Fix: "Write(src/**) is not matched by file permission checks" in Claude Code
Claude Code only consults Edit(path) and Read(path) rules. A Write(src/**) allow or deny rule is accepted and then silently ignored. Use Edit() instead.
Tag: claude-code
83 posts · Page 2 of 9
Fix: A Long MCP Tool Call Gets Auto-Backgrounded After Two Minutes Mid-Task
Claude Code 2.1.212+ moves any main-conversation MCP tool call still running at two minutes into a background task. Set CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS=0 to stop it, raise the threshold to move the line, or send progress notifications from the server.
Fix: .mcp.json servers never start because the workspace is marked untrusted
Project MCP servers stuck at Pending approval are not misconfigured. Run claude interactively in the folder, accept the workspace trust dialog, then approve the servers.
Fix: a Windows path in your agent config silently turns into a tab, a newline, or a Chinese character
Folder names starting with t, b, n, r or u make a Windows path parse cleanly as JSON and still resolve wrong. Use forward slashes or double every backslash.
How to Run a Background Coding Agent That Auto-Commits and Opens a Draft PR When It Finishes
Two ways to make a coding agent land its own work: Claude Code 2.1.198+ background sessions commit, push, and open a draft PR from their worktree with no config, or wrap any agent CLI in a git worktree plus gh pr create --draft. Covers the worktree guardrails, the subagent-vs-session distinction, the GITHUB_TOKEN trigger trap, and why there is still no off switch.
How to Stream Nested Subagent Output From a Headless Claude Code Run
By default a headless Claude Code run emits only tool_use and tool_result blocks from its subagents, so the delegated reasoning is invisible. Pass --forward-subagent-text (Claude Code 2.1.211+) to get subagent text and thinking in the stream-json output, and demultiplex it by parent_tool_use_id.
Claude Code 2.1.219 Reopens Nested Subagents, Three Layers Deep
Version 2.1.219 raises the default subagent spawn depth from 1 to 3, adds a workflowSizeGuideline settings key, and ships a fail-closed sandbox network allowlist.
How to Lock Down a Coding Agent's Network Egress With a Strict Host Allowlist
Claude Code, Cursor, and the GitHub Copilot coding agent all ship host allowlists for outbound traffic, and all three default to something looser than you want. The exact settings keys, a policy you can copy, and the four surfaces the allowlist does not cover.
Migrate an MCP Server from SSE to Streamable HTTP (2026 Checklist)
The legacy HTTP+SSE transport used two endpoints and a sticky connection. Streamable HTTP uses one. Here is the step-by-step migration for the TypeScript and Python SDKs, the client configs you have to repoint, and the proxy buffering gotcha that makes the new endpoint look broken.
Claude Code 2.1.218 Runs /code-review as a Background Subagent
Version 2.1.218 moves /code-review off your main conversation into a background subagent, and fork-context skills now background by default. Here is what changed and how to opt out.