Locking Down Write Boundaries in Claude Code

Explore the new /claude-api latency-optimize command in Claude Code 2.1.319, which tests faster API settings against your evals to reduce latency bottlenecks.

In Claude Code 2.1.319, auto mode removes its automatic client-side fallback when server safety checks fail, meaning headless pipelines behind gateways can now fail closed with exit code one. Learn how to diagnose your setup using /status, configure the CLAUDE_CODE_AUTO_MODE_SERVER environment variable, and prepare your CI workflows.

Discover how Claude Code 2.1.319 prevents unattended agents from stalling with the new permissions.denyInsteadOfPrompting setting. Learn how to configure it properly alongside explicit allow rules, and catch up on smaller quality-of-life additions like background MCP tasks.

Learn how Claude Code 2.1.318 expands deniedMcpServers URL matching to block Anthropic-provided servers and cloud connectors. We cover configuring organizational denylists, verifying policies with claude mcp list, and several smaller MCP quality-of-life fixes.

Discover how Claude Code 2.1.318 lets you pass a custom effort parameter to $.model.fork, cutting down latency and token burn on lightweight mod tasks like handoff briefs and summaries. We also break down other key updates in this release, including cross-account IAM role assumption on the apps gateway and a fix for false-success exits in non-interactive mode.

Learn how Claude Code 2.1.318 prevents unattended CI and headless runs from failing silently due to expired logins. We cover new expiration fields in claude auth status, warnings in claude -p, and switching to setup-token for permanent machine credentials.

Learn how Claude Code version 2.1.317 introduces onFailure: "block" for programmatic Agent SDK hook callbacks, preventing unattended agents from failing open on unexpected errors. We also cover protections against account email leakage in tools, isolated transcripts for nested headless sessions, and full-file re-reading behavior.

Learn how to use Claude Code's blockWritesOutsideWorkingDirectories setting to lock down file write boundaries during unattended or headless runs across every permission mode.

In Claude Code 2.1.316, server-managed settings for Team and Enterprise logins now apply automatically without an approval prompt, alongside verification checks for cached settings. We examine how this impacts developer visibility into remote hooks and shell-command settings, and share tips for auditing your active configurations with claude doctor. Show Notes Releases · anthropics/claude-code - GitHub: https://github.com/anthropics/claude-code/releases

Learn how to decouple worker reasoning from main sessions using the new CLAUDE_CODE_SUBAGENT_EFFORT environment variable in Claude Code 2.1.316. We also cover disabling ultrathink, blocking external file writes, and the timeline for Opus 4.8 fast mode deprecation.