$ the-wire · showcase
Claude Code locks file writes to the working directory
By RepoJournal · Filed · About Agentic Coding · Composed from the cited sources · methodology
![opencode-agent[bot]](https://avatars.githubusercontent.com/in/1549082?v=4)
23 people shipped this
copyberry
@copyberry
2 cited
ashwin-ant
@ashwin-ant
1 cited
neubig
@neubig
1 cited
johnwschoi
@johnwschoi
1 cited
GitHub Actions
@actions-user
Luke Parker
@Hona
opencode-agent[bot]
@opencode-agent[bot]
Aarav Sareen
@arvsrn
kitlangton
@kitlangton
jesussamuel-byte
@jesussamuel-byte
ugorla-dev
@ugorla-dev
tadipavan
@tadipavan
duvanka-prasad
@duvanka-prasad
urielefrenvirtusa
@urielefrenvirtusa
enyst
@enyst
all-hands-bot
@all-hands-bot
VascoSch92
@VascoSch92
saoudrizwan
@saoudrizwan
coby-mckinney
@coby-mckinney
DOsinga
@DOsinga
nosmile99
@nosmile99
johnmatthewtennant
@johnmatthewtennant
Cassian433
@Cassian433
The day's most consequential item is a new permission switch in Claude Code that refuses Write, Edit and NotebookEdit outside your working directories in every permission mode, the kind of default operators will want on before letting an agent loose on a monorepo.
v2.1.314 anthropics/claude-code
The new permissions.blockWritesOutsideWorkingDirectories setting makes Write, Edit and NotebookEdit refuse any path outside the working directories, in every permission mode rather than just the restrictive ones. The same release adds IdP-group routing on Claude apps gateway upstreams, so only developers in listed groups reach a given upstream, and guardrail_trace on Bedrock upstreams to log wh...
feat(conversations): store sidebar pin/archive state in server-side tags OpenHands/OpenHands
Sidebar pin and archive state used to live only in browser localStorage, so a new device, a new browser or a shared enterprise deployment started with none of it; it now persists as server-side conversation tags. If several people share a deployment, expect pins to follow the account rather than the machine.
Return standalone web search failures to the model openai/codex
Standalone web search errors used to abort the turn outright; they now come back to the model as unsuccessful tool outputs and client setup errors are returned to it, with messages capped at 1,024 bytes and truncated on a UTF-8 character boundary. Failed requests still emit search completion events, so your logs keep a record of them.
Support managed network requirements under `permissions.network` openai/codex
Codex now accepts shared network constraints under [permissions.network] in requirements.toml, applied across config loading, network approvals, Windows sandbox policy validation and configRequirements/read, with the source shown in /debug-config. [network_proxy] and [experimental_network] still work but cannot be mixed with the new table, so move one config at a time.
feat(desktop): continue local conversations with /cloud cline/cline
Typing /cloud [instruction] in the Desktop app publishes a GitHub checkpoint and starts a cloud task from one locally generated conversation summary, the optional instruction and any attached images, while your local conversation stays open and editable. Also today: Goose now honors server Retry-After hints on 429s from Databricks, Google, Snowflake and GCP Vertex AI instead of falling back to ...
Action items
