ClaudeUpdates.dev
Update Claude Code
ClaudeUpdates.dev
357 releases|Latest v2.1.224|Last Update Aug 07, 2026
Update Claude Code
v2.1.223Older
2.1.222
2.1.223
2.1.224
2.1.223
2.1.224
← Back to all releases

v2.1.224 Claude Code Release Notes

Aug 7, 2026Source: Anthropic changelog
Claude's Analysisby Sonnet 4.6
Full Analysis

Cross-session SendMessage/ListAgents let Claude sessions talk across machines; Team/Enterprise can self-host runners. Also fixes long paths leaking sessions across projects.

Changes
31
Total Changes (vs Average)
2.6×
Version Type
Patch
Release Focus
Mixed
Day Since Prior Release
1
Release # This Month
#4 of 4
Bug Fix Ratio
48%
Post-Release Edits
—
Change Category
Ecosystem Impact
Plugins/Skills has surfaced in 9 of the last 10 releases; this one adds zip-based plugin installs with SHA-256 pinning — a steady push to make plugin distribution easier and more trustworthy.
Key Themes
6Multi-agent capabilities ship|11Session integrity & sandbox security fixes|8Remote Control reliability & UX pass|6Behavior changes & data-sharing scope expands
May Help If You've Noticed
Your session list or /resume opened a different project's history unexpectedly
A message you sent to another Claude session looked sent but never arrived
The feedback survey said your transcript shared successfully but it actually failed
Remote Control kept showing 'connected' in VS Code after the link actually dropped
Remote Control got stuck on a cold start failing to fetch credentials

Changes in Claude Code v2.1.224

Added7 changes

  • •Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans
  • •Added archive plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning
  • •Added a cancel-and-confirm step when removing an unavailable paste changes a command's text
  • •Added ANTHROPIC_BEDROCK_REGION_PREFIX env var for Bedrock to prefer a specific cross-region inference profile over the AWS_REGION-derived one
  • •Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver
  • •Added sandbox credential-masking options: extract and onExtractNoMatch for structured env values, decode: "jwt" with maskClaims for JWT-aware masking, and awsPairs/sigv4 for AWS SigV4 re-signing; these need network.tlsTerminate and are honored only from user, managed, or --settings settings
  • •Added cross-session SendMessage: Claude Code sessions can now message each other, on any of your machines, with ListAgents to discover them (macOS and Linux)

Improved3 changes

  • •Improved fullscreen mode to keep the full pre-compaction history in scrollback across repeated compactions, instead of only the most recent interval
  • •Improved Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary instead of a silent pause; /clear resets now propagate to attached clients
  • •Improved Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut, instead of only an 8-second toast

Fixed15 changes

  • •Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and /resume no longer cross projects
  • •Fixed SendMessage reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors
  • •Fixed sandbox filesystem deny entries written with a trailing slash (e.g. denyRead: "~/.aws/") being silently bypassable on Linux and macOS
  • •Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why
  • •Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model
  • •Fixed plugin install records being silently corrupted when the same plugin is installed in multiple projects
  • •Fixed recalled or restored paste content occasionally attaching wrong data or silently losing text when the paste had aged out or placeholder numbers collided
  • •Fixed copy-on-select on Wayland sometimes not reaching the clipboard; the two selection writes no longer race
  • •Fixed the feedback survey's transcript share silently failing on long sessions; a failed share now shows an error instead of a success message
  • •Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token
  • •Fixed Remote Control and SDK clients showing a blank "(no content)" message after /clear and other output-less commands
  • •Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session
  • •[VSCode] Fixed the extension showing Remote Control as connected after the connection failed
  • •Fixed a session resume silently reconnecting Remote Control after the user turned it off (--resume, SDK hosts, and the VS Code extension)
  • •[VSCode] Fixed sessions not honoring remoteControlAtStartup when explicitly enabled

Changed5 changes

  • •Changed managed settings: the approval prompt no longer re-appears after re-login or org switching when the organization's settings are unchanged
  • •Changed the feedback-survey transcript share: with your consent it now also uploads the last request's model settings — the system prompt (which includes your CLAUDE.md instructions), tool definitions, and model parameters. Secrets are redacted as before, and these fields are dropped first if the share is too large
  • •Changed the Bash tool description to always note that command output is displayed to the model, not reliably to the user
  • •Changed recalled paste placeholder numbers to renumber when accepted into the input
  • •Changed Remote Control to archive the stale server session instead of leaving a dead one listed when a fresh session is minted after compaction or /resume

Removed1 change

  • •Removed the 200-subagent-per-session spawn cap; long-running sessions no longer refuse new agents (concurrency and depth limits still apply)

← v2.1.223
All Releases