Claude Code v2.1.271 · per-command allowed_domains, plugin commands pinned by hash

Published 22:12 UTC 14 Sep; v2.1.272 followed at 00:42 UTC with bug fixes only. Bash, PowerShell and Monitor accept per-command allowed_domains in auto mode with sandboxing: the hosts a command needs are reviewed alongside that command and opened for it alone, and other hosts are refused. claude plugin install and claude plugin update accept --accept-command <sha256>, which approves exactly the command a previous --json run displayed rather than whatever runs now.³⁴

Relevant to: Anyone running Claude Code under an organisation policy, or installing plugins from a script