Claude Code 2.1.273 patches a permission bypass that could hide rm
It also forks remote-control sessions to the background, adds opt-in LLM-gateway headers, and stops auto-compact from firing at half your real context window.
Copy markdown
The bypass, and why you should update
In bypass and auto mode, Bash commands the permission checker couldn't fully analyze could skip the approval prompt under blockReadsOutsideWorkingDirectories, and a subshell could hide a dangerous rm. 2.1.273 closes both — update if you ever run Claude Code unattended.
Fork a remote-control session to the background
You can now fork a session started with `claude --remote-control` (or /remote-control) straight from the Claude app; the fork runs as a background session on your own machine. Branch a long remote run without blocking the original.
Auto-compact was firing at half your window
The context meter and auto-compact were counting advisor-tool turns at roughly twice their real size, tripping compaction at about half your true window. Fixed — tool-heavy sessions get their full context back.
Opt-in headers for your LLM gateway
Set CLAUDE_CODE_GATEWAY_HINT_HEADERS=1 and Claude Code sends x-claude-code-request-class, -agent-type, -prev-tool-durations and -compaction headers, so a gateway can route and meter by request type instead of guessing.
MCP disconnects stop being silent
When an MCP server drops mid-session and automatic reconnection gives up, you now get a notification pointing at /mcp — instead of its tools quietly vanishing from the session.