The Cowork changelog dates v4.23118.0 to November 5, one day after v4.16336.0. It bundles Claude Code 2.1.317. The list is long, and the most visible item sits in the Code section.
A minimized pane stays live
Terminal, Browser and iOS Simulator panes got a Minimize button. A minimized pane does not disappear; it stays as a small live view in a corner of the chat, or in the session rail when that is shown. You can expand it again or close it, and in a corner you can move and resize it too. Not in third-party deployments yet.
SSH is the big block
Five of the changes are about connections that drop or take their time.
A message that has waited more than a day for its host no longer goes out on its own: it sits above the message box until you press Send now. Reconnecting through a slow proxy command or a jump host now waits up to 90 seconds on Mac and Linux, unless the SSH config sets ConnectTimeout. Hosts that ask you to sign in at every connection can ride out longer network gaps.
Two fixes you only notice once they bite you: sessions lost background work on the host when the Claude sign-in ran out while the app was away. And a session that reconnected over and over, signing in each time because the host’s shell start-up files print text or change HOME, now says what to fix at the first refusal.
Certificates, proxies and an empty config file
Three fixes are about managed machines. Connections failed with a certificate error on computers whose company root certificate had been renewed with a new key. The saved sign-in was lost when a company proxy answered its renewal with a block page. And SSL_CERT_FILE and SSL_CERT_DIR from Claude Code’s managed settings were overridden in Code sessions as soon as the same variable was set on the computer.
On Windows, quitting during a settings save could leave ~/.claude.json empty. That is fixed.
Four new switches for managed environments
The 3P section keeps growing. disableDesktopLocalSessions turns off Code sessions that run on the device, WSL included, so only remote environments such as SSH remain — and then sshHostAllowlist belongs with it. disableWslSessions blocks sessions inside WSL and can only be set through an MDM profile. claudeCodeProcessWrapperEnabled starts Code sessions through the processWrapper launcher. sshConfigs is new in beta and offers the same SSH connections to everyone in Code’s environment menu, still checked against the allowlist.
Plus one entry in the user menu: “Apps gateway admin”, where spend admins set limits and pooled budgets, see spend, and export it by group.
The list says where Claude Desktop now runs
Of twenty items, five are SSH, three are company certificates and proxies, four are managed switches, two are Windows profile containers. A Minimize button is the part you see. The rest is work on an app that mostly starts up inside somebody else’s network, under somebody else’s rules.