# Claude Code v2.1.224 发布：新增自托管环境、跨会话消息与多项修复

- 来源：Claude Code：GitHub Releases（RSS）
- 作者：ashwin-ant
- 发布时间：2026-08-07 12:00
- AIHOT 分数：50
- AIHOT 链接：https://aihot.virxact.com/items/cmsigyy811e5yronkr2d8ecdx
- 原文链接：https://github.com/anthropics/claude-code/releases/tag/v2.1.224

## AI 摘要

Claude Code v2.1.224 发布，新增自托管环境功能，可将自有机器或容器作为 Team 和 Enterprise 计划下 Web、移动端及桌面会话的运行场所。该版本还支持跨会话消息互发、从 HTTPS zip 安装插件，并移除了每会话 200 个子智能体的生成上限。此外修复了沙箱文件系统拒绝规则可被绕过、长项目路径串会话等多项问题。

## 正文

What's changed

Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans

Added archive plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning

Added a cancel-and-confirm step when removing an unavailable paste changes a command's text

Added ANTHROPIC_BEDROCK_REGION_PREFIX env var for Bedrock to prefer a specific cross-region inference profile over the AWS_REGION-derived one

Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver

Added sandbox credential-masking options: extract and onExtractNoMatch for structured env values, decode: "jwt" with maskClaims for JWT-aware masking, and awsPairs/sigv4 for AWS SigV4 re-signing; these need network.tlsTerminate and are honored only from user, managed, or --settings settings

Added cross-session SendMessage: Claude Code sessions can now message each other, on any of your machines, with ListAgents to discover them (macOS and Linux)

Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and /resume no longer cross projects

Fixed SendMessage reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors

Fixed sandbox filesystem deny entries written with a trailing slash (e.g. denyRead: "~/.aws/") being silently bypassable on Linux and macOS

Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why

Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model

Fixed plugin install records being silently corrupted when the same plugin is installed in multiple projects

Fixed recalled or restored paste content occasionally attaching wrong data or silently losing text when the paste had aged out or placeholder numbers collided

Fixed copy-on-select on Wayland sometimes not reaching the clipboard; the two selection writes no longer race

Fixed the feedback survey's transcript share silently failing on long sessions; a failed share now shows an error instead of a success message

Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token

Fixed Remote Control and SDK clients showing a blank "(no content)" message after /clear and other output-less commands

Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session

Improved fullscreen mode to keep the full pre-compaction history in scrollback across repeated compactions, instead of only the most recent interval

Improved Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary instead of a silent pause; /clear resets now propagate to attached clients

Improved Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut, instead of only an 8-second toast

Removed the 200-subagent-per-session spawn cap; long-running sessions no longer refuse new agents (concurrency and depth limits still apply)

Changed managed settings: the approval prompt no longer re-appears after re-login or org switching when the organization's settings are unchanged

Changed the feedback-survey transcript share: with your consent it now also uploads the last request's model settings — the system prompt (which includes your CLAUDE.md instructions), tool definitions, and model parameters. Secrets are redacted as before, and these fields are dropped first if the share is too large

Changed the Bash tool description to always note that command output is displayed to the model, not reliably to the user

Changed recalled paste placeholder numbers to renumber when accepted into the input

Changed Remote Control to archive the stale server session instead of leaving a dead one listed when a fresh session is minted after compaction or /resume

[VSCode] Fixed the extension showing Remote Control as connected after the connection failed

Fixed a session resume silently reconnecting Remote Control after the user turned it off (--resume, SDK hosts, and the VS Code extension)

[VSCode] Fixed sessions not honoring remoteControlAtStartup when explicitly enabled