Claude Code v2.1.224 发布：新增自托管环境、跨会话消息与插件归档源

更新内容

• 新增自托管环境：claude self-hosted-runner 可将你自己的机器或容器变为 Claude Code Web、移动端和桌面端会话的运行环境，适用于 Team 和 Enterprise 计划。
• 新增 archive 插件来源：无需 git 或 npm，即可通过 HTTPS 从 ZIP 文件安装插件，并可选择固定 SHA-256 哈希值。
• 当移除不可用的粘贴内容会改变命令文本时，新增取消与确认步骤。
• 为 Bedrock 新增 ANTHROPIC_BEDROCK_REGION_PREFIX 环境变量，用于优先选择特定的跨区域推理配置文件，而不是使用从 AWS_REGION 派生的配置文件。
• 新增 crossSessionInbound 和 dialogExpiry 设置：发送至以绕过权限方式运行的会话的跨会话消息会等待你的批准，而发往其他会话的消息将自动投递。
• 新增沙箱凭据脱敏选项：针对结构化环境变量值提供 extract 和 onExtractNoMatch；针对 JWT 感知型脱敏提供带有 maskClaims 的 decode: "jwt"；并为 AWS SigV4 重签名提供 awsPairs/sigv4。这些选项需要 network.tlsTerminate，且仅接受来自用户设置、托管设置或 --settings 设置的配置。
• 新增跨会话 SendMessage：Claude Code 会话现在可以在你的任意机器之间相互发送消息，并可通过 ListAgents 发现其他会话（macOS 和 Linux）。
• 修复了超过 200 个字符的项目路径在共享的净化前缀下错误解析到其他项目会话目录的问题；会话列表、重命名、分叉、删除和 /resume 不再跨越项目。
• 修复了当写入队友收件箱实际失败时，SendMessage 仍报告“Message sent”的问题；投递失败现在会显示为错误。
• 修复了在 Linux 和 macOS 上，带有尾随斜杠的沙箱文件系统拒绝条目（例如 denyRead: "~/.aws/"）可能被静默绕过的问题。
• 修复了 Bash 工具结果中从不显示沙箱违规详情的问题；Claude 现在可以看到哪个文件或网络访问被拒绝，以及原因。
• 修复了在一轮处理中途连接的 MCP 工具会被推迟用于工具搜索、且其名称未告知模型的问题。
• 修复了在多个项目中安装同一个插件时，插件安装记录可能被静默损坏的问题。
• 修复了在粘贴内容过期或占位符编号冲突时，恢复或还原的粘贴内容偶尔附加错误数据或静默丢失文本的问题。
• 修复了 Wayland 上“选中即复制”有时无法写入剪贴板的问题；两次选区写入不再发生竞争。
• 修复了反馈调查在长会话中分享转录记录可能静默失败的问题；分享失败现在会显示错误，而非成功消息。
• 修复了在冷启动且登录令牌过期时，Remote Control 自动启动偶发因“Remote credentials fetch failed”失败的问题。
• 修复了 Remote Control 和 SDK 客户端在执行 /clear 及其他无输出命令后显示空白“(no content)”消息的问题。
• 修复了在服务器会话过期后重新创建的 Remote Control 会话，会将此前的本地对话历史上传到新会话的问题。
• 改进全屏模式：在多次压缩上下文后，滚动缓冲区将保留完整的压缩前历史记录，而不再只保留最近一个区间。
• 改进 Remote Control：已连接的 Web 和移动端客户端现在可看到压缩进度及压缩后的边界，而不再只经历无提示暂停；/clear 重置也会同步至已连接客户端。
• 改进 Remote Control：连接失败现在会显示包含详细信息和快速重连入口的持续性失败提示，而不再仅显示持续 8 秒的提示消息。
• 移除了每个会话最多创建 200 个子 Agent 的限制；长时间运行的会话不再拒绝新 Agent（并发和深度限制仍然适用）。
• 修改托管设置：当组织设置未发生变化时，重新登录或切换组织后不再重复显示批准提示。
• 修改反馈调查的转录记录分享：在征得你的同意后，现在还会上传最后一次请求的模型设置——系统提示词（其中包括你的 CLAUDE.md 指令）、工具定义和模型参数。机密信息仍会像之前一样被脱敏；如果分享内容过大，这些字段会被优先移除。
• 修改 Bash 工具说明：始终明确命令输出会显示给模型，但不一定会可靠地显示给用户。
• 修改恢复的粘贴内容占位符编号：在接受并插入输入框时将重新编号。
• 修改 Remote Control：在压缩或 /resume 后创建新会话时，将归档过期的服务器会话，而不再让失效会话继续显示在列表中。
• [VSCode] 修复了连接失败后扩展仍将 Remote Control 显示为已连接的问题。
• 修复了用户关闭 Remote Control 后恢复会话时仍会静默重新连接 Remote Control 的问题（涉及 --resume、SDK 主机和 VS Code 扩展）。
• [VSCode] 修复了在显式启用时，会话未遵循 remoteControlAtStartup 设置的问题。

1. Releases
2. v2.1.224

Compare

Sorry, something went wrong.

No results found

What's changed

• Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans
• Added archive plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning
• Added a cancel-and-confirm step when removing an unavailable paste changes a command's text
• Added ANTHROPIC_BEDROCK_REGION_PREFIX env var for Bedrock to prefer a specific cross-region inference profile over the AWS_REGION-derived one
• Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
• Added sandbox credential-masking options: extract and onExtractNoMatch for structured env values, decode: "jwt" with maskClaims for JWT-aware masking, and awsPairs/sigv4 for AWS SigV4 re-signing; these need network.tlsTerminate and are honored only from user, managed, or --settings settings
• Added cross-session SendMessage: Claude Code sessions can now message each other, on any of your machines, with ListAgents to discover them (macOS and Linux)
• Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and /resume no longer cross projects
• Fixed SendMessage reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors
• Fixed sandbox filesystem deny entries written with a trailing slash (e.g. denyRead: "~/.aws/") being silently bypassable on Linux and macOS
• Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why
• Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model
• Fixed plugin install records being silently corrupted when the same plugin is installed in multiple projects
• Fixed recalled or restored paste content occasionally attaching wrong data or silently losing text when the paste had aged out or placeholder numbers collided
• Fixed copy-on-select on Wayland sometimes not reaching the clipboard; the two selection writes no longer race
• Fixed the feedback survey's transcript share silently failing on long sessions; a failed share now shows an error instead of a success message
• Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token
• Fixed Remote Control and SDK clients showing a blank "(no content)" message after /clear and other output-less commands
• Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session
• Improved fullscreen mode to keep the full pre-compaction history in scrollback across repeated compactions, instead of only the most recent interval
• Improved Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary instead of a silent pause; /clear resets now propagate to attached clients
• Improved Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut, instead of only an 8-second toast
• Removed the 200-subagent-per-session spawn cap; long-running sessions no longer refuse new agents (concurrency and depth limits still apply)
• Changed managed settings: the approval prompt no longer re-appears after re-login or org switching when the organization's settings are unchanged
• Changed the feedback-survey transcript share: with your consent it now also uploads the last request's model settings — the system prompt (which includes your CLAUDE.md instructions), tool definitions, and model parameters. Secrets are redacted as before, and these fields are dropped first if the share is too large
• Changed the Bash tool description to always note that command output is displayed to the model, not reliably to the user
• Changed recalled paste placeholder numbers to renumber when accepted into the input
• Changed Remote Control to archive the stale server session instead of leaving a dead one listed when a fresh session is minted after compaction or /resume
• [VSCode] Fixed the extension showing Remote Control as connected after the connection failed
• Fixed a session resume silently reconnecting Remote Control after the user turned it off (--resume, SDK hosts, and the VS Code extension)
• [VSCode] Fixed sessions not honoring remoteControlAtStartup when explicitly enabled

You can’t perform that action at this time.