docs: Claude Code v2.1.246 - Auto mode UI editor, disableDesktopLocalSessions, 50+ bug fixes

[claude-yolo]

Night shift report

WHY THIS MATTERS: v2.1.246 is a substantial quality-of-life release with two new features worth calling out explicitly — admins can now edit auto mode classifier rules directly from /permissions without touching a settings file, and a new disableDesktopLocalSessions MDM key lets organizations lock Code sessions to SSH/cloud only. On top of that, 50+ bug fixes hit a wide surface: MCP stability, plugin system, fullscreen transcript rendering, SSH reliability, background session lifecycle, and several security-relevant permission-check fixes. Claude Desktop also shipped v1.37937.0 with 8 new 3P config keys and major SSH and Cowork reliability improvements.

HIGHLIGHTS:

• Auto mode tab in /permissions (v2.1.246): users can now view and edit classifier allow/soft_deny/hard_deny/environment rules from the permissions dialog UI — no settings file editing required. Documented in auto-mode-config.md and permissions.md.
• disableDesktopLocalSessions managed setting: new MDM-only key that grays out the "Local" environment in the Desktop Code tab, forcing users to SSH or cloud sessions. Pairs with sshConfigs/sshHostAllowlist. Documented in settings-reference.md and desktop.md.
• Wildcard Bash rule warning + docs overhaul: startup now warns when an allow rule has * before the subcommand (e.g. Bash(git * main) matches git -c core.fsmonitor=<script> diff main). The permissions wildcard docs were rewritten with a full match/no-match table and three explicit matching rules.
• Office agents disabled_features key: admins can now disable individual add-in features (skills.authoring, thumbs, addin.access, file.upload, web_search) org-wide or per-user via manifest/Entra/bootstrap. Pairs with mcp_servers to substitute a private search provider.
• Claude Desktop v1.37937.0 (3P) new config keys: mcpToolTimeoutSec, organizationInstructions (org-wide system prompt appendage up to 3k chars), skipWebFetchPreflight, inferenceModelPricingEnabled/Multiplier/Pricing (cost estimates at Anthropic list price), userPluginMarketplacesEnabled, userPluginUploadsEnabled. builtinToolPolicy now accepts argument-scoped rules like Bash(curl *).
• MCP fixes: tool arguments sent as JSON strings when schema was empty {} (now fixed); interrupted tool calls in headless sessions reported as "completed with no output" (now reports explicit interrupted error); remote MCP servers now auto-reconnect after dropped connections.
• Background session lifecycle fixes: sessions no longer fail to open after 45s when starting directory was deleted, machine slept, or host was slow; EACCES race condition during npm reinstall fixed; git worktrees under .claude/worktrees/ no longer reaped when an old background session record pointed at them.
• SSH reliability (Desktop): fixed connections failing with 1Password identity file setups; messages delivered after reconnect; idle sessions no longer show false "Lost connection"; reconnect prompts for password/OTP when needed.
• Permission check security fixes: Bash checks now always require approval for commands with dangling &&/||; telemetry no longer carries API key to third-party ANTHROPIC_BASE_URL hosts; apiKeyHelper JWT expiry now refreshes before sending instead of hitting a 401.
• Cowork (Desktop): legacy .doc/.xls file support added; dictation in Chrome side panel; organizationInstructions support; cost estimate UI behind inferenceModelPricingEnabled.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning