anguishedturtle_

Claude Code 2.1.214 hardens Bash and PowerShell permission checks (fail-closed on file-descriptor redirects, a PowerShell 5.1 bypass fix, prompts for commands over 10,000 characters), adds the EndConversation tool, and adds permission prompts for docker daemon-redirect flags

Claude Code 2.1.214 is a security-hardening release for the permission system. It fixes single-segment dir/** allow rules like Edit(src/**) that auto-approved writes to nested dir/ folders anywhere in the tree, closes a permission-check bypass in Windows PowerShell 5.1 sessions, makes Bash checks fail closed on file-descriptor redirect forms, and now always prompts for commands over 10,000 characters and for zsh subscripts and modifiers used in [[ ]] comparisons. It adds the EndConversation tool so Claude can end sessions with highly abusive users or jailbreak attempts, and adds permission prompts for docker commands carrying daemon-redirect flags like --url and --connection. Other fixes cover a displaced background daemon deleting its successor's control socket, scheduled tasks refusing their own configured prompt as untrusted input, and memory frontmatter values being truncated at an inline #.