Show Notes
Discover how a prompt update in Claude Code 2.1.310 clarifies the impact of denying reads outside your working directory during auto mode, plus how to manage trusted paths with settings and the add dir flag. Also covered: fixes for headless MCP timeouts, tmux image rendering, and cloud setup script controls.
More from The Claude Code Changelog
Claude Code 2.1.309 and 2.1.310 tighten sandbox and permission boundaries, including fixes for Windows hooks that could fail open. Learn how to check your version, test a blocking hook and an Edit deny rule, and diagnose Ubuntu sandbox startup issues with /sandbox.
Claude Code 2.1.310 enables the Monitor tool on Amazon Bedrock, Google Vertex, and Microsoft Foundry—even with telemetry or nonessential traffic disabled. Learn how to replace sleep-and-check loops with event-driven monitoring, configure permissions, and avoid leaving background monitors running.
Claude Code 2.1.309 adds a workspace-trust check to claude ultrareview. Learn how to handle the prompt, update scripts and CI with the correctly ordered --trust-workspace flag or the environment variable, and weigh the security and billing caveats. We also cover smaller updates to dangerous-command handling, sed -i, large nested CLAUDE.md files, sandboxed Bash startup files, and VS Code diagnostics.
Claude Code 2.1.307 adds the claude_code.safety_event OpenTelemetry event, letting teams track when permissions, safety checks, hooks, or the sandbox stop, prompt, or send back a tool call. Learn how to query the event for sandbox violations and recurring permission prompts, plus caveats about interpreting the counts. We also cover the release’s MCP retry and authentication fixes, checkout-hook timeouts, and pull-request review controls.
Claude Code 2.1.305 adds sandbox.allowNestedUserNamespaces for Linux and WSL2, enabling tools such as headless Chromium and rootless Podman to run inside the Bash sandbox. Learn how to enable it and why it weakens the sandbox’s file protections. The hosts also cover fixes and quality-of-life updates in 2.1.304–2.1.306, including gateway retries, /usage fixes, and retry-watchdog configuration.