docs: Claude Code v2.1.214 - Security permission fixes, EndConversation tool, OTel enhancements

[claude-yolo]

Night shift report

WHY THIS MATTERS: v2.1.214 is a substantial security-focused release. Multiple permission-check bypasses were closed — a dir/** allow-rule bug that let writes escape the intended directory, a Windows PowerShell 5.1 bypass, and bash checks that failed open on file-descriptor redirects, very long commands (>10k chars), zsh subscripts, and certain help/man commands. All of these mean that prior versions could auto-approve tool calls that should have prompted. Enterprise deployments using strict allow-rules should treat this as an important upgrade. On top of the security hardening, a new EndConversation tool lets Claude terminate sessions with abusive users, new OTel message-level correlation attributes land for teams monitoring at scale, and a raft of Windows/PowerShell and background-session reliability fixes ship.

HIGHLIGHTS:

• SECURITY: Permission bypass fixes (multiple) — dir/** allow rules like Edit(src/**) incorrectly auto-approved writes to nested dir/ anywhere in the tree; PowerShell 5.1 had a check bypass; bash checks failed open on fd-redirects, commands >10k chars, zsh subscripts, and some help/man forms. All now prompt instead of running silently.
• EndConversation tool — Claude can now terminate sessions with highly abusive users or jailbreak attempts (mirrors claude.ai behavior since 2025; links to Anthropic research post)
• Fast mode behind LLM gateways — new CLAUDE_CODE_SKIP_FAST_MODE_NETWORK_ERRORS and CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK env vars; extensive new docs covering all the proxy/gateway edge cases where the fast-mode availability check breaks
• OTel: message-level correlation — message.uuid, client_request_id, and tool_source added to log events; new CLAUDE_CODE_OTEL_CONTENT_MAX_LENGTH env var to configure the 60 KB truncation limit
• Docker permission prompts — docker commands with daemon-redirect flags (--url, --connection, --identity, Podman remote) now require approval
• Background session reliability sweep — fixed: idle sessions keeping daemon alive, claude rm not working on idle sessions, non-git-folder sessions not deletable from agent view, failed reopen when an unreadable folder exists in session store
• Windows/PowerShell fixes — UTF-16LE output from > redirects, UnicodeDecodeError/UnicodeEncodeError in Python scripts, where.exe/fc.exe/diff.exe false errors, stdin-blocked child processes, stream-json exit drain now scales with queued bytes
• Memory frontmatter — ISO modified timestamp now added when memory files are saved
• Periodic heartbeat for long-running tool calls that previously went silent
• Reasoning effort in subagentStatusLine — custom agent rows can now render model and effort

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning