Claude Code v2.1.271: Fast Mode in Remote Sessions, Per-Command allowed_domains, and a Batch of Bash Permission Fixes

Claude Code v2.1.271 is out, and it's mostly a hardening release with a few genuinely new knobs. Here's what actually changed.

New features

• Fast mode in Remote sessions. Cloud and self-hosted runners now honor the host's fast-mode setting, or /fast typed inside the session — where your organization allows it.
• Mouse support in /config (fullscreen). Wheel scrolls the settings list, clicking a setting's value changes it, and the row under the pointer is highlighted.
• claude self-hosted-runner --drain-marker-file <path>. If that file exists at a SIGTERM drain, the runner reports its exit to the server as a host drain. Telemetry only.
• Per-command allowed_domains. In auto mode with sandboxing, Bash, PowerShell, and Monitor commands can have the hosts they need reviewed alongside the command and opened for that command alone; other hosts are refused.
• omitClaudeMd in agent frontmatter and --agents JSON. Custom and plugin subagents can run without user, project, and local CLAUDE.md files. Managed policy files still load.
• --accept-command <sha256> for claude plugin install and claude plugin update, accepting exactly the command a prior --json run displayed, instead of -y.
• Pricing multipliers up to 10. The modelPricing managed setting and the Claude apps gateway pricing block now accept a multiplier above 1 for marked-up internal chargeback rates.

Notable fixes

• Cached org policy no longer gets reused after switching accounts, orgs, or API keys, and refreshes when the credential changes mid-session instead of waiting for the hourly check.
• Tool and command lists now update when the org policy finishes loading after startup or changes mid-session.
• An unreadable or unparseable enterprise managed-mcp.json is no longer ignored — it now keeps exclusive MCP control (user/project/plugin servers don't load) and warns at startup.
• Org policy is no longer fetched through (and rejected by) third-party local proxies set via ANTHROPIC_UNIX_SOCKET.
• Cloud sessions no longer reject every subagent tool call (updatedInput … failed schema validation) when a workflow or agent approval lands after the session's worker restarted.
• /fast off now actually turns fast mode off when the org has it disabled, instead of answering "Fast mode unavailable".
• Sessions started with CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK no longer re-send fast requests every turn after an API rejection.
• Bash permission checks got several patches: files read by fmt, column, and similar commands after unrecognized options; files expanded from wildcards in patterns or option values (e.g. grep -v dir/* file); shell variable declaration flags no longer misrepresent the command; two cds, a subshell, or a cd + git chain no longer skip the prompt under permissions.blockReadsOutsideWorkingDirectories.
• Stale .git/config.lock on Linux no longer breaks git checkout -b, git push -u, or git config for the rest of the session.
• macOS settings watcher falls back to polling when the system file-event service is saturated.
• Resumed claude -p sessions whose tools all come from MCP servers no longer fail with "At least one tool must have defer_loading=false".
• LLM gateways returning non-streaming replies as text/plain no longer cause "API returned an empty or malformed response".
• MCP list_changed notifications in a tight loop no longer cause sustained high CPU and repeated tool-list requests.
• MCP OAuth client registration handling fixed (denying consent forced a new one, another redirect URI's registration was reused, and a concurrent write could delete a valid one).

If you're on self-hosted runners or use org-managed policy files, the MCP and policy-cache fixes are the ones worth updating for.