Claude Code 2.1.314 adds a setting that blocks writes outside the working directories in every permission mode
This release turns where the agent may write into a hard switch and fixes several issues that could make automation fail quietly.
// Key points
- Adds permissions.blockWritesOutsideWorkingDirectories: when on, Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode.
- Adds idle compaction to VS Code and Claude Desktop's Code tab: a 200K+ token conversation left idle is summarized, and the summary is used on the next message if the prompt cache has expired.
- Fixes claude -p exiting with code 0 and no output when startup failed; it now prints the error and exits 1. When an admin caps a model's effort, it now lowers the effort, retries and says which level it uses.
- Each PreCompact hook's output is now cut at 10,000 characters, so compaction no longer fails or repeats.
Builder's takeTeams running claude -p in CI should upgrade first: until now a failed startup still returned 0, so the pipeline counted a run that did nothing as a success. I would put the outside-the-working-directory write block into the team's managed settings and, together with the hook concurrency cap from the 10-28 issue, treat it as the baseline that keeps agents in bounds even in auto mode.
// Background · from #Coding agents
Full timeline →- Oct 31 GitHub Actions workflow lockfiles are generally available: keep readable tag references while running only the locked commits, transitive dependencies included
- Oct 31 GitHub Agent Merge comes to pull requests: Copilot watches a PR in the cloud and fixes failing Actions workflows and merge conflicts
- Oct 31 Copilot Automations can now be shared by a team: they belong to the repository, bill the repository's owner and keep running if the creator leaves