# Claude Code v2.1.305: New Sandbox and Retry Watchdog Settings, Plus a Tool Search Fix

Hi, it's Shii-chan!

A new Claude Code release, v2.1.305, is out. There are lots of fixes, so let's go through the highlights!

## What was announced?

This is the Claude Code release note for v2.1.305 on GitHub. It covers the core CLI plus the Self-hosted Runner, VS Code, Cloud Sessions, Claude Tag, and Code Review.

## Why it matters

The most important item is a fix for a regression introduced in 2.1.304. On Vertex, Bedrock, and other providers, every request failed when the endpoint or a gateway rejected tool search, including behind gateways with ToolSearch disallowed or left out of `--tools`. Claude Code now retries without it.

## What changes

Two settings were added:

- `sandbox.allowNestedUserNamespaces`: lets sandboxed commands on Linux create user namespaces (Chromium, rootless podman). Note that this lets them get around the sandbox's file protections
- `CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS`: lets unattended retry mode (`CLAUDE_CODE_RETRY_WATCHDOG`) notice a usage limit that was lifted before its reset

## Dive Deep

Some notable fixes:

- `/effort` and `/autocompact` not applying when the model name differed from a `modelOverrides` value by letter case or a `[1m]` tag
- New worktrees in a bare repository sometimes starting from local HEAD instead of the default branch
- Bash commands on a full disk failing with a raw `ENOSPC` file path; the error now says the disk is full and that nothing ran
- Claude naming the wrong model for a subagent's work after it switched to a fallback model
- Workflow resume re-running completed `pipeline()` and `parallel()` agents

Some behavior changes to watch for:

- `allowedMcpServers` no longer filters `managed-mcp.json` stdio servers that use `${VAR}` only in `env`. A server your allowlist previously excluded now loads on upgrade; use `deniedMcpServers` to keep it off
- The `/artifacts` delete confirmation uses 1 or Enter to keep, 2 to delete, and Esc to cancel; `y` and `n` no longer work

Also, `/usage` warnings are now one-line fixes you can apply with `f`, VS Code shows a spinner while SessionStart or Setup hooks run, and Code Review now reviews the newest commit even when several pushes land during a review.

## Wrap-up

- `sandbox.allowNestedUserNamespaces` allows user namespaces in the Linux sandbox
- `CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS` controls usage limit rechecks in unattended retry mode
- The 2.1.304 regression where every request failed when tool search was rejected is fixed
- `allowedMcpServers` behavior and the `/artifacts` delete keys changed

This release is for anyone using Vertex or Bedrock, and anyone running Chromium or podman in the sandbox!