Claude Code v2.1.314 — cumulative update. Added: `permissions.blockWritesOutsideWorkingDirectories` (Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode), an optional `groups` list on Claude apps gateway upstreams (only developers in the listed IdP groups are routed to that upstream, including on failover), `guardrail_trace` on gateway Bedrock upstreams (logs which Amazon Bedrock guardrail filter fired, without the matched text), and idle compaction in VS Code and Claude Desktop's Code tab (a 200K+ token conversation left idle is summarized, and the summary is used on the next message once the prompt cache has expired). Fixed: repeated "Invalid effort level" failures when an admin caps a model's effort (Claude Code now lowers the effort, retries and reports the level), `claude -p` exiting 0 with no output when startup failed (now prints the error and exits 1), Bedrock sessions with many images and `/compact` failing with "400 Input is too long.", Foundry sessions failing when the resource lacks a default Sonnet, Opus or Haiku deployment (falls back to an older model of that family), TLS `UNABLE_TO_GET_ISSUER_CERT` errors, MCP servers wrongly showing "needs authentication", `claude mcp logout` reporting success without removing the sign-in, `claude ultrareview` and `claude remote-control` asking the workspace trust question in CI, PreCompact hook output making compaction fail (each hook's output is now cut at 10,000 characters), hooks matching Bash not running on Monitor-started shell commands, settings files excluded with `--setting-sources` still supplying settings, sandbox protections not applying to a worktree entered by `claude -p --resume`, plus several gateway, Remote Control and streaming Markdown table display fixes.
github.com