What’s New in Claude Code 2.1.314: Block Writes Outside Your Working Folder

Claude Code 2.1.314 adds a setting I’ve wanted for a while. Last time I covered 2.1.312.

Highlights

• permissions.blockWritesOutsideWorkingDirectories: Write, Edit and NotebookEdit refuse any path outside the working directories, in every permission mode.
• Claude apps gateway: upstreams can be limited to developers in specific IdP groups, including on failover, and Bedrock upstreams get guardrail_trace to log which guardrail fired without the matched text.
• Idle compaction in VS Code and the Claude Desktop Code tab: a 200K+ token conversation left idle gets summarized, and the summary is used if the prompt cache has expired.
• Fixes: claude -p now prints the error and exits 1 when startup fails, sessions recover from “Invalid effort level” caps, Bedrock sessions with many images compact instead of failing, and TLS errors from cross-signed renewed root certificates are fixed.

Review before you install: read the release notes and any command yourself before you run it, back up your config, and try it somewhere you can afford to break first.

My take

One caveat: the notes name Write, Edit and NotebookEdit, not shell commands, so the setting doesn’t sandbox everything. Still, it’s a great default for keeping an agent in its lane.

God Bless, and Use the Source!

References & Further Reading

• Claude Code v2.1.314 release notes (GitHub)
• What’s New in Claude Code 2.1.312 (EtherNinja)