Self-hosted runners + cross-session messaging: enterprise integration gets teeth
Claude Code v2.1.224 — Self-Hosted Environments and Cross-Session Messaging
Original: v2.1.224
Importance: 自ホスト環境とクロスセッション機能追加は段階的改善だが、セキュリティ・スケーラビリティ向けバグ修正が複数含まれるため3相当。
Summary
Claude Code v2.1.224 released with major additions: self-hosted runner environments (Team/Enterprise), archive plugin installation via HTTPS with SHA-256 pinning, cross-session messaging (macOS/Linux), and enhanced sandbox credential-masking (JWT awareness, AWS SigV4 re-signing). Multiple critical bug fixes: long project paths no longer resolve to sibling sessions; SendMessage now correctly reports delivery failures; Wayland clipboard race condition fixed; MCP tools connecting mid-turn are properly announced; long sessions no longer fail feedback uploads; Remote Control reconnection UI improved with persistent error indicator. Subagent-per-session cap (200) removed.
Key Points
- Self-hosted runner environments support custom machines/containers (Team/Enterprise)
- Cross-session messaging enables sessions to communicate on any machine (macOS/Linux)
- Archive plugin source added for HTTPS-hosted ZIP plugin installation
- Project path resolution vulnerability fixed; no more cross-project session leaks
- SendMessage failure reporting corrected; credential-masking enhanced with JWT/SigV4
View developer notes (APIs, breaking changes, migration)
v2.1.224 introduces `claude self-hosted-runner` to register custom machines/containers as execution environments (Team/Enterprise plans). Plugin source expanded: `archive` type for HTTPS-hosted ZIP with optional SHA-256 pinning. Cross-session messaging via `SendMessage` with `ListAgents` discovery (macOS/Linux only). Sandbox credential masking: `extract`/`onExtractNoMatch` for structured env values, `decode: "jwt"` + `maskClaims` for JWT-aware masking, `awsPairs`/`sigv4` for AWS SigV4 re-signing (requires `network.tlsTerminate`, honored from user/managed/`--settings` only). Fixes: long (>200 char) project paths no longer cross-resolve to sibling session directories; `SendMessage` correctly reports write failures; sandbox deny entries with trailing slash bypass closed on Linux/macOS; MCP tools connecting mid-turn now announced; paste content corruption on recall/restore resolved; Wayland clipboard race eliminated; Remote Control reconnection shows persistent error with retry, removes 200-subagent spawn cap.
Source: https://github.com/anthropics/claude-code/releases/tag/v2.1.224
Outlet: Claude Code Releases
This article is an AI-generated summary (OpenAI GPT-4o-mini) of publicly available information from Anthropic, OpenAI, Google, Meta, Mistral, DeepSeek, Sakana, and other vendors. The original source URL is always provided in accordance with fair-use citation requirements. Summaries are AI-generated and may contain mistranslations or misinterpretations. Always verify details with the original source.