Claude Code — The AI Toolchain

Claude Code v2.1.251

Fri, 28 Aug 2026 18:19:32 GMT

Claude Code v2.1.251 adds PreModelSwitch/PostModelSwitch hooks, subagent live streaming, spend-limit tracking, and prompt-cache cost reporting. • Adds `PreModelSwitch` and `PostModelSwitch` hook events, letting hooks block, confirm, or annotate a model switch; `SessionStart` resume hooks now also receive session staleness and the estimated re-cache cost. • Adds `attach`, `logs`, `stop`, `respawn`, and `rm` subcommands to `claude --help`; the `--resume` message for a running background session now names the exact `claude attach ` command to use. • Adds a `rate_limits.spend_limit` field to status line scripts and a Spend limit bar to `/usage` for developers behind a Claude apps gateway with spend limits. • Adds a per-session prompt-cache line to `/cost` showing hit ratio, misses, tokens re-cached, and warm/cold status, plus a matching `prompt_cache` object for status line scripts. • Adds live streaming of a foreground subagent's tool calls and results to Remote Control clients (background subagents still show status only). • Changes `CLAUDE_CODE_SUBAGENT_MODEL` to set the default subagent model rather than override everything — an agent definition's `model:` key and an explicit per-spawn model now take precedence over it. • Changes the footer PR badge on Bedrock, Vertex, and Foundry (and when telemetry is off) to call the GitHub API directly via `gh auth token`, `GH_TOKEN`, or `GITHUB_TOKEN` instead of `gh pr view`. • Changes `/effort` to save the default effort level per model, so each model keeps its own setting when switching. • Changes `/radio` to be available on Bedrock, Vertex AI, Foundry, and Claude Platform on AWS, and when telemetry is disabled. • Changes project-level `.claude/settings.json` `env` to no longer set `CLAUDE_CONFIG_DIR`, `CLAUDE_CODE_TMPDIR`, or `TMPDIR`/`TMP`/`TEMP`; these must now be set in shell, user, or managed settings. • Changes `ANTHROPIC_CUSTOM_HEADERS` from managed or project settings to require approval when it sets a credential, org/tenant, routing, or API-behavior header (e.g. `Authorization`, `Host`). • Changes server-managed settings that terminate sandbox TLS, route sandbox traffic through a custom proxy, inject credentials, or weaken sandbox isolation to require approval before they apply. • Changes the default model for seat-based Enterprise subscriptions to Opus 5. • Changes the default commit trailer to `Co-Authored-By: Claude Code` when the active model is not a recognized Claude model (e.g. third-party models behind a custom `ANTHROPIC_BASE_URL`). • [VSCode] Changes the Remote Control banner to a footer pill (shown while Remote Control is on or has failed) that opens the session on claude.ai/code; toggle with `/remote-control`. Breaking changes: • Project-level `.claude/settings.json` `env` no longer sets `CLAUDE_CONFIG_DIR`, `CLAUDE_CODE_TMPDIR`, or `TMPDIR`/`TMP`/`TEMP`; any working setup relying on this must move those variables to shell, user, or managed settings. • `CLAUDE_CODE_SUBAGENT_MODEL` no longer overrides an agent definition's `model:` key or an explicit per-spawn model; teams using it to force a uniform subagent model will see per-agent or per-spawn overrides take effect instead.

Claude Code v2.1.248

Thu, 27 Aug 2026 22:12:20 GMT

Claude Code v2.1.248 adds `--restricted` sandboxed mode, per-agent cache TTL, cross-session messaging, and `/usage-credits` for Enterprise. • Adds `--restricted` flag (or `CLAUDE_CODE_RESTRICTED=1` env var): strips command/code-execution tools and `WebFetch`, confines file tools to the working directory, refuses `bypassPermissions`, and ignores user, project, and local settings files — unless specific tools are re-enabled via `--tools`. • Adds `experimental.cacheTtl` (`"5m"` or `"1h"`) to agent frontmatter for a per-agent prompt cache TTL when no subagent TTL setting is configured. • Adds `claude self-hosted-runner --client-label ` (or `SELF_HOSTED_RUNNER_CLIENT_LABEL`) to override the label the runner registers with (default: hostname). • Adds cross-session messaging via `SendMessage` and `ListAgents` between sessions on the same machine, now supported on Bedrock, Vertex, Foundry, and when telemetry is disabled. • Adds `/usage-credits` command for Enterprise organizations (AWS Marketplace billing, self-serve Enterprise, and Enterprise trials) so members can request higher usage limits from their admin. • Adds server-managed settings diagnostics: a startup warning when settings fail to load, plus `/doctor` and `/status` output explaining load failures or why settings weren't fetched (Bedrock/Vertex/third-party provider, custom `ANTHROPIC_BASE_URL`). • Adds a warning in `/web-setup` when the GitHub CLI token lacks the `workflow` scope, preventing silent push rejections on large repositories. • Adds `desktopSessionCleanupPeriodDays` setting to cap how long the exemption for desktop-written sessions from transcript cleanup applies. • Changes `/loop`: self-paced dynamic mode and the no-prompt autonomous default are now always available, including on Bedrock, Vertex, and Foundry. • Changes `shift+enter` in the agent view dispatch input to insert a newline; `ctrl+enter` now dispatches and attaches.

Claude Code v2.1.247

Wed, 26 Aug 2026 23:06:39 GMT

Claude Code v2.1.247 adds AI-drafted feedback reports, a cost-optimization profiler, Admin API coverage, and org-customizable spinner tips. • Adds `/claude-api cost-optimize` subcommand to profile an existing project's Claude API spend and work through cost levers (caching, token hygiene, batch, effort, model choice) one measured change at a time. • Adds `SendFeedback` tool so Claude can draft a feedback report during a session for you to review and send from `/feedback`; disable with the `feedbackDrafts` setting. • Adds `{id, text, cooldownSessions, priority}` entries, `tipsFile`, and `label` to `spinnerTipsOverride` so organizations can rotate custom tips alongside built-in ones. • Expands the `/claude-api` skill with Admin API coverage: organization members, invites, workspaces, API keys, rate limit reports, workload identity federation, and CMEK. • Adds a one-keystroke 'Yes, and switch to auto mode' option on Bash permission prompts, letting users jump straight to auto mode without navigating menus. • Improves plugin marketplace hardening: names containing control or invisible characters are now rejected, and marketplace-supplied text in `/plugin` and `claude plugin` output is escape-safe. • Improves Bedrock, Vertex, and Foundry sessions (and any with telemetry disabled): Claude is now informed when a configured MCP server failed to connect, instead of silently concluding its tools don't exist. • Changes Sonnet 5's default auto-compact window to its full 1M context, so sessions auto-compact at approximately 967K tokens instead of approximately 934K. • Changes cross-session peer messages to collapse by default to a one-line preview (`Message from @: `); `Ctrl+O` expands the full body.

Claude Code v2.1.246

Tue, 25 Aug 2026 22:31:52 GMT

Claude Code v2.1.246 adds Auto mode permissions UI, Bash wildcard safety warnings, and turn completion timestamps. • Adds an Auto mode tab to `/permissions` for viewing and editing auto mode classifier rules. • Adds a startup warning when Bash allow rules contain a wildcard before the subcommand (e.g. Bash(git * main)), flagging rules that also match options injected before the subcommand. • Adds the turn's wall-clock completion time to the end-of-turn duration line (e.g. `✻ Sautéed for 23s · done 6:05 PM`). • Improves `/cd` so the new directory's project settings, hooks, `.mcp.json` servers, skills, and agents all take effect immediately instead of waiting for `--resume`. • Improves subagent results: a subagent that hits its `maxTurns` limit now returns output marked as partial with a hint to continue via `SendMessage`, rather than appearing finished. • Improves non-interactive sessions (`-p`, SDK, cloud sessions) to automatically continue a response cut off mid-stream by a server error, connection loss, or stall. • Changes `/code-review` so Claude can initiate it on Bedrock, Vertex AI, Foundry, the Claude apps gateway, and when telemetry or non-essential traffic is disabled. • Changes `/goal` idle sessions to start at most three check-ins per goal on long-running background work; the next user message allows three more.

Claude Code v2.1.239

Fri, 21 Aug 2026 19:54:23 GMT

Claude Code v2.1.239 adds `/claude-api upgrade`, synced plugin management, and data-residency cost transparency. • Adds `/claude-api upgrade` subcommand to migrate Python projects from `anthropic` 0.x to 1.x (timeouts now use `anthropic.Timeout`, not `httpx.Timeout`). • Cloud sessions: synced plugins from claude.ai now appear as `name@synced` and work with `claude plugin enable/disable @synced`, and never override a locally installed plugin with the same name. • Cost estimates via `/cost`, the status line, and `--max-budget-usd` now include the 1.1× US-only-inference premium for data-residency workspaces. • Extends the one-time fullscreen renderer offer to Bedrock, Vertex, Foundry, and other previously excluded setups; new installs there now start in fullscreen. • Alpine/musl builds: native image paste, clipboard, and audio-capture add-ons now load using musl-built binaries. • Usage-limit message now also shows when your session or weekly limit resets, in addition to the monthly spend limit. • Windows: cross-session messaging now available, letting Claude Code sessions message each other with `SendMessage` and discover each other via `ListAgents`, matching macOS/Linux behavior. • `ListAgents` and `/list-agents` now include live teammates, not only subagents and other local sessions. • `CLAUDE_CODE_RETRY_WATCHDOG` persistent retry mode now fails immediately on organization spend-limit and out-of-credits errors instead of waiting indefinitely. • `/goal`: repeat check-ins on long-running background work now back off (30 min, then 1 h, then every 2 h) instead of firing every 30 minutes. • Claude in Chrome: `/clear` now closes the session's Chrome tab group, and empty groups are closed on `/resume` and on exit. • Remote sessions: images uploaded from mobile now include their saved file path so Claude can copy them into files it creates.

Claude Code v2.1.238

Thu, 20 Aug 2026 20:33:51 GMT

Claude Code v2.1.238 adds keybinding flavors, self-hosted runner shutdown/proxy controls, and plugin marketplace auth helpers. • Adds `keybindingFlavor` setting: set to `"readline"` for Ctrl+W to delete back to the previous whitespace (Bash-style); default `"classic"` is unchanged. • Adds `claude self-hosted-runner --defer-shutdown-max-min `: on SIGTERM, continues serving attached sessions, parks remaining sessions after the specified minutes, then exits. • Adds `claude self-hosted-runner --proxy-authorization-command` and `--proxy-authorization-file` for egress proxies that require a freshly issued `Proxy-Authorization` header on every connection. • Adds `headersHelper` to plugin marketplace URL entries and catalog entries: runs a command to mint HTTP headers (e.g. a short-lived token) for catalog and same-origin archive fetches. • A catalog entry's `headersHelper` runs only at `claude plugin install` or `claude plugin update` time, after its command is shown, with a `[y/N]` prompt (or pass `-y` to skip). • Cross-session messaging now reports 'refused' to the sender when the target session has `crossSessionInbound: "refuse"` set, instead of silently succeeding. • Cross-session messaging now notifies the sending session when the target inbox drops messages due to a rate limit or full queue, instead of messages vanishing silently. • MCP `headersHelper` in a project `.mcp.json`, and inline MCP servers in project or `--add-dir` agent files, now require the folder's trust dialog to have been accepted (also applies under `claude -p`). • MCP `headersHelper` from a project `.mcp.json`, plugin, or agent file now runs without inherited credential environment variables; user, managed, and claude.ai-scope helpers run from the Claude config directory. • Changes `claude mcp list` and `claude mcp get` to show disabled servers as `⊘ Disabled` instead of connecting to them for a health check. • Removes the double-press Ctrl+L / Cmd+K `/clear` shortcut in fullscreen; both keys now always repaint the screen, and 1-row nvim terminals no longer trigger automatic `/clear` loops. • Updates the bundled `claude-api` skill for Managed Agents: adds web search/fetch domain settings and memory stores on self-hosted sandboxes. • Improves Remote Control connection resilience: brief HTTP 403 refusals from a network edge, VPN, or proxy are tolerated for up to 3 minutes, with the refusing party named when a block persists. Breaking changes: • The double-press Ctrl+L / Cmd+K shortcut to trigger `/clear` in fullscreen has been removed; those keys now only repaint.

Claude Code v2.1.237

Thu, 20 Aug 2026 00:54:41 GMT

Claude Code v2.1.237 adds a built-in 'Concise' output style selectable via `/config`. • Adds a built-in 'Concise' output style — accessible under 'Output style' in `/config` — where Claude leads with results and skips preamble and narration while working just as thoroughly.

Claude Code v2.1.236

Wed, 19 Aug 2026 20:02:05 GMT

Claude Code v2.1.236 adds ANTHROPIC_DEFAULT_MODEL env var, notify_when_idle for cross-session messaging, and stronger macOS sandbox deny rules. • Adds `ANTHROPIC_DEFAULT_MODEL` environment variable to set the default model for new sessions; a `/model` pick still overrides it and persists across restarts, unlike `ANTHROPIC_MODEL`. • Adds `notify_when_idle` field to cross-session `SendMessage`: ask another Claude Code session on the same machine to send one notice when it next goes idle — opt-in, one-shot, no polling (macOS and Linux). • Strengthens macOS sandbox: wildcard read-deny rules (e.g. `**/.env`) now take precedence inside allowed read regions, cover matched directories' contents, and cannot be bypassed by renaming the denied file. • `/usage` now shows the usage-credits spend row for Team and Enterprise members, including a capped row at 0% before anything is spent. • `/goal` now automatically checks in after 30 minutes (then 1h, 2h) when an idle session's goal is parked behind long-running background work, instead of waiting for the user to return. • Auto mode now sets aside `Monitor` allow rules while active, so Monitor commands are reviewed the same way Bash commands are. • Auto mode classifier on Bedrock, Vertex AI, and Foundry (and when telemetry is disabled) now uses the same defaults as on the Claude API, including severity-scored classification. • Auto mode git status check can no longer be fooled by a repo's `status.showUntrackedFiles=no` setting into reporting a clean tree. • SIGTERM in print/SDK mode no longer records an interrupted turn or synthetic tool denials before exiting; running commands are still terminated and the process exits with code 143. • Remote Control now marks a session offline within seconds when the CLI exits or its terminal closes. • `SendMessage` now refuses further messages to a session upfront once a rapid burst would exceed the session's inbox capacity, instead of reporting them sent while silently dropping them. • [VSCode] Adds screen reader support for the transcript: live announcements for replies, permission requests, errors, and status changes, plus per-turn heading navigation.

Claude Code v2.1.235

Tue, 18 Aug 2026 20:38:54 GMT

Claude Code v2.1.235 adds optional `spellcheck` setting with aspell/hunspell/ispell support and hardens `SendMessage` size limits. • Adds optional `spellcheck` setting that underlines misspelled words in the prompt input as you type, using your installed `aspell`, `hunspell`, or `ispell`. • `SendMessage` now rejects messages too large for cross-session delivery up front instead of silently dropping them. • Remote Control: `claude rc` now applies the same enterprise-gateway availability check as interactive startup. • Improved memory and CPU usage while cloud sessions such as `/ultrareview` or `/autofix-pr` run in the background — their event streams are no longer re-scanned and re-rendered on every update. • Context-limit error now indicates when auto-compact is off and points to `/config` to re-enable it. • Vim mode now preserves NORMAL mode and cursor position when toggling the detailed transcript (`ctrl+o`) or closing a panel.

Claude Code v2.1.235

Tue, 18 Aug 2026 20:38:54 GMT

Claude Code v2.1.235 adds optional `spellcheck` setting and hardens `SendMessage` size limits and `claude rc` gateway checks. • Adds optional `spellcheck` setting that underlines misspelled words in the prompt input as you type, backed by your installed `aspell`, `hunspell`, or `ispell`. • `SendMessage` now rejects messages too large for cross-session delivery up front instead of silently dropping them. • Remote Control: `claude rc` now applies the same enterprise-gateway availability check as interactive startup. • Context-limit error now indicates when auto-compact is off and directs users to `/config` to re-enable it.

Claude Code v2.1.234

Mon, 17 Aug 2026 20:20:58 GMT

Claude Code v2.1.234 adds mid-turn command access, GitLab MR badges, auto-resume at usage limits, and a new `CLAUDE_CODE_PROJECT_DIR_NAME` env var. • Adds `CLAUDE_CODE_PROJECT_DIR_NAME` environment variable so hosts can set a short name for the per-project transcript directory when each session gets its own config directory. • Adds `CLAUDE_CODE_GOAL_CHECKIN_MINUTES` environment variable to control how often `/goal` checks in on background tasks that have been waiting 30+ minutes (set to `0` to disable). • Adds `selection:clear` keybinding action, bindable to a key to clear in-app text selections including in the agents view. • Adds a GitLab merge request badge to the footer and statusline for repos with a GitLab remote and an authenticated `glab` CLI, showing MR `!N` with draft/pending/green states. • Adds automatic session continuation when a claude.ai usage limit resets; toggle via `/config` with the 'Continue automatically at usage limit' setting. • `/permissions` can now be opened while Claude is working, with rule changes applying immediately to the current turn. • `/add-dir ` can now be used while Claude is working; `/add-dir`, `/autocompact`, `/theme`, `/help`, `/config`, and `/advisor` dialogs open mid-turn in the fullscreen TUI. • `claude setup-token` now rejects unexpected extra arguments instead of silently ignoring them. • `/goal` now clears itself with a notice when a turn dies on an unrecoverable error (e.g. revoked auth, exhausted credit balance, or context overflow). • `/goal` now checks in on background tasks that have been waiting 30+ minutes instead of waiting indefinitely. • `SendMessage` and `ListAgents` now report when an account's session list was too long to check completely, rather than treating unseen sessions as absent. • Reduces context cost of the built-in `claude-api` skill from ~200k+ tokens to ~25k by loading reference docs on demand. • Remote Control: effort picks made on a phone or on claude.ai/code now apply to terminal- and Desktop/VS Code-hosted sessions, and the session publishes its effort level to connected clients. • Remote Control sessions now keep phones and claude.ai/code updated on the session's permission mode (and claude.ai/code on the model) as they change. • Improves transcript rendering so your own prompts now render markdown (highlighted code blocks, inline code, lists) the same way replies do. • Removes the 'Default teammate model' setting from `/config`; agent-team teammates now use the leader's model unless the spawn command names one. Breaking changes: • The 'Default teammate model' setting has been removed from `/config`; agent-team teammates now use the leader's model unless the spawn command explicitly names one.

Claude Code v2.1.234

Mon, 17 Aug 2026 20:20:58 GMT

Claude Code v2.1.234 adds `CLAUDE_CODE_PROJECT_DIR_NAME`, `selection:clear` keybinding, GitLab MR badge, auto-resume at usage limit, and NT-namespace path rejection. • Adds the optional `CLAUDE_CODE_PROJECT_DIR_NAME` environment variable, letting hosts that give each session its own config directory choose a short name for the per-project transcript directory. • Adds the `CLAUDE_CODE_GOAL_CHECKIN_MINUTES` environment variable (set to `0` to opt out) — when background tasks keep a `/goal` waiting 30+ minutes, Claude now checks in instead of waiting indefinitely. • Adds the `selection:clear` keybinding action, which can be bound to a key to clear an in-app text selection; also works in the agents view. • Adds a GitLab merge request badge to the footer and statusline: repos with a GitLab remote and an authenticated `glab` CLI show MR `!N` with draft/pending/green states. • Session auto-resume: Claude Code now continues a session automatically when a claude.ai usage limit resets; disable in `/config` under 'Continue automatically at usage limit'. • `/permissions` can now be opened while Claude is actively working — rule changes apply immediately to the rest of the current turn. • `/add-dir ` can now be invoked mid-turn; `/add-dir`, `/autocompact`, `/theme`, `/help`, `/config`, and `/advisor` dialogs all open mid-turn in the fullscreen TUI. • `/goal` clears itself with a notice when a turn dies on an unrecoverable error (revoked auth, exhausted credit balance, or context overflow) instead of staying armed. • `claude setup-token` now rejects unexpected extra arguments instead of silently ignoring them. • Reduced context cost of loading the built-in `claude-api` skill from ~200k+ tokens to ~25k by loading reference docs on demand. • Removes the 'Default teammate model' setting from `/config`; agent-team teammates now use the leader's model unless the spawn command names one explicitly. • Remote Control sessions started from Claude Code Desktop or VS Code now keep phones and claude.ai/code updated on the session's permission mode (and claude.ai/code on the model) as they change. • Remote Control: effort picks made on a phone or claude.ai/code now apply to terminal- and Desktop/VS Code-hosted sessions, and the session publishes its effort level to all connected clients. • `SendMessage` and `ListAgents` now report when an account's session list was too long to check completely, instead of treating unseen sessions as absent. • Improves your own prompts in the transcript: they now render markdown (highlighted code blocks, inline code, lists) the same way replies do. • Improves auto-generated session titles to short, specific names (e.g., 'Login button bug') rather than sentences restating the request.

Claude Code v2.1.233

Fri, 14 Aug 2026 22:20:57 GMT

Claude Code v2.1.233 adds GitLab MR support, per-user identity forwarding, memory cgroup limits, and WebFetch cache TTL control • Adds `CLAUDE_CODE_TOOL_MEMORY_LIMIT` environment variable (opt-in) to enforce memory cgroup limits on Bash tool commands on Linux, preventing runaway builds from stalling a session. • Adds `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable to configure the WebFetch session URL cache TTL (default: 15 minutes). • Adds opt-in `forward_user_identity` setting on Anthropic apps gateway upstreams, sending the signed-in user's identity as headers so a proxy can attribute spend per user. • Adds `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` environment variable to re-enable TodoWrite/TaskCreate/Get/Update/List tools on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models (now disabled by default on those models). • Extends the `--worktree` flag and `claude agents` view to support GitLab merge request URLs, displaying MRs as `!N`. • Improves `claude plugin validate` to check bare `.claude/skills` directories and report SKILL.md files with unparseable frontmatter. • Adds a `[claude-code:unrecognized_model]` diagnostic line to stderr in print mode when a request targets an unrecognized model ID; silence it by mapping the model with `modelOverrides`. • Improves `claude self-hosted-runner` session start time by creating the session branch without rewriting the working tree and removing two blocking server round trips. Breaking changes: • Todo/task-tracking tools (TaskCreate, TaskGet, TaskUpdate, TaskList, TodoWrite) are no longer available by default on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` to restore them.

Claude Code v2.1.233

Fri, 14 Aug 2026 22:20:57 GMT

Claude Code v2.1.233 adds GitLab MR support, per-user identity forwarding, Linux memory limits for Bash tools, and a WebFetch cache TTL env var. • Adds `CLAUDE_CODE_TOOL_MEMORY_LIMIT` env var (opt-in, Linux only) to cap memory for Bash tool commands via cgroups, preventing a runaway build from stalling the session. • Adds `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` env var to override the WebFetch session URL cache TTL (default: 15 minutes). • Adds `forward_user_identity` opt-in setting on Anthropic upstreams in the apps gateway, sending the signed-in user's identity as headers so a downstream proxy can attribute spend per user. • Adds `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` env var to restore `TaskCreate`, `TaskGet`, `TaskUpdate`, `TaskList`, and `TodoWrite` tools on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models, where they are now disabled by default. • Adds GitLab merge request URL support to the `--worktree` flag and the `claude agents` view, displaying MRs as `!N`. • Improves `claude plugin validate` to check a bare `.claude/skills` directory and report `SKILL.md` files whose frontmatter fails to parse. • Improves print mode diagnostics: writes a `[claude-code:unrecognized_model]` line to stderr when a request uses an unrecognized model ID; silence it by mapping with `modelOverrides`. • Improves screen reader mode: the `/effort` selector now renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped. • Improves `claude self-hosted-runner` session start time by creating the session branch without rewriting the working tree and eliminating two blocking server round trips. Breaking changes: • Todo/task-tracking tools (`TaskCreate`, `TaskGet`, `TaskUpdate`, `TaskList`, `TodoWrite`) are no longer available by default on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` to re-enable them.

Claude Code v2.1.232

Thu, 13 Aug 2026 23:29:59 GMT

Claude Code v2.1.232 adds subagent forking by default, cross-session @-mentions, GitLab secret redaction, and deeper Remote Control resilience. • Adds `additionalMarketplaces` and `allowedMarketplaces` as accepted aliases for `extraKnownMarketplaces` and `strictKnownMarketplaces` in settings. • Enterprise policy: a url-typed `blockedMarketplaces` entry for a bare repo URL now blocks that URL when the CLI classifies it as a git clone. • Gateway: `sandbox.bwrapPath`, `sandbox.socatPath`, and `sandbox.ripgrep` now require managed-settings approval when a server override is present. • Changes `sandbox.ripgrep` to be honored only from user, managed, and `--settings` settings; project settings can no longer override the sandbox ripgrep binary. • Gateway: the `desktop:` overlay now accepts every released Desktop setting (validated at boot against Desktop's own schema); unknown or invalid keys fail boot. • Gateway: empty `managed.policies[].match.groups` / `admin.admin_groups` entries and malformed `email_domain` values now fail at boot instead of silently matching no one or granting admin access. • Adds `/config` rows for 'Dialog expiry' and 'Messages from your other sessions' (cross-session inbound accept/hold/refuse controls). • Adds secret redaction for GitLab token families `glrt-`, `gloas-`, `glptt-`, `glagent-`, `glimt-`, `glsoat-`, `glcbt-`, `glft-`, `glffct-`, and full redaction of routable `glpat-`/`gldt-` tokens; the `glab` CLI config store gets the same sandbox and credential-path protection as `gh`. • Adds GitLab support to plugin marketplaces: bare `gitlab.com` repo URLs (including nested subgroups) now clone like `github.com` URLs. • Subagent forking is now on by default: a `subagent_type: "fork"` subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default. • Type `@` in the prompt to mention another Claude session by name; Claude uses `SendMessage` to reach that session directly. • `SendMessage` now delivers to a bare name that exactly matches one live session without requiring a ref confirmation first. • Interactive sessions now keep unique names: starting or renaming a session to a name already in use gives it a `name-word-word` variant automatically. • Fable 5 is offered as an advisor in `/advisor` again for organizations with Fable access, with usage-credits consent configured through `/model fable`. • `/plugin install plugin@marketplace` now refreshes the marketplace first so newly published plugins install without a manual marketplace update. • `/code-review` at high, xhigh, and max effort now runs in a background agent like the other effort levels. • `/feedback` and `/bug` now open immediately when invoked while Claude is responding, without waiting for the turn to finish. • Remote Control now keeps reconnecting for about 30 minutes after a network blip. • Bash input redirections (`< file`) are now permission-checked like their argument spellings on all platforms. • Hardened the auto-generated cross-session messaging socket directory on shared `/tmp` against pre-planted symlinks or another user's directory. • Hardened the Linux filesystem sandbox against a protected-path bypass. Breaking changes: • `sandbox.ripgrep` set in project settings is now ignored; only user, managed, and `--settings` sources are honored. • Gateway: unknown or invalid keys in the `desktop:` overlay now fail boot instead of being silently accepted. • Gateway: empty `managed.policies[].match.groups` / `admin.admin_groups` entries and malformed `email_domain` values (empty, containing `@`, whitespace, or commas) now fail at boot.

Claude Code v2.1.232

Thu, 13 Aug 2026 23:29:59 GMT

Claude Code v2.1.232 adds cross-session messaging via `@`, `subagent_type: "fork"` on by default, GitLab marketplace support, and new secret redaction for GitLab tokens. • Enables `subagent_type: "fork"` subagents by default, so forked subagents inherit the full conversation and prompt cache; non-teammate agent spawns in interactive sessions now run in the background by default. • Adds `@`-mention in the prompt to reference another Claude session by name, triggering `SendMessage` to deliver directly to that live session without a confirmation step. • Adds `/config` rows for 'Dialog expiry' and 'Messages from your other sessions', controlling cross-session inbound message behavior (accept/hold/refuse). • Adds secret redaction for GitLab token families `glrt-`, `gloas-`, `glptt-`, `glagent-`, `glimt-`, `glsoat-`, `glcbt-`, `glft-`, `glffct-`, plus full redaction of routable `glpat-`/`gldt-` tokens; the `glab` CLI config store receives the same sandbox and credential-path protection as `gh`. • Adds GitLab support to plugin marketplaces: bare `gitlab.com` repo URLs (including nested subgroups) now clone the same way `github.com` URLs do. • Accepts `additionalMarketplaces` and `allowedMarketplaces` as friendlier aliases for the settings keys `extraKnownMarketplaces` and `strictKnownMarketplaces`. • Adds enterprise policy support for a url-typed `blockedMarketplaces` entry that keeps blocking a bare repo URL even when the CLI classifies it as a git clone. • Expands the Gateway `desktop:` overlay to accept every released Desktop setting (previously limited to 11 hand-listed keys), validated at boot against Desktop's own schema; unknown or invalid keys now fail boot. • Hardens Gateway boot validation: empty `managed.policies[].match.groups`/`admin.admin_groups` entries and malformed `email_domain` values now fail at boot instead of silently matching no one or granting admin access. • Interactive sessions on the same machine now enforce unique names: a collision produces a `name-word-word` variant automatically. • Changes `sandbox.ripgrep` to be honored only from user, managed, and `--settings` settings; project settings can no longer override the sandbox ripgrep binary. • Adds managed settings approval dialog improvements: shows endpoint URLs, requires approval for server-managed sandbox binary overrides (`sandbox.bwrapPath`, `sandbox.socatPath`, `sandbox.ripgrep`). • `/code-review` at `high`, `xhigh`, and `max` effort now runs in a background agent, consistent with other effort levels. • `/plugin install plugin@marketplace` now refreshes the marketplace before installing, so newly published plugins install without a manual marketplace update. • Remote Control now reconnects for up to ~30 minutes after a network blip and no longer drops after multiple blips spread across an hour. • Bash input redirections (`< file`) are now permission-checked on all platforms, matching the behavior for argument spellings. Breaking changes: • Gateway: unknown or invalid keys in the `desktop:` overlay now fail boot (previously accepted silently). • Gateway: empty `managed.policies[].match.groups`/`admin.admin_groups` entries and malformed `email_domain` values now fail at boot (previously matched silently or granted admin access). • `sandbox.ripgrep` set in project settings is no longer honored; it must be in user, managed, or `--settings` settings.

Claude Code v2.1.229

Wed, 12 Aug 2026 20:56:22 GMT

Claude Code v2.1.229 adds plugin marketplace command sources, Remote Control offline/cloud labels, VSCode session groups, and SSE keepalive for Vertex/Bedrock. • Adds plugin marketplace `command` sources: a local command (e.g. an IDE) prints the plugin directory, re-resolved each session and applied without a restart; `mode: "link"` uses it in place. • `ListAgents` now marks disconnected Remote Control sessions as `offline` and labels cloud sessions as `cloud`. • Adds `CLAUDE_CODE_WORKFLOW_PREFIX_STAGGER_MS` env var to control workflow fan-out staggering for same-prefix sibling agents; set to `0` to disable. • Adds SSE keepalive pings to gateway streaming responses during long thinking pauses, preventing idle-timeout disconnects on Vertex and Bedrock upstreams. • Adds server-supplied Claude Code hook support for self-hosted runner sessions, matching managed-environment behavior. • Documents `claude remote-control --continue` for resuming the most recent Remote Control session. • Changes `/commit-push-pr` to no longer auto-approve git/gh commands with dangerous flags such as `--force`, `--amend`, and `--no-verify`. • Changes self-hosted runner Windows startup to require an explicit `--base-dir`; there is no default checkout directory on Windows. • Improves sandbox IPv6 handling: literals in network domain lists are now bracketed (e.g. `[::1]:443`), and ambiguous spellings are enforced fail-closed and flagged by `/doctor`. • [VSCode] Adds session groups in the sidebar — right-click to create, rename, or delete; Cmd/Ctrl- or Shift-click to move several sessions at once. • [VSCode] Makes the `/btw` side-question panel resizable by dragging its boundary, in both side-docked and stacked layouts. • [VSCode] 'Report a problem' and `/bug` now open the built-in feedback dialog. Breaking changes: • Self-hosted runner Windows startup now requires an explicit `--base-dir`; there is no default checkout directory on Windows. • `/commit-push-pr` no longer auto-approves git/gh commands with dangerous flags (`--force`, `--amend`, `--no-verify`, etc.).

Claude Code v2.1.229

Wed, 12 Aug 2026 20:56:22 GMT

Claude Code v2.1.229 adds plugin `command` sources, `ListAgents` session labels, SSE keepalives, and VSCode session groups. • Documents `claude remote-control --continue` for resuming the most recent Remote Control session without specifying a session ID. • Adds plugin marketplace `command` sources: a local command (e.g. from an IDE) prints the plugin directory, which is re-resolved each session and applied without a restart; `mode: "link"` uses it in place. • Sets `CLAUDE_CODE_WORKFLOW_PREFIX_STAGGER_MS=0` to disable the new workflow fan-out staggering that lets sibling agents reuse cached prompt prefixes. • `ListAgents` now marks disconnected Remote Control sessions as `offline` and labels cloud sessions as `cloud`, making session inventory clearer. • Adds SSE keepalive pings to gateway streaming responses during long thinking pauses, preventing idle-timeout disconnects on Vertex and Bedrock upstreams. • Adds server-supplied Claude Code hook support for self-hosted runner sessions, matching managed-environment behavior. • Improves workflow fan-outs to stagger same-prefix sibling agents so subsequent agents read the cached prompt prefix instead of re-paying it. • Changes `/commit-push-pr` so git/gh commands with dangerous flags (`--force`, `--amend`, `--no-verify`, etc.) are no longer auto-approved. • Requires an explicit `--base-dir` for self-hosted runner Windows startup; there is no longer a default checkout directory on Windows. • Improves sandbox: IPv6 literals in network domain lists are now bracketed (e.g. `[::1]:443`), and ambiguous spellings are enforced fail-closed and flagged by `/doctor`. • Updates `/login` to repeat the `CLAUDE_CODE_OAUTH_TOKEN` override warning after a successful login. • [VSCode] Adds session groups in the sidebar — right-click to create, rename, or delete; Cmd/Ctrl- or Shift-click to move several sessions at once. • [VSCode] Makes the `/btw` side-question panel resizable by dragging its boundary, in both side-docked and stacked layouts. Breaking changes: • Self-hosted runner Windows startup now requires an explicit `--base-dir`; there is no default checkout directory on Windows, so existing Windows runner configs without `--base-dir` will fail to start.

Claude Code v2.1.228

Tue, 11 Aug 2026 19:50:59 GMT

Claude Code v2.1.228 hardens synced skills, improves cross-session messaging, and lets newer models overwrite unread files. • Hardened skills synced from claude.ai: they no longer shadow local commands or MCP prompts, descriptions are sanitized and labeled, and skill bodies no longer run `!` commands or expand `@` files on your machine. • Improved cross-session messages: sender and body now display inline instead of a collapsed line, and messages to Remote Control sessions on other machines show your Remote Control session name as the sender. • The Write tool now allows newer models to overwrite an existing file they haven't read this session, matching the Edit tool's rules; older models still require a read first. • Improved Vertex AI credential handling: expired or missing Google Cloud credentials now fail within seconds instead of retrying for minutes. • Improved compaction progress: the retry countdown and stall hint now appear during compaction instead of only a progress bar.

Claude Code v2.1.228

Tue, 11 Aug 2026 19:50:59 GMT

Claude Code v2.1.225

Sat, 08 Aug 2026 01:09:26 GMT

Claude Code v2.1.225 adds gateway spend-limit warnings, workspace trust for agents, and cross-machine Remote Control messaging. • Adds gateway spend-limit support to the usage warning: the limit-reached message now names the cap, its reset time, and the operator's message (requires gateway on 2.1.225). • `SendMessage` can now start a conversation with Remote Control sessions on other machines by name, as shown by `ListAgents` in the `name [ref]` format — previously only reply-after-first-contact was possible. • Adds a workspace trust prompt to `claude agents` for untrusted directories, matching the existing behavior of `claude`. • Remote Control: photos attached from the Claude app are now passed directly to Claude instead of being read from disk via a separate tool call.

Claude Code v2.1.225

Sat, 08 Aug 2026 01:09:26 GMT

Claude Code v2.1.225 adds gateway spend-limit warnings, workspace trust for `claude agents`, and `SendMessage` remote session initiation by name. • Adds a workspace trust prompt to `claude agents` for untrusted directories, matching the existing behavior of the `claude` command. • Adds gateway spend-limit support to Claude Code's usage warning: when the cap is reached, the message now names the limit, its reset time, and the operator's message (requires gateway v2.1.225). • `SendMessage` can now initiate a conversation with Remote Control sessions on other machines by name — `ListAgents` surfaces them as `name [ref]` — rather than requiring the remote session to message first. • `SendMessage` now locks a confirmed Remote Control recipient by identity, so a same-named local session can never silently replace it when the remote list is temporarily unreachable. • Improves Remote Control: photos attached from the Claude app are passed directly to Claude instead of being read from disk via a separate tool call.

Claude Code v2.1.224

Fri, 07 Aug 2026 04:00:59 GMT

Claude Code v2.1.224 adds self-hosted runners, archive plugin installs, JWT/AWS credential masking, and cross-session messaging. • Adds `claude self-hosted-runner` subcommand to turn your own machines or containers into execution targets for Claude Code web, mobile, and desktop sessions (Team and Enterprise plans). • Adds `archive` plugin source to install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning. • Adds `ANTHROPIC_BEDROCK_REGION_PREFIX` environment variable to prefer a specific cross-region Bedrock inference profile over the `AWS_REGION`-derived one. • Adds `crossSessionInbound` and `dialogExpiry` settings: cross-session messages to bypassed-permission sessions are held for approval; messages to other sessions auto-deliver. • Adds sandbox credential-masking options `extract`, `onExtractNoMatch`, `decode: "jwt"` with `maskClaims`, and `awsPairs`/`sigv4` for AWS SigV4 re-signing; requires `network.tlsTerminate` and honored only from user, managed, or `--settings` settings. • Adds cross-session `SendMessage` and `ListAgents` APIs: Claude Code sessions on macOS and Linux can now discover and message each other across machines. • Removes the 200-subagent-per-session spawn cap, allowing long-running sessions to continue launching new agents (concurrency and depth limits still apply). • Adds a cancel-and-confirm step when removing an unavailable paste changes a command's text. • Improves fullscreen mode to retain the full pre-compaction history in scrollback across repeated compactions, not just the most recent interval. • Improves Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary, and `/clear` resets propagate to attached clients. • Improves Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut instead of an 8-second toast. • Changes feedback-survey transcript sharing to also upload (with consent) the last request's model settings — system prompt (including `CLAUDE.md`), tool definitions, and model parameters — with secrets redacted.

Claude Code v2.1.224

Fri, 07 Aug 2026 04:00:59 GMT

Claude Code v2.1.224 adds self-hosted runners, cross-session messaging, archive plugins, JWT/AWS sandbox credential masking, and removes the 200-subagent cap. • New `claude self-hosted-runner` subcommand turns your own machines or containers into execution environments for Claude Code web, mobile, and desktop sessions (Team and Enterprise plans). • New `ANTHROPIC_BEDROCK_REGION_PREFIX` environment variable lets Bedrock users prefer a specific cross-region inference profile instead of the `AWS_REGION`-derived default. • New `crossSessionInbound` and `dialogExpiry` settings: cross-session messages sent to a bypassed-permission session are held for approval; messages to other sessions auto-deliver. • New sandbox credential-masking options: `extract` and `onExtractNoMatch` for structured env values; `decode: "jwt"` with `maskClaims` for JWT-aware masking; `awsPairs` and `sigv4` for AWS SigV4 re-signing — require `network.tlsTerminate` and honored only from user, managed, or `--settings` settings. • New `archive` plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning. • New cross-session `SendMessage` API lets Claude Code sessions message each other across any of your machines; `ListAgents` discovers available sessions (macOS and Linux). • Removes the 200-subagent-per-session spawn cap so long-running sessions are no longer blocked from spawning new agents (concurrency and depth limits still apply). • Remote Control now shows compaction progress and the post-compaction boundary to attached web and mobile clients, and propagates `/clear` resets to those clients. • Remote Control connection failures now display a persistent failure indicator with details and a reconnect shortcut instead of only an 8-second toast. • Fullscreen mode now retains the full pre-compaction history in scrollback across repeated compactions instead of only the most recent interval. • Feedback-survey transcript share now also uploads (with consent) the last request's model settings — system prompt (including `CLAUDE.md`), tool definitions, and model parameters — with secrets redacted.

Claude Code v2.1.223

Thu, 06 Aug 2026 00:52:37 GMT

Claude Code v2.1.223 adds owner wildcards for marketplace policies, a /teleport hint for cloud sessions, and /review alias improvements. • Adds owner wildcard entries (`"owner/*"`) to `strictKnownMarketplaces` and `blockedMarketplaces` managed settings, allowing admins to permit or block all marketplace repos under an entire GitHub org in one entry. • Changes `CLAUDE_CODE_DISABLE_1M_CONTEXT` to apply the 200K auto-compaction cap to every Claude model with a native 1M window dynamically rather than a fixed list, and adds a startup warning when auto-compaction is not holding the session to 200K. • Adds a `/teleport` hint in cloud sessions showing how to continue work locally with `claude --teleport `. • Makes `/review` an alias for `/code-review`, which reviews the current diff or a PR via `/code-review `; `/code-review ultra` triggers a deep cloud review. • Changes `/code-review` with no effort level to reuse the last typed level, so re-running the command does not require re-specifying the effort. • Adds a warning when a workflow agent, forked skill, slash command, or resumed background agent requests a subagent model that is restricted and the parent model runs instead.

Claude Code v2.1.223

Thu, 06 Aug 2026 00:52:37 GMT

Claude Code v2.1.223 adds org-level marketplace wildcards, teleport-to-local hints, and a smarter /code-review command. • Adds owner wildcard entries (`"owner/*"`) to the `strictKnownMarketplaces` and `blockedMarketplaces` managed settings, allowing admins to allow or block all marketplace repos under an entire GitHub org in one entry. • Adds `--teleport ` flag to `claude`, surfaced as a `/teleport` hint inside cloud sessions so practitioners can seamlessly continue a cloud session locally. • Adds `CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1` env var to restore previous behavior where sessions on unrecognized model IDs could grow past the assumed context window; default now enforces the window via auto-compaction. • Makes `/review` a proper alias of `/code-review`, which now supports `/code-review ` to review a specific PR and `/code-review ultra` for a deep cloud review. • Makes `/code-review` remember the last effort level used, so omitting a level reruns at the previous setting (e.g. `high`); pass a new level like `/code-review high` to override. • Adds a warning when workflow agents, forked skills, slash commands, or resumed background agents have their requested subagent model restricted and the parent model is substituted instead.

Claude Code v2.1.222

Tue, 04 Aug 2026 22:39:55 GMT

Claude Code v2.1.222 tightens auto-mode safety, improves diff accuracy, and restricts Remote Control auto-start to user scope • Remote Control auto-start can no longer be enabled via repo-local `.claude/settings.json` or `.claude/settings.local.json`; enable it at user scope via `/config` (those files can still turn it off). • Auto mode now routes messages sent to other agent sessions via `SendMessage` through the permission classifier before dispatch, preventing unreviewed cross-agent actions. • The `/diff` view, Remote Control workspace diff, and file-edit diffs in Claude Code web sessions now use raw git blob content, bypassing workspace-configured diff drivers and textconv for cleaner output. • Worktree-isolated sessions and their subagents can no longer run destructive git commands against the main checkout; isolation now covers file edits and Bash across every session type. • The `disable-model-invocation` refusal now instructs Claude to ask the user to run the skill instead of attempting to replicate its workflow. • Removes the ultraplan feature. Breaking changes: • Remote Control auto-start can no longer be enabled by repo-local settings (`.claude/settings.json` or `.claude/settings.local.json`); repos relying on those files to turn Remote Control on must switch to user-scope configuration via `/config`.

Claude Code v2.1.222

Tue, 04 Aug 2026 22:39:55 GMT

Claude Code v2.1.221

Tue, 04 Aug 2026 00:14:23 GMT

Claude Code v2.1.221 adds Focus view, sandbox credential masking, a prompt-audit subcommand, and sweeping workflow improvements. • Adds `mode: "mask"` for sandbox credential files on Linux and WSL — sandboxed commands read a sentinel copy (the whole file, or just spans captured by an `extract` regex) while the sandbox proxy substitutes the real value on egress; macOS falls back to `deny`. • Adds a `prompt-audit` subcommand to the `claude-api` skill for auditing prompts and tool descriptions for patterns written for older models. • Adds warnings to `claude plugin validate` when a marketplace or plugin name would be rejected by Claude Desktop's managed marketplace sync. • Changes `/status` to show the session kind: `interactive`, or a background job that is `attached` or `unattended`. • Changes sessions forked with `/fork` to create a new worktree of their own instead of working in the original session's checkout. • Changes plugins to accept `"."` as a `skills` path, with the root-level `SKILL.md` validation error now suggesting the plugin root. • Changes `/plugin install` to refresh a stale marketplace catalog and retry before reporting a plugin not found. • Changes plugins installed from `/plugin` to activate immediately when safe, instead of always requiring `/reload-plugins`. • Changes the Gateway `model` field validation to reject non-string values with a 400 instead of forwarding them. • Adds Focus view in VSCode: a chat-menu toggle that hides tool activity behind an expandable per-turn summary with a live running-tool indicator, toggled with `Ctrl+Alt+F` or the 'Claude Code: Toggle Focus view' command. • Improves Stats panel to count cache tokens in its token totals, with a breakdown by input, output, cache read, and cache write. • Re-enables tool search on Google Vertex AI for Claude 4.5-generation and newer models. • Changes background sessions to commit and push to preserve work, open a draft PR only when the task calls for one, follow `CLAUDE.md` git instructions, and always report where the work lives. • Changes emoji autocomplete to accept alternate shortcodes like `:thumbsup:`, `:thumbsdown:`, and `:love:`. • Changes Claude in Chrome to close browser tabs it opens once it no longer needs them. • Changes fast mode to report on the stream when usage credits run out mid-session, instead of failing silently. • Changes Monitor: a watch that exits without producing output now says so instead of reporting 'stream ended'. • Improves Windows startup to read process creation times via a native `kernel32` call instead of spawning PowerShell, so endpoint security tools that gate `powershell.exe` no longer prompt. • Improves `/ultrareview` error messages when a repo shares no history with its base: a checkout with no branches is now refused up front with advice to create one, and refusal hints no longer suggest `git fetch --unshallow` on already-complete clones. • Reduces prompt-cache costs for auto-mode permission checks by reusing the cached conversation prefix across decisions.

Claude Code v2.1.221

Tue, 04 Aug 2026 00:14:23 GMT

Claude Code v2.1.221 adds Focus view, sandbox credential masking, prompt-audit, and smarter plugin/session workflows • Adds `mode: "mask"` for sandbox credential files on Linux and WSL — sandboxed commands read a sentinel copy (whole file or spans captured by an `extract` regex) while the sandbox proxy substitutes the real value on egress; macOS falls back to `deny` • Adds a `prompt-audit` subcommand to the `claude-api` skill for auditing prompts and tool descriptions for patterns written for older models • Adds warnings to `claude plugin validate` when a marketplace or plugin name would be rejected by Claude Desktop's managed marketplace sync • [VSCode] Adds Focus view, toggled with `Ctrl+Alt+F` or the 'Claude Code: Toggle Focus view' command, hiding tool activity behind an expandable per-turn summary with a live running-tool indicator • Adds `'.'` as a valid `skills` path value in plugins, and the root-level `SKILL.md` validation error now suggests using the plugin root • `/status` now shows the session kind: `interactive`, or a background job that is `attached` or `unattended` • `/fork` now creates a new worktree for the forked session instead of sharing the original session's checkout • Plugins installed via `/plugin install` now activate immediately when safe, without requiring `/reload-plugins` • `/plugin install` now refreshes a stale marketplace catalog and retries before reporting a plugin not found • Background sessions now commit and push to preserve work, open a draft PR only when the task calls for one, follow `CLAUDE.md` git instructions, and always report where work lives • Tool search on Google Vertex AI re-enabled for Claude 4.5-generation and newer models • Stats panel now counts cache tokens in its token totals, with a breakdown by input, output, cache read, and cache write • Emoji autocomplete now accepts common alternate shortcodes like `:thumbsup:`, `:thumbsdown:`, and `:love:` • Windows startup no longer spawns `powershell.exe` to read process creation times, eliminating prompts from endpoint security tools that gate `powershell.exe` • Auto-mode permission checks for parallel tool calls are now cache-efficient, reducing prompt-cache costs by reusing the cached conversation prefix across decisions

Claude Code v2.1.219

Fri, 24 Jul 2026 17:14:23 GMT

Claude Code v2.1.219 adds Opus 5, sandbox network controls, depth-3 subagent nesting, and richer MCP diagnostics • Adds `sandbox.network.strictAllowlist` setting to deny all non-allowlisted hosts for sandboxed commands without prompting. • Adds `workflowSizeGuideline` settings key so the advisory dynamic workflow size guideline can be set from any settings file; the `/config` row is hidden while one is active. • Adds `mcp_server_errors` field to the headless stream-json init event, listing `--mcp-config` entries skipped by config validation; terminal runs also print a startup warning. • Adds `DirectoryAdded` hook that fires after `/add-dir` or the SDK `register_repo_root` control request registers a new working directory mid-session. • Subagents can now spawn nested subagents up to depth 3 (was 1); set `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH=1` to disable nesting. • Adds nested subagent forwarding in stream-json: subagents spawned at depth 2+ now appear when `--forward-subagent-text` is set, keyed by their spawning Agent `tool_use` id. • Adds Claude Opus 5 (`claude-opus-5`) as the new default Opus model with 1M context window, priced at $10/$50 per Mtok in fast mode. • Adds HTTP status and error text to `claude mcp list` and `/mcp` when a server fails to connect, plus a warning for MCP config values with hidden leading or trailing whitespace. • Adds structured failure categories to self-hosted runner spawn and session failures, distinguishing hook errors, runner crashes, and config errors. • Changes dynamic workflows to default to a medium size guideline (fewer than 15 agents); alternate sizes or unrestricted mode are selectable via `Dynamic workflow size` in `/config`. • Removes Opus 4.7 from fast mode; `/fast` now applies to Opus 5 and Opus 4.8. Breaking changes: • Opus 4.7 is removed from fast mode; `/fast` now applies only to Opus 5 and Opus 4.8. • Managed MCP allowlist/denylist `${VAR}` entries now resolve from the startup environment and managed-settings env instead of the settings-file env, which may change which values are substituted.

Claude Code v2.1.219

Fri, 24 Jul 2026 17:14:23 GMT

Claude Code v2.1.219 adds Opus 5, strict sandbox networking, new hooks, and depth-3 subagent nesting • Adds `sandbox.network.strictAllowlist` setting to deny non-allowlisted hosts for sandboxed commands without prompting — no user prompt, just block. • Adds `workflowSizeGuideline` settings key so the Dynamic workflow size guideline can be set from any settings file (the `/config` row is hidden while this key is active). • Adds `mcp_server_errors` field to the headless stream-json init event, listing `--mcp-config` entries skipped by config validation; terminal runs print a startup warning. • Adds `DirectoryAdded` hook that fires after `/add-dir` or the SDK `register_repo_root` control request registers a new working directory mid-session. • Adds nested subagent forwarding in stream-json: subagents spawned at depth-2+ now appear when `--forward-subagent-text` is set, keyed by their spawning Agent `tool_use` id. • Adds HTTP status and error text to `claude mcp list` and `/mcp` when a server fails to connect, plus a warning for MCP config values with hidden leading or trailing whitespace. • Adds Claude Opus 5 (`claude-opus-5`) as the new default Opus model — 1M context window, fast mode at $10/$50 per Mtok. • Subagents can now spawn nested subagents up to depth 3 (was 1); set `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH=1` to disable nesting. • Dynamic workflows now default to a medium size guideline (fewer than 15 agents); change via Dynamic workflow size in `/config`. • Removes Opus 4.7 from fast mode; `/fast` now applies to Opus 5 and Opus 4.8 only. Breaking changes: • Opus 4.7 is removed from fast mode; `/fast` now applies only to Opus 5 and Opus 4.8 — workflows pinned to Opus 4.7 in fast mode will no longer run in fast mode. • Subagent spawn depth default raised from 1 to 3; pipelines that relied on nesting being blocked at depth 2 will now allow deeper nesting unless `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH=1` is set.

Claude Code v2.1.218

Wed, 22 Jul 2026 21:24:56 GMT

Claude Code v2.1.218 runs /code-review as a background subagent and expands skill/plugin config with new boolean values • Accepts `yes`/`no`/`on`/`off`/`1`/`0` (case-insensitive) as valid boolean values for skill and plugin frontmatter, alongside `true`/`false`. • Skills with `context: fork` now run in the background by default; opt out per skill with `background: false` in frontmatter. • Agent markdown files now reject agent names containing `:` (reserved for plugin namespacing). • Adds HTTP status and error text to `claude mcp list` and `/mcp` output when a server fails to connect, plus a warning for MCP config values with hidden leading or trailing whitespace. • Changes `/code-review` to run as a background subagent, keeping stacked slash commands as its review target without filling the active conversation. • Changes `/deep-research` to start only on manual invocation; Claude no longer auto-launches it. • Adds screen-reader announcements of deleted text for word and line deletions (`Option+Delete`, `Ctrl+W`, `Cmd+Backspace`, `Ctrl+U`, `Ctrl+K`) in `--ax-screen-reader` mode. • Adds an announcement when fast mode changes as a result of switching models via `/config model=` or Remote Control. • Changes plan mode with auto so it no longer prompts for Bash commands the static analyzer cannot prove read-only; the auto-mode classifier judges them instead. • Improves auto mode: dangerous-rm, background-`&`, and suspicious-Windows-path checks no longer open permission dialogs — the auto-mode classifier adjudicates them. • Improves trust dialogs to name the repository root the grant covers. • Changes server-managed settings so benign feature and cost toggles no longer trigger the settings-approval prompt. Breaking changes: • Agent markdown files that use `:` in agent names will now be rejected; rename any such agents before upgrading.

Claude Code v2.1.218

Wed, 22 Jul 2026 21:24:56 GMT

Claude Code v2.1.218 runs /code-review as a background subagent, expands boolean syntax in frontmatter, and tightens auto-mode permission flow. • Adds `yes`/`no`/`on`/`off`/`1`/`0` (case-insensitive) as accepted boolean values in skill and plugin frontmatter, alongside the existing `true`/`false`. • Skills with `context: fork` now run in the background by default; opt out per-skill with `background: false` in frontmatter. • Switches `/code-review` to run as a background subagent, keeping stacked slash commands as its review target and preventing review output from flooding the conversation. • Adds HTTP status codes and error text to `claude mcp list` and `/mcp` when a server fails to connect, plus a warning for MCP config values with hidden leading or trailing whitespace. • Adds an announcement when fast mode changes due to a model switch via `/config model=` or Remote Control. • Changes `/deep-research` to start only when invoked manually — Claude no longer launches it autonomously. • Improves auto mode: dangerous-rm, background-`&`, and suspicious-Windows-path checks no longer open permission dialogs; the auto-mode classifier adjudicates them instead. • Changes plan mode with auto to no longer prompt for Bash commands the static analyzer cannot prove read-only; the auto-mode classifier judges them instead. • Changes server-managed settings so benign feature and cost toggles no longer trigger the settings-approval prompt. • Rejects agent names containing `:` in agent markdown files, reserving that character for plugin namespacing. • Adds screen-reader announcements of deleted text for `Option+Delete`, `Ctrl+W`, `Cmd+Backspace`, `Ctrl+U`, and `Ctrl+K` in `--ax-screen-reader` mode. • Improves trust dialogs to name the specific repository root the grant covers. • Improves `/ultrareview` so descriptive arguments like 'review my auth changes' run a branch review with the text applied as a note to findings, and invalid arguments surface actionable error feedback. Breaking changes: • Agent markdown files now reject agent names containing `:` — any existing agent whose name includes `:` will be refused on load.

Claude Code v2.1.217

Tue, 21 Jul 2026 21:35:10 GMT

Claude Code v2.1.217 adds emoji autocomplete, subagent concurrency controls, and new transcript-failure warnings. • Adds `emojiCompletionEnabled` setting to control emoji shortcode autocomplete in the prompt input — type `:heart:` to insert or `:hea` for suggestions; set `emojiCompletionEnabled` to false to disable. • Adds `CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS` environment variable to cap concurrently-running subagents (default 20), preventing a single message from fanning out unbounded background agents. • Adds `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH` environment variable to allow nested subagent spawning beyond the new default of zero (subagents no longer spawn nested subagents by default). • Adds `FORCE_HYPERLINK=0` environment variable to opt out of always-on footer PR badge hyperlinks, which are now clickable even when terminal hyperlink support cannot be detected (e.g. over SSH/tmux). • Adds warnings when transcript writes are failing (e.g. disk full) or when session saving is disabled due to an inherited environment variable, rather than silently losing transcripts. Breaking changes: • Subagents no longer spawn nested subagents by default; set `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH` to restore deeper nesting.

Claude Code v2.1.217

Tue, 21 Jul 2026 21:35:10 GMT

Claude Code v2.1.217 adds subagent concurrency caps, emoji autocomplete, transcript-failure warnings, and AWS gateway deployment assets. • Adds `CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS` environment variable (default 20) to cap concurrently-running subagents, preventing a single message from fanning out unbounded background agents. • Adds `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH` environment variable to allow nested subagent spawning; by default subagents no longer spawn nested subagents. • Adds `emojiCompletionEnabled` setting to control emoji shortcode autocomplete in the prompt input (type `:heart:` to insert or `:hea` for suggestions). • Adds `FORCE_HYPERLINK=0` environment variable to opt out of footer PR badge links being rendered as clickable hyperlinks even when terminal support cannot be detected (e.g. over ssh/tmux). • Adds AWS reference deployment assets under `examples/gateway/aws/` — including `setup.sh`, `Dockerfile`, `gateway.yaml.example` (Bedrock upstream, Okta IdP), and a `terraform/` module — for running Claude apps gateway on AWS with Amazon Bedrock. • Adds warnings when transcript writes are failing (e.g. disk full) or when session saving is off due to an inherited environment variable, instead of silently losing transcripts. Breaking changes: • Subagents no longer spawn nested subagents by default; set `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH` to restore deeper nesting.

Claude Code v2.1.216

Mon, 20 Jul 2026 22:14:00 GMT

Claude Code v2.1.216 adds `sandbox.filesystem.disabled` to decouple filesystem isolation from network egress control. • Adds `sandbox.filesystem.disabled` setting to skip filesystem isolation while keeping network egress control active. • Background sessions: `/mcp` and `/install-github-app` now park a 'needs input' request in the agent view when no client is attached. • The `/fork` confirmation now shows the new session's name, `claude attach` id, and a note when the copy shares the checkout. • The `/ultrareview` diff-too-large error now shows configured limits, measured diff size, and the largest contributing files. • The `/code-review ultra` empty-diff message now names the exact base ref and suggests passing an explicit base. • The `/context` command now shows an explicit warning when the conversation exceeds the context window, and a failed `/compact` displays as an error.

Claude Code v2.1.216

Mon, 20 Jul 2026 22:14:00 GMT

Adds `sandbox.filesystem.disabled` setting to decouple filesystem isolation from network egress control in Claude Code v2.1.216. • Adds `sandbox.filesystem.disabled` setting to skip filesystem isolation while keeping network egress control active. • `/fork` confirmation now shows the new session name, `claude attach` id, and a note when the copy shares your checkout — all on one line. • `/context` now shows an explicit warning when the conversation exceeds the context window, and a failed `/compact` displays as an error. • `/rewind` now reports how many tracked paths it skipped rather than silently restoring or deleting files through symlinks or hard links. • Background sessions: `/mcp` and `/install-github-app` now park a 'needs input' request in the agent view when no client is attached. • `/ultrareview` diff-too-large error now shows configured limits, measured diff size, and the largest contributing files. • `/code-review ultra` empty-diff message now names the exact base ref and suggests passing an explicit base. • Spend limit adjustment prompt now shows the server's reason when a spend limit change is rejected.

Claude Code v2.1.214

Sat, 18 Jul 2026 01:20:30 GMT

Claude Code v2.1.214 adds EndConversation tool, OTEL enhancements, and new docker permission prompts. • Adds `CLAUDE_CODE_OTEL_CONTENT_MAX_LENGTH` environment variable to configure the 60 KB truncation limit on OpenTelemetry content attributes. • Adds `message.uuid`, `client_request_id`, and `tool_source` attributes to OpenTelemetry log events for message-level correlation and tool provenance. • Adds permission prompts for `docker` commands (including the Podman `docker` shim) carrying daemon-redirect flags `--url`, `--connection`, `--identity`, and Podman's remote mode. • Adds the `EndConversation` tool, allowing Claude to end sessions with highly abusive users or jailbreak attempts. • Adds an ISO `modified` timestamp to memory file frontmatter. • Adds reasoning effort to the `subagentStatusLine` payload so custom agent rows can render model and effort. • Adds a periodic progress heartbeat for long-running tool calls that previously went silent. • Changes `SessionStart` hooks to report `source: 'fork'` when a session begins as a fork instead of `'resume'`. • Changes single-segment `dir/**` hook `if:` conditions to match only `/dir`; use `**/dir/**` for any-depth matching. • Changes `file` commands using `-m`/`--magic-file` or `-f`/`--files-from` to require permission instead of being auto-allowed as read-only. Breaking changes: • Single-segment `dir/**` hook `if:` conditions now match only `/dir`; any-depth matching requires rewriting the pattern to `**/dir/**`. • `file` commands using `-m`/`--magic-file` or `-f`/`--files-from` now require explicit permission instead of being auto-allowed as read-only — existing workflows relying on silent approval will now prompt. • `SessionStart` hooks now receive `source: 'fork'` instead of `source: 'resume'` when a session begins as a fork — hook logic that branches on `'resume'` may misclassify fork sessions.

Claude Code v2.1.212

Fri, 17 Jul 2026 00:26:27 GMT

Claude Code v2.1.212 adds per-session search/subagent caps, MCP auto-backgrounding, and a redesigned /fork workflow • Adds `CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION` environment variable to tune the new per-session WebSearch call limit (default 200), preventing runaway search loops. • Adds `CLAUDE_CODE_MAX_SUBAGENTS_PER_SESSION` environment variable to tune the new per-session subagent spawn cap (default 200); `/clear` resets the budget. • Adds `CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS` environment variable to configure (or disable) the threshold at which MCP tool calls running longer than 2 minutes automatically move to the background. • Adds `claude auto-mode reset` subcommand to restore the default auto-mode configuration; accepts `--yes` to skip the confirmation prompt. • Redesigns `/fork` to copy the conversation into a new background session (its own row in `claude agents`) while you keep working; the previous in-session subagent behavior is now `/subtask`. • Adds `/resume` in the agent view as a picker of past sessions — including sessions deleted from the list — resuming the selected one as a background session. • Enterprise `forceLoginMethod` is now enforced for VS Code extension, SDK, `setup-token`, and `install-github-app` logins, not just the terminal. • Headless/SDK sessions now apply a `set_model` control request mid-turn, switching models on the next round-trip without waiting for the next turn. • Agent view and `claude agents --json` now surface sessions waiting on a sandbox, MCP-input, or managed-settings prompt as 'Needs input' instead of 'Working'. • Session transcripts now record the reasoning effort level on each assistant message. • Reduces token usage in inter-agent messaging: `SendMessage` bodies are no longer duplicated into replayed history and tool results. • Improves prompt caching: the mid-conversation system block now works behind LLM gateways and custom base URLs (Bedrock, Vertex, 1P). Breaking changes: • The Task tool's `mode` parameter is deprecated and now ignored; subagents inherit the parent session's permission mode by default. • `/fork` no longer launches an in-session subagent — that behavior is now `/subtask`. Workflows that relied on `/fork` for subagent spawning must switch to `/subtask`.

Claude Code v2.1.211

Wed, 15 Jul 2026 23:02:35 GMT

Claude Code v2.1.211 adds `--forward-subagent-text` flag and `CLAUDE_CODE_FORWARD_SUBAGENT_TEXT` env var for subagent stream output, plus several workflow improvements. • Adds `--forward-subagent-text` flag and `CLAUDE_CODE_FORWARD_SUBAGENT_TEXT` environment variable to include subagent text and thinking in `stream-json` output. • Integer environment variables (timeouts, token budgets, retry counts) now accept scientific notation and digit-separator spellings like `1e6` and `64_000`. • Changes 'always allow' permission rules to save at the repository root, so approvals granted in a git worktree persist across sessions and worktrees. • Changes `/usage-credits` to ask for confirmation before sending a request to organization admins. • The `save_to_disk` option on Claude in Chrome screenshot actions now writes the image to disk and returns the path (previously did nothing). • Changes Vim mode `s` and `S` (substitute char/line) to work in NORMAL mode, matching standard vim behavior. • Improves background agent result reporting — Claude now reports the status of still-running agents and waits for real completion instead of fabricating results.

Claude Code v2.1.210

Tue, 14 Jul 2026 23:45:25 GMT

Claude Code v2.1.210 adds live tool-call timers, permission-rule warnings, screen reader announcements, and smarter agent dashboard cues. • Adds a live elapsed-time counter to the collapsed tool summary line so long-running tool calls visibly tick instead of appearing stuck. • Adds a startup warning when Write(path), NotebookEdit(path), or Glob(path) are used as permission rules, directing users to Edit(path) or Read(path) instead. • Screen reader mode now announces permission mode changes aloud when cycling modes with Shift+Tab. • Memory writes that leave a MEMORY.md index over its read limit now produce an explicit error instead of silent truncation. • The agents footer hint now shows how many background agents are waiting on input, with color emphasis when the count changes. • Improves auto mode: the permission classifier now defaults to Sonnet 5 for external sessions, validated on the first request and pinned for the session.

Claude Code v2.1.208

Tue, 14 Jul 2026 01:10:42 GMT

Claude Code v2.1.208 adds screen reader mode, vim insert remaps, corporate process wrapper, and mouse support in fullscreen menus. • Adds screen reader mode (`--ax-screen-reader` / `CLAUDE_AX_SCREEN_READER=1` / `axScreenReader: true`) for opt-in plain-text rendering. • Adds `vimInsertModeRemaps` setting to map two-key insert-mode sequences (e.g. `jj` → Escape) in vim mode. • Adds `CLAUDE_CODE_PROCESS_WRAPPER` env var so every Claude Code self-spawn is routed through a required corporate launcher executable. • Adds mouse-click support for multi-select menus and "Other" input rows in fullscreen mode. • Completed background agents now remain listed in `/tasks` until cleanup instead of disappearing immediately on finish. • Ctrl+X in agent view deletes renamed-branch worktrees while protecting unpushed commits and preserving the session row when a worktree is kept. • Catastrophic removals (e.g. `rm -rf ~`) inside command substitutions ($(…), backticks, <(…)) now prompt even in `--dangerously-skip-permissions` and auto mode. • Per-tool-call CPU overhead in print/SDK sessions reduced up to 7× at high MCP tool counts via tool-pool assembly caching. • Session transcript size reduced up to 79× in edit-heavy sessions by pruning superseded file-history backups. • `/usage` now shows last-known usage bars with an "as of" note when the usage endpoint is rate-limited, instead of an error screen.

Claude Code v2.1.207

Sat, 11 Jul 2026 00:52:10 GMT

Claude Code v2.1.207 makes Auto Mode generally available on Bedrock, Vertex, and Foundry and tightens plugin security. • Auto mode is now available on Bedrock, Vertex AI, and Foundry without the `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in flag; disable via `disableAutoMode` in settings. • Bedrock, Vertex, and Claude Platform on AWS now default to Claude Opus 4.8. • Plugin hooks/monitors/MCP headersHelper: `${user_config.*}` in shell-form commands is now rejected; hooks must use exec form (`args` array) or `$CLAUDE_PLUGIN_OPTION_`. • Plugin option values (`pluginConfigs`) are no longer read from project-level `.claude/settings.json`; only user, `--settings`, and managed settings are honored. • Agent view: pasting the same text again now expands the existing collapsed `[Pasted text #N]` placeholder instead of creating a duplicate. • Agent view: blocked session peeks now lead with the question and display a worded staleness clock (e.g. `waiting 3m`). • `/doctor` now reports when the launcher at `~/.local/bin/claude` is externally managed. Breaking changes: • Auto mode no longer reads `autoMode` from `.claude/settings.local.json` (repo-resident); move the setting to `~/.claude/settings.json`. • `${user_config.*}` interpolation in shell-form plugin hook/monitor/headersHelper commands is rejected; switch to exec form (`args` array) or `$CLAUDE_PLUGIN_OPTION_` for hooks, or read the value inside the script for monitors and headersHelper. • `pluginConfigs` plugin option values are no longer read from project-level `.claude/settings.json`; only user-level, `--settings`, and managed settings are honored.

Claude Code v2.1.206

Fri, 10 Jul 2026 01:45:26 GMT

Claude Code v2.1.206 adds directory suggestions for /cd, a /doctor CLAUDE.md trimmer, smarter git push remotes, and faster background agent upgrades. • Adds directory path suggestions to `/cd`, matching the autocomplete behavior already available in `/add-dir`. • New `/doctor` check analyzes checked-in `CLAUDE.md` files and proposes trimming content Claude can derive directly from the codebase. • `/commit-push-pr` now auto-allows `git push` to the repo's configured `remote.pushDefault` (or the sole remote when only one exists), not just `origin`. • `/login` now supports Anthropic-operated public gateway endpoints. • `EnterWorktree` prompts for confirmation before entering a git worktree outside the project's `.claude/worktrees/` directory. • Background agents upgrade to a new Claude Code version immediately after an update, eliminating the slow stale-session upgrade cost on attach. • Agents view status column now uses full terminal width instead of truncating at 64 characters. • Ctrl+X in the agents view now permanently removes a completed session; deleted background jobs stay deleted across renders.

Claude Code v2.1.205

Wed, 08 Jul 2026 21:22:06 GMT

Claude Code v2.1.205 adds a full `/doctor` setup checkup, smarter agent view with PR linking, and a new auto-mode safety rule for `rm -rf`. • Adds an auto mode rule that blocks tampering with session transcript files. • Adds auto mode prompt before running `rm -rf` on a variable it can't resolve from context. • Improves agent view: sessions that edit, merge, comment on, or push to an existing PR now link it in `claude agents`. • Improves agent view: rows now show a colored state word and a classifier-written headline instead of raw tool call text, with full status and exact ask for blocked sessions in the peek. • Background task notifications now explicitly state that no human input has occurred, preventing fabricated in-transcript approvals from being acted on. • Auto-update binary downloads now stream to disk instead of buffering in memory, cutting peak updater memory usage by roughly 400 MB. • Reserves the 'Claude Browser' MCP server name (alongside 'Claude Preview'); user-configured MCP servers can no longer register under either name. Breaking changes: • User-configured MCP servers can no longer register under the name 'Claude Browser' or 'Claude Preview'; servers using either name will be rejected.

Claude Code v2.1.203

Tue, 07 Jul 2026 21:06:12 GMT

Claude Code v2.1.203 adds login-expiry warnings, MCP roots integration, a manual-permission badge, and a VSCode remote-control toggle. • Adds a warning when your login session is about to expire so you can re-authenticate before background sessions are interrupted. • Adds a grey ⏸ badge to the footer when manual permission mode is active, making the current mode always visible. • Exposes the session's additional working directories via MCP `roots/list`, with `notifications/roots/list_changed` fired whenever the set changes. • Moves 'claude command missing or broken' startup warnings out of the launch flow into `/doctor` and `/status` for on-demand review. • Changes the `claude agents` detail views (background tasks, diff, workflow) to close with Esc instead of the left arrow key. • Redesigns the empty `claude agents` view to always display organized sections (Needs Input / Working / Completed) with descriptions. • [VSCode] Adds a Settings toggle for 'Enable Remote Control for all sessions'. Breaking changes: • The left arrow key no longer closes the background tasks, diff, and workflow detail views — press Esc instead.

Claude Code v2.1.202

Mon, 06 Jul 2026 22:51:16 GMT

Claude Code v2.1.202 adds dynamic workflow sizing, OTel workflow attributes, and a multi-level `/code-review` command. • New 'Dynamic workflow size' setting in `/config` lets you guide how many agents Claude spawns in dynamic workflows (small/medium/large) — advisory, not a hard cap. • Adds `workflow.run_id` and `workflow.name` OpenTelemetry attributes to telemetry from workflow-spawned agents, enabling full reconstruction of a workflow run from OTel data. • New `/code-review ` command runs a multi-agent PR review at a chosen effort level; `/review ` reverts to fast single-pass review. Breaking changes: • `/review ` now performs a fast single-pass review instead of the multi-agent review; use `/code-review ` to get multi-agent review behavior.

Claude Code v2.1.200

Fri, 03 Jul 2026 16:52:33 GMT

Claude Code v2.1.200 makes 'Manual' the default permission mode and adds opt-in idle timeout for AskUserQuestion dialogs. • Changes `--permission-mode manual` and `"defaultMode": "manual"` in config to be the new default permission mode across CLI, `--help`, VS Code, and JetBrains (previously called 'default'). • Adds opt-in idle timeout for `AskUserQuestion` dialogs via `/config`, replacing the previous auto-continue behavior.

Claude Code v2.1.199

Thu, 02 Jul 2026 23:35:18 GMT

Claude Code v2.1.199 adds stacked skill invocations, auto-retry on 429s, and an elevated retry watchdog cap. • Supports stacked slash-skill invocations (`/skill-a /skill-b do XYZ`) loading up to 5 leading skills simultaneously, not just the first. • Transient server rate-limit errors (429s unrelated to usage limits) are now automatically retried with backoff for subscribers instead of failing the turn. • New `CLAUDE_CODE_RETRY_WATCHDOG` behaviour raises the default retry count for non-capacity transient errors to 300 and removes the previous cap of 15 on `CLAUDE_CODE_MAX_RETRIES`. • Pull-request links in `claude agents` session rows now render as bare `#N` for cleaner output.

Claude Code v2.1.198

Wed, 01 Jul 2026 20:45:36 GMT

Claude Code v2.1.198 ships background subagents by default, auto-PR on worktree completion, /dataviz skill, and AWS upstream gateway support. • Subagents now run in the background by default, letting Claude continue working and receive notifications when they finish. • Claude in Chrome is now generally available. • Adds `agent_needs_input` and `agent_completed` notification hooks to `claude agents` via the `Notification` hook. • New `/dataviz` skill for chart and dashboard design guidance with a runnable color-palette validator. • Gateway adds Claude Platform on AWS (`anthropicAws`) as an upstream provider; model-not-found responses now advance the failover chain. • Background agents launched from `claude agents` now automatically commit, push, and open a draft PR when they finish code work in a worktree. • The built-in Explore agent now inherits the main session's model (capped at opus) instead of running on haiku. • Subagents and context compaction now inherit the session's extended thinking configuration, improving output quality on delegated tasks. • Improved focus mode: subagents launched in a turn appear in its activity summary, and completed background notifications fold into a single count. • Syntax highlighting accuracy improved in code blocks, diffs, and file previews by upgrading to highlight.js 11. • Keyboard shortcut hints now show `opt`/`cmd` instead of `alt`/`super` when connected from a Mac over SSH. • API retry UX now shows the error reason after the second attempt, and displays a status page link when the API is overloaded. • `/login` now opens the sign-in dialog from the `claude agents` view. • Subagents now treat messages from the agent that launched them as normal task direction. • Removed the `/agents` wizard; subagents are now created by asking Claude or editing `.claude/agents/` directly. Breaking changes: • The `/agents` wizard has been removed; subagent creation must now be done by asking Claude directly or editing `.claude/agents/` manually. • `claude --bg` combined with `--print`/`-p` is now rejected up front instead of silently creating an unattachable session.

Claude Code v2.1.197

Tue, 30 Jun 2026 17:56:37 GMT

Claude Sonnet 5 is now the default model in Claude Code, with a 1M-token context window and promotional pricing through August 31. • Switches default model to Claude Sonnet 5, featuring a native 1M-token context window for working across massive codebases in a single session. • Introduces promotional pricing of $2/$10 per million input/output tokens through August 31, 2025.

Claude Code v2.1.196

Mon, 29 Jun 2026 23:27:32 GMT

Claude Code v2.1.196 adds org-default models, clickable file attachments, and an always-on stream watchdog. • Adds organization default models: admins set a model in the org console; users see 'Org default' or 'Role default' in `/model` when no personal selection is made. • Adds readable default session names at start, making sessions easier to identify and resume. • Adds clickable file attachments in chat — Cmd/Ctrl-click reveals the file in Finder/Explorer. • Enables the streaming idle watchdog by default for all providers: aborts and retries any response stream that produces no events for 5 minutes; disable with `CLAUDE_ENABLE_STREAM_WATCHDOG=0`. • Improves background agents: workers killed by a daemon restart are automatically resumed from where they left off when the agents view next opens. • Improves `/code-review` workflow: merges five cleanup finders into one, cutting token usage by roughly 25%. • Disables Remote Control automatically when `ANTHROPIC_BASE_URL` points at a non-Anthropic host, matching existing behavior under `CLAUDE_CODE_USE_BEDROCK`/`_VERTEX`/`_FOUNDRY`. • Hardens `claude mcp list`/`get`: untrusted workspaces no longer auto-spawn `.mcp.json` servers self-approved via a committed `.claude/settings.json`; such servers show `⏸ Pending approval` instead. Breaking changes: • Opening the agents view from a foreground session now requires a single `←` press instead of two.

Claude Code v2.1.195

Fri, 26 Jun 2026 21:29:42 GMT

Claude Code v2.1.195 adds mouse-disable env var for fullscreen mode and improves remote session startup UX. • Adds `CLAUDE_CODE_DISABLE_MOUSE_CLICKS` env var to suppress mouse click/drag/hover in fullscreen mode while preserving wheel scroll. • Improves `claude agents` completed list to fill available vertical space, with a compacting header on short terminals so live sessions stay visible. • Improves remote session startup with a provisioning checklist displayed while the container initializes. • Improves Linux voice mode to distinguish between 'no microphone detected' and 'SoX not installed' when SoX is present but no capture device exists. Breaking changes: • Hook matchers now exact-match hyphenated identifiers (e.g. `code-reviewer`, `mcp__brave-search`) instead of substring-matching — existing hooks that relied on partial matches will stop firing; use `mcp__brave-search__.*` to match all tools from a hyphenated MCP server.

Claude Code v2.1.193

Thu, 25 Jun 2026 21:45:57 GMT

Claude Code v2.1.193 adds shell classifier routing, OTEL response logging, live path autocomplete, and memory-pressure reaping for background shells. • New `autoMode.classifyAllShell` setting routes all Bash/PowerShell commands through the auto-mode classifier, not just arbitrary-code-execution patterns. • Adds auto-mode denial reasons to the transcript, denial toast, and `/permissions` recent denials for better visibility into blocked actions. • New `claude_code.assistant_response` OpenTelemetry log event captures the model's full response text (redacted by default; enable with `OTEL_LOG_ASSISTANT_RESPONSES=1`). • Adds live file path autocomplete in bash mode (`!`) for faster command entry. • Adds a startup notice when MCP servers need authentication, pointing users to `/mcp`. • Adds automatic memory-pressure reaping for idle background shell commands (disable with `CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP=1`). Breaking changes: • The `claude_code.assistant_response` OTEL log event is emitted by default when `OTEL_LOG_USER_PROMPTS` is enabled — deployments that already log prompt content will also start receiving response content on upgrade. Set `OTEL_LOG_ASSISTANT_RESPONSES=0` to keep prompts-only logging.

Claude Code v2.1.191

Wed, 24 Jun 2026 21:58:12 GMT

Claude Code v2.1.191 adds `/rewind` to restore conversations before `/clear`, cuts streaming CPU usage ~37%, and hardens MCP reliability. • Adds `/rewind` command to resume a conversation from the state it was in before `/clear` was run. • Sandbox network permission dialog now remembers allowed hosts for the entire session, eliminating repeated prompts. • MCP capability discovery (`tools/list`, `prompts/list`, `resources/list`) now retries transient network errors with backoff, improving server reliability. • MCP OAuth in headless environments skips the browser popup and goes directly to the paste-the-URL prompt. • MCP HTTP 404 errors now surface the URL and point to the MCP config file for faster debugging.

Claude Code v2.1.187

Tue, 23 Jun 2026 21:03:48 GMT

Claude Code v2.1.187 adds sandbox credential blocking, org model restrictions, and mouse support in fullscreen menus. • Adds `sandbox.credentials` setting to block sandboxed commands from reading credential files and secret environment variables. • Adds org-configured model restrictions enforced across the model picker, `--model`, `/model`, and `ANTHROPIC_MODEL`, with a clear 'restricted by your organization's settings' message. • Adds mouse click support for selecting menus (permission prompts, `/model`, `/config`, etc.) in fullscreen mode. • Improves `/install-github-app` to make GitHub Actions workflow setup optional — install just the GitHub App and skip the workflow/secret steps. • Improves `/btw` with ←/→ arrow navigation to step through earlier answers. • Improves `/plugin` to surface recently unused plugins for easier cleanup.

Claude Code v2.1.186

Mon, 22 Jun 2026 20:37:34 GMT

Claude Code v2.1.186 adds CLI MCP auth, bash auto-response, SSH-friendly headless login, and richer workflow/plugin views. • Adds `claude mcp login ` and `claude mcp logout ` to authenticate MCP servers directly from the CLI, with `--no-browser` stdin redirect for SSH sessions. • Adds `!` bash command auto-response: Claude now automatically replies to bash command output; disable with `"respondToBashCommands": false` in settings.json. • Adds status filtering (press `f`) to the `/workflows` agent detail view. • Adds a 'Skills' section to the `/plugin` Installed tab. • Adds `teammateMode: "iterm2"` setting with a warning when auto mode cannot find the `it2` CLI. • Adds 'Claude Platform on AWS - refresh credentials' option to `/login` when `awsAuthRefresh` is configured. • Background subagents now surface permission prompts in the main session instead of auto-denying, showing which agent is asking; Esc denies just that tool. • Improves memory: the agent is now reminded to compact its `MEMORY.md` index when nearing the size limit. • Improves skill frontmatter to accept `display-name`, `default-enabled`, `fallback`, and `metadata.*` keys in kebab-case, snake_case, and camelCase. • Improves malformed `SKILL.md` YAML frontmatter handling: loads the skill body with empty metadata instead of failing silently. • Changes `/review ` to use the same review engine as `/code-review medium`. Breaking changes: • `CLAUDE_CODE_MAX_RETRIES` is now capped at 15; unattended sessions that relied on higher values must switch to `CLAUDE_CODE_RETRY_WATCHDOG` instead.

Claude Code v2.1.183

Fri, 19 Jun 2026 01:20:50 GMT

Claude Code v2.1.183 adds IaC destroy guards, deprecated-model warnings, and a new attribution.sessionUrl setting. • Blocks destructive git commands (`git reset --hard`, `git checkout -- .`, `git clean -fd`, `git stash drop`) in auto mode unless you explicitly asked to discard local work, and blocks `git commit --amend` on commits not made by the agent this session. • Blocks `terraform destroy`, `pulumi destroy`, and `cdk destroy` in auto mode unless you asked for the specific stack. • Adds a warning on stderr (in `-p` print mode) when the requested model is deprecated or auto-updated to a newer model, now also covering models set in agent frontmatter. • Adds `attribution.sessionUrl` setting to omit the claude.ai session link from commits and PRs in web and Remote Control sessions. • Adds `/config --help` to list all available shorthand keys for `/config key=value`. • Changes `/config` toggle behavior: Enter and Space both change the selected setting; Esc now saves and closes instead of reverting. Breaking changes: • The `/config` Esc key no longer reverts changes — it now saves and closes the config panel. • The startup 'setup issues' line under the logo has been removed; run `/doctor` or use `--debug` to see configuration issues.

Claude Code v2.1.181

Wed, 17 Jun 2026 22:07:41 GMT

Claude Code v2.1.181 adds in-prompt config setting, Apple Events sandbox opt-in, and a presence-file push-notification suppressor. • Adds `/config key=value` slash command to set any configuration value directly from the prompt (e.g. `/config thinking=false`), works in interactive mode, `-p`, and Remote Control. • Adds `sandbox.allowAppleEvents` opt-in setting so sandboxed commands can send Apple Events on macOS. • Adds `CLAUDE_CLIENT_PRESENCE_FILE` environment variable: point it at a marker file to suppress mobile push notifications while at the machine. • Upgrades the bundled Bun runtime to v1.4. • Improves streaming of long paragraphs: text now appears line-by-line instead of waiting for the first line break. • Improves subagent panel: idle subagents auto-hide after 30 s, list caps at 5 rows with scroll hints, and keyboard hints appear in the footer. • Improves MCP OAuth browser page to match Claude Code's visual style and auto-close on success. • Changes fullscreen mode URL opening to require Cmd+click (macOS) / Ctrl+click, matching native terminal behavior. Breaking changes: • Fullscreen mode URL opening now requires Cmd+click (macOS) / Ctrl+click; plain clicks no longer open URLs.

Claude Code v2.1.178

Mon, 15 Jun 2026 21:35:55 GMT

Claude Code v2.1.178 adds parameter-matching permission rules, smarter nested skill/directory scoping, and tighter subagent safety checks. • Adds Tool(param:value) syntax for permission rules to match on a tool's input parameters, with `*` wildcard support (e.g. Agent(model:opus) to block Opus subagents). • Nested `.claude/skills` directories now load automatically when working in their directory; name clashes surface as `:` so both skills remain accessible. • Nearest-wins scoping for nested `.claude/` directories: agent, workflow, and output-style configs closest to the working directory take precedence; project-scope workflow saves target the closest existing `.claude/workflows/`. • Auto mode now evaluates subagent spawns through the classifier before launch, preventing a subagent from requesting a blocked action without review. • Improves `/doctor` with a consistent flat tree layout, clearer section status icons, and highlighted command names. • Improves the skill listing truncation warning to show how many skill descriptions are affected. • Changes the workflow prompt keyword to a purple shimmer highlight, triggering only on explicit phrases like "run a workflow" or "workflow:" rather than any mention of the word. • Improves Remote Control error messages: connection failures show a persistent red "/rc failed" footer indicator, and "not yet enabled" errors now explain whether the cause is a gate, check failure, stale entitlement, or org policy. • `/bug` now requires a description before submission and no longer uses model-refusal text as the GitHub issue title.

Claude Code v2.1.176

Fri, 12 Jun 2026 21:53:27 GMT

Claude Code v2.1.176 adds language-aware session titles, footer link badges, and smarter Bedrock credential caching. • Session titles are now generated in the language of the conversation; pin a specific language with the `language` setting. • New `footerLinksRegexes` setting lets you add regex-matched link badges to the footer row via user or managed settings.

Claude Code v2.1.175

Fri, 12 Jun 2026 04:23:51 GMT

Claude Code adds `enforceAvailableModels` managed setting to lock model selection within admin-defined allowlists. • Adds `enforceAvailableModels` managed setting that forces the Default model to fall back to the first allowed model when it would otherwise resolve to a disallowed model, and prevents users or projects from widening a managed `availableModels` list.

Claude Code v2.1.174

Fri, 12 Jun 2026 01:16:36 GMT

Claude Code v2.1.174 adds wheel-scroll acceleration control and detailed VS Code usage attribution breakdowns. • Adds `wheelScrollAccelerationEnabled` setting to disable mouse-wheel scroll acceleration in fullscreen mode. • Adds usage attribution panel in the VS Code Account & usage dialog (`/usage`) showing cache misses, long context, subagents, and per-skill/agent/plugin/MCP breakdowns over the last 24h or 7d.

Claude Code v2.1.172

Wed, 10 Jun 2026 20:44:15 GMT

Claude Code v2.1.172 adds recursive sub-agents (5 levels deep), Bedrock region auto-detection, plugin search, and a new OTEL model attribute. • Enables sub-agents to spawn their own sub-agents, up to 5 levels of nesting. • Amazon Bedrock now auto-detects AWS region from `~/.aws` config files following AWS SDK precedence when `AWS_REGION` is unset; `/status` shows the region source. • Adds a search bar inside the `/plugin` marketplace browser for filtering plugins. • Adds a `model` attribute to the `claude_code.lines_of_code.count` OTEL metric, enabling per-model telemetry breakdowns.

Claude Code v2.1.170

Tue, 09 Jun 2026 17:23:09 GMT

Claude Code v2.1.170 adds access to Claude Fable 5, Anthropic's most capable generally available model. • Adds access to Claude Fable 5 (Mythos-class model), Anthropic's most capable generally available model.

Claude Code v2.1.169

Mon, 08 Jun 2026 21:57:18 GMT

Claude Code v2.1.169 adds --safe-mode, /cd command, and disableBundledSkills for cleaner troubleshooting and session control. • Adds `--safe-mode` flag (and `CLAUDE_CODE_SAFE_MODE` env var) to launch with all customizations disabled — CLAUDE.md, plugins, skills, hooks, and MCP servers — for clean troubleshooting. • Adds `/cd` command to change the working directory mid-session without breaking the prompt cache. • Adds `disableBundledSkills` setting and `CLAUDE_CODE_DISABLE_BUNDLED_SKILLS` env var to hide bundled skills, workflows, and built-in slash commands from the model. • Adds `--all` flag to `claude agents --json` to include completed sessions; also surfaces new `id` and `state` fields on each session entry. • The `claude agents --json` command now correctly includes blocked and just-dispatched background sessions. • Background sessions now preserve `--ide`, `--chrome`, `--bare`, `--remote-control`, and other flags across retire→wake cycles. • Remote-managed settings with an invalid entry now apply remaining valid policies and surface the validation error instead of silently dropping the whole payload. • `/workflows` command now opens immediately even while a turn is in progress. • The "CLAUDE.md is too long" warning threshold now scales with the model's context window. • Adds a tip suggesting `claude agents` when running multiple concurrent sessions.

Claude Code v2.1.166

Sat, 06 Jun 2026 00:55:18 GMT

Claude Code v2.1.166 adds fallback model chains, glob-based tool deny rules, and hardened cross-session security. • Adds `fallbackModel` setting to configure up to three fallback models tried in order when the primary model is overloaded or unavailable; `--fallback-model` now also applies to interactive sessions. • Adds glob pattern support in deny rule tool-name position (`"*"` denies all tools); allow rules reject non-MCP globs, and unknown tool names in deny rules warn at startup. • Hardens cross-session messaging: messages relayed via `SendMessage` from other Claude sessions no longer carry user authority — receivers refuse relayed permission requests, and auto mode blocks them. • Enables disabling thinking on models that think by default via the Claude API using `MAX_THINKING_TOKENS=0`, `--thinking disabled`, or the per-model thinking toggle (3P providers unchanged). • Retries a turn once on the fallback model when the API rejects an unexpected non-retryable error; auth, rate-limit, request-size, and transport errors still surface immediately. • `claude update` now announces the target version before downloading. • In `claude agents`, typing a URL into the session list now filters to the session whose first prompt contained it.

Claude Code v2.1.163

Thu, 04 Jun 2026 21:52:51 GMT

Claude Code v2.1.163 adds version enforcement settings, `/plugin list`, hook feedback context, and stdio MCP session IDs. • Adds `requiredMinimumVersion` and `requiredMaximumVersion` managed settings to enforce a permitted Claude Code version range, refusing startup if the installed version falls outside it. • New `/plugin list` command lists installed plugins, with `--enabled`/`--disabled` filters to narrow results. • Adds a 'c to copy' shortcut in `/btw` that copies the raw markdown answer to the clipboard, preserving formatting on paste. • Skills: new `\$` escape syntax lets command bodies include a literal `$` before a digit. • stdio MCP servers now receive the same `CLAUDE_CODE_SESSION_ID` environment variable as hooks and Bash when using `--resume`. • Background agent sessions now update to a new Claude Code version silently in the background, eliminating cold-restart wait times when reopening a session after an update.

Claude Code v2.1.162

Wed, 03 Jun 2026 21:31:35 GMT

claude agents gets richer status info, --tools Grep/Glob now works on native builds, and /effort persists as default. • Adds `waitingFor` field to `claude agents --json` output, showing what a waiting session is blocked on (e.g. a permission prompt). • Explicitly listing `Grep` or `Glob` in `--tools` now activates the dedicated embedded search tools on native builds (previously silently ignored). • The `/effort` command now confirms when the chosen level will persist as the default for new sessions. • Clicking a slash command in the autocomplete menu fills it into the prompt instead of running it immediately — press Enter to run. • Remote Control status is now shown as a persistent footer pill with a session link instead of a one-time startup message. • Launch-prompt warnings (deep link/pre-filled prompt) now stay pinned below the input until acted upon instead of scrolling away. • Background service startup and `claude update` now wait for endpoint-security scanning of new binaries instead of timing out after 5 seconds.

Claude Code v2.1.161

Tue, 02 Jun 2026 21:58:22 GMT

Claude Code v2.1.161 adds OTEL label slicing, smarter agents UI, MCP connector collapsing, and independent parallel tool results. • Adds `OTEL_RESOURCE_ATTRIBUTES` values as labels on metric datapoints, enabling usage metrics to be sliced by custom dimensions like team or repo. • Shows `done/total` progress before detail text in `claude agents` rows when work is fanned out; peek view highlights the longest-running item. • Collapses never-signed-in claude.ai connectors in `/mcp` behind a 'Show unused connectors' row to reduce noise. • Parallel tool calls now return independent results — a failed Bash command no longer cancels sibling calls in the same batch.

Claude Code v2.1.160

Tue, 02 Jun 2026 02:10:25 GMT

Claude Code v2.1.160 adds shell-startup write prompts, safer acceptEdits mode, and a grep-satisfies-read shortcut. • Adds a confirmation prompt before writing to shell startup files (`.zshenv`, `.zlogin`, `.bash_login`) and `~/.config/git/` to prevent unintended command execution. • In `acceptEdits` mode, prompts before writing build-tool config files that grant code execution (`.npmrc`, `.yarnrc*`, `bunfig.toml`, `.bazelrc`, `.pre-commit-config.yaml`, `.devcontainer/`, etc.). • Single-file `grep`/`egrep`/`fgrep` commands now satisfy the read-before-edit check, eliminating the need for a separate Read step after grepping a file. • Renames the dynamic-workflow trigger keyword from `workflow` to `ultracode`; the keyword is highlighted in violet in the prompt input. Breaking changes: • The `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable is removed and is now a no-op. • The dynamic-workflow trigger keyword is renamed from `workflow` to `ultracode`; the word `workflow` no longer triggers a dynamic workflow run.

Claude Code v2.1.157

Fri, 29 May 2026 20:20:38 GMT

Claude Code v2.1.157 adds auto-loaded plugins, plugin scaffolding, richer telemetry, and smarter agents dispatch. • Adds automatic loading of plugins from `.claude/skills` directories — no marketplace required. • New `claude plugin init ` command scaffolds a new plugin directly into `.claude/skills`. • Adds autocomplete for `/plugin` arguments: subcommands, installed plugin names, and plugins from known marketplaces. • Honors the `agent` field in `settings.json` for dispatched sessions, with `--agent ` to override per-run. • `EnterWorktree` can now switch between Claude-managed worktrees mid-session. • `tool_decision` telemetry events now include `tool_parameters` (bash commands, MCP/skill names) when `OTEL_LOG_TOOL_DETAILS=1` is set. • Claude-managed worktrees are left unlocked after an agent finishes, enabling clean `git worktree remove`/`prune` workflows. • Adds a 'Workflow keyword trigger' setting in `/config` to prevent the word 'workflow' in a prompt from triggering a dynamic workflow. • Slash-command autocomplete in the `claude agents` dispatch input now matches substrings. • Pressing backspace immediately after a workflow trigger keyword dismisses the workflow request instead of deleting a character.

Claude Code v2.1.154

Thu, 28 May 2026 18:00:55 GMT

Claude Code v2.1.154 adds Opus 4.8 with fast mode, dynamic multi-agent workflows, shell background sessions, and smarter plugin discovery. • Adds Claude Opus 4.8 as the new default model with `/effort xhigh` for maximum effort on hard tasks. • Introduces dynamic workflows: ask Claude to orchestrate work across tens to hundreds of background agents; view runs with `/workflows`. • Fast mode on Opus 4.8 now available at 2× the standard rate for 2.5× the speed. • The lean system prompt is now the default for all models except Haiku, Sonnet, and Opus 4.7 and earlier. • Reduces unsolicited multiple-choice prompts: Claude now reserves them for decisions it genuinely cannot make itself. • `claude agents`: type `! ` to run a shell command as a background session you can attach to and detach from; also available as `claude --bg --exec ''`. • `claude agents`: `/logout` now signs you out instead of routing to a background session. • The `←←` agents view shortcut now works on Bedrock, Vertex, Foundry, and with telemetry disabled. • Claude in Chrome: choose which connected browser to use via `/chrome` → "Select browser…" or inline during a browser action with multiple browsers connected. • Plugins can declare `defaultEnabled: false` in `plugin.json` or a marketplace entry; enable them with `/plugin` or `claude plugin enable`. Dependencies of enabled plugins are still auto-enabled. • The `/plugin` Discover tab now pins contextually relevant plugins with a "suggested for this directory" annotation. • Streaming tool execution is now always on, including when telemetry is disabled or on Bedrock/Vertex/Foundry (previously behind a feature flag). • Stdio MCP server subprocesses now receive `CLAUDE_CODE_SESSION_ID` and `CLAUDECODE=1` environment variables. • `claude mcp list`/`get` now show unapproved `.mcp.json` servers as `⏸ Pending approval` when output is piped, instead of auto-approving and connecting. • Improves auto-mode classifier detection of data exfiltration, particularly bulk transfers of repository contents. Breaking changes: • `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` is deprecated and will be removed on 06/01; switch to `/model claude-opus-4-6[1m]` then `/fast on` to use fast mode on Opus 4.6. • The lean system prompt is now the default for all models except Haiku, Sonnet, and Opus 4.7 and earlier, which may change Claude's behavior on upgrade for affected model users. • `/simplify` no longer runs the full `/code-review --fix` bug-hunting review; it now performs a cleanup-only pass.

Claude Code v2.1.153

Thu, 28 May 2026 00:52:08 GMT

Claude Code v2.1.153 adds LFS-skip for marketplace sources, richer agent autocomplete, terminal-aware status scripts, and persistent macOS permissions. • Adds `skipLfs` option to `github`/`git` plugin marketplace sources to skip Git LFS downloads during clone and update. • Adds `COLUMNS` and `LINES` environment variables to status line commands so scripts can size output to the terminal width. • Expands `claude agents` dispatch autocomplete to suggest native slash commands and bundled skills, not just project skills. • Updates `claude agents` PR column to display `PR #N` for a single PR or `N PRs` for multiple. • Merges separate 'needs authentication' startup notices for MCP servers and connectors into a single message. • macOS background agents now appear as 'Claude Code' in Privacy & Security and retain permission grants across upgrades. • New `/model` picker saves your model selection as the default for new sessions; press `s` to switch for the current session only. • Moving `/bg` while Claude is responding now continues the response in the background session instead of dropping it. Breaking changes: • The `modelPicker:setAsDefault` keybinding is renamed to `modelPicker:thisSessionOnly` in keybindings.json; the previous `d` action is replaced by `s`.

Claude Code v2.1.152

Wed, 27 May 2026 01:30:59 GMT

Claude Code v2.1.152 adds auto-fix code review, hook-driven skill reloading, a MessageDisplay hook, and live thinking indicators. • Adds `--fix` flag to `/code-review`: automatically applies review findings (reuse, simplification, efficiency suggestions) to the working tree after review; `/simplify` now invokes `/code-review --fix`. • Skills and slash commands can now set `disallowed-tools` in frontmatter to restrict which tools the model can use while that skill is active. • Adds `/reload-skills` command to re-scan skill directories mid-session without restarting. • `SessionStart` hooks can now return `reloadSkills: true` to make newly installed skills available in the same session. • `SessionStart` hooks can now set the session title via `hookSpecificOutput.sessionTitle` on startup and resume. • Adds `MessageDisplay` hook event, enabling hooks to transform or hide assistant message text as it is rendered. • Adds `pluginSuggestionMarketplaces` managed setting, allowing admins to allowlist org marketplaces whose plugins may be suggested via context-aware tips. • `claude plugin marketplace remove` now accepts `--scope user|project|local` for symmetry with `marketplace add`, `install`, and `uninstall`. • Automatically switches to the configured `--fallback-model` for the rest of the session when the primary model is not found, instead of failing every request. • Auto mode no longer requires opt-in consent. • Vim mode: `/` in NORMAL mode now opens reverse history search (like Ctrl+R), matching bash/zsh vi-mode behavior. • The `/usage` breakdown now includes large session files, scanned with a streaming read to keep memory usage flat. • Thinking summaries in collapsed groups now render as markdown, stay readable for at least 3 seconds, and cap at 10 lines; `Ctrl+O` shows the full thinking. • In fullscreen mode, the 'Thinking for Ns' indicator now counts up live while the model thinks and retains its value if interrupted mid-thought. • Post-response timer now shows 'Waiting for N background agents/workflows to finish' and reports cumulative time once results are processed. • Adds session entrypoint as an OpenTelemetry metric attribute (`app.entrypoint`), opt-in via `OTEL_METRICS_INCLUDE_ENTRYPOINT=true`.

Claude Code v2.1.149

Fri, 22 May 2026 22:09:29 GMT

Claude Code v2.1.149 adds per-category usage breakdowns, keyboard-scrollable diffs, GFM task list rendering, and enterprise MCP connector controls. • Adds per-category breakdown in `/usage` showing what's consuming your limits — skills, subagents, plugins, and per-MCP-server cost. • Enables keyboard scrolling in `/diff` detail view via arrows, `j`/`k`, `PgUp`/`PgDn`, `Space`, and `Home`/`End`. • Renders GFM task list checkboxes (`- [ ] todo` / `- [x] done`) in Markdown output instead of plain bullets. • New enterprise managed setting `allowAllClaudeAiMcps` loads claude.ai cloud MCP connectors alongside `managed-mcp.json`. • Improves `/feedback` reports to include conversation context from before compaction, aiding triage of issues in long sessions.

Claude Code v2.1.147

Thu, 21 May 2026 20:39:22 GMT

Claude Code v2.1.147 adds a new `/code-review` command with inline GitHub PR comments and pinned background session persistence. • New `/code-review` command (replaces `/simplify`) reports correctness bugs at a chosen effort level and can post findings as inline GitHub PR comments via `--comment`. • Pinned background sessions (`Ctrl+T` in `claude agents`) now stay alive when idle, restart in place to apply updates, and are only shed under memory pressure after non-pinned sessions. Breaking changes: • The `/simplify` command is renamed to `/code-review` and its cleanup-and-fix behavior has been removed; scripts or workflows invoking `/simplify` will no longer work.

Claude Code v2.1.146

Thu, 21 May 2026 01:51:52 GMT

Claude Code v2.1.146 renames `/simplify` to `/code-review` with optional effort levels. • New `/code-review` command (replaces `/simplify`) with an optional effort level parameter (e.g. `/code-review high`). • Auto mode now respects `AskUserQuestion` when the user or a skill explicitly relies on it, enabling interactive flows in automated contexts. Breaking changes: • The `/simplify` command has been renamed to `/code-review`; any scripts, docs, or habits referencing `/simplify` will need to be updated.

Claude Code v2.1.145

Tue, 19 May 2026 21:31:07 GMT

Claude Code v2.1.145 adds JSON agent listing, richer OTEL spans, plugin previews, and mouse support in fullscreen. • New `claude agents --json` command lists live Claude sessions as JSON for scripting (tmux-resurrect, status bars, session pickers). • Adds `agent_id` and `parent_agent_id` attributes to `claude_code.tool` OTEL spans, with corrected trace parenting so subagent spans nest under their dispatching Agent tool span. • Status line JSON input now includes GitHub repo and PR information when detected. • `/plugin` Discover and Browse screens now preview a plugin's commands, agents, skills, hooks, and MCP/LSP servers before installation. • `claude agents` terminal tab title now shows the awaiting-input count so an alt-tabbed window indicates when an agent needs attention. • Slash command and @-mention suggestion list now supports mouse hover and click in fullscreen mode. • Read tool now returns a truncated first page with a 'PARTIAL view' notice instead of a hard error when a whole-file read exceeds the token limit.

Claude Code v2.1.144

Tue, 19 May 2026 00:48:51 GMT

Claude Code v2.1.144 adds /resume for background sessions, elapsed-time notifications, plugin last-updated stamps, and per-session model switching. • Adds `/resume` support for background sessions — sessions started via `claude --bg` or agent view now appear alongside interactive ones, marked with `bg`. • Adds elapsed duration to background subagent completion notifications (e.g. "Agent completed · 3h 2m 5s"). • Plugin browse and discover panes now display when each plugin was last updated. • `/model` now changes the model for the current session only; press `d` in the model picker to set a default for all new sessions. • Adds `claude --bg --name ` echoing the session name in the post-spawn confirmation message. • Adds `claude agents` Ctrl+R session rename that immediately updates the attached session's banner. • `/doctor` now shows an exec-form example when a command hook is missing the `command` field. • Skill-listing truncation moved out of startup notifications — full breakdown now available via `/doctor`. • Improved SDK/headless MCP startup: pre-wait now overlaps with startup instead of blocking before the first turn (up to 2 s faster with slow MCP servers). • Improved recovery from rare pre-response stream stalls — now retries streaming once instead of falling back to a slower non-streaming request. • `claude agents` / `--bg` rejection messages now name the specific gate (non-TTY, env var, or setting) instead of a generic message. • Plugin marketplace add/update now respects the `CLAUDE_CODE_PLUGIN_PREFER_HTTPS` environment variable. • `/plugin` now returns to the Installed list after enabling, disabling, or uninstalling a plugin.

Claude Code v2.1.143

Fri, 15 May 2026 22:28:22 GMT

Claude Code v2.1.143 adds plugin dependency enforcement, projected context costs, and richer `claude agents` session control. • Adds plugin dependency enforcement: `claude plugin disable` refuses when another enabled plugin depends on the target and shows a copy-pasteable disable-chain hint; `claude plugin enable` force-enables transitive dependencies. • Adds projected context cost (per-turn and per-invocation token estimates) to the `/plugin` marketplace browse pane. • New `worktree.bgIsolation: "none"` setting lets background sessions edit the working copy directly without `EnterWorktree`, for repos where worktrees are impractical. • PowerShell tool now passes `-ExecutionPolicy Bypass` by default; opt out with `CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY=1`. • PowerShell tool is now enabled by default on Windows for Bedrock, Vertex, and Foundry users; opt out with `CLAUDE_CODE_USE_POWERSHELL_TOOL=0`. • `claude agents` now accepts `--add-dir`, `--settings`, `--mcp-config`, `--plugin-dir`, `--permission-mode`, `--model`, `--effort`, and `--dangerously-skip-permissions` to configure the dashboard and sessions dispatched from it. • `claude --bg --dangerously-skip-permissions` now persists across retire→wake cycles. • `/bg` now preserves `--mcp-config`, `--settings`, `--add-dir`, `--plugin-dir`, and `--strict-mcp-config`, keeping MCP servers and settings across respawn. • `/bg` and `←`-detach now preserve `--fallback-model`, so backgrounded workers degrade gracefully on overload. • `/bg` and `←`-detach now preserve `--allow-dangerously-skip-permissions`, keeping bypass-permissions available in the Shift+Tab cycle. • Background sessions now preserve the model and effort level set after waking from idle. • Shift+Tab in attached agent sessions now includes auto mode in the permission cycle. • Background sessions launched from `claude agents` now honor `permissions.defaultMode` from settings.json. Breaking changes: • Worktree cleanup no longer falls back to `rm -rf` when `git worktree remove` fails, preventing accidental deletion of gitignored or in-progress files — workflows that relied on that fallback cleanup behavior will need an alternative removal step.

Claude Code v2.1.142

Thu, 14 May 2026 22:55:10 GMT

Claude Code v2.1.142 expands `claude agents` configuration flags and upgrades Fast mode to Opus 4.7 by default. • Adds `--add-dir`, `--settings`, `--mcp-config`, `--plugin-dir`, `--permission-mode`, `--model`, `--effort`, and `--dangerously-skip-permissions` flags to `claude agents` for fine-grained control over dispatched background sessions. • Fast mode now defaults to Opus 4.7 (up from 4.6); set `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE=1` to pin back to 4.6. • Plugins with a root-level `SKILL.md` and no `skills/` subdirectory are now automatically surfaced as a skill. • The `/plugin` details pane and `claude plugin details` command now display LSP servers provided by a plugin. • `/web-setup` now warns before overwriting an existing GitHub App connection. Breaking changes: • Fast mode now uses Opus 4.7 by default instead of Opus 4.6; workloads sensitive to model changes must set `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE=1` to preserve previous behavior.

Claude Code v2.1.141

Wed, 13 May 2026 23:19:16 GMT

Claude Code v2.1.141 adds terminalSequence hooks, HTTPS plugin cloning, workspace identity scoping, and richer agent/rewind controls. • Adds `terminalSequence` field to hook JSON output, enabling hooks to emit desktop notifications, window titles, and bells without a controlling terminal. • Adds `CLAUDE_CODE_PLUGIN_PREFER_HTTPS` env var to clone GitHub plugin sources over HTTPS instead of SSH, for environments without a GitHub SSH key. • Adds `ANTHROPIC_WORKSPACE_ID` env var for workload identity federation, scoping minted tokens to a specific workspace when a federation rule covers more than one. • Adds `claude agents --cwd ` to scope the session list to a specific directory. • Extends `/feedback` to optionally include sessions from the last 24 hours or 7 days, covering issues that span multiple sessions. • Adds 'Summarize up to here' option in the Rewind menu to compress earlier context while keeping recent turns intact. • Background agents launched via `/bg` or `←←` now preserve the current permission mode instead of reverting to default. • Auto mode permission dialog now explains when a `permissions.ask` rule triggered the prompt. • Spinner now warms to amber after 10 seconds of thinking to signal Claude is still working. • Improves plugin menu navigation: `→`/Tab switch tabs, `↑` moves to the tab strip, and tab headers and search box are clickable in fullscreen mode.

Claude Code v2.1.139

Mon, 11 May 2026 18:43:42 GMT

Claude Code v2.1.139 adds agent view, /goal command, hook exec form, and subagent OTEL tracing. • Adds `claude agents` command (Research Preview): a unified list of all Claude Code sessions — running, blocked, or complete. • Adds `/goal` command: set a completion condition and Claude works autonomously across turns until it's met, with a live elapsed/turns/tokens overlay panel. • Adds `/scroll-speed` command to tune mouse wheel scroll speed with a live preview. • Adds `claude plugin details ` to inspect a plugin's component inventory and projected per-session token cost. • Adds transcript view navigation shortcuts: `?` for keyboard shortcuts, `{`/`}` to jump between user prompts, `v` to toggle the shortcut panel. • Adds `args: string[]` field (exec form) to hooks, spawning the command directly without a shell so path placeholders never need quoting. • Adds `continueOnBlock` config option for `PostToolUse` hooks — when `true`, feeds the hook's rejection reason back to Claude and continues the turn instead of blocking. • MCP stdio servers now receive `CLAUDE_PROJECT_DIR` in their environment; plugin configs can reference `${CLAUDE_PROJECT_DIR}` in commands. • Compaction prompt now instructs the model to preserve sensitive user instructions across compaction. • `/mcp` Reconnect now picks up `.mcp.json` edits without a full restart and surfaces the HTTP status and URL on reconnect failure. • API requests from subagents now carry `x-claude-code-agent-id` and `x-claude-code-parent-agent-id` headers; `claude_code.llm_request` OTEL spans include `agent_id` and `parent_agent_id` attributes. • Remote MCP server reconnect retry on transient failures is now enabled for all users. • `/context all` per-skill token estimates now account for the model's tokenizer and display rounded values. • `claude plugin install @` now auto-refreshes the marketplace and retries before reporting a plugin as not found. • `/context` now shows the providing plugin's name for plugin-sourced skills. • Remote Control, `/schedule`, claude.ai MCP connectors, and notification preferences are now disabled when `ANTHROPIC_API_KEY` / `apiKeyHelper` / `ANTHROPIC_AUTH_TOKEN` is set, even if a Claude.ai login also exists. • [VSCode] Press Cmd/Ctrl+Shift+T to reopen the most recently closed session tab, configurable via `claudeCode.enableReopenClosedSessionShortcut`. Breaking changes: • Remote Control, `/schedule`, claude.ai MCP connectors, and notification preferences are disabled when `ANTHROPIC_API_KEY`, `apiKeyHelper`, or `ANTHROPIC_AUTH_TOKEN` is set — even if a Claude.ai login also exists. Unset the API key to re-enable these features.

Claude Code v2.1.136

Fri, 08 May 2026 18:39:08 GMT

Claude Code v2.1.136 adds hard-deny auto mode classifier rules and an OTel survey toggle for enterprises. • Adds `CLAUDE_CODE_ENABLE_FEEDBACK_SURVEY_FOR_OTEL` env var to re-enable the session quality survey for enterprises capturing responses via OpenTelemetry. • Adds `settings.autoMode.hard_deny` for auto mode classifier rules that block requests unconditionally, regardless of user intent or allow exceptions. • WSL2: image paste from Windows clipboard now works via a PowerShell fallback when xclip/wl-paste cannot read image data.

Claude Code v2.1.133

Thu, 07 May 2026 23:49:04 GMT

Claude Code v2.1.133 adds worktree base-ref control, custom sandbox binary paths, admin policy merge, and effort-level hook inputs. • Adds `worktree.baseRef` setting (`fresh` | `head`) to control whether new worktrees branch from `origin/` or local `HEAD`. • Adds `sandbox.bwrapPath` and `sandbox.socatPath` managed settings (Linux/WSL) to specify custom bubblewrap and socat binary locations. • Adds `parentSettingsBehavior` admin-tier key (`'first-wins' | 'merge'`) to opt SDK `managedSettings` into the policy merge chain. • Hooks now receive the active effort level via the `effort.level` JSON input field and the `$CLAUDE_EFFORT` environment variable, readable by Bash tool commands. Breaking changes: • The default `worktree.baseRef` is `fresh`, which changes `EnterWorktree`'s base back to `origin/`; since v2.1.128 it has been local `HEAD`. Set `worktree.baseRef: "head"` to preserve unpushed commits in new worktrees.

Claude Code v2.1.132

Wed, 06 May 2026 22:08:13 GMT

Claude Code v2.1.132 adds session ID env var in subprocesses and an opt-out for the fullscreen alternate-screen renderer. • Adds `CLAUDE_CODE_SESSION_ID` environment variable to Bash tool subprocess environments, matching the `session_id` passed to hooks — enabling scripts and hooks to correlate subprocess activity back to the parent session. • Adds `CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1` env var to opt out of the fullscreen alternate-screen renderer, keeping conversation output in the terminal's native scrollback. • Adds a 'Pasting…' footer hint while a Ctrl+V image paste is being read from the clipboard.

Claude Code v2.1.129

Wed, 06 May 2026 01:40:18 GMT

Claude Code v2.1.129 adds URL-based plugin loading, auto-update on Homebrew/WinGet, and cross-project history search by default. • Adds `--plugin-url ` flag to fetch and load a plugin `.zip` archive from a URL for the current session. • Adds `CLAUDE_CODE_FORCE_SYNC_OUTPUT=1` env var to force synchronized output on terminals where auto-detection fails (e.g. Emacs `eat`). • Adds `CLAUDE_CODE_PACKAGE_MANAGER_AUTO_UPDATE` env var: when set on Homebrew or WinGet installs, Claude Code upgrades itself in the background and prompts to restart. • Adds `CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY=1` env var to opt in to Gateway `/v1/models` discovery for the `/model` picker (now opt-in instead of automatic). • Ctrl+R history picker now searches all prompts across all projects by default; press Ctrl+S to narrow to the current project or session. • `skillOverrides` setting is now functional: `off` hides a skill from the model and `/`, `user-invocable-only` hides from the model only, `name-only` collapses the description. • The `claude_code.pull_request.count` OTel metric now counts PRs/MRs created via MCP tools in addition to shell commands. • Policy refusal error messages now include the API Request ID to aid support debugging. • Plugin manifests: `themes` and `monitors` should now be declared under `"experimental": { ... }`; `claude plugin validate` warns on top-level declarations. Breaking changes: • Gateway `/v1/models` model discovery (automatic in v2.1.126–2.1.128) is now opt-in via `CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY=1`; setups relying on automatic gateway model discovery will no longer see those models without setting this variable.

Claude Code v2.1.128

Mon, 04 May 2026 23:01:47 GMT

Claude Code v2.1.128 adds ZIP plugin support, channels auth expansion, MCP server diagnostics, and smarter /mcp and /color UX. • Bare `/color` with no arguments now picks a random session color. • Adds tool-count display to `/mcp` output; servers that connect with zero tools are flagged. • `--plugin-dir` now accepts `.zip` plugin archives in addition to directories. • `--channels` now works with console (API key) authentication; console orgs with managed settings must set `channelsEnabled: true` to enable. • Updated `/model` picker collapses duplicate Opus 4.7 entries and labels the current Opus model simply as "Opus". • Subprocesses (Bash, hooks, MCP, LSP) no longer inherit `OTEL_*` environment variables, isolating OTEL-instrumented apps from the CLI's own OTLP endpoint. • Reconnecting MCP servers now summarize re-announced tools by server prefix instead of flooding the conversation with full tool-name lists. • SDK hosts now receive a persistent `localSettings` suggestion for Bash permission prompts, so "Always allow" writes to `.claude/settings.local.json`. • Auto mode classifier errors now include a hint (retry, `/compact`, or run with `--debug`) when an action cannot be evaluated. • Headless `--output-format stream-json`: `init.plugin_errors` now includes `--plugin-dir` load failures in addition to dependency demotions. Breaking changes: • `workspace` is now a reserved MCP server name — existing servers configured with that name will be skipped with a warning. • Subprocesses (Bash, hooks, MCP, LSP) no longer inherit `OTEL_*` environment variables; any setup relying on subprocess inheritance of the CLI's OTEL config will stop working. • `EnterWorktree` now creates the new branch from local HEAD instead of `origin/`; workflows that depended on the previous behavior of branching from the remote default may behave differently.

Claude Code v2.1.126

Fri, 01 May 2026 02:05:23 GMT

Claude Code v2.1.126 adds project purge, gateway model picker, headless OAuth, and richer OTel events. • Adds `claude project purge [path]` command to delete all Claude Code state for a project (transcripts, tasks, file history, config entry) with `--dry-run`, `-y/--yes`, `-i/--interactive`, and `--all` flags. • The `/model` picker now lists models from a gateway's `/v1/models` endpoint when `ANTHROPIC_BASE_URL` points at an Anthropic-compatible gateway. • `--dangerously-skip-permissions` now bypasses write prompts for `.claude/`, `.git/`, `.vscode/`, shell config files, and other previously-protected paths (catastrophic removal commands still prompt). • `claude auth login` now accepts an OAuth code pasted directly into the terminal when the browser callback can't reach localhost (WSL2, SSH, containers). • The `claude_code.skill_activated` OpenTelemetry event now fires for user-typed slash commands and carries a new `invocation_trigger` attribute (`"user-slash"`, `"claude-proactive"`, or `"nested-skill"`). • Windows: Claude now treats PowerShell as the primary shell (instead of Bash) when the PowerShell tool is enabled. • Windows: PowerShell 7 installed via the Microsoft Store, MSI without PATH, or `.NET global tool` is now detected automatically.

Claude Code v2.1.122

Tue, 28 Apr 2026 22:05:15 GMT

Claude Code v2.1.122 adds Bedrock service tier selection, PR-URL session lookup, and new OpenTelemetry events. • Adds `ANTHROPIC_BEDROCK_SERVICE_TIER` env var to select a Bedrock service tier (`default`, `flex`, or `priority`), sent as the `X-Amzn-Bedrock-Service-Tier` header. • Pasting a GitHub, GitHub Enterprise, GitLab, or Bitbucket PR URL into the `/resume` search box now finds the session that created that PR. • Adds `claude_code.at_mention` OpenTelemetry log event for `@`-mention resolution. • OpenTelemetry numeric attributes on `api_request`/`api_error` log events are now emitted as numbers instead of strings. • The `/mcp` view now surfaces claude.ai connectors hidden by a manually-added server with the same URL, with a hint to remove the duplicate. Breaking changes: • OpenTelemetry consumers parsing numeric attributes on `api_request`/`api_error` log events as strings will receive numbers instead — pipelines that treat those fields as strings may need to be updated.

Claude Code v2.1.121

Tue, 28 Apr 2026 00:31:31 GMT

Claude Code v2.1.121 adds MCP alwaysLoad, plugin pruning, PostToolUse output replacement, mTLS Workload Identity, and expanded OpenTelemetry spans. • Adds `alwaysLoad` option to MCP server config — when `true`, all tools from that server bypass tool-search deferral and are always available. • Adds `claude plugin prune` command to remove orphaned auto-installed plugin dependencies; `plugin uninstall --prune` cascades removals. • PostToolUse hooks can now replace tool output for ALL tools via `hookSpecificOutput.updatedToolOutput`, not just MCP tools. • Adds type-to-filter search box to `/skills` for quickly finding skills in long lists. • Vertex AI: supports X.509 certificate-based Workload Identity Federation (mTLS ADC). • OpenTelemetry spans now include `stop_reason`, `gen_ai.response.finish_reasons`, and `user_system_prompt` (gated behind `OTEL_LOG_USER_PROMPTS`) on LLM request spans. • SDK: `mcp_authenticate` now supports `redirectUri` for custom scheme completion and claude.ai connectors. • Enables `CLAUDE_CODE_FORK_SUBAGENT=1` in non-interactive sessions for SDK and `claude -p`. • `--dangerously-skip-permissions` no longer prompts for writes to `.claude/skills/`, `.claude/agents/`, and `.claude/commands/`. • MCP servers that hit a transient error at startup now auto-retry up to 3 times instead of staying disconnected. • Terminal tab session title is now generated in the configured `language` setting. • LSP diagnostic summaries now expand on click or Ctrl+O and show an expand hint. • Scrollable overflow dialogs: terminal dialogs that exceed terminal height are now navigable with arrow keys, PgUp/PgDn, Home/End, and mouse wheel in both fullscreen and non-fullscreen modes. • Clicking any line of a long URL wrapped across rows in fullscreen mode now opens the full URL. • [VSCode] Voice dictation now respects the `accessibility.voice.speechLanguage` setting when no Claude Code language is configured. • [VSCode] `/context` now opens a native token usage dialog.

Claude Code v2.1.119

Thu, 23 Apr 2026 23:24:19 GMT

Claude Code v2.1.119 adds GitLab/Bitbucket PR support, persistent config, richer hooks, and OpenTelemetry improvements. • Adds `prUrlTemplate` setting to point the footer PR badge at a custom code-review URL instead of github.com. • Adds `CLAUDE_CODE_HIDE_CWD` environment variable to hide the working directory in the startup logo. • `--from-pr` now accepts GitLab merge-request, Bitbucket pull-request, and GitHub Enterprise PR URLs in addition to github.com. • `/config` settings (theme, editor mode, verbose, etc.) now persist to `~/.claude/settings.json` and participate in project/local/policy override precedence. • `--print` mode now honors the agent's `tools:` and `disallowedTools:` frontmatter, matching interactive-mode behavior. • `--agent ` now honors the agent definition's `permissionMode` for built-in agents. • PowerShell tool commands can now be auto-approved in permission mode, matching Bash behavior. • `PostToolUse` and `PostToolUseFailure` hook inputs now include `duration_ms` (tool execution time, excluding permission prompts and PreToolUse hooks). • Subagent and SDK MCP server reconfiguration now connects servers in parallel instead of serially, reducing startup latency. • Plugins pinned by another plugin's version constraint now auto-update to the highest satisfying git tag. • OpenTelemetry `tool_result` and `tool_decision` events now include `tool_use_id`; `tool_result` also includes `tool_input_size_bytes`. • Status line stdin JSON now includes `effort.level` and `thinking.enabled` fields. • Tool search on Vertex AI is now opt-in via `ENABLE_TOOL_SEARCH` environment variable. • Slash command suggestions now highlight the characters that matched your query. • Slash command picker now wraps long descriptions onto a second line instead of truncating. • `owner/repo#N` shorthand links in output now use your git remote's host instead of always pointing at github.com. Breaking changes: • Tool search is now disabled by default on Vertex AI; opt in by setting `ENABLE_TOOL_SEARCH` to restore the previous behavior.

Claude Code v2.1.118

Thu, 23 Apr 2026 00:42:21 GMT

Claude Code v2.1.118 adds vim visual mode, custom themes, MCP tool hooks, and a new `/usage` command. • Adds vim visual mode (`v`) and visual-line mode (`V`) with selection, operators, and visual feedback in the editor. • Merges `/cost` and `/stats` into a unified `/usage` command with tabs; old names remain as shortcuts. • Introduces custom named themes: create/switch via `/theme` or hand-edit JSON in `~/.claude/themes/`; plugins can ship themes via a `themes/` directory. • Hooks can now invoke MCP tools directly using `type: "mcp_tool"`. • New `DISABLE_UPDATES` env var completely blocks all update paths including manual `claude update`, stricter than `DISABLE_AUTOUPDATER`. • WSL on Windows can now inherit Windows-side managed settings via the `wslInheritsWindowsSettings` policy key. • Auto mode: include `"$defaults"` in `autoMode.allow`, `autoMode.soft_deny`, or `autoMode.environment` to extend the built-in rule list instead of replacing it. • Adds a 'Don't ask again' option to the auto mode opt-in prompt. • New `claude plugin tag` subcommand creates release git tags for plugins with version validation. • `--continue`/`--resume` now find sessions that added the current directory via `/add-dir`. • `/color` now syncs the session accent color to claude.ai/code when Remote Control is connected. • The `/model` picker honors `ANTHROPIC_DEFAULT_*_MODEL_NAME`/`_DESCRIPTION` overrides when using a custom `ANTHROPIC_BASE_URL` gateway. • Plugin version-constraint skips during auto-update are now surfaced in `/doctor` and the `/plugin` Errors tab.

Claude Code v2.1.117

Wed, 22 Apr 2026 00:04:40 GMT

Claude Code v2.1.117 adds fork-subagent support, richer OpenTelemetry attributes, and faster native search via embedded bfs/ugrep. • Enables forked subagents on external builds via `CLAUDE_CODE_FORK_SUBAGENT=1`. • Loads agent frontmatter `mcpServers` for main-thread agent sessions launched with `--agent`. • Persists `/model` selections across restarts even when a project pins a different model; startup header now indicates when the active model is from a project or managed-settings pin. • Adds summarization offer in `/resume` for stale, large sessions before re-reading them. • Concurrent MCP server connections now default when both local and claude.ai servers are configured, reducing startup time. • `plugin install` on an already-installed plugin now installs any missing dependencies instead of stopping. • Adds `claude plugin marketplace add` auto-resolution of missing dependencies from configured marketplaces; dependency errors now include an install hint. • Enforces managed-settings `blockedMarketplaces` and `strictKnownMarketplaces` on plugin install, update, refresh, and autoupdate. • Advisor Tool (experimental) dialog now carries an 'experimental' label, a learn-more link, and a startup notification when enabled. • Extends `cleanupPeriodDays` retention sweep to cover `~/.claude/tasks/`, `~/.claude/shell-snapshots/`, and `~/.claude/backups/`. • OpenTelemetry `user_prompt` events now include `command_name` and `command_source` for slash commands; `cost.usage`, `token.usage`, `api_request`, and `api_error` now include an `effort` attribute for models that support effort levels; custom/MCP command names are redacted unless `OTEL_LOG_TOOL_DETAILS=1` is set. • On native macOS and Linux builds, `Glob` and `Grep` tools are replaced by embedded `bfs` and `ugrep` available through the Bash tool, enabling faster searches without a separate tool round-trip. • Windows builds now cache `where.exe` executable lookups per process for faster subprocess launches. • Default effort for Pro/Max subscribers on Opus 4.6 and Sonnet 4.6 is now `high` (previously `medium`).

Claude Code v2.1.116

Mon, 20 Apr 2026 22:18:28 GMT

Claude Code v2.1.116 adds faster session resumption, deferred MCP startup, inline thinking progress, and smarter plugin dependency auto-install. • Speeds up `/resume` on large sessions by up to 67% on sessions 40 MB and larger, with more efficient handling of dead-fork entries. • Defers `resources/templates/list` to first `@`-mention, reducing MCP startup time when multiple stdio servers are configured. • Improves fullscreen scrolling in VS Code, Cursor, and Windsurf terminals — `/terminal-setup` now configures scroll sensitivity for those editors. • Replaces the separate thinking-hint row with an inline progress indicator ('still thinking', 'thinking more', 'almost done thinking') in the spinner. • Extends `/config` search to match option values (e.g. searching 'vim' surfaces the Editor mode setting). • Allows `/doctor` to be opened while Claude is actively responding, without waiting for the current turn to finish. • Enables `/reload-plugins` and background plugin auto-update to auto-install missing plugin dependencies from already-added marketplaces. • Surfaces a rate-limit hint in the Bash tool when `gh` commands hit GitHub's API rate limit, letting agents back off instead of retrying. • Shows 5-hour and weekly usage immediately in the Settings Usage tab, with graceful handling when the usage endpoint is rate-limited. • Fires agent frontmatter `hooks:` when the agent is run as a main-thread agent via `--agent`. • Displays 'No commands match' in the slash command menu when a filter has zero results instead of hiding the menu entirely. • Security: sandbox auto-allow no longer bypasses the dangerous-path safety check for `rm`/`rmdir` targeting `/`, `$HOME`, or other critical system directories.

Claude Code v2.1.113

Fri, 17 Apr 2026 19:34:41 GMT

Claude Code v2.1.113 adds domain blocklisting, exec-wrapper deny rules, and expanded Remote Control capabilities. • New `sandbox.network.deniedDomains` setting blocks specific domains even when a broader `allowedDomains` wildcard would otherwise permit them. • Security: Bash deny rules now match commands wrapped in `env`/`sudo`/`watch`/`ionice`/`setsid` and similar exec wrappers, closing bypass paths. • Security: Bash(find:*) allow rules no longer auto-approve `find -exec`/`-delete`, preventing unintended file operations. • Security: on macOS, `/private/{etc,var,tmp,home}` paths are treated as dangerous removal targets under Bash(rm:*) allow rules. • Bash tool now shows the full command in the transcript for multi-line commands whose first line is a comment, closing a UI-spoofing vector. • Remote Control (mobile/web) clients can now use `/extra-usage` and query `@`-file autocomplete suggestions. • CLI now spawns a native Claude Code binary via a per-platform optional dependency instead of bundled JavaScript. • `Ctrl+A` and `Ctrl+E` move to the start/end of the current logical line in multiline input, matching readline behavior. • Windows: `Ctrl+Backspace` now deletes the previous word. • Long URLs in responses and bash output stay clickable when they wrap across lines in terminals with OSC 8 hyperlinks. • Improved `/ultrareview`: faster launch with parallelized checks, diffstat in the launch dialog, and animated launching state. • Improved `/loop`: pressing Esc cancels pending wakeups; wakeups display as 'Claude resuming /loop wakeup' for clarity.

Claude Code v2.1.111

Thu, 16 Apr 2026 15:18:45 GMT

Claude Code v2.1.111 adds /ultrareview for cloud-based PR analysis, xhigh effort tier, PowerShell support, and a permission-prompt reducer. • Adds `xhigh` effort level for Opus 4.7, sitting between `high` and `max`; selectable via `/effort`, `--effort`, or the model picker. • New `/ultrareview` command runs comprehensive code review in the cloud using parallel multi-agent analysis — no arguments reviews the current branch; `/ultrareview ` fetches and reviews a specific GitHub PR. • New `/less-permission-prompts` skill scans transcripts for common read-only Bash and MCP tool calls and proposes a prioritized allowlist for `.claude/settings.json`. • Auto mode is now available for Max subscribers using Opus 4.7, and no longer requires the `--enable-auto-mode` flag. • Adds PowerShell tool support on Windows (progressive rollout); opt in/out with `CLAUDE_CODE_USE_POWERSHELL_TOOL`; enable on Linux/macOS with `CLAUDE_CODE_USE_POWERSHELL_TOOL=1` (requires `pwsh` on PATH). • Adds `OTEL_LOG_RAW_API_BODIES` environment variable to emit full API request and response bodies as OpenTelemetry log events for debugging. • New 'Auto (match terminal)' theme option automatically matches the terminal's dark/light mode; selectable via `/theme`. • `/effort` now opens an interactive slider with arrow-key navigation and Enter to confirm when called without arguments. • Read-only bash commands with glob patterns (e.g. `ls *.ts`) and commands beginning with `cd &&` no longer trigger a permission prompt. • `/skills` menu now supports sorting by estimated token count — press `t` to toggle. • `Ctrl+L` now forces a full screen redraw in addition to clearing the prompt input. • Transcript view footer now shows `[` (dump to scrollback) and `v` (open in editor) shortcuts. • Headless `--output-format stream-json` now includes `plugin_errors` on the init event when plugins are demoted for unsatisfied dependencies. • Improved `/setup-vertex` and `/setup-bedrock` to show the actual `settings.json` path when `CLAUDE_CONFIG_DIR` is set, seed model candidates from existing pins on re-run, and offer a '1M context' option for supported models. Breaking changes: • `Ctrl+U` behavior changed: it now clears the entire input buffer instead of deleting only to the start of the line (press `Ctrl+Y` to restore).

Claude Code v2.1.110

Wed, 15 Apr 2026 22:07:18 GMT

Claude Code v2.1.110 adds flicker-free TUI fullscreen, mobile push notifications, and distributed trace linking for SDK sessions. • Adds `/tui` command and `tui` setting — run `/tui fullscreen` to switch to flicker-free rendering within the same conversation. • Adds `/focus` command to toggle focus view independently from verbose transcript (previously both were on `Ctrl+O`). • Adds push notification tool so Claude can send mobile push notifications when Remote Control and 'Push when Claude decides' config are enabled. • Adds `autoScrollEnabled` config to disable conversation auto-scroll in fullscreen mode. • Adds option to show Claude's last response as commented context in the `Ctrl+G` external editor, enabled via `/config`. • Improves `/plugin` Installed tab: items needing attention and favorites float to the top, disabled items collapse behind a fold, and `f` favorites the selected item. • Improves `/doctor` to warn when an MCP server is defined in multiple config scopes with different endpoints. • `--resume`/`--continue` now resurrects unexpired scheduled tasks. • Enables `/autocompact`, `/context`, `/exit`, and `/reload-plugins` commands from Remote Control (mobile/web) clients. • Write tool now informs the model when you edit proposed content in the IDE diff before accepting. • SDK/headless sessions now read `TRACEPARENT`/`TRACESTATE` from the environment for distributed trace linking. • Session recap is now enabled for users with telemetry disabled (Bedrock, Vertex, Foundry, `DISABLE_TELEMETRY`); opt out via `/config` or `CLAUDE_CODE_ENABLE_AWAY_SUMMARY=0`. Breaking changes: • `Ctrl+O` no longer toggles focus view — it now toggles between normal and verbose transcript only; focus view must be toggled with the new `/focus` command.

Claude Code v2.1.108

Tue, 14 Apr 2026 19:12:01 GMT

Claude Code v2.1.108 adds 1-hour prompt cache TTL opt-in, session recap, and slash-command discovery via Skill tool. • Adds `ENABLE_PROMPT_CACHING_1H` env var to opt into 1-hour prompt cache TTL across API key, Bedrock, Vertex, and Foundry backends; `FORCE_PROMPT_CACHING_5M` forces the 5-minute TTL. • Adds `/recap` command (and `CLAUDE_CODE_ENABLE_AWAY_SUMMARY` env var) to generate a context summary when returning to a session; also configurable via `/config`. • Enables the model to discover and invoke built-in slash commands (`/init`, `/review`, `/security-review`) via the Skill tool. • Adds `/undo` as an alias for `/rewind`. • Adds a warning at startup when prompt caching is disabled via `DISABLE_PROMPT_CACHING*` environment variables. • Adds a 'verbose' indicator when viewing the detailed transcript via `Ctrl+O`. • Improves `/resume` picker to default to sessions from the current directory; `Ctrl+A` reveals all projects. • Improves `/model` to warn before switching models mid-conversation to flag the uncached full-history re-read cost. • Improves error messages: rate limits distinguished from plan usage limits; 5xx/529 errors link to status.claude.com; unknown slash commands suggest the closest match. • Reduces memory footprint for file reads, edits, and syntax highlighting by loading language grammars on demand. Breaking changes: • `ENABLE_PROMPT_CACHING_1H_BEDROCK` is deprecated (still honored) in favor of the unified `ENABLE_PROMPT_CACHING_1H` env var.

Claude Code v2.1.105

Mon, 13 Apr 2026 21:53:13 GMT

Claude Code v2.1.105 adds PreCompact hooks, plugin background monitors, worktree path switching, and a smarter /doctor with auto-fix. • Adds `path` parameter to the `EnterWorktree` tool to switch into an existing worktree of the current repository. • Adds PreCompact hook support: hooks can block compaction by exiting with code 2 or returning `{"decision":"block"}`. • Adds background monitor support for plugins via a top-level `monitors` manifest key that auto-arms at session start or on skill invoke. • Adds `/proactive` as an alias for `/loop`. • Improves `/doctor` layout with status icons and adds `f` keypress to have Claude automatically fix reported issues. • Raises plugin skill description listing cap from 250 to 1,536 characters, with a startup warning when descriptions are truncated. • Improves `WebFetch` to strip `