release aidev SIG 3/5

Claude Code 2.1.187: sandbox credential blocking and org model restrictions

Adds a sandbox.credentials setting that stops sandboxed commands from reading credential files and secret env vars, plus org-level model restrictions enforced across the picker, --model, /model, and ANTHROPIC_MODEL. Fixes hung remote MCP tool calls and structured-output loops.

PUBLISHED2026-06-23
OBSERVED2026-08-11
AGE1mo
SOURCES1
  • New sandbox.credentials setting blocks sandboxed commands from reading credential files and secret environment variables
  • Org-configured model restrictions now apply to the model picker, --model, /model, and ANTHROPIC_MODEL, with a "restricted by your organization's settings" message
  • Mouse click support in select menus (permission prompts, /model, /config) in fullscreen mode
  • Fix: remote MCP tool calls hanging with no response for 5 minutes now abort with an error; override via CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT
  • Fix: --json-schema and workflow agent({schema}) — the model can no longer re-call StructuredOutput indefinitely after a successful call; follow-up turns reliably return structured output
  • Fix: --resume failing with "No conversation found" when the original -p run produced no model turns
  • Fix: Remote sessions taking ~2.7s longer to start after the agent proxy CA system-trust install
  • Fix: subagent depth tracking — resumed subagents restore original spawn depth, forked subagents count toward the cap
  • Fix: leaked agent worktree registrations — locked .git/worktrees/ entries from killed agents cleaned up automatically
  • Fix: pasted Korean/CJK text turning into mojibake on terminals delivering paste as per-byte extended-key events
  • Fix: background jobs stuck in "working" when the agent ended a turn without structured output
  • Fix: Cmd+click not opening URLs in fullscreen in Ghostty on macOS; claude --help missing --bg/--background
  • Improved: /install-github-app can install only the GitHub App and skip workflow/secret setup
  • [VSCode] Fix: extension unresponsive when resuming a large session
securityfeaturefix

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.