Releases · anthropics/claude-code

v2.1.277

What's changed

Added AGENTS.md support: in a project with no CLAUDE.md, Claude Code reads AGENTS.md instead; change it under "Project instructions" in /config (not yet on Bedrock, Vertex or Foundry)
Added CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 for Claude apps gateways whose only egress is a forward proxy: every outbound request hands the proxy the hostname instead of resolving it locally
Added an optional headers: map on Claude apps gateway upstreams, to send static headers to a proxy you run in front of a provider
Added a line saying a background task's update is waiting when it finishes while a panel such as /tasks is open
Fixed claude -p and Agent SDK sessions that could hang with no result after an internal error; they now report the error and exit with code 1
Fixed conversations failing every request with "text content blocks must be non-empty" when an earlier assistant turn held an empty text block beside other content, including after --resume
Fixed being unexpectedly logged out when an older Claude Code build (for example an IDE extension's bundled CLI) runs on the same machine as the current one
Fixed interactive start-up hanging or showing an error for ANTHROPIC_API_KEY users when ~/.claude.json holds a malformed customApiKeyResponses value
Fixed update checks erroring every 30 minutes, and claude update hanging when a minimum or maximum version is set, if a proxy returns an invalid version; a malformed minimumVersion is now ignored
Fixed claude update on winget- or apk-managed installs reporting "up to date" when the version lookup failed
Fixed claude plugin install sometimes failing and breaking the installed copy when reinstalling a plugin version that a session or another program was using; an unchanged copy is now left alone
Fixed Grep and Glob reporting no matches when the search could not start because the system was out of processes, memory or file handles; they now return an error saying so
Fixed the Write tool silently ending the turn as a declined permission when the target path is an existing directory; it now reports a clear error
Fixed the Edit tool treating an escaped backslash followed by uXXXX text as a \uXXXX escape, which could make an edit of a non-ASCII character rewrite an escaped backslash sequence instead
Fixed the Edit tool reporting "Invalid regular expression: regular expression too large" instead of "String not found in file" when a very large edit containing non-ASCII text did not match the file
Fixed a turn ending early with "Path contains null bytes" when a tool call's file path contained \u0000 written as an escape sequence; escaped control characters now stay as literal text
Fixed background sessions (claude --bg) exiting when a plugin's LSP server exited or closed its stdin
Fixed a crash ("Type error") when opening /mcp or /plugin manage with a malformed claudeAiMcpEverConnected value in ~/.claude.json
Fixed a crash at launch when ~/.claude.json holds a malformed theme value
Fixed a crash ("unrecoverable interface error") when the prompt held text containing terminal color codes, for example a prompt recalled from history or text loaded from the external editor
Fixed a crash when resuming a session whose saved history holds an assistant message stored as a plain string
Fixed sessions on slow or heavily loaded machines sometimes exiting with "Claude Code exited after an unrecoverable interface error" when the first spinner appeared
Fixed a rare case where the screen could stop updating for the rest of the session after an internal rendering error
Fixed a rare case on Windows where a turn could stop with an error such as "Out of memory" right after Claude replied, so that reply's tool calls never ran
Fixed sessions continued after /clear (restart, --continue, --resume) missing part of their first message when a SessionStart hook printed output, causing a full prompt-cache miss
Fixed messages from other agents (such as a subagent's SendMessage) that arrived mid-turn showing up below the "Ran N shell commands" row instead of where they arrived
Fixed the "copied" notice not appearing after drag-selecting text in the fullscreen /resume picker and other panels that cover the prompt area
Fixed $TMPDIR expanding empty in Bash commands that run outside the sandbox while sandboxing is enabled
Fixed WebFetch and WebSearch in Cowork cloud sessions not telling Claude why a request was refused, such as a used-up fetch budget or an admin policy
Fixed the Claude apps gateway's telemetry relay ignoring a collector hostname or domain listed in NO_PROXY when a proxy is set
Fixed one malformed strictKnownMarketplaces or blockedMarketplaces entry silently disabling the whole enterprise marketplace policy
Fixed failed auto-updates leaving large staged downloads behind in ~/.cache/claude/staging
Fixed /plugin not stripping terminal control characters from messages on the Installed tab, such as the error of a failed plugin update
Fixed /plugin → Installed and /skills crashing when a skill or legacy command is named like a built-in Object property such as constructor or toString
Fixed /plugin closing with no message when every install in a multi-select failed
Fixed uninstalled plugins reappearing as "failed to load" rows in /plugin Installed, and Remove not clearing such a row
Fixed plugins from the official marketplace being recorded without their commit in installed_plugins.json, and installed_plugins.json keeping the old commit after updating a pinned-commit plugin
Fixed plugin reload previews keeping every previewed copy of a plugin archive unpacked until exit, and overwriting the cached --plugin-url archive a reload falls back to when its download fails
Fixed Remote Control session bookkeeping failing when ~/.claude.json holds a malformed placeholder record
Fixed the error after a revoked claude.ai login blaming an expired Anthropic profile; it now leads with /login
Fixed typed or pasted text occasionally coming out scrambled in the claude agents dispatch input during key repeat or very fast input
Fixed a crash ("unrecoverable interface error") when resuming a session whose saved transcript contains a stop hook summary without a well-formed hook list
Fixed Enter on a selected agent panel row doing nothing when keybindings.json rebinds Enter in the Chat context, for example to chat:queueSubmit
Fixed PDF page reads on Windows failing when the working folder's path is long (about 120 characters or more)
Fixed a headless resume (claude -p --resume, the SDK, a VS Code extension window reload) starting the session's cost and usage totals at zero; headless sessions now save their totals at exit
Fixed project skills from the main repository not loading in --worktree sessions when .claude/skills is untracked
Fixed a sandbox.excludedCommands glob exempting an entire compound Bash command from the sandbox when only one part matched; every part must now match
Fixed resumed subagents and teammates re-rendering the MCP tool definitions they had loaded, which broke prompt caching for that agent
Fixed rate-limited artifact publishes telling Claude to stop retrying; Claude is now told nothing was published and when to send the same publish again
Fixed attachments recorded earlier in a conversation being re-rendered after a resume or relaunch, which dropped extended thinking and missed the prompt cache
Fixed Console sign-in showing only "Request failed with status code 400" when the server refuses to create an API key; it now shows the server's message
Fixed messages typed while Claude is still working sometimes being ignored by the model
Improved session start-up for SDK and headless (-p) use: the first turn no longer waits on the per-directory CLAUDE.md lookup
Improved the Claude apps gateway's loopback error messages to name CLAUDE_GATEWAY_ALLOW_LOOPBACK
Improved /plugin Installed: an MCP server listed apart from its plugin now shows which plugin it belongs to
Improved claude plugin install on an already-installed plugin: it now says when the marketplace offers a newer version and names the claude plugin update command
Improved the startup notice overflow line under the logo: it now reads "N more notices hidden" instead of "+N more · /status"
Improved prompt handling: invisible Unicode formatting and tag characters in a prompt are removed and the cleaned prompt is shown for review before it is sent
Improved /ultrareview when there's nothing to review: messages say which case you're in, offer a command that reviews your latest commit, and a new repository's first commit is reviewed in full
Improved artifact link handling so Claude reads claude.ai artifact links with the Artifact tool instead of WebFetch when that tool is available
Improved the dangerous-rm permission prompt to name the flagged rm command and suggest a ${VAR:?} guard, so headless runs can recover
Improved the Artifact tool's permission prompts: shorter sentences, pages and artifacts named by title or file name, and links listed after the text
Changed Fable to always appear in /model on the Anthropic API; it is greyed out only when your organization's settings disable it
Changed the Bash sandbox instructions on Bedrock, Vertex and Foundry to the first-party wording, which frames the sandbox as the boundary of what the task was given
Changed /ultrareview in non-interactive sessions to refuse when the repository has no base branch or shared history
Changed subagent results to reach the main agent under a header marking them as subagent output, with the result indented, so text in a subagent's result cannot pass as the session's own instructions
Changed workflow scripts' computed agent() prompts on Bedrock, Vertex and Foundry to reach the subagent framed as script-authored text, ...

What's changed

Fixed every request failing with 400 … Input tag 'advisor_20260301' when ANTHROPIC_BASE_URL points at a proxy or gateway (2.1.275 regression)

v2.1.275

What's changed

Added the signed-in account to Claude apps gateway sign-in: when the gateway names it, you confirm it before the credential is saved, and /status shows it
Added a send-now key (ctrl+enter, or ctrl+x ctrl+s) that interrupts the current turn and sends all queued messages at once; sent and queued messages show in gray until the model receives them
Added a startup warning when a configured otelHeadersHelper fails, so sessions that silently export no telemetry are noticed
Added syncing of the skills and plugins enabled on your claude.ai account to terminal sessions signed in with it; opt out with syncClaudeAiSkills: false or syncClaudeAiPlugins: false
Added /plugin install <plugin> --marketplace <source>, which offers to add the marketplace before installing the plugin
Fixed a restored memory file's age note changing between requests after a compaction or resume, which caused prompt cache misses
Fixed --forward-subagent-text stream-json and SDK output dropping the messages of subagents spawned by a context: fork skill, and of forked skills invoked by a subagent or another forked skill
Fixed @-mention file suggestions being buried below MCP resources when using a custom fileSuggestion command or typing @./@./
Fixed fullscreen mode placing background-task completion notices beneath a long turn's collapsed tool row instead of where they arrived; each notice now closes the open row
Fixed claude plugin marketplace update deleting a GitHub marketplace's local copy when the fetch failed and the marketplace was named after its repository
Fixed plugin and marketplace messages, logs and claude plugin marketplace list showing a password or token stored in a git, ssh or marketplace URL
Fixed a resumed cloud session leaving an unanswered question open in the transcript after a queued message superseded it
Fixed vim mode placing the cursor one character right after a dot-repeated "!" or a fast-typed "i!" switched a non-empty prompt into shell mode
Fixed fullscreen mode freezing or blanking for several seconds when scrolling up past a large file diff
Fixed a stray </ccmemory>-style closing tag occasionally appearing in responses
Fixed plugin messages, logs and the VS Code plugin dialog showing the wrong server for some git addresses
Fixed a terminal API Error: 400 on every turn for users behind a network gateway that rewrites API error responses when a beta request header is rejected
Fixed sandboxed Bash commands on Linux reporting exit code 0 for failed commands when the shell is zsh
Fixed the Read tool hanging instead of reporting an error when part of a large file could not be decoded under memory pressure
Fixed --resume, the resume picker preview, resumed background agents and the transcript view failing on a session whose saved history contains a malformed task-reminder or @-file attachment entry
Fixed a crash when resuming a conversation whose transcript contains a malformed message entry, and a fullscreen crash when such a conversation received new messages while scrolled up
Fixed sessions failing to resume or start when their saved transcript contains a malformed message content block
Fixed Grep, Glob and @-file suggestions hanging or running out of memory on searches over the 20MB output cap, and system ripgrep reporting "no matches" instead of an error after a flood of warnings
Fixed /rewind in a forked or background session restoring a zero-filled or truncated file when the session's file-history backups could not be fully copied
Fixed fullscreen sessions sometimes exiting with "Claude Code exited after an unrecoverable interface error" when typing fast or holding a key with the slash-command dropdown open
Fixed background sessions crashing and restarting their worker when a command fed through stdin ran on a machine that had run out of file descriptors
Fixed a crash at launch when ~/.claude.json holds a malformed mcpNeedsAuthNoticed value
Fixed --resume and --continue dropping a conversation's earlier thinking when a built-in tool it started with has since been switched off by a server-side flag
Fixed text selected with the mouse in the fullscreen claude --resume session picker never reaching the clipboard
Fixed plugin reload previews replacing a running session's extracted plugin files when the plugin was loaded from a --plugin-dir or --plugin-url archive
Fixed self-hosted runners with --drain-wait-sec losing the final result of a turn that finished during a SIGTERM drain; the runner now waits briefly for the turn to be reported
Fixed SubagentStop hooks with a specific matcher firing for every stopping subagent whose agent type was empty
Fixed sandboxed Bash commands being unable to write to project directories named hooks/ or config/
Fixed Artifact updates failing with "File not found" after a session resumes on another machine or its scratchpad is cleared: the page's last published version is restored
Fixed /update-config writing Write(path) permission rules, which file permission checks don't match, instead of Edit(path) rules
Fixed four dead documentation URLs (Pricing, Computer Use, Skills, CLI) in the bundled claude-api skill's live-sources table
Improved prompt caching for a --system-prompt that contains a __SYSTEM_PROMPT_DYNAMIC_BOUNDARY__ line: the text above it is now cached globally, as the SDK's array form already is
Improved the /desktop error when Claude Desktop does not open: it now says why and what to do next
Improved the Artifact tool's publish and read results: they now say who can open the page and what the owner's Share menu offers
Improved artifact publish results: they name the tab icon sent, warn when the page contains a NUL byte, and retry a flaky fetch of the newer page to merge after a stale publish
Improved pasted and attached images: they are now saved where Claude can open them as files without a permission prompt, including in Desktop and VS Code
Improved the Artifact tool's guidance so Claude updates a shared artifact in place when you were given edit access to it, instead of publishing a separate copy
Improved plan-usage reads: editor windows and non-interactive sessions on one machine now share a read made in the last minute instead of each calling the usage endpoint
Improved the ListPlugins tool description so Claude knows it lists plugins enabled on your claude.ai account, not plugins installed locally with /plugin
Improved responsiveness when the terminal is slow or paused: output no longer falls further behind while the terminal catches up
Improved Write and Edit results for files in the synced account-skills folder: they now say the change is not saved to your account and how to save it
Updated /logout for Claude apps gateway sign-ins to also end the session on gateways that advertise token revocation
Changed hosted sessions to keep an unanswered permission prompt up after a container restart, instead of asking again
Changed the Artifact tool to ask for a one-word tab icon on a first publish instead of an emoji favicon
Changed Claude in Chrome in auto mode to skip the extension's per-site check for classifier-approved calls, as bypass mode does, fixing browser_batch "Permission denied" after a redirect
Changed plugins installed from an npm source to be fetched with npm pack --ignore-scripts and integrity-verified, so a package's install scripts no longer run
Changed scheduled and Run now routine runs to save data to, and republish the page of, an artifact you can edit without asking; public artifacts, first publishes and deletes still ask
Removed the startup notice that told you a one-off scheduled routine had run since your last session
[VSCode] Added viewing, editing and deleting a saved memory inside the Memory dialog
[VSCode] Added sending an attached image without typing any text
[VSCode] Added a Retry link to the MCP servers dialog when the server list fails to load
[VSCode] Added accept and reject buttons under each change in the proposed-change diff tab, so an edit can be reviewed change by change
[VSCode] Fixed the transcript creeping toward the bottom in small steps while a permission card waits and content keeps arriving
[VSCode] Fixed rewound and forked conversations not keeping the permission mode you had picked for the original conversation
[VSCode] Fixed an empty CLAUDE_CONFIG_DIR entry in the environmentVariables setting making Claude Code keep its files in the workspace
[VSCode] Fixed plugin install links opening the Manage plugins dialog for plugin names and marketplace addresses that can't be used in a link
[VSCode] Fixed Remote Control staying shown as connected after a turn-off that Claude Code reported as failed; it now shows as off
[VSCode] Fixed the scroll to the bottom on send stopping short of the reply when the reply starts arriving during the scroll
[VSCode] Fixed the agent map showing agents a crash left unfinished as stopped instead of failed once the session is reopened
[VSCode] Fixed the "Continuing the step" notice not appearing, and the continue limit resetting, after a reload that follows a crash with background tasks still running
[VSCode] Fixed the session list showing when a session was last reopened, such as after a window reload, instead of when its last message was sent
[VSCode] Fixed "Fork conversation from here" failing on the message right after one sent while Claude was working
[VSCode] Fixed the prompt cache clock showing too few minutes after reopening a session with a message sent while Claude was working
[VSCode] Fixed a background agent that finished while Claude was running a tool losing its completion notice, and its result on the agent map, after a window reload
[VSCode] Fixed a rare case where text selected in a git-ignored file could be sent to Claude after the extension was unrespons...

What's changed

Added a visible warning when memory usage is critical, with steps to free memory or restart safely
Added CLAUDE_CODE_MCP_STARTUP_WAIT_MS to bound how long the first non-interactive turn waits for connecting MCP servers (0 = don't wait)
Added effort attribute to the claude_code.llm_request OpenTelemetry trace span, matching the api_request event
Added claude_code.managed_settings_resolved OTel event: managed-settings sources and policy helper state; redacted settings and digests with OTEL_LOG_MANAGED_SETTINGS=1
Added store.connect_timeout_seconds to the Claude apps gateway config to lengthen the Postgres connect timeout (default 5 seconds), and improved the boot error when the database is unreachable to point to store.postgres_url and the configured timeout
Added enduser.sub, the IdP subject, to the telemetry Claude Desktop and Cowork send through a Claude apps gateway
Added a Claude apps gateway warning when a replica has more requests open than the 256 it sends upstream at once, and a startup log line showing that limit
Added click-to-expand for collapsed teammate and agent messages in fullscreen mode
Fixed sessions getting stuck endlessly retrying "unexpected tool_use_id" 400 errors: corrupted transcripts now self-heal where possible, and otherwise a clear error (with a /rewind hint) ends the loop
Fixed MCP servers configured as http that only speak legacy HTTP+SSE failing to connect when they answer the first request with 422 or another 4xx error
Fixed Streamable HTTP MCP tool calls timing out after about 5 minutes even when a longer per-server timeout was set
Fixed MCP prompts and resources not refreshing when a server sends list-changed notifications without declaring listChanged
Fixed MCP tool calls refused with 403 insufficient_scope being reported as an expired sign-in: the error now names the missing permissions and points to /mcp re-authentication
Fixed hook-driven sessions (such as an active /goal) ending with "Prompt is too long" instead of compacting when the context overflowed again after a reactive compaction
Fixed an active /goal being lost when resuming (--continue / --resume) a session that had compacted
Fixed claude agents losing --model, --effort, --permission-mode, --allow-dangerously-skip-permissions and --agent after an auto-update relaunch
Fixed a per-turn slowdown when a language server publishes project-wide diagnostics for thousands of files
Fixed subagents with model: "opus" on Bedrock, Vertex or Foundry leaving the session's model when its id has no recognizable model family (unless ANTHROPIC_DEFAULT_OPUS_MODEL is set)
Fixed self-hosted runner sessions failing every turn with a 401 after a few failed token refreshes, until the next scheduled refresh; the runner now keeps retrying, and fetches a new token after a 401
Fixed clickable links to local file paths doing nothing in VS Code and other terminals that require a file:// URI
Fixed the transcript renumbering ordered lists in your own messages (typing "3. 2. 1." displayed "3. 4. 5."); numbers and "N)" markers now show as typed
Fixed AskUserQuestion preview notes being attached to a previously chosen option instead of the highlighted one
Fixed AskUserQuestion preview mode dropping the highlighted option when submitting a note with Enter
Fixed a resumed background agent keeping half of an interrupted tool batch when one of its calls was approved with a message
Fixed a local claude -p --resume started with CLAUDE_CODE_RESUME_INTERRUPTED_TURN not reporting background tasks the previous process left unfinished
Fixed the first turn of a cloud session sometimes starting without the tools of an SDK-hosted MCP server that was still connecting
Fixed background agent notifications claiming the agent had no live background work when it was still waiting on its own background task and would resume
Fixed error hints in Claude Desktop sessions to suggest slash commands like /usage-credits instead of CLI flags that cannot be used there
Fixed /schedule saving a routine's prompt without its message role when Claude writes the routine in the shape that listing routines returns
Fixed /status not showing the apiKeyHelper failure that its own error banner told you to check
Fixed /fast on in non-interactive sessions reporting on and then turning off under an organization's managed fast mode policy; it now says the organization has disabled it
Fixed the Artifact tool asking you to approve an update to an artifact that it then refused because the session had not read the latest version
Fixed Cowork and claude.ai cloud sessions with network access on treating reads of a teammate's artifact as if network access were off
Fixed a plugin or marketplace directory with no git repository of its own taking its version from an enclosing git repository, such as a git-managed ~/.claude
Fixed --strict-mcp-config with an empty --mcp-config holding the first non-interactive turn for up to MCP_TIMEOUT on incidental MCP servers
Fixed Stop prompt hooks re-sending their whole prompt on every block in a conversation; repeat blocks now name the condition with a 500-character label
Fixed extra empty editor windows opening at startup on Linux under Wayland when running inside the Cursor or VS Code terminal
Fixed an unhandled promise rejection in the Claude apps gateway when Postgres drops a connection during a spend check
Fixed Claude apps gateway cutting every open stream on SIGTERM: it now lets in-flight requests finish for up to 25 seconds before exiting (CLAUDE_GATEWAY_DRAIN_TIMEOUT_MS)
Fixed installed_plugins.json being rewritten on nearly every start-up when plugin policy comes from remote managed settings, which made Claude Desktop reload every open session's plugins
Fixed headless and SDK sessions making a separate model call for every background task that finished; completions already queued are now answered by one call
Fixed the Bash tool re-sourcing the shell profile (a multi-second stall on the next command) after every plugin reload; it now does so only when the plugins' bin/ directories changed
Fixed plugins with a top-level $schema in hooks/hooks.json showing an "unknown key" notice
Fixed MCP connection errors and the MCP login tool's description showing secrets resolved from ${VAR} placeholders in MCP configs
Fixed Bash permission checks for commands that loop over or assign certain special shell variables; these commands now ask for permission
Fixed worktree-isolated sessions accepting Bash commands with certain nested shell expansions; these are now refused
Fixed the Edit permission prompt preview sometimes showing a different location than the approved edit in files with multi-byte characters
Fixed background commands being stopped after 30 idle minutes on machines under mild memory pressure; they're now stopped only when memory is critically low, and the debug log says why
Fixed a message a subagent sends to the main session disappearing from the Claude Desktop transcript after a relaunch
Fixed a plugin loaded from a .zip being served from a stale extraction after several overlapping reloads
Fixed a sub-agent's progress summary being replaced by a runaway multi-paragraph reply
Improved startup in --input-format stream-json sessions: the first turn no longer waits up to 2s for still-connecting MCP servers whose tools tool search defers; they arrive on a later turn
Improved Monitor tool notifications: a script's final output and its exit now arrive as one notification instead of two, saving a model turn
Improved Artifact tool errors: when you are not signed in to claude.ai the terminal now says so on the first attempt, and Claude is told to stop retrying a rejected call sooner
Improved artifact publishing: a publish built on an older version is stopped before it is sent, with the newer page to merge
Improved safety checks before removing an agent worktree that contains submodule checkouts
Improved OTEL_LOG_RAW_API_BODIES=file:<dir> output: a new index.jsonl and request_body_id / message.id event attributes link each response to its request file and transcript message
Improved Claude apps gateway boot: it now tries the first Postgres connection up to three times before exiting, so a database that is reachable a few seconds late no longer fails the boot
Improved the Claude apps gateway's spend-limit check under load: it now takes one database round trip instead of four, so fewer checks time out on a busy gateway
Improved Claude apps gateway sign-in rate limit errors: /login now explains the refusal, and the gateway log says which limit was hit and which setting to change
Changed Bedrock, Vertex, Foundry and telemetry-disabled installs to use the v2 MCP client and MCP 2026-07-28 negotiation with direct HTTP servers by default, as other installs already do (opt out: MCP_SDK_GENERATION=v1 or MCP_PROTOCOL_NEGOTIATION=legacy)
Changed /code-review to use leaner inline review prompts for every model that has no tuned settings of its own, instead of spawning many review subagents
Changed "type": "sdk" MCP entries in .mcp.json, settings, plugins and agent files to be skipped with a warning: only an SDK host application can register in-process servers
Changed artifact watching in local sessions: a new version published elsewhere no longer starts a turn; Claude learns of it from a later Artifact tool result
Changed plugin and marketplace clones to leave Git LFS files as pointers instead of downloading them; git lfs pull in the checkout fetches them
Changed self-hosted runners to skip a read-only repository the git host refuses at the access check instead of failing the session start
Changed the /status GitHub line to read "Cloud sessions", and /web-setup, /ultrareview, and teleport messages to say "...

What's changed

Added x-claude-code-request-class, x-claude-code-agent-type, x-claude-code-prev-tool-durations, x-claude-code-compaction and x-claude-code-context-compacted request headers for LLM gateways; opt in with CLAUDE_CODE_GATEWAY_HINT_HEADERS=1
Added a notification when an MCP server disconnects mid-session and automatic reconnection gives up, pointing at /mcp
Added forking a session started with claude --remote-control or /remote-control from the Claude app; the fork runs as a background session on your computer
Fixed Bash commands the permission checker cannot fully analyze skipping the prompt under permissions.blockReadsOutsideWorkingDirectories, and a subshell hiding a dangerous rm in bypass mode
Fixed skills synced from claude.ai staying available after your organization turns Skills off; they now move to the recoverable trash
Fixed allowManagedMcpServersOnly, deniedMcpServers and disableClaudeAiConnectors set via MDM or managed-settings.json being ignored when server-managed settings are also present
Fixed 401/403 errors on Bedrock, Vertex and Foundry, and Claude apps gateway 403s, telling you to run /login; the message now names the credential to refresh or points to your gateway administrator
Fixed /login, /upgrade, and /extra-usage discarding earlier thinking from the conversation, which forced a full prompt-cache rewrite on the next request
Fixed auto mode stopping for approval when the Artifact tool uploads a file you attached to the chat in a cloud or Remote Control session
Fixed a long-running session recreating a stub .git/info/exclude after the repository's .git directory was removed or moved away
Fixed the main prompt dropping a ! typed at the start while already in shell mode, so negated commands like ! grep … can be typed
Fixed Read on macOS refusing a dragged-in screenshot, or any file the system reports under a second path, with "symlink resolution changed after permission was checked"
Fixed permissions.blockReadsOutsideWorkingDirectories: a memory directory chosen by a repository's settings is no longer loaded into the prompt, recalled, indexed, or used by memory extraction
Fixed sub-agents and background agents being reported as failed, with their result never delivered, when the final streamed reply omitted token usage or carried no model id
Fixed the context meter and auto-compact counting advisor-tool turns at roughly twice their real context size, which made auto-compact fire at about half the real window
Fixed /tui refusing to restart because of an agent-team teammate that had already finished its work and was no longer shown in the agents panel
Fixed saved scheduled tasks running in the wrong session after .claude/scheduled_tasks.json was copied into another folder, such as a new worktree
Fixed SDK and --output-format stream-json output dropping a subagent's remaining messages and final report after it is moved to the background mid-run (e.g. by CLAUDE_AUTO_BACKGROUND_TASKS)
Fixed /install-github-app reporting a SAML single sign-on block as "admin permissions required"
Fixed Remote Control clients attached to a Claude Desktop, VS Code or JetBrains session being refused when they ask for the session's context window usage
Fixed the spinner showing a doubled ellipsis ("……") on compaction status lines such as "Running PreCompact hooks…"
Fixed a false-positive spinner tip suggesting the frontend-design plugin after reading or publishing Artifacts
Reverted a 2.1.268 change that checked Read and Edit deny rules on Bash lines the permission checker can't analyze (eval, env -C); commands like time -p make build prompt again instead of being denied
Improved responsiveness in long sessions: hook progress and sub-agent activity no longer re-process the whole conversation on every update
Improved the Artifact tool's error when a publish includes a file type artifacts don't serve: Claude is told which types are served and what to do instead, and the terminal shows one plain line
Improved the Artifact tool's page read to state the capabilities and database rules the artifact service holds for the page, for anyone who can publish to it
Improved artifact database writes: an update can now remove a single field instead of rewriting the whole document
Improved artifact publishing: a publish whose connection drops after reaching claude.ai is now re-sent safely instead of failing or creating a duplicate version
Improved the cloud-session GitHub error for an IP allow list, a suspended app installation or SAML single sign-on to show the cause instead of a generic install hint
Improved /autofix-pr: when gh pr view fails it now shows gh's own error (sign-in, SAML, rate limit) instead of a generic exit-code line
Improved /autofix-pr to say why GitHub webhook delivery couldn't be set up for the PR (for example, no linked GitHub account) instead of a generic warning
Improved /web-setup errors: a refused GitHub token now lists the likely reasons and the fix, and a connection failure names a configured proxy or TLS certificate problem
Improved the in-session SSL certificate and proxy connection errors to name the error code and what to fix, such as NODE_EXTRA_CA_CERTS for an untrusted corporate CA
Improved the error when a cloud session can't be created because your Claude login expired or was revoked: it now tells you to run /login
Improved the error shown when an MCP server's sign-in expires mid-session to say how to re-authenticate (/mcp)
Changed auto mode on Bedrock, Vertex and Foundry to use the local classifier by default for now; set CLAUDE_CODE_AUTO_MODE_SERVER=1 to use the platform's server-side classifier
Changed OTEL_LOG_TOOL_DETAILS=1 to also include real agent, skill, plugin and MCP server names on cost and token metrics
Changed sign-in with a Claude account to also request access to your claude.ai plugins
Changed /bug and /feedback reports to include only model-behavior params (model, system prompt, tools) from the last API request, omitting request metadata and CLAUDE_CODE_EXTRA_BODY fields
[VSCode] Fixed "Report a problem" still appearing, and /bug / /feedback opening a report form, for organizations that have product feedback disabled
[VSCode] Fixed a red "Claude Code process exited with code 4294967295" banner appearing after completed turns on Windows
Windows: Improved the network-path permission check for UNC paths when a mapped network drive was added with --add-dir
[Claude Code on the web] Fixed routines losing access to an organization connector, and still calling the old one, after an admin removed and re-added that connector
[Claude Code on the web] Fixed creating a self-hosted environment from organization settings occasionally failing with a server error and leaving a half-created environment behind
[Claude Code on the web] Changed the admin "Share cloud sessions" setting to live under Data and privacy instead of the Claude Code page, where Data and privacy admins can also manage it
[Claude Code on the web] Added a "Discard unsaved changes?" confirmation before the New routine page or the Edit routine dialog throws away a routine name, prompt or edit you typed
[Claude Code on the web] Removed the full-page desktop-app download screen that new users without a cloud environment saw on Mac and Windows; they now go straight to setup
[Claude Code on the web] Improved the routine detail page: menu and rename in the breadcrumb, the on/off switch and Run now at the top, and run history beside the routine's settings
[Claude Tag] Fixed Claude going silent minutes after reinstalling the app when an Enterprise Grid was disconnected but one of its workspaces stayed connected
[Claude Tag] Fixed scheduled tasks set up in an organization-shared private Slack channel silently never posting; they now keep running in the thread they were created in
[Claude Tag] Fixed replying in an older Slack thread while Claude is mid-task sometimes restarting it from scratch and losing work it had not pushed yet
[Claude Tag] Fixed Claude occasionally dropping a message with an incorrect "couldn't find a Claude Code environment" notice right after your account token refreshed
[Claude Tag] Fixed AWS connections refusing region-less endpoints such as Budgets, Savings Plans, WAF Classic and Import/Export; Global Accelerator requests now sign correctly
[Claude Tag] Improved AWS connection failures: when a request can't be signed, such as a hostname with no region, Claude is told why and how to fix it instead of a bare error
[Claude Tag] Fixed OAuth client-credentials and JWT-bearer connections failing with providers that return a lowercase token type; requests now send the standard Bearer scheme
[Claude Tag] Fixed adding a channel manager being refused on Enterprise Grid shared channels, on channels where Claude hasn't been used yet, and on legacy private channels
[Claude Tag] Changed Claude to start watching related public channels on its own, such as an incident channel a conversation depends on, instead of only when asked
[Claude Tag] Fixed the admin Memory page not listing Slack channels Claude set up on its own even when they had saved memory; admins can now open, edit and delete that memory
[Code Review] Fixed merging the base branch into a PR whose earlier review listed "Additional findings" triggering a full re-review; these pushes now get the lighter follow-up review
[Code Review] Fixed a whole REVIEW.md being ignored because of an @-mention, a code span wrapped across lines, or a backticked HTML tag; only lines linking to changed files are withheld
[Code Review] Improved suggested fixes to say what the fix must keep working when other code depends on the behavior being changed
[Code Review] Improved review comments that point to a second affected location to state that location's is...

What's changed

Bug fixes and reliability improvements

v2.1.271

What's changed

Added fast mode in Claude Code Remote sessions (cloud and self-hosted runners): the host's fast-mode setting or /fast typed in the session applies where your organization allows it
Added mouse support to the /config panel in fullscreen mode: the wheel scrolls the settings list, a click on a setting's value changes it, and the row under the pointer is highlighted
Added claude self-hosted-runner --drain-marker-file <path>: when that file exists at a SIGTERM drain, the runner reports its exit to the server as a host drain (telemetry only)
Added per-command allowed_domains to Bash, PowerShell and Monitor in auto mode with sandboxing: the hosts a command needs are reviewed with it and opened for it alone; other hosts are refused
Added omitClaudeMd to agent frontmatter and --agents JSON, letting custom and plugin subagents run without user, project and local CLAUDE.md files; managed policy files still load
Added --accept-command <sha256> to claude plugin install and claude plugin update to accept exactly the command a previous --json run displayed, instead of -y
Added support for a multiplier above 1, up to 10, in the modelPricing managed setting and the Claude apps gateway pricing block, for marked-up internal chargeback rates
Added a spinner tip pointing Bedrock, Vertex AI, Foundry and LLM gateway users to the Claude desktop app; the claude.ai desktop app tip now suggests /desktop, which offers to download the app
Fixed a cached organization policy being reused after switching accounts, organizations, or API keys, and the policy not refreshing until the hourly check when the credential changes mid-session
Fixed the tool and command lists not updating when the organization policy finishes loading after startup or changes mid-session
Fixed an enterprise managed-mcp.json that can't be read or parsed being ignored: it now keeps exclusive MCP control (user, project and plugin servers don't load) and warns at startup
Fixed org policy being fetched through, and rejected by, third-party local proxies set via ANTHROPIC_UNIX_SOCKET; they are again treated like other custom gateways, including for Remote Control
Fixed cloud sessions rejecting every subagent tool call ("updatedInput … failed schema validation") when a workflow or agent approval was applied after the session's worker restarted
Fixed /fast off answering "Fast mode unavailable" instead of turning fast mode off when the organization has fast mode disabled
Fixed sessions started with CLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK re-sending fast requests every turn after the API rejected fast mode; the rejection now stands and its reason is shown
Fixed fast mode under CLAUDE_CODE_RETRY_WATCHDOG failing the turn on a usage-credits limit, or retrying an overload at fast speed, instead of falling back to standard speed
Fixed Bash permission checks missing the file that fmt, column and similar commands read when it follows an option the checker doesn't recognize
Fixed Bash permission checks skipping files a wildcard expands to when the wildcard sits in a command's pattern or option value (for example grep -v dir/* file)
Fixed Bash permission checks so that shell variable declaration flags cannot misrepresent the command being run
Fixed Bash commands with two directory changes, a subshell, or a cd+git chain skipping the prompt under permissions.blockReadsOutsideWorkingDirectories in bypass and auto mode
Fixed a stale .git/config.lock breaking git checkout -b, git push -u and git config for the rest of a session after a sandboxed command failed to start (Linux)
Fixed settings file changes made outside the session going unnoticed on macOS machines whose system file-event service is saturated; the watcher now falls back to polling
Fixed resumed claude -p sessions whose tools all come from MCP servers failing with "At least one tool must have defer_loading=false"
Fixed turns failing with "API returned an empty or malformed response" when an LLM gateway returns the non-streaming reply as text/plain
Fixed sustained high CPU usage and repeated tool-list requests when an MCP server sends list_changed notifications in a tight loop
Fixed MCP OAuth mishandling client registrations: denying consent forced a new one, one for another redirect URI was reused, and a concurrent write could delete a valid one or keep a mismatched one
Fixed tool search returning no match when Claude selects an MCP tool by its bare name instead of its full mcp__server__tool name
Fixed Ctrl+O cancelling pending MCP server reconnects, and /mcp sent from Remote Control failing while the transcript view is open
Fixed the Claude in Chrome prompt telling the model to load tools through ToolSearch when ToolSearch is unavailable
Fixed cross-session messages held by the receiving session's permission-mode policy leaving no trace: headless senders now get a delivery notice, and SendMessage results no longer imply it was read
Fixed Claude starting a second copy of a background command (such as a watch task or dev server) that was still running after the conversation was compacted
Fixed /model warning about losing the conversation cache when switching back to the model the conversation actually ran on
Fixed /reload-skills reporting a skill count that disagreed with the slash menu after /cd
Fixed /resume and /continue showing only 1-2 sessions in fullscreen mode on short terminals
Fixed /resume and /teleport keeping the previous conversation's file-read tracking, so Claude could edit files the resumed conversation had never read
Fixed --resume dropping the 1M context window ([1m]) when the resumed session's model family differs from the configured default model
Fixed artifacts attached with /artifacts disappearing from the session after --resume
Fixed background sessions (claude --bg, claude agents) not watching the artifacts they publish for republishes made elsewhere
Fixed custom agents, slash commands and output styles beyond the first not loading from a virtual drive that reports inode 0, such as an encrypted vault mounted as a Windows drive
Fixed self-hosted runner sessions silently losing all host config (settings, skills, plugins, MCP servers) when the host config directory exceeds 64 MiB; added --host-config-snapshot disk|memory
Fixed skills synced from claude.ai staying on disk indefinitely after signing out; copies not refreshed within cleanupPeriodDays now move to the recoverable trash at the next launch
Fixed spinner tips suggesting commands that aren't available for your account type or are disabled in your session
Fixed the /add-dir path input: the left and right arrow keys now move the cursor, and Enter adds only the typed path instead of also adding the highlighted completion
Fixed text fields outside the main prompt moving a leading ! to the end of what you typed (!foo came out as foo!)
Fixed the interactive /hooks menu crashing when a hook matcher is named after an inherited object property such as __proto__ or constructor
Fixed a fullscreen rendering glitch where text kept a stale background color after the box around it lost its background
Fixed Delete in st and Alt+arrow keys in rxvt-unicode not working in attached background sessions
Fixed the terminal's replies to capability queries (^[[?1;2c) appearing at the shell prompt or in an editor when Claude Code exits, is suspended, or opens an editor right after starting
Improved terminal rendering performance: large diffs and long transcripts render faster, with fewer slow frames
Improved startup time slightly by skipping a redundant validation of built-in model data on every launch
Improved hook feedback: while a SessionStart, UserPromptSubmit, PreToolUse or SessionEnd hook runs, the spinner says so with elapsed time, and Esc cancels a prompt waiting on a SessionStart hook
Improved the spinner status during long thinking: it now reads "deep in thought" after 45s, and shows "picking the thought back up" while recovering from the output-token limit
Improved dynamic workflows to pause when you hit your usage limit and continue automatically when it resets, instead of dropping the affected agents
Improved Remote Control to leave fewer empty sessions on claude.ai when setup fails on a flaky network
Improved the Claude in Chrome message in cloud sessions when the browser can't be reached: it now says the computer may be asleep before it suggests an install
Improved claude mcp serve: a running tool call now sends a progress update every 30 seconds, so clients show it is still running and idle timeouts don't abort a long command that prints nothing
Improved Foundry and Claude Platform on AWS sessions: an alwaysLoad MCP server that finishes connecting mid-conversation is usable on the next turn without a tool-search round trip
Improved Markdown files published as artifacts: they now render as styled document pages (title header, document typography, syntax-highlighted code)
Improved Artifact tool publish errors: a publish with no file now says to write the page to a file first, and an unsupported file type is reported before a missing favicon
Improved the Artifact tool's error when a page declares a capability its contract version lacks: it now lists every supported capability and notes when a newer contract version has it
Improved artifact watching: a session can now watch up to 10 published artifacts at once for republishes made elsewhere, up from 5
Improved PDF @-mentions to say "page count unknown" instead of a page count guessed from the file size when pdfinfo cannot count the pages
Improved /mobile to show a single QR code for claude.ai/mobile, which opens the right app store for your phone
Changed auto mode so that a skill's or slash command's inline ! shell commands follow default-mode pe...

What's changed

Fixed read-only git commands in Bash unexpectedly asking for permission after a session had been running for a while (regression in 2.1.269)

v2.1.269

What's changed

Added claude plugin eval: run a plugin's eval suite against Claude Code and get scored, reproducible results (JSON + HTML report); see claude plugin eval --help
Added /output-style [name] to list and switch output styles, including over Remote Control and in cloud and other headless sessions
Added a diff of the files a Bash command changed to the Bash tool result when the Bash tool handles file edits (setting bashEditDiffEnabled)
Added OTEL_METRICS_INCLUDE_REPOSITORY to tag OpenTelemetry metrics and events with vcs.* repository attributes; commit events get vcs.ref.head.* with OTEL_LOG_TOOL_DETAILS
Added CLAUDE_CODE_GATEWAY_MODEL_DISCOVERY_TIMEOUT_MS to extend the LLM gateway /v1/models discovery timeout (default 3s)
Added a spinner tip suggesting /focus for a view with just your prompt, a one-line work summary, and the response
Added CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS (1–256) to raise the Workflow tool's per-run concurrent agent limit for inference-bound fan-outs
Fixed the prompt cache being partially invalidated on the turn after a response was cut off at the output-token limit and automatically resumed
Fixed a case where resuming a session after interrupting Claude mid-thought could change how earlier context was re-sent, hurting prompt-cache reuse
Fixed F1/F2/F4 not working in kitty-protocol terminals and Delete in st, Alt+arrows acting as Escape in rxvt-unicode, and Shift+punctuation typing the unshifted key in WezTerm (regression in 2.1.247)
Fixed remote and headless sessions reporting "waiting for your input" while background agents were still running (set CLAUDE_CODE_BG_TASKS_REPORT_RUNNING=0 to restore the old behavior)
Fixed the terminal's replies to capability queries (^[[?1;2c) appearing as stray text at startup in some terminals
Fixed rows at the top or bottom of the transcript going blank in fullscreen after resizing the terminal
Fixed a deny or ask permission rule starting with ! applying beyond the settings source that wrote it; such a rule now applies only within its own source, and a bare ! negation is ignored
Fixed the git status Claude is told after a compaction: it is now the current status, not the one from the start of the session
Fixed synced plugin MCP servers not connecting when a remote session resumes
Fixed resumed headless sessions losing a turn's replies when the model was switched or a request was retried mid-turn
Fixed terminal escape codes, line breaks and oversized text from a background task's on-disk record reaching the task list and task notifications when work is resumed
Fixed CMYK JPEG images failing to attach with "cannot decode"; they are now converted and resized like other JPEGs
Fixed the managed settings approval dialog not naming the collector for a gRPC telemetry endpoint set without a scheme
Fixed plugin headersHelper consent prompts showing a URL path that could be misread as a different host
Fixed plugin errors showing [redacted URL] in place of a relative Windows path with a folder name that starts with @
Fixed missing cursor in the permission-rule, auto-mode-rule, add-directory, session-rename and feedback-review text fields when the terminal's native cursor is enabled
Fixed repeated clicks on a /fork receipt, each under a second apart, never backgrounding the session right away while it waited for the current tool to finish
Fixed plugin LSP servers that reject shutdown params (e.g. rust-analyzer) being left running at session end; exit is now sent even if shutdown fails
Fixed the attribution reminder overriding a CLAUDE.md or memory rule against commit and pull request attribution; lines set by managed settings still apply
Fixed prompt suggestions being dropped for text in Japanese, Chinese, Thai and other languages written without spaces between words
Fixed synchronized output being assumed from the terminal's name in GNOME Terminal and Konsole versions that do not support it
Fixed permission_denials in --output-format stream-json results omitting Read, Edit and Write calls blocked by a path-scoped deny rule
Fixed sessions run through the SDK or the desktop app showing an unknown status in other sessions' agent list
Fixed /insights failing on Bedrock, Vertex, Foundry, and gateway deployments whose account can't reach the default Opus model by using the session model there instead
Fixed organization policy limits not loading for the session when another Claude Code process refreshed the login at the same moment
Fixed Claude Desktop sessions using Bedrock, Vertex, or a gateway not getting the contextual "what Claude needs" turn-end notification text
Fixed MCP servers reconnecting when an updated config only changed the order of the server URL's query parameters
Fixed the prompt box's top border splitting into extra lines when viewing a background agent whose name or description has line breaks or is wider than the terminal
Fixed sessions getting permanently stuck on "Prompt is too long" when auto-compaction had no complete earlier exchange to summarize (mostly Agent SDK sessions with very large prompts)
Fixed /goal runs silently stalling after API errors, network drops, or token limits: the goal now retries with backoff, or pauses and says why, including until a usage limit resets
Fixed prompt cache misses in cloud sessions by waiting briefly for server configuration before the first request
Fixed /btw answers that contained made-up tool calls and output: the side question is now told not to write them, and any that appear are flagged as not executed
Fixed CLAUDE_CODE_RESUME_INTERRUPTED_TURN re-running a turn that had failed with an API error over 6 hours earlier, or longer ago than CLAUDE_CODE_RESUME_INTERRUPTED_TURN_MAX_AGE_MS when set
Fixed organization plugins enabled through managed settings not loading in headless sessions and on Claude Desktop (once Desktop bundles this CLI version); they load from the next session
Fixed plugin archives extracted for a session being readable by other local users, extracted files keeping world-writable bits from the archive, and stale files surviving re-extraction
Fixed Edit() deny rules and the write-path check not applying to the file a Bash tee command writes; a Bash(tee:*) allow rule no longer covers destinations outside the working directories
Fixed stray characters like 22c, or a terminal's color or version reply, being typed into the prompt at startup over slow connections (ssh, browser terminals)
Fixed the terminal's block cursor showing under the interface in rxvt-unicode after leaving or re-entering fullscreen
Fixed the cursor block staying visible after returning from an external editor in fullscreen mode on rxvt-unicode
Fixed the interface being drawn twice after returning from an external editor (Ctrl+G) outside fullscreen mode
Fixed the interface being drawn twice in Konsole after returning from an external editor
Windows: Fixed PowerShell tool commands sent to the background stopping when Claude Code exits
Improved the /diff panel to open fully rendered in one step instead of showing a loading state first
Improved prompt suggestion filtering for Japanese, Chinese and Korean text: mixed-script and single-word suggestions are kept, and meta or evaluative text is dropped as it is for English
Improved the Skill tool's "Unknown skill" error to name the plugin skill's full name when a bare name matches exactly one plugin skill
Improved keyboard support over SSH and in unrecognized terminals: terminals that answer the kitty keyboard query (such as foot and Alacritty 0.16+) now get Shift+Enter and Ctrl+Shift shortcuts
Improved responsiveness in long sessions: transcript updates no longer re-process the whole conversation to build the collapsed tool-use summaries
Improved first-party sessions with telemetry disabled: an alwaysLoad MCP server that finishes connecting mid-conversation is usable on the next turn without a tool-search round trip
Changed /ultrareview --post to post the PR comment directly when the findings arrive and print the comment link, instead of starting a second cloud session to post it
Changed artifact database reads that save into the session scratchpad so they no longer stop for working-folder approval
Changed skills synced from claude.ai in cloud sessions to be named anthropic-skills:<name>, matching Claude Desktop; the bare name still works when nothing else uses it
[VSCode] Added an agent map: an "N agents" footer pill opens a map of the session's sub-agents with per-agent cards, Stop agent, and read-only transcripts
[VSCode] Added a Hooks dialog to the command menu for viewing hooks and adding, editing, or removing them in user, project, and local settings; managed, plugin, and session hooks stay read-only
[VSCode] Added live progress rows for running subagents under the tool-call groups in Focus view
[VSCode] Added a Permission rules dialog that lists permission rules and adds or removes them in user, project, and local settings; startup-option, session-only, and managed rules stay read-only
[VSCode] Added a Cancel button to the Switch account screen that returns to your session as the current account
[VSCode] Fixed Focus view showing a turn started by a delivered plain-text prompt, such as a scheduled task's, as part of the previous turn
[VSCode] Fixed the footer's prompt cache clock hiding its minutes when the panel is narrow
[VSCode] Fixed the session list keeping sessions from the default folder when CLAUDE_CONFIG_DIR is set in a settings file or the environmentVariables setting
[VSCode] Fixed a plan preview that finished loading late sometimes hiding its comment box or showing an older plan
[VSCode] Fixed a plan preview accepting comments that went nowhere after its Claude tab closed
[VSCode] Fixed the prompt cache clock and reopen notice ...

What's changed

Added to the Claude apps gateway: with pricing: set in gateway.yaml, signed-in Claude Code clients receive the same rates through managed settings, so /cost and telemetry match the spend meter
Added a startup warning for gateways when access_control.allow_cidrs is empty, and a one-time warning the first time a request arrives from a public address
Added the gatewayInternalNetworks managed setting, letting administrators allow /login to a Claude apps gateway on their organization's own public IPv4 block
Added claude self-hosted-runner --remove-session-state (default off): delete each session's per-session directories under <base-dir>/_sessions/ when the session ends
Added configDirectory to the output of claude auth status --json
Added --json to claude plugin install, uninstall, update, enable and disable, and errorDetails/noteDetails to each row of claude plugin list --json
Added browser-tab icons for published artifacts, chosen by Claude to match each page
Fixed every turn failing with HTTP 400 on third-party Anthropic-compatible endpoints (ANTHROPIC_BASE_URL) since 2.1.265: a regex in the Artifact tool's input schema that those endpoints reject
Fixed WebFetch hanging indefinitely on a server that keeps the response open without finishing; a fetch now fails after 300 seconds. Set CLAUDE_CODE_WEBFETCH_DEADLINE_MS to override the deadline (0 turns it off)
Fixed a respawned in-process teammate picking up tools or a system prompt from a same-named agent file in a folder you have not trusted
Fixed sustained high CPU usage: a busy loop in long-running idle sessions no longer pins a CPU core, and rapid terminal focus reports during a session recap no longer keep the CPU high
Fixed Claude sometimes replying "your message came through empty" after an MCP tool call
Fixed deny and ask permission rules on symlinked directories (/etc, /tmp, /var on macOS; /bin on Linux) not applying when a path was given by its real location, and Bash commands ignoring deny rules written on a symlinked path spelling
Fixed a case where a Read or Edit deny rule did not apply when an env -C, eval or similar command the permission checker cannot analyze was on the same line
Fixed plugin and marketplace errors showing a token or password from a git source URL
Fixed /mcp and /plugin server details, claude mcp list/get, and MCP login errors showing secrets resolved from ${VAR} placeholders in MCP configs
Fixed prompt caching and extended thinking breaking mid-session for SDK sessions using excludeDynamicSections: the first message is no longer re-rendered each request
Fixed entitled users being told a model is restricted after restart or in the Desktop Code tab when a cached model-access denial was stale
Fixed a running session silently switching to the organization's default model when another Claude Code process refreshed a stale model-access entry
Fixed long-context 429s on Fable models showing the usage-credits consent prompt instead of the 1M-context message on Pro and Team plans
Fixed workload identity federation via a profile (as claude-code-action configures it): processes sharing the profile could fail mid-run with 401 … jti reused
Fixed MCP server OAuth sign-in failing with "No available ports for OAuth redirect" when the local callback port range can't be bound
Fixed the conversation summary produced by /compact and auto-compact mangling text that contained $ sequences
Fixed resuming a conversation that ended with /compact: its restored-file notes now load in the same order on every resume
Fixed SDK prompt suggestions, side questions and /rename sending the conversation from before a compaction
Fixed @ file and / command suggestions not appearing after recalling a previous prompt with the up arrow and editing it
Fixed claude agents: pressing ← again at a natural pace to go back to the agent list no longer gets ignored until you pause for over a second
Fixed claude agents session delete getting stuck when a worktree can't be removed: the message names the cause and next step, and for a git worktree ctrl+x again deletes the directory anyway
Fixed background agent and workflow rows in the agents panel expanding to many lines when their text contained line breaks
Fixed Claude in Slack sessions losing their Slack tools when org managed settings set an MCP allowlist
Fixed Claude in Chrome asking to allow the host "https" when a navigation URL had a scheme but a host that could not be parsed
Fixed the spinner wrapping onto several lines when the current task's label is long; the label and the "Next:" task line now stay within one terminal row
Fixed the /bug and /feedback description field showing no cursor when the terminal's native cursor is enabled
Fixed Remote Control sessions served by claude remote-control showing a generated name instead of their session title in ListAgents
Fixed claude plugin validate rejecting plugin paths whose directory name begins with two dots, which the plugin loader accepts
Fixed plugins silently skipping a default monitors file or root SKILL.md that could not be checked
Fixed WebFetch's error for localhost and other dotless hostnames to explain why the URL is refused and suggest curl
Fixed PermissionRequest hooks not firing in --print mode
Fixed policy-helper warnings not printing on headless (-p) runs
Fixed /resume listing a /fork background session under its parent's name instead of its own ⑂ fork name
Fixed /remote-control and other claude.ai-gated commands to suggest /login when signed out instead of showing a Claude for Enterprise migration message
Fixed CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS not extending SessionEnd hooks that have no per-hook timeout (they were still cancelled after 1.5 seconds)
Fixed /autofix-pr and other cloud-session commands saying to retry or install the Claude GitHub App when no GitHub account is connected; they now point to /web-setup or the web connect page
Fixed cloud-session commands such as /teleport and /remote-env to explain when an organization policy turns them off, instead of answering "Unknown command"
Fixed Bash sandbox instructions over-stating confinement: no unenforced path lists when filesystem isolation is off, and strict mode no longer claims commands can never run unsandboxed
Improved fullscreen mode: adding or removing a prompt line (Shift+Enter) now repaints as fast as typing a character instead of re-rendering the visible transcript
Improved --continue / --resume: the conversation appears immediately instead of waiting for SessionStart hooks, and the first message no longer re-reads the whole transcript
Improved responsiveness during tool-heavy turns by no longer redrawing the transcript for a hidden per-tool-batch reminder
Improved startup time in projects with .claude/workflows/ scripts: listing them no longer parses each script
Improved auto mode denials: the message Claude receives now names the rule that blocked the action and asks Claude to try a safer method and finish unrelated work before stopping to ask you
Improved Claude in Chrome: long page reads now stay inline instead of being saved to a file and read back
Improved the MEMORY.md truncation warning to say how many lines were cut and where the cut starts
Improved the terminal permission prompt for artifacts: it now leads with the ask's question
Improved the prompt footer: an editor or /diff selection now shows inside the prompt input, and fullscreen mode shows Remote Control status in the header instead of the footer
Improved the "Usage credits required for 1M context" message to say that usage credits turned on mid-session take effect after restarting Claude Code
Improved /plugin: installing, enabling or disabling a plugin now takes effect when you close the menu; /reload-plugins is no longer needed afterwards
Changed the system prompt on Bedrock, Vertex and Foundry to deliver environment, model and settings details as attachments, matching first-party sessions
Changed Bedrock, Vertex and Foundry sessions to keep the tool list byte-stable across a conversation (late-connecting tools load deferred instead of rewriting it), matching first-party sessions
Changed the task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) to be offered only on Claude 3.x, Opus 4.0–4.7, Sonnet 4.0–4.6, Haiku 4.5; set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 elsewhere
Changed the artifact data-edit permission prompt in the terminal to a card that shows the document count and who can open the artifact
Changed local Cowork sessions set to skip all approvals: the Artifact tool now refuses a local file outside the session's folders, or behind a symlink, instead of reading it without asking
Changed plain WebFetch deny and ask rules to no longer apply to Artifact tool reads and updates; use an Artifact rule (or WebFetch(domain:claude.ai)) to block or gate them
Changed the "N MCP servers need authentication" startup notice to announce each server once instead of at every launch
[VSCode] Fixed the session list, settings toggles, and chat tabs when CLAUDE_CONFIG_DIR is set in a settings file or the environmentVariables setting
[VSCode] Fixed the model pill, model picker and command menu going blank in open tabs for a few seconds after a login, logout or account switch
[VSCode] Fixed Auto disappearing from the mode picker in new-tab or just-reloaded conversations when a project or local setting overrides the model named in ~/.claude/settings.json
[VSCode] Fixed session names reverting to the last prompt after a window reload when a SessionStart hook is configured
[VSCode] Fixed the footer's model pill and Remote Control pill waiting for the new tab's Claude process to start when another tab in the window is already up
[VSCode] Fix...

Releases · anthropics/claude-code

v2.1.277

What's changed

v2.1.276

What's changed

v2.1.275

What's changed

v2.1.274

What's changed

v2.1.273

What's changed

v2.1.272

What's changed

v2.1.271

What's changed

v2.1.270

What's changed

v2.1.269

What's changed

v2.1.268

What's changed