Claude Code v2.1.224 Adds Self-Hosted Runners, Cross-Session Messaging
Anthropic released Claude Code v2.1.224, a feature-packed update that introduces self-hosted environments, cross-session messaging, and a new plugin source, along with a heap of fixes for sandbox and remote-control issues.
Key Additions
- Self-Hosted Runners: The new
claude self-hosted-runnercommand turns your own machines or containers into a place where Claude Code web, mobile, and desktop sessions can run. Available on Team and Enterprise plans. - Archive Plugin Source: You can now install plugins from a zip over HTTPS without needing git or npm. Optional SHA-256 pinning is supported for security.
- Cross-Session Messaging: Claude Code sessions can now message each other across machines (macOS and Linux) with
SendMessage, and you can useListAgentsto discover available sessions. - Bedrock Region Prefix: New
ANTHROPIC_BEDROCK_REGION_PREFIXenv var lets you prefer a specific cross-region inference profile over the one derived fromAWS_REGION.
Beefed-Up Sandbox Credential Masking
The sandbox now supports more credential-masking options:
extractandonExtractNoMatchfor structured env valuesdecode: "jwt"withmaskClaimsfor JWT-aware maskingawsPairs/sigv4for AWS SigV4 re-signing
These options require network.tlsTerminate and are honored only from user, managed, or --settings settings.
Notable Fixes
- Fixed long (>200 char) project paths resolving to another project's session directory – session list, rename, fork, delete, and
/resumeno longer cross projects. - Fixed sandbox filesystem deny entries with trailing slashes (e.g.,
denyRead: "~/.aws/") being bypassed on Linux and macOS. - Sandbox violation details now appear in Bash tool results, so Claude sees which file or network access was denied and why.
- Fixed
SendMessagereporting success when writes to a teammate's inbox actually failed. - Removed the 200-subagent-per-session spawn cap – long-running sessions no longer refuse new agents (concurrency and depth limits still apply).
- Remote Control now shows compaction progress and connection failures persistently instead of silent pauses or 8-second toasts.
Who It's For
If you're running Claude Code in production, on remote servers, or in a multi-session workflow, this release adds meaningful flexibility and plugs several security holes.
📖 Read the full source: GitHub Claude-Code
👀 See Also
Fine-tuned Qwen3 Small Models Outperform Frontier LLMs on Specific Tasks at Lower Cost
Distilled Qwen3 models (0.6B to 8B parameters) matched or beat frontier API models like GPT-5, Gemini, and Claude on 6 out of 9 tasks including function calling and Text2SQL, with cost as low as $3 per million requests versus $378 for comparable performance.
Agent Harness Outside the Sandbox: Durable Execution & Cold Starts
Running the agent loop outside the sandbox isolates credentials, enables sandbox suspension, and simplifies multi-user sharing, but requires solving durable execution and cold start latency.
AI Eats the World (Spring 2026) – A Comprehensive Market Analysis
An in-depth PDF report on AI industry trends, market sizes, and adoption metrics for Spring 2026, covering key technologies, players, and forecasts.
Claude Agent SDK Billing Changes June 15: Per-User Credits, No Rollover, Hard Cliff
Starting June 15, Claude Agent SDK usage and claude -p stop counting against subscription limits. Each user gets a separate monthly credit (e.g., Pro $20, Max 5x $100). Credits don't pool, don't roll over, and have a hard cliff.