Claude Code 2.1.224

公司有內網程式、特殊硬體或私有資料，卻想從網頁、手機或桌面版繼續叫 Claude 幫忙嗎？Team 與 Enterprise 方案現在可執行 claude self-hosted-runner，把你自己的電腦或容器變成可執行工作階段的地方。像把家裡的一台工作桌登記進共享辦公室：人仍可從不同入口進來，真正動手的地方則留在你準備好的機器上。

拿到公司提供的外掛 ZIP 檔，現在不必先架 Git 或 npm。新的 archive plugin source 可透過 HTTPS 從 ZIP 安裝 plugin（外掛，替 Claude 加上功能的小元件），還能附上 SHA-256 指紋來核對下載檔。這像到售票亭取票：HTTPS 是領票窗口，SHA-256 指紋像票券防偽碼，對得上才確認票沒有被調包。

命令列裡貼過一段文字又想復原，最怕原本的命令被悄悄換掉。現在移除不可用的 paste（貼上內容）會改變命令文字時，先提供取消與確認；叫回或還原的舊貼上內容，也不會因內容過期或預留編號撞號而接錯資料、漏字。被接受回輸入框的預留編號會重新編號，所以同一段內容不會因舊號碼混在一起造成誤接了。像編輯文件前先跳出變更預覽，按下確認才落筆。

同一個 AWS 帳號有多個區域可用時，Bedrock 不必只跟著 AWS_REGION 猜該用哪個跨區推論設定。新增環境變數（environment variable，程式啟動時讀取的設定值）ANTHROPIC_BEDROCK_REGION_PREFIX，可讓 Bedrock 優先選指定的 cross-region inference profile。這像導航本來只看你所在城市，現在可先告訴它要走哪條跨城主幹道。

你在桌機跑一個任務、筆電跑另一個時，現在可用 ListAgents 找到其他工作階段，再以 cross-session SendMessage 互傳訊息，macOS 與 Linux 都可用。若收件工作階段正以略過權限確認的方式執行，crossSessionInbound 與 dialogExpiry 設定會先把訊息扣住等你核准；其他工作階段則自動送達。送入隊友收件匣真的失敗時，也會如實報錯，不再假稱已送出。像辦公室郵件分流：普通收件桌直接投遞，略過確認的工作站則先送進你的待核准匣。

要讓 Claude 在 sandbox（沙盒，隔離程式可碰範圍的保護區）裡處理含登入資料的環境變數時，新增的遮罩選項可從結構化值擷取資料、在找不到時處理，或解讀 JWT 後遮住指定欄位；AWS 簽名也可用 awsPairs、sigv4 重新簽署。它們需要 network.tlsTerminate，且只信任使用者、受管理或 --settings 設定。另一方面，denyRead: "~/.aws/" 這類尾端斜線不再可繞過；Bash 被拒絕存取時，Claude 會看見哪個檔案或網路請求被擋與原因。像寄出資料前遮住帳號的文件副本；若傳送被拒，退件單會列出哪個檔案或網路請求及原因。

用 Remote Control（遠端控制，從網頁或手機接上 Claude Code 工作階段）時，冷啟動碰上過期登入 token（授權令牌，驗證身分用的短記號）不再偶發自動啟動失敗。連線失敗會持續顯示原因與重新連線捷徑，不只閃八秒提示；VS Code 也不會在失敗後假裝已連上。/clear 等沒有輸出的命令不再留下一則空白訊息，清空會同步到已連線的網頁與手機；壓縮進度與壓縮後的分界也會顯示。伺服器工作階段過期後重建時，舊的本機對話不會上傳進新工作階段，過期的伺服器紀錄會封存；你手動關掉 Remote Control 後恢復工作階段也不會私自重連，明確開啟 remoteControlAtStartup 時則會被 VS Code 遵守。像遠端會議室的門牌、白板和舊錄影都各自對上，不會把上一場的人帶進來。

長對話反覆 compaction（壓縮，把早期對話濃縮以騰出空間）後，以前全螢幕捲動區只保留最近一段壓縮前內容。現在 scrollback（可向上捲看的終端機歷史）會保住完整的壓縮前歷史，即使已經連續壓縮多次，也能一路往回看。你回頭找最早的指令、討論或決定時，不用只看到最後一次壓縮前的零碎片段。像錄音檔的時間軸保留每一段，即使整理過多次也能倒回最早的錄音。

在公司帳號重新登入或切換組織後，若 managed settings（受管理設定，由組織統一指定的設定）完全沒變，Claude Code 不會再重複跳出核准提示。只有組織的設定內容完全不變才適用；規則更新時仍是另一回事。這不是放寬新設定，而是記得你已看過同一份規則。像文件只換了封面、內容完全沒有變，也不必重新簽同一份同意書。

你叫 Claude 執行指令後，畫面上未必會可靠地顯示每一行輸出；但模型本身能讀到。Bash tool（Bash 工具，讓 Claude 執行終端機指令的工具）說明現在固定寫明這件事，避免它把「我看到了」誤當成「你也看到了」。這是工具說明的調整，提醒模型不要以為螢幕上的呈現一定同步。像劇院後台的提詞稿：主持人看得到完整內容，觀眾席的字幕卻可能沒跟上。

Need Claude to work where your internal software, special hardware, or private data already live? Team and Enterprise users can run claude self-hosted-runner to make their own machine or container a place where Claude Code web, mobile, and desktop sessions run. Think of registering your workbench in a shared office: you can enter through different doors, while the actual work stays on the machine you prepared.

When your company gives you a plugin ZIP, you no longer need Git or npm first. The new archive plugin source installs a plugin from a ZIP over HTTPS and can pin its SHA-256 digest to check the downloaded file. It is like collecting a ticket at the box office: HTTPS is the collection window, and the SHA-256 digest is the ticket's security code that confirms it was not swapped.

When you restore pasted text in a command, you do not want the command itself quietly changed. If removing an unavailable paste would change that text, Claude Code now asks you to cancel or confirm. Recalled or restored paste content also avoids wrong attachments or lost text when it has aged out or placeholder numbers collide; accepted placeholders are renumbered. Like reviewing tracked changes before they are applied.

If your AWS account can use several regions, Bedrock no longer has to infer the cross-region inference profile solely from AWS_REGION. Set the new environment variable ANTHROPIC_BEDROCK_REGION_PREFIX to prefer a particular profile. It is like a navigation app that once looked only at your current city and can now be told which intercity route to prefer.

With one task on your desktop and another on your laptop, sessions can now find each other through ListAgents and exchange cross-session SendMessage messages on macOS and Linux. Messages sent into a session running with bypassed permissions can be held for your approval through crossSessionInbound and dialogExpiry; other sessions receive them automatically. A failed delivery now reports an error instead of pretending it succeeded. It is like office mail sorting: ordinary desks receive mail directly, while a workstation running with checks bypassed sends it to your approval tray first.

When Claude handles environment values containing credentials inside the sandbox, new masking options can extract structured values, handle no-match cases, or decode JWTs and hide chosen claims; awsPairs and sigv4 can re-sign AWS requests. They require network.tlsTerminate and only honor user, managed, or --settings settings. A trailing slash in denyRead: "~/.aws/" can no longer bypass a filesystem denial, and Bash results now tell Claude which file or network access was denied and why. It is like redacting account numbers from a document copy before sending it; a rejection slip then names the file or network request and the reason.

Remote Control, which attaches web or mobile to a Claude Code session, is less misleading around failures and resets. A cold start with a stale login token no longer intermittently fails; failures persist with details and a reconnect shortcut, and VS Code no longer claims a failed connection is live. /clear no longer creates a blank message and now reaches attached clients; they also see compaction progress and its boundary. Recreated server sessions do not upload prior local history, stale server sessions are archived, resuming does not secretly reconnect after you turned it off, and VS Code honors an explicit remoteControlAtStartup. Like a remote meeting room whose sign, whiteboard, and old recording all point to the right meeting.

After repeated compaction, which condenses earlier conversation to make room, fullscreen scrollback once kept only the most recent pre-compaction interval. Fullscreen now retains the full pre-compaction history across repeated compactions, so you can scroll all the way back. It is like an audio-recording timeline that preserves every segment: even after being organized many times, you can rewind to the earliest recording.

After signing in again or switching organizations, Claude Code will not ask for approval again when the managed settings are unchanged. It is not relaxing a new setting; it remembers that you already reviewed the same rules. Like a document with a new cover but unchanged contents: there is no need to sign the same consent form again.

After Claude runs a command, its output is displayed to the model but may not reliably be displayed to you. The Bash tool description now always states that distinction, so Claude does not confuse “I saw it” with “you saw it too.” Like a theater's backstage prompt script: the presenter sees the full content, but subtitles for the audience may not have caught up.