Claude Code 2.1.309 repairs several sandbox and permission boundaries

The release fixes shell startup files running outside the sandbox, writes to the --mcp-config file from sandboxed commands or auto-accepted edits, a disabled MCP server reconnecting after a permission prompt, and several symlink or redirect paths around deny rules. Upgrade unattended runners, then retest custom shell startup files, MCP configuration and write-deny rules. ⁴

Relevant to: Claude Code users relying on sandboxing, deny rules, MCP policy or unattended sessions.