3 ファイル変更+6-4

この更新の概要

組織でマーケットプレイスを制限する設定が有効な場合、プラグインの最終使用日などの情報が非表示になる仕様が明記されました。オートモードにおける権限プロンプトの削減に関する記述が整理され、セキュリティ上の注意喚起がより具体的になっています。また、バックグラウンドで動作するサブエージェントの深度制限に関する仕様が更新され、レジューム時の挙動が固定されるようになりました。全体として、管理機能の強化とサブエージェントの制御に関する正確性が向上しています。

discover-plugins+1-1

組織がマーケットプレイスを制限している場合に、プラグインのグループ名や最終使用日が表示されなくなる挙動が追加されました。

@@ -273,7 +273,7 @@ The detail view shows the components the plugin contributes: commands, skills, a
In Claude Code v2.1.187 and later, the Installed tab adds a **Not used recently** group for marketplace plugins you installed yourself but haven't invoked in at least two weeks and across at least 10 sessions, and the detail view shows a **Last used** line for each plugin. Use these to find plugins that you no longer use but that are still adding startup and context cost, then disable or uninstall them.
Plugins that your organization manages or that you load with `--plugin-dir` are never listed as unused, and plugins that contribute an LSP server, theme, output style, monitor, or workflow are also never listed, since those deliver value without an invocation to track.
Plugins that your organization manages or that you load with `--plugin-dir` are never listed as unused, and plugins that contribute an LSP server, theme, output style, monitor, or workflow are also never listed, since those deliver value without an invocation to track. The group and the **Last used** line are both hidden when your organization restricts marketplaces with [`strictKnownMarketplaces`](/en/settings#strictknownmarketplaces).
When you install a plugin that declares dependencies, the install output lists which dependencies were auto-installed alongside it.
permission-modes+3-3

オートモードが権限プロンプトを削減する機能であることを強調し、バイパスモード使用時のリスクに関する表現が具体化されました。

@@ -145,7 +145,7 @@ To make plan mode the default for a project, set `defaultMode` in `.claude/setti
}
```
## Eliminate prompts with auto mode
Eliminate permission prompts with auto mode
Auto mode requires Claude Code v2.1.83 or later.
@@ -153,7 +153,7 @@ Auto mode lets Claude execute without routine permission prompts. A separate cla
Auto mode also nudges Claude to keep working without stopping for clarifying questions, though Claude still asks when your prompt or a skill explicitly relies on it. For stronger autonomous behavior while keeping permission prompts, set the [Proactive output style](/en/output-styles) instead.
Auto mode is a research preview. It reduces prompts but does not guarantee safety. Use it for tasks where you trust the general direction, not as a replacement for review on sensitive operations.
Auto mode is a research preview. It reduces permission prompts but does not guarantee safety. Use it for tasks where you trust the general direction, not as a replacement for review on sensitive operations.
Auto mode is available only when your account meets all of these requirements:
@@ -292,7 +292,7 @@ The check is skipped automatically inside a recognized sandbox. To run autonomou
[Claude Code on the web](/en/claude-code-on-the-web) does not honor `defaultMode: "bypassPermissions"` or `"dontAsk"` from your settings files, so a repository's checked-in settings cannot start a cloud session in bypass-permissions mode. The setting is ignored silently and the session starts in the mode shown in the mode dropdown instead. See [Switch permission modes](#switch-permission-modes) for which modes cloud sessions offer.
`bypassPermissions` offers no protection against prompt injection or unintended actions. For background safety checks with far fewer prompts, use [auto mode](#eliminate-prompts-with-auto-mode) instead. Administrators can block this mode by setting `permissions.disableBypassPermissionsMode` to `"disable"` in [managed settings](/en/permissions#managed-settings).
`bypassPermissions` offers no protection against prompt injection or unintended actions. For background safety checks with far fewer permission prompts, use [auto mode](#eliminate-prompts-with-auto-mode) instead. Administrators can block this mode by setting `permissions.disableBypassPermissionsMode` to `"disable"` in [managed settings](/en/permissions#managed-settings).
## Protected paths
sub-agents+2-0

サブエージェントを再開した際に、生成時の深度制限が維持される仕様がバージョン2.1.187以降の挙動として追記されました。

@@ -740,6 +740,8 @@ A nested subagent is configured the same way as a top-level one and resolves fro
Depth is counted as the number of subagent levels below the main conversation, regardless of whether each level runs in the [foreground or background](#run-subagents-in-foreground-or-background). A subagent at depth five does not receive the Agent tool and cannot spawn further. The limit is fixed and not configurable.
As of Claude Code v2.1.187, a background subagent's depth is fixed when it is first spawned, and [resuming](#resume-subagents) it later does not change that depth. For example, if your main conversation spawns subagent A, and A spawns a background subagent B at depth two, B is still at depth two when you resume it directly from the main conversation. Resuming a subagent from a shallower context does not let it spawn additional levels that the depth limit already prevented.
To prevent a specific subagent from spawning others, omit `Agent` from its [`tools`](#available-tools) list or add it to `disallowedTools`.
A [fork](#fork-the-current-conversation) still cannot spawn another fork. It can spawn other subagent types, and those count toward the depth limit.