed claude remote-control sessions that failed to start when the session service was slow for a moment: the worker's registration is now retried with growing waits Fixed model switches over Remote Control that take over 8 seconds getting a "still pending" error instead of the final result Fixed the sandbox.excludedCommands setting description saying listed commands always run outside the sandbox; it now says every command in a call must match an entry Fixed shell and MCP calls that auto mode, a deny rule or a PreToolUse hook blocked, or that otherwise did not run, reading as if they ran in a collapsed tool group Fixed sandbox protections not applying to a worktree entered by claude -p --resume or --continue Fixed hooks matching Bash not running on shell commands started by the Monitor tool; such hooks can block or ask, but not approve or rewrite those commands Fixed a settings file excluded with --setting-sources still supplying some settings, such as auto mode rules and saved permission consents Fixed auto mode reporting a call as blocked, and listing it in /permissions , when its safety check gave no verdict Fixed a Claude apps gateway Vertex upstream hanging for minutes when a Google token endpoint accepts the connection and never answers Fixed the Claude apps gateway's start-up warning for a deprecated Claude Desktop key that it still serves as written saying "stops being accepted" after the key's end date Fixed /upgrade opening the browser and starting a new login for plans billed through the App Store or Google Play; it now says where to change the plan Fixed --resume , and rewinding past a switch to another model after a refusal, moving a session on a model name Claude Code doesn't recognize to a different model Fixed requests failing when a gateway or cloud provider refuses one of Claude Code's beta headers by name: the request is sent again without it Fixed model IDs spelled with a dot behind an LLM gateway, such as claude-opus-4.8 , being treated as an older model with the wrong context window, output limit, effort, thinking mode and cost Fixed Remote Control clients showing a stray "Compacted (ctrl+o to see full summary)" row after /compact Fixed the cloud sessions tip and the Remote Control idle notice showing when an organization's policy turns those features off Fixed a resumed claude.ai cloud session making a model call nobody asked for when the previous worker stopped just after receiving a new chat's files Fixed WebFetch in Cowork cloud sessions silently dropping a PDF's text past 100,000 characters; it now says how much was unread and where to read on Fixed Claude being told only that a command was declined after you stopped it with Esc or Stop in a cloud session or the IDE; it now also hears that the command may have run Fixed blank lines at the top of a code block disappearing when the code block opens a quote Fixed a blank line appearing above some ⎿ rows in the transcript view (Ctrl+O) Fixed vim mode dw , dW , yw and yW carrying on past the end of the line, and made w and W stop on empty lines Fixed x and Enter in the agent panel sometimes acting on the wrong agent when another agent started or finished Fixed pasted text and dragged-in files being lost in Claude's question dialog unless the "Other" row had focus Fixed pasted text being lost when a row in the prompt footer was selected Fixed vim mode p over a character selection ignoring whether the yanked text was whole lines Fixed vim mode aw and iw taking the line break at the end of a line Fixed ↓ selecting footer items hidden by the ? help menu, the command list or a paste hint Fixed Esc on a command's panel, such as /btw , also interrupting the subagent whose transcript is open Fixed the welcome header in fullscreen mode showing the session's model while viewing a subagent or teammate that runs on a different model Fixed the fullscreen transcript being left mid-conversation after "Restore conversation" in the rewind menu while scrolled up Fixed a rare case where a deleted session could reappear in the resume list as an almost empty entry Fixed prompts containing tags such as <bash-stdout> or <local-command-stdout> not being acknowledged to a local stream-json host Fixed sessions staying untitled when the first prompt failed (for example on a usage limit) and the conversation continued afterward Fixed the skill file watcher checking every removed skill kept in ~/.claude/skills/.trash , which added file system load that grew with each removal Fixed the session name from /rename disappearing while Claude asks for permission or a plan decision, so side-by-side sessions stay identifiable Fixed background sessions that fail to start being reported as a deleted daemon binary when the binary is still on disk Fixed the tip and idle reminder about push notifications appearing when the push settings in /config are hidden or your organization has turned off Remote Control Fixed ~/.claude/skills/.trash and ~/.claude/plugins/.trash growing without limit: each now holds about 1024 entries, whatever cleanupPeriodDays says Fixed the Bash edit diff listing a whole file as changed when a CRLF file under git's line-ending conversion was re-saved unchanged or had one line edited Self-hosted runner: Fixed an idle session moving to another runner instead of pausing when the runner's request to pause it lost its connection before Anthropic answered Improved memory use in long headless and SDK turns that run many subagents: the parent session no longer keeps each subagent's tool results until the turn ends Improved prompt history: Ctrl+R now matches text inside collapsed [Pasted text] pills Improved the /design-sync upload prompt to show the folder, the project and the files it will upload or delete Improved /permissions review tab, now called Recently blocked: the footer says what Esc will do with marked rows Improved auto mode's blocked calls: messages name the command, say Claude may retry and auto mode checks again, and point to /permissions to review Improved permission prompts: a long reason takes fewer rows, so it pushes the command being approved off the screen on fewer terminals Improved the cloud session error shown while a request refused for your claude.ai login is still being retried: it now also suggests claude auth login Improved the behavior of stored claude.ai, Team, and Enterprise logins when MDM and remote settings differ on base URL or apiKeyHelper Improved /config in agent view to say how to stop agent view opening by default Improved session auto-titles: a session that starts with a skill or a prompt-based command such as /security-review now gets a title from it instead of staying untitled Improved --resume speed and memory use on damaged transcripts Improved /context speed in sessions with ten thousand or more MCP tools Self-hosted runner: Improved the error shown when a session's branch isn't on the git remote: it now covers a never-pushed branch, says how to fix each case, and no longer suggests retrying Updated the /claude-api skill: its Datadog setup for API tracing now sends the dd-llmobs-enabled: true header, as the Console does, and its ant install instructions drop the outdated macOS xattr step Updated the bundled dataviz skill to advise printing y-axis tick labels in full under 10,000, and horizontal ones in full under a million where they fit Updated the bundled dataviz skill to answer donut and pie chart requests with ranked bars or a segmented bar that prints its values Changed Claude's file tools to ask before editing the local copy of your organization's server-managed settings, as they do for your settings files Changed /ultrareview to check workspace trust before it runs git, as claude ultrareview does Changed the Bash tool's shell to clear any inherited which alias or function and to stop passing exported which / unsetenv functions to commands, so which is the system command or zsh builtin Changed /permissions Recently blocked to refuse approving a call you can't read in full, including one the terminal is too short to show Changed auto mode in Cowork cloud sessions: a hook's allow of an MCP tool call now counts as no answer, so the classifier or a permission prompt decides Changed hook if conditions such as Monitor(tail *) to match the Monitor tool's shell commands as Bash(tail *) matches Bash's Changed the claude-api skill to ask to read a Managed Agents workflow run's workflow before changing the agent to improve that run Changed flagged requests to retry on another model, not end in a refusal, when ANTHROPIC_DEFAULT_OPUS_MODEL , availableModels or deniedModels leaves only an older Opus model, or none Changed idle compaction to also run for subscribers with telemetry turned off, and on Bedrock, Vertex, Foundry and LLM gateways once the one-hour prompt cache is on Changed FORCE_HYPERLINK=false (also no and off ) to turn hyperlinks off instead of on macOS: Changed git grep in most commands that Claude runs to use the C locale, to avoid a reported memory leak in macOS's regex library on files that aren't valid UTF-8 [VSCode] Fixed "Clear authentication" for MCP servers reporting success when the saved sign-in could not be removed [VSCode] Fixed missing spinner and Stop button while a queued message's hooks run [VSCode] Fixed session group changes that cannot be saved, such as a delete, failing silently; an error notification now appears [VSCode] Fixed Cmd+F / Ctrl+F not opening the find widget in the plan preview tab [VSCode] Fixed the voice dictation shortcut (Ctrl+D) doing nothing under non-Latin keyboard layouts such as Russian, Greek or Hebrew [VSCode] Fixed missed one-time saved scheduled tasks being deleted without asking when the extension opened without a chat [VSCode] Changed CLAUDE_CODE_DISABLE_CFC_PROMPT to also stop the extension adding the Claude in Chrome instructions to a session's messages; the browser tools stay available [Cloud sessions] Added an Include completed button to the Scheduled tasks page when finished one-off tasks are the only ones hidden, so you can show them without opening the Sort menu [Cloud sessions] Fixed recently used self-hosted environments never appearing among the recent environments on the new session card [Cloud sessions] Fixed cloud sessions reporting uncommitted changes every turn after Claude moved a branch to a commit it had pushed from another worktree [Cloud sessions] Fixed the self-hosted environment details dialog in admin settings squeezing its content out of view in very short windows or at high zoom; the dialog now scrolls [Cloud sessions] Fixed the permission mode picker staying on Auto after a running cloud or Remote Control session refused the switch; it now shows the mode in use and tells you [Cloud sessions] Improved scheduled tasks: runs in Anthropic's cloud now load the plugins enabled on your claude.ai account [Cloud sessions] Improved Test connection for GitHub Enterprise in admin settings to also connect the way cloud sessions do, and to warn you when that second test fails [Cloud sessions] Improved cloud session transcripts: a rename row now names the new title, and repository and environment lists show as a table instead of one line of JSON [Cloud sessions] Changed cloud sessions from the web, desktop and mobile apps to start even when a setup script exits with an error, instead of failing to start [Remote Control] Fixed the permission mode button in Remote Control sessions showing the wrong mode until you typed; while your computer is online it now shows the real mode on open [Claude Tag] Added a dismissible link to the Claude Tag API docs on the Bundles and Channels tabs in admin settings, for Enterprise organizations with Slack connected [Claude Tag] Fixed @Claude !restart giving up after one failed workspace check in channels shared across Enterprise Grid workspaces; it now retries, then asks you to run it again [Claude Tag] Fixed a second confirmation DM and channel note when you connect your Claude account from Slack twice from the same link within a few minutes [Claude Tag] Fixed follow-up messages in Slack showing no sign of progress while Claude's session waits for a self-hosted runner; Claude now posts a wait notice in the thread [Claude Tag] Fixed Claude sometimes not answering a tag in its own thread in Slack Connect channels where both organizations have installed Claude [Claude Tag] Fixed Retry on plugin and skill pages in Claude Tag admin settings discarding unsaved access changes after a failed load; your edits now stay in place [Claude Tag] Fixed the repositories control in Claude Tag admin settings showing the same action twice; its menu now lists only what the button doesn't already do