Claude Code mcp

All MCP Bug Fixes

• Fixed typed or pasted characters occasionally landing out of order or being dropped during fast input or key repeat.(v2.1.261)
• Fixed `/add-dir <subdirectory>` printing a false "couldn't be resolved" error when the working directory is on a `/net` automount.(v2.1.261)
• Fixed the Bedrock setup wizard hanging when AWS or an AWS credential helper never responds, now it times out with a clear error.(v2.1.261)
• Fixed Bedrock model checks failing behind a TLS-inspecting proxy.(v2.1.261)
• Fixed cloud sessions discarding a plugin synced from claude.ai when managed settings force-enable it, then falling back to a potentially failing marketplace clone.(v2.1.261)
• Fixed inability to delete the character immediately before an inline `[Image #N]` chip in the prompt input.(v2.1.261)
• Fixed resuming a session losing hook output and other context around parallel tool calls, which previously altered the resumed request.(v2.1.261)
• Fixed Remote Control showing a stale permission mode when a phone, browser, or claude.ai app attaches to a terminal session or after the mode changes.(v2.1.261)
• Fixed Remote Control sessions appearing to still be working after stopping a turn or executing a local slash command like `/clear`.(v2.1.261)
• Fixed SDK and cloud sessions ignoring a Stop or interrupt sent just after the first prompt, before the turn had started; turns now stop correctly.(v2.1.261)
• Fixed Remote Control uploading a session pulled with `/teleport` into the connected session, which previously appeared appended to the original.(v2.1.261)
• Fixed Remote Control's inbound event stream failing behind TLS-inspecting corporate proxies on native Windows.(v2.1.261)
• Fixed Remote Control sessions showing the default effort level on claude.ai when the effort level is specified in settings.(v2.1.261)
• Fixed `gcpAuthRefresh` opening a browser at startup when the Google credential check was slow, even if the credential was still valid.(v2.1.261)
• Fixed claude.ai connectors staying absent for the entire session when the startup connector fetch timed out; the CLI now retries in the background.(v2.1.261)
• Fixed sustained high CPU usage when a background agent could not be resumed and its wake-up was retried in a tight loop.(v2.1.261)
• Fixed feature flags gated to a newer version occasionally applying to an older Claude Code version on the same machine.(v2.1.261)
• Fixed `/usage` and the VS Code usage panel dropping a model-specific weekly limit row when the usage endpoint is rate limited or opened right after startup.(v2.1.261)
• Fixed `claude -p --resume <file>` adopting a malformed session ID recorded in the transcript; it now resumes under a fresh session ID.(v2.1.261)
• Fixed the terminal progress indicator showing the session as finished while a background workflow or agent was still running.(v2.1.261)
• Fixed a rare layout glitch where a box could render with the wrong height after its container switched between row and column direction.(v2.1.261)
• Fixed Claude apps gateway client IP when a trusted proxy appends a port to `X-Forwarded-For`; unreadable entries now result in a 403.(v2.1.261)
• Fixed Claude apps gateway telling Claude Desktop to export OpenTelemetry as JSON even when the terminal CLI uses protobuf, preventing collector rejection.(v2.1.261)
• Fixed Desktop and web showing a session as busy when it is only watching an artifact for updates.(v2.1.261)
• Fixed Claude in Chrome `file_upload` failing with an error in local Cowork sessions run from the Claude Desktop app.(v2.1.261)
• Fixed `SendMessage` to an offline Remote Control session on another machine incorrectly reading as delivered; delivery is now queued until the machine reconnects.(v2.1.261)
• Fixed plugin install hints from CLIs run in background Bash commands from leaking the raw `<claude-code-hint>` tag into the conversation.(v2.1.261)
• Fixed in-process agent-team teammates re-sending their first-turn tool and skill announcements on the second turn, which altered the request prefix and missed the prompt cache.(v2.1.261)
• Fixed a VS Code session teleported from Claude Code on the web treating a question that was cut off when the cloud session shut down as declined.(v2.1.261)
• Fixed the VS Code session tab's Rename box opening empty for a tab restored with the window; it now starts with the current name.(v2.1.261)
• Fixed collapsed sections in the VS Code session list panel briefly showing expanded each time the panel loaded.(v2.1.261)
• Fixed VS Code Focus view showing a tool call as still running after Claude had moved on.(v2.1.261)
• Fixed the VS Code session list's active-row highlight going stale when an unfocused Claude tab's session ID is corrected.(v2.1.261)
• Fixed Cmd/Ctrl+Shift+T reopen and deep-link opens placing the VS Code Claude tab outside the Claude editor group when a Claude tab has focus.(v2.1.261)
• Fixed the VS Code session tab's "Add to group" action for a session opened from Claude Code on the Web.(v2.1.261)
• Fixed `Edit`/`Write`/`Read` permission rules with parentheses in their paths from being dropped by the Bash sandbox, which previously left 'read-only' folders writable.(v2.1.260)
• Fixed a file permission rule with an uncompilable pattern (e.g., an unclosed `[`) that caused all file edits to fail with 'Invalid regular expression'; such rules now guard the literal path.(v2.1.260)
• Fixed Bash permission checks that auto-approved zsh commands hiding command substitutions in assignments like REPORTTIME, REPORTMEMORY, or DIRSTACKSIZE; these now prompt for approval.(v2.1.260)
• Fixed Bedrock model discovery, token counting, and AWS SSO/STS credential calls failing with 'unable to get local issuer certificate' when the corporate root CA is only in the OS certificate store.(v2.1.260)
• Fixed `permissions.blockReadsOutsideWorkingDirectories` on macOS from hiding the user's git config from sandboxed git and a worktree-isolated sub-agent's checkout.(v2.1.260)
• Fixed managed settings not loading for claude.ai Enterprise/Team users who also had a leftover API key from an earlier `/login`.(v2.1.260)
• Fixed `/status` incorrectly listing a signed-in claude.ai account and a configured API key as both active; the inactive credential is now marked.(v2.1.260)
• Fixed managed `skillOverrides` entries keyed on a bundled skill's alias (e.g., `checkup` for `/doctor`) not applying, and `Skill(name)` deny rules not covering nested skills listed as `<dir>:name`.(v2.1.260)
• Fixed `model: fable` agents ignoring the `[1m]` tag on an `ANTHROPIC_DEFAULT_FABLE_MODEL` pin, causing them to silently run with a 200K context window.(v2.1.260)
• Fixed the `/model` picker not showing Fable 5.1 for eligible organizations, which was only accepted when typed as `/model claude-fable-5-1`.(v2.1.260)
• Fixed prompt caching on Claude Fable 5.1 not covering context after tool results, leading to it being resent as uncached input on every tool-call turn.(v2.1.260)
• Fixed model switching remaining blocked for the session after a plugin hook load failure; switches now re-check and the refusal names the cause.(v2.1.260)
• Fixed model switching being blocked for the session when an organization-managed plugin's marketplace could not be loaded.(v2.1.260)
• Fixed SDK-provided MCP servers (e.g., Desktop connectors) sometimes missing on the first turn and only appearing on the next.(v2.1.260)
• Fixed Claude in Chrome tools failing with 'Not connected' mid-task in cloud-hosted claude.ai sessions when a connector was added or removed.(v2.1.260)
• Fixed flags, joined emoji, and accented letters splitting across wrapped lines, and stale text remaining on screen when a flag or joined emoji fell in the terminal's last two columns.(v2.1.260)
• Fixed Remote Control accepting an invalid model pick, which now results in an error instead of failing on the next message.(v2.1.260)
• Fixed `/rewind` and `--rewind-files` reporting success when checkpoint backup files were missing and no restoration occurred.(v2.1.260)
• Fixed `/rewind` leaving stale file-read tracking from rewound turns, causing 'File unchanged since last read' stubs and re-injection after external edits.(v2.1.260)
• Fixed `-p --resume`/`--continue` (used by the desktop app) failing on every retry once a session's worktree directory lost its git metadata; it now fails once and then resumes without the worktree.(v2.1.260)
• Fixed a subagent resuming another agent via SendMessage never being woken by that agent's completion, with notifications going to the main conversation instead.(v2.1.260)
• Fixed agent teams where an in-process teammate's transcript lost messages or went blank during long API retry waits due to retry notices evicting real messages.(v2.1.260)
• Fixed a session that moved to the background appearing twice in ListAgents (as a phantom 'interactive' twin) and receiving SendMessage deliveries in the viewer.(v2.1.260)
• Fixed intermittent 'task output swap refused' errors when many sessions share a project directory.(v2.1.260)
• Fixed Ctrl+Z in fullscreen leaving the shell on the alternate screen, drawn over the paused interface.(v2.1.260)
• Fixed Workflow tool subagents being restarted as stalled while a long context compaction was in progress.(v2.1.260)
• Fixed plugins from a URL marketplace failing to install with 'marketplace entry path does not stay inside the marketplace directory' when a host app stores it as a directory.(v2.1.260)
• Fixed an extra browser tab opening when an artifact is published in a session driven from claude.ai, the desktop app, or mobile (Remote Control).(v2.1.260)
• Fixed the Artifact tool's first call failing with an 'Invalid tool parameters' validation error in some Cowork sessions.(v2.1.260)
• Fixed IDE line selections being dropped when running a skill or slash command; the 'N lines selected' context now reaches Claude.(v2.1.260)
• Fixed repository detection for GitLab projects in nested subgroups (e.g., `gitlab.com/group/subgroup/project`).(v2.1.260)
• Fixed `owner/repo#123` issue references in rendered output linking to github.com when working in a GitLab repository; they now link to the gitlab.com issue.(v2.1.260)
• Glob/Grep: Fixed the search path being probed on disk before the permission check; missing paths are now reported after permission is decided, similar to Read.(v2.1.260)
• Reverted the 2.1.259 change applying `Read()` deny rules to Bash arguments, which incorrectly denied `npm run build` under a `Read(./**/build/**)` rule and caused `cd … && grep` to prompt even in auto mode.(v2.1.260)
• Fixed concurrent sessions silently reverting each other's `~/.claude.json` changes, preventing workspace trust resets and loss of MCP/project state.(v2.1.259)
• Fixed a bug where a rejected conversation turn would be repeatedly rejected on subsequent turns.(v2.1.259)
• Fixed Bash `Read()` deny rules not correctly covering files provided as option values, `git diff`/`git grep` file operands, or `cd DIR && cat FILE` compounds.(v2.1.259)
• Fixed the prompt cache being invalidated upon OAuth token refresh in sessions with telemetry disabled.(v2.1.259)
• Fixed fullscreen mode displaying a blank conversation after a long turn with numerous tool calls.(v2.1.259)
• Fixed auto mode incorrectly running a turn on an unsupported model when a command or skill's frontmatter specified one; the session model is now used.(v2.1.259)
• Fixed `CLAUDE_CODE_MAX_CONTEXT_TOKENS` being ignored for unrecognized Vertex-style model IDs.(v2.1.259)
• Fixed the live output preview of running shell commands hiding newest lines when an earlier line wrapped.(v2.1.259)
• Fixed a background GitHub connection check for claude.ai users that ran on every launch; the result is now remembered.(v2.1.259)
• Fixed `--resume` failing and `--continue` opening an empty conversation when a saved session contained an attachment entry without a payload.(v2.1.259)
• Fixed frontmatter `model:` on custom commands and skills being ignored in interactive sessions.(v2.1.259)
• Fixed Artifact publishing failing with an "unexpected parameter `note`" error in conversations continued from older versions.(v2.1.259)
• Fixed managed `forceRemoteSettingsRefresh` being ignored at startup when a policy helper had already run.(v2.1.259)
• Fixed worktree isolation refusing hook-created worktrees on machines where `git rev-parse` fails with non-"not a git repository" messages.(v2.1.259)
• Fixed OpenTelemetry metrics and events from cloud sessions missing `user.email`, `organization.id`, and `user.account_uuid` attributes.(v2.1.259)
• Fixed MCP servers disconnecting during tool listing at startup, which previously showed as connected with no tools instead of reporting an error.(v2.1.259)
• Fixed the file edit permission dialog sometimes truncating changed lines without indication.(v2.1.259)
• Fixed repository detection dropping a known repo identity after a transient git probe failure.(v2.1.259)
• Fixed managed settings silently going unenforced when parsing failed; Claude Code now refuses to start and names the source of the failure.(v2.1.259)
• Fixed Stop not actually stopping background agents and workflows in remote-control sessions; killed tasks now remain visible and re-stoppable.(v2.1.259)
• Fixed resuming a workflow run while its previous stopped run was still exiting, preventing duplicate agent copies.(v2.1.259)
• Fixed marketplace repo URLs on github.com with trailing slashes or dangling `?`/`#` producing unusable `.git` clone URLs.(v2.1.259)
• Fixed blocking Stop hooks causing the subsequent turn to lose model reasoning and potentially miss the prompt cache.(v2.1.259)
• Fixed remote (claude.ai) sessions taking 60 seconds to start a turn after a browser-hosted MCP server's page disappeared.(v2.1.259)
• Fixed worktree-isolated sessions refusing common Bash loops, xargs pipelines, and launcher-wrapped commands that cannot reach the main checkout.(v2.1.259)
• Fixed remote and scheduled sessions doing nothing after a connector-tool permission prompt was approved while the session was paused.(v2.1.259)
• Fixed settings in a `.claude/` folder created after startup not being recognized until the application was restarted.(v2.1.257)
• Resolved an issue where sessions dispatched from an agent view using `←` incorrectly inherited the original session's permission mode, overriding target directory defaults.(v2.1.257)
• Fixed `keybindings.json` rebinds of Ctrl+G being ignored in `claude agents`; Ctrl+S and Ctrl+T are now rebindable within the new `Agents` context.(v2.1.257)
• Corrected background session startup failures on macOS npm installs during self-updates and on Windows when a stale daemon lock file pointed to a reused process ID.(v2.1.257)
• Fixed the working spinner incorrectly stopping while a response was streaming behind a slash-command panel.(v2.1.257)
• Resolved an issue where a background session's `state.json` `detail` would repeat its own dispatch prompt after a scheduled wake-up.(v2.1.257)
• Ensured `claude agents` correctly handles background sessions that finish after being re-prompted, ordering them by latest finish time in the Completed list.(v2.1.257)
• Fixed `claude --bg` from a deleted directory to now print the reason for failure and exit with code 1, instead of reporting "backgrounded" and leaving a crashed session row.(v2.1.257)
• Prevented Remote Control from re-sending the Bash tool definition mid-session, which caused prompt-cache misses.(v2.1.257)
• Fixed a doubly-listed custom `Authorization` header overriding configured credentials on Bedrock, Mantle, Vertex, and WIF, and the Vertex setup wizard incorrectly picking up old Anthropic profiles.(v2.1.257)
• Corrected Claude apps gateway behavior to prevent sending stray host `Authorization` or profile headers to Foundry, Vertex, and Bedrock, and resolved Foundry Entra ID upstream startup issues when `ANTHROPIC_FOUNDRY_API_KEY` is set.(v2.1.257)
• Prevented a leftover Anthropic API key or auth token from being sent alongside a Foundry subscription key in API-key mode.(v2.1.257)
• Fixed `/schedule` routines where prompts saved without a message role would run with no action.(v2.1.257)
• Improved `claude agents` to now indicate when a background session is waiting for message approval from another session and who sent it.(v2.1.257)
• Resolved a bug where prompts stashed with Ctrl+S inside an opened background session were lost when the session became idle or was stopped and reopened.(v2.1.257)
• Fixed telemetry (OTEL) settings pushed via server-managed settings being ignored on warm starts, including in desktop-app Code sessions.(v2.1.257)
• Prevented a teammate permission request from being answered twice when the leader's mailbox write was briefly locked.(v2.1.257)
• Fixed a phantom duplicate slash-command row rendering below the in-flight turn while a command's auto-continued response streamed.(v2.1.257)
• Clamped `policyHelper` `timeoutMs` and `refreshIntervalMs` values above the timer maximum to prevent failures or millisecond re-runs.(v2.1.257)
• Fixed the token counter freezing or crawling after switching to another subagent's transcript, and ensured background subagents' and teammates' counters update live during response streaming.(v2.1.257)
• Resolved an issue where sandbox network hosts written with a trailing dot (e.g., `example.com.`) were not blocked by `deniedDomains` entries and the "don't ask again" option failed.(v2.1.257)
• Fixed dismissing the Remote Control consent prompt (Esc or `n`) from being incorrectly counted as consent.(v2.1.257)
• Prevented `/mcp` reconnect and enable from connecting a settings-file MCP server that should have been blocked by managed MCP allow/deny lists or `strictPluginOnlyCustomization`.(v2.1.257)
• Fixed `claude mcp remove` from leaving stored OAuth credentials behind when `strictPluginOnlyCustomization` locks MCP to plugin-only servers.(v2.1.257)
• Ensured Remote Control sessions started from the Claude app now respect the selected model instead of defaulting to the machine's default.(v2.1.257)
• Corrected `--disallowedTools` and session deny rules from being dropped after the first settings reload when `allowManagedPermissionRulesOnly` is enabled.(v2.1.257)
• Fixed `--resume` listing a backgrounded conversation twice and `--continue` reopening its stalled pre-background copy; `--continue` now also opens finished background sessions.(v2.1.257)
• Enabled clicking `!` shell command output to expand it in fullscreen mode.(v2.1.257)
• Ensured background sessions running an older Claude Code binary are retired during auto-updates instead of piling up.(v2.1.257)
• Fixed `claude agents --json` from briefly switching the terminal to raw mode and undoing other programs' terminal settings on exit.(v2.1.257)
• Prevented Proactive output style sessions from busy-looping with filler messages and repeated log reads while a background command or Monitor was still running.(v2.1.257)
• Resolved subagents stopping when a response was cut off mid-stream due to computer sleep, connection drops, or server errors; they now automatically continue.(v2.1.257)
• Fixed `←` in the `/btw` panel within a `claude agents` session to now return to the agents list and reopen the panel when the session is revisited.(v2.1.257)
• Ensured sessions with an advisor model set now utilize the prompt cache for background requests, preventing re-sending the full conversation uncached.(v2.1.257)
• Fixed `claude -p` from exiting prematurely while a Monitor was still running; it now waits for the watch to fire or time out.(v2.1.257)
• Prevented a `permissions.ask` rule from being skipped in auto mode when the matching command ran inside a compound command or subshell, ensuring confirmation prompts are shown.(v2.1.257)
• Prevented plugins from reading files outside their own directory through symlinked paths, now refusing such paths with an error.(v2.1.257)
• Enabled `/add-dir` to now load skills, commands, and agents from a directory within the current working directory, similar to `--add-dir` at startup.(v2.1.257)
• Ensured the main agent is now notified when you resume a subagent that was previously stopped from its transcript view.(v2.1.257)
• Fixed a crash occurring when pasting ANSI-colored text into dialogs like `/feedback`.(v2.1.257)
• Prevented `claude mcp add/remove` from hanging or exhausting memory when the project's `.mcp.json` is a FIFO or device-file symlink, now failing fast with an actionable message.(v2.1.257)
• Resolved unbounded memory growth when non-JSONL data is piped into `claude -p --input-format stream-json`, now failing fast with a clear error.(v2.1.257)
• Fixed backgrounding a turn (`←` or Ctrl+B) while a subagent or tool was running from occasionally causing the background session to treat that tool as rejected instead of re-running it.(v2.1.257)
• Ensured Bash `Read()`/`Edit()` deny rules now apply to `< file` redirects and reader commands like `tac` and `egrep`.(v2.1.257)
• Fixed Bash commands failing with "task output swap refused (tasks dir moved or linked)" on some Macs.(v2.1.252)
• Fixed "always allow" not saving in a project that has no .claude/settings.local.json yet.(v2.1.252)
• Fixed Remote Control sessions hosted by Claude Desktop or VS Code stalling for minutes after a tool finished when the connection to claude.ai was degraded.(v2.1.252)
• Fixed background task notifications with very large failure output (e.g., git errors on a full disk) from exceeding the API request size limit.(v2.1.252)
• Fixed file tools (Read, Write, Edit) from incorrectly accessing files outside the approved location when following symlinks.(v2.1.251)
• Fixed plugin commands declared in marketplace entries from pointing outside the plugin directory, preventing path-traversal vulnerabilities.(v2.1.251)
• Fixed project settings from allowing the enablement of detailed beta tracing or raw API body logging, and bypassing OTLP collector pinning.(v2.1.251)
• Fixed the Workflow tool from incorrectly reading and quoting `scriptPath` values outside the session's readable scope.(v2.1.251)
• Fixed Grep and Glob from not applying `Read(...)` deny rules to files accessed through symlinked search paths.(v2.1.251)
• Fixed conversations from getting stuck on 'text content blocks must be non-empty' errors when the model produced only thinking.(v2.1.251)
• Fixed the first launch on a fresh install from defaulting to default mode instead of auto mode for accounts configured for auto mode startup.(v2.1.251)
• Fixed Opus 5 requests failing with an 'effort not supported when thinking is disabled' error by sending effort as `high` in that scenario.(v2.1.251)
• Fixed TUI lag with many parallel subagents by replacing per-second progress ticks instead of piling them up.(v2.1.251)
• Fixed agent teams so that a teammate's final answer now correctly reaches the team lead.(v2.1.251)
• Fixed background subagents from being unable to reply to messages from unnamed sibling or parent agents.(v2.1.251)
• Fixed managed-settings `disableAutoMode` from not moving an already-running auto-mode session back to default mode when arriving mid-session.(v2.1.251)
• Fixed a tip about switching to Opus 1M for more context from appearing when the current Opus model already had a 1M context window.(v2.1.251)
• Fixed Claude apps gateway sessions from incorrectly treating stored Anthropic profiles as active.(v2.1.251)
• Fixed cloud sessions from incorrectly advising the model had changed when the host was only setting the initial model.(v2.1.251)
• Fixed Remote Control from reporting a failure when an organization policy disables it, now showing a quiet notice instead.(v2.1.251)
• Fixed `/mcp reconnect` on Remote Control from showing a generic error instead of the actual remedy when a server was disabled.(v2.1.251)
• Fixed `--input-format stream-json` from losing assistant tool call results when client-injected calls were sent without a message id.(v2.1.251)
• Fixed session transcripts from being silently overwritten when a directory change relocated a session onto an existing same-ID transcript.(v2.1.251)
• Fixed background sessions and subagents from being unable to edit files inside a git worktree they created.(v2.1.251)
• Fixed background sessions from occasionally starting without plugin skills when the plugin marketplace was refreshing.(v2.1.251)
• Fixed text selection in opened background sessions inside tmux over SSH from copying to the tmux buffer correctly.(v2.1.251)
• Fixed SDK and cloud sessions from hanging indefinitely when an SDK MCP server's handshake acknowledgment was lost, now timing out.(v2.1.251)
• Fixed self-hosted runner from leaving stuck Bash tool processes running after a session was force-stopped.(v2.1.251)
• Fixed `/usage-credits` for Team and Enterprise members with a $0 org limit from offering to ask the admin instead of stating a cap was reached.(v2.1.251)
• Fixed `--worktree --tmux` with a gitlab.com merge-request number from trying a GitHub-style fetch instead of fetching the GitLab ref directly.(v2.1.251)
• Fixed Ctrl+G from failing with an 'Emacs quit unexpectedly' error in background sessions for editors opening `/dev/tty`.(v2.1.251)
• Fixed startup crashes or broken settings updates caused by an `additionalDirectories` entry containing a null byte.(v2.1.251)
• Fixed the MCP server menu's copy shortcut from incorrectly claiming success instead of stating how the sign-in URL was copied.(v2.1.251)
• Fixed italic text rendering as highlighted blocks in GNU screen and tmux sessions using a `screen` terminal type.(v2.1.251)
• Fixed `claude mcp add --header` and `claude mcp add-json` help text from naming the wrong transports.(v2.1.251)
• Fixed `claude ultrareview` and `/ultrareview` from waiting the full 30 minutes when the cloud session failed to start, now stopping early.(v2.1.251)
• Fixed Bash permission checks from auto-approving commands that assign arithmetic expressions to integer shell variables, now prompting for approval.(v2.1.251)
• Fixed backgrounded sessions from losing exported Vertex/Bedrock gateway variables, causing requests to fail.(v2.1.251)
• Fixed `claude --bg --model fable` on Max plans from stopping to ask for usage credits when the interactive session still had allowance.(v2.1.251)
• Fixed the one-time 'make auto mode your default' offer from appearing in unattended sessions where it could be accidentally accepted.(v2.1.251)
• Fixed the managed-settings approval prompt from re-appearing after re-signing in when settings were unchanged.(v2.1.251)
• Fixed disabled `/bug` and `/share` from incorrectly reporting that `/feedback` was disabled, and now correctly hides `/feedback` suggestions.(v2.1.251)
• Fixed cloud session creation from advising GitHub setup after a transient GitHub connection failure, now suggesting a retry.(v2.1.251)
• Fixed background sessions and their subagents from being unable to edit files inside a git worktree they created with `git worktree add`.(v2.1.251)
• Fixed a prompt-cache miss that occurred roughly once an hour in long sessions due to tool definitions re-rendering after an OAuth token refresh.(v2.1.248)
• Fixed the `ScheduleWakeup` tool definition changing between sessions when an account entered usage overage, preventing prompt-cache misses on resumed sessions.(v2.1.248)
• Resolved Claude Desktop and Cowork sessions disappearing after 30 days by updating transcript cleanup to retain desktop-written sessions.(v2.1.248)
• Prevented being sent to the login screen when another Claude Code process held the token refresh lock by failing the request with a retryable error instead.(v2.1.248)
• Fixed the `claude agents` list on Windows not responding to the keyboard after detaching from a session or when launched in a terminal tab left in win32-input-mode.(v2.1.248)
• Fixed the recommended Console sign-in in `/login` failing with an OAuth error on machines where it cannot be used, by falling back to API-key sign-in.(v2.1.248)
• Ensured model names in `/model` and fast-mode switch notices render as code to display suffixes like `[1m]` literally.(v2.1.248)
• Fixed `claude agents` skipping the workspace trust prompt when the `CI` environment variable is set.(v2.1.248)
• Fixed `claude agents` crashing on launch when the PR-status cache contained a malformed entry.(v2.1.248)
• Fixed agent view resurrecting week-old background sessions by showing them as stopped and prompting before resuming.(v2.1.248)
• Corrected agent view sometimes opening an older conversation and dropping the typed prompt when starting a new session.(v2.1.248)
• Prevented `claude agents` from starting a second process on a conversation when opening a stopped session already resumed in another terminal.(v2.1.248)
• Fixed `claude agents` and `claude rm` refusing to delete a session with unpushed commits when its worktree branch was already merged into the default branch.(v2.1.248)
• Fixed background sessions waiting silently when a `PermissionRequest` or `PreToolUse` hook printed an invalid answer by naming the hook and schema error.(v2.1.248)
• Fixed hooks silently treating non-JSON stdout objects as plain text by reporting them as hook errors with parse messages.(v2.1.248)
• Fixed `/mcp` listing a project `.mcp.json` entry under the wrong heading by displaying it under its real scope.(v2.1.248)
• Prevented MCP servers with `headersHelper` from falling into OAuth discovery on a 401 by correctly re-running the helper and retrying the call.(v2.1.248)
• Fixed `/login` to a Claude apps gateway hanging when the managed-settings security approval dialog was required.(v2.1.248)
• Fixed gateway model discovery never running when `apiKeyHelper` was the only credential.(v2.1.248)
• Fixed `claude logs` leaving terminal settings like mouse tracking and alternate screen enabled after execution.(v2.1.248)
• Corrected a garbled character in the trust dialog's list of repo permission rules when a long rule was cut off mid-emoji.(v2.1.248)
• Fixed the permission mode indicator staying hidden behind the 'Press Ctrl-C again to exit' hint.(v2.1.248)
• Prevented `/ultrareview` and locally seeded cloud sessions from uploading uncommitted edits and sensitive file copies by keeping them on the local machine.(v2.1.248)
• Resolved Remote Control sessions occasionally not showing a permission prompt or latest messages after silent reconnection.(v2.1.248)
• Fixed cloud sessions occasionally failing at startup when container session credentials were not yet readable.(v2.1.248)
• Prevented `claude remote-control` from rejecting its own flags when a global flag or wrapper-injected option preceded the subcommand.(v2.1.248)
• Fixed startup warnings rendering one column to the right of the rest of the transcript.(v2.1.248)
• Ensured a backgrounded worktree session retains its checkout by holding the worktree's lock while it runs.(v2.1.248)
• Fixed @-mentions of other sessions not matching names typed with non-Latin characters.(v2.1.248)
• Prevented an invalid `crossSessionInbound` value from being silently ignored by warning and holding or refusing messages until fixed.(v2.1.248)
• Fixed rate-limit, usage, and fast-mode messages incorrectly telling users to run `/usage-credits` when the command was unavailable.(v2.1.248)
• [VSCode] Fixed a chat tab getting stuck on 'No conversation found' by starting a new conversation instead.(v2.1.248)
• Fixed an issue where fast arrow-key + Enter sequences in history search and various commands (`/config`, `/mcp`, `/skills`, etc.) would incorrectly act on the row above the navigated one.(v2.1.247)
• Resolved a problem where sub-agents would die on a first-call model 404 error; they now use the session's fallback model chain and return detailed error information.(v2.1.247)
• Fixed a bug where hooks or background agents printing excessive error output could overflow the conversation and cause sessions to get stuck with a 'Prompt is too long' error.(v2.1.247)
• Corrected an issue where Ctrl keyboard shortcuts were not firing in kitty-protocol terminals with non-Latin keyboard layouts.(v2.1.247)
• Prevented text like `<35;150;7M` from being inserted into prompts when mouse reports were split across reads immediately after the escape prefix.(v2.1.247)
• Fixed the Bash sandbox's cleanup process from incorrectly deleting dotfile-managed `~/.claude/settings.json` symlinks when they were repointed outside the sandbox's writable area.(v2.1.247)
• Resolved an issue where `/terminal-setup` would overwrite the entire Zed `keymap.json` instead of merging keybindings.(v2.1.247)
• Fixed `/rename` to provide a notification when the session registry could not be updated, informing users that other sessions might still display the old name.(v2.1.247)
• Corrected `/compact` and 'Summarize from here' in `--agent` sessions to summarize using the conversation's system prompt instead of the default one.(v2.1.247)
• Fixed background sessions that were stuck showing 'opening…' after their terminal host process died; these sessions now fail with a reason and can be restarted.(v2.1.247)
• Addressed unbounded memory growth when a hook's or background task's output file could not be written; the file now indicates where output was lost.(v2.1.247)
• Fixed `/install-github-app` over SSH so the copy shortcut accurately reports success and the sign-in URL appears immediately if a browser cannot be opened.(v2.1.247)
• Resolved an issue where shell commands carried over from the foreground could log internal errors or show misleading exit codes when finishing in background sessions.(v2.1.247)
• Fixed a version-less marketplace plugin's live cache directory being deleted and recreated on a second-scope install, which could disrupt running sessions.(v2.1.247)
• Corrected Remote Control sessions started with `/remote-control` to properly report the working-tree diff to connected clients.(v2.1.247)
• Fixed self-hosted runner sessions reporting 'running' before Claude Code had started, preventing premature 'Claude is waiting for your input' notifications.(v2.1.247)
• Resolved first-run setup failures that occurred when managed settings configured gateway sign-in and Anthropic endpoints were unreachable.(v2.1.247)
• Fixed cloud sessions that sometimes showed the previous permission mode when switching modes immediately after sending a message.(v2.1.247)
• Addressed cloud sessions going silent when the session's container restarted between turns while background processes were running; resumed sessions now report lost work.(v2.1.247)
• Improved plugin marketplace security by rejecting names with control or invisible characters and ensuring marketplace text is escape-safe.(v2.1.247)
• Fixed fullscreen mode showing a blank transcript after resizing the terminal and jumping to the bottom until the next keypress(v2.1.246)
• Fixed a severe transcript slowdown when a diff contained a very long single line by truncating and marking such lines(v2.1.246)
• Fixed erratic fullscreen scrolling when positioned at an earlier message, preventing jump-to-bottom from getting stuck(v2.1.246)
• Fixed background sessions failing to open after 45 seconds due to deleted directories, machine sleep, or slow process startup(v2.1.246)
• Fixed background sessions failing to open with an EACCES error when another Claude Code process was re-installing the npm package(v2.1.246)
• Fixed markdown rendering being disabled for entire messages under specific conditions (no markdown in first 500 chars, or for certain list/heading types)(v2.1.246)
• Fixed MCP tool calls interrupted by an incoming message in headless/remote sessions being incorrectly reported as completed with no output(v2.1.246)
• Fixed MCP tool arguments being sent as JSON strings when the parameter's schema is empty, instead of their correct type(v2.1.246)
• Fixed commands interrupted mid-run showing as completed without indicating they were cut short(v2.1.246)
• Fixed pressing back arrow or running /background during a dynamic workflow from restarting finished subagents; now prompts for confirmation(v2.1.246)
• Fixed opening a just-started session in 'claude agents' while its worker was booting from stopping unexpectedly(v2.1.246)
• Fixed 'claude agents' listing a backgrounded named session twice; now numbers subsequent backgroundings of the same conversation(v2.1.246)
• Fixed the background retention sweep removing user-created git worktrees under .claude/worktrees/(v2.1.246)
• Fixed auto mode tool calls being denied on very large sessions by scaling the safety-check deadline with prompt size(v2.1.246)
• Fixed the plugin cache creating duplicate SHA-named directories for the same plugin(v2.1.246)
• Fixed plugin skills showing doubled names in the slash menu when the frontmatter 'name' already includes the '<plugin>:' prefix(v2.1.246)
• Fixed 'claude plugin update' failing for installed plugins given only their bare name(v2.1.246)
• Fixed plugin installation failing when 'plugin.json' was saved with a UTF-8 byte-order mark (BOM)(v2.1.246)
• Fixed '/reload-plugins' reporting 0 skills for plugins that define skills under 'skills/*/SKILL.md'(v2.1.246)
• Fixed hook error messages showing a literal "${CLAUDE_PLUGIN_ROOT}" instead of the resolved plugin path(v2.1.246)
• Fixed '/rename' replacing the theme's prompt border color with default cyan; border now retains theme color unless overridden(v2.1.246)
• Fixed custom theme diff colors being ignored in diffs and the '/theme' preview(v2.1.246)
• Fixed a 'keybindings.json' binding with an unknown action name silently disabling the key; now logs a warning and keeps default binding(v2.1.246)
• Fixed '/stats' activity heatmap showing days off by one cell in timezones east of UTC(v2.1.246)
• Fixed '/fork' from an already-forked or backgrounded session starting the new session with an empty conversation(v2.1.246)
• Fixed the '@' file picker staying open after typed text stopped matching a real path(v2.1.246)
• Fixed the status line's cost and duration resetting to zero after navigating to the agents view and back(v2.1.246)
• Fixed fullscreen mode moving keyboard focus unexpectedly when clicking the terminal window(v2.1.246)
• Fixed path completion failing when the completion token or working directory contained a null byte(v2.1.246)
• Fixed headless sessions not cleaning up stale entries in '~/.claude/sessions' on Windows/macOS after unclean exits(v2.1.246)
• Fixed the UI stopping with a render error on the first tool call when a third-party Anthropic-compatible endpoint streams a 'tool_use' block without an 'id'(v2.1.246)
• Fixed the Write tool reporting 'Out of memory' or freezing after overwriting a very large file(v2.1.246)
• Fixed 'claude plugin install <name>' exiting silently or hanging when '~/.claude/plugins/known_marketplaces.json' is empty or corrupted(v2.1.246)
• Fixed resumed sessions failing every turn with a 400 error when saved history contains tool blocks not accepted by the Anthropic API(v2.1.246)
• Fixed 'curl -fsSL https://claude.ai/install.sh | bash' failing with 'Raw mode is not supported' for some Team/Enterprise users(v2.1.246)
• Fixed sessions ending in plan mode resuming outside plan mode in the VS Code extension or with '--continue'/'--resume' with a permission prompt tool(v2.1.246)
• Fixed the 'Notification' hook not firing while the sandbox 'Network request outside of sandbox' permission prompt is waiting(v2.1.246)
• Fixed Bash permission checks to always require approval for malformed commands with dangling '&&' or '||' operators(v2.1.246)
• Fixed '--strict-mcp-config' sessions prompting to approve servers they would never load, leaving background sessions waiting at startup(v2.1.246)
• Fixed telemetry and metrics requests to Anthropic carrying the API key for a third-party gateway; credential now only sent to its own host(v2.1.246)
• Fixed a visible API error on the first prompt after idle when 'apiKeyHelper' returns short-lived JWTs; expired tokens are now refreshed before sending(v2.1.246)
• Fixed memory growing with session length in fullscreen and Ctrl+O transcript views by optimizing message row rendering(v2.1.246)
• Fixed '/ultrareview' runs and cloud sessions launched simultaneously from one repository sometimes starting with another launch's uncommitted changes(v2.1.246)
• Fixed the task progress count for background cloud sessions occasionally missing a task(v2.1.246)
• Fixed Remote Control sessions keeping their placeholder name in claude.ai and the Claude app until the second prompt; auto-generated title now appears after the first prompt(v2.1.246)
• Fixed MCP tools marked 'requiresUserInteraction' still offering 'Yes, and don't ask again' in their permission prompt(v2.1.246)
• Fixed the self-hosted runner ending live sessions or exiting when a work-poll response is malformed; now retries the poll(v2.1.246)
• Fixed prompts beginning with '/--' (e.g. Lean doc comments) being rejected as an unknown slash command instead of being sent to Claude(v2.1.246)
• Fixed remote MCP servers in non-interactive and SDK sessions from failing to recover after a dropped connection; they now reconnect automatically or report as failed.(v2.1.243)
• Fixed MCP server sign-in started from the desktop app failing with an "Invalid redirect URI" error on servers supporting client ID metadata documents.(v2.1.243)
• Fixed auto mode from staying unavailable at startup when a temporary server-side disable was cached and subsequent flag fetches failed.(v2.1.243)
• Fixed auto mode tool calls being incorrectly denied as "temporarily unavailable" after a brief API overload.(v2.1.243)
• Fixed the /model picker from silently ignoring an Ultracode selection; picking Ultracode now correctly applies it to the current session.(v2.1.243)
• Fixed /resume from only listing the 50 most recent sessions; the picker now loads more sessions as you scroll.(v2.1.243)
• Fixed cloud sessions resuming after a mid-turn restart with a pending hook or background-task notification from being re-sent as the prompt instead of the normal continuation message.(v2.1.243)
• Fixed cross-session messaging from silently turning off inside user namespaces and rootless containers after socket-directory hardening.(v2.1.243)
• Fixed text that hangs outside its container, such as the sign-in URL in /login, from losing its leading columns when another part of the screen repaints.(v2.1.243)
• Fixed spellcheck from not underlining a misspelled word typed directly after an emoji.(v2.1.243)
• Fixed background subagents from not waking up when their last background Bash task completes.(v2.1.243)
• Fixed sessions going silent for extended periods when the Anthropic API never starts a response; requests now time out and display an error message.(v2.1.243)
• Fixed authentication, model-availability, and other client-generated error messages from rendering like model output instead of as error lines.(v2.1.243)
• Fixed workload identity federation in CI so processes in one job share the exchanged token, preventing re-exchange issues.(v2.1.243)
• Fixed server-managed companyAnnouncements from not showing at startup in sessions that began with signing in.(v2.1.243)
• Fixed hook `if` conditions like `Bash(cat *)` from firing on unrelated Bash commands when the command contained `$()` or backtick command substitution.(v2.1.243)
• Fixed plugin dependencies declared with a `marketplace` field from never resolving when both plugins are loaded together.(v2.1.243)
• Fixed /reload-plugins from keeping the LSP tool after the last LSP plugin is disabled.(v2.1.243)
• Fixed --agents from silently ignoring invalid JSON or agent definitions; it now exits with a clear error.(v2.1.243)
• Fixed /status from showing "Found invalid entries in: ." with no filename when `~/.claude.json` has an invalid MCP server entry.(v2.1.243)
• Fixed /clear from removing the /rename session name from the prompt bar even when the name was kept for the new session.(v2.1.243)
• Fixed Ctrl+[ from not leaving vim INSERT mode in terminals that encode modified keys.(v2.1.243)
• Fixed the local IDE connection from being incorrectly routed through `HTTPS_PROXY` when `localhost` was listed in `NO_PROXY`.(v2.1.243)
• Fixed sandbox network-violation details being dropped from the Bash tool result when the blocked command still exited 0.(v2.1.243)
• Fixed the status line `rate_limits` fields and `/usage` from showing incorrect usage percentage after a rate-limit window reset.(v2.1.243)
• Fixed `claude --teleport <session>` from exiting on uncommitted changes instead of offering to stash them.(v2.1.243)
• Fixed /web-setup from repeatedly asking users to log in when an older GitHub CLI was already authenticated.(v2.1.243)
• Fixed Claude in Chrome losing its connection to Claude Code after an auto-update cleaned up the version it was set up with.(v2.1.243)
• [VSCode] Fixed sessions started before feature flags were fetched from opening in the default permission mode instead of the configured mode.(v2.1.243)
• [VSCode] Fixed Focus view sections expanding collapsing on their own during subagent tool activity.(v2.1.243)
• Fixed Bedrock streaming behind proxies that strip the Content-Type header, which prevented doubled API call billing.(v2.1.239)
• Fixed Claude Code hanging at startup behind an HTTPS proxy when using Bedrock with an SSO profile and `awsAuthRefresh` by honoring `HTTPS_PROXY` for credential pre-checks.(v2.1.239)
• Fixed a crash dump when starting Claude Code from a deleted directory, now printing a clear message instead.(v2.1.239)
• Fixed Edit and Write calls pausing for approximately 5 seconds in JetBrains IDE terminals when the Claude Code plugin is connected.(v2.1.239)
• Fixed a race condition where pressing Esc with a queued prompt could cause the next turn to finish early, leaving the session idle while Claude was still working.(v2.1.239)
• Fixed WebFetch retaining expired page content in memory for the entire session instead of the intended 15 minutes.(v2.1.239)
• Fixed cloud sessions resuming out of plan mode after an idle worker restart.(v2.1.239)
• Fixed MCP elicitation forms taller than the terminal being clipped in fullscreen mode, ensuring the form fits the window with scrolling for hidden fields and visible Accept/Decline buttons.(v2.1.239)
• Fixed remote MCP servers staying failed after a transient 5xx error on a mid-session reconnect or via SDK `setMcpServers()`.(v2.1.239)
• Fixed custom session titles disappearing from `/resume` after more than ~64 KB of conversation was written following a rename.(v2.1.239)
• Fixed `claude -c`/resume picking up sessions from a different directory whose path differed only by characters like `_`, `-`, or `.`.(v2.1.239)
• Fixed `/resume` and the agents view showing a session as recently changed when only its file was touched or it was reopened.(v2.1.239)
• Fixed `/resume` in all-projects mode telling users to `cd` into a deleted directory; such sessions now resume in the current directory.(v2.1.239)
• Fixed the `dark-ansi` theme rendering expanded tool results in fullscreen mode with text the same color as the background.(v2.1.239)
• Fixed the fullscreen renderer prompt reappearing on every launch when it could never be answered; it now stops after being shown three times.(v2.1.239)
• Fixed `.worktreeinclude` patterns starting with `**/` silently matching nothing when the target lived in a gitignored directory.(v2.1.239)
• Fixed agents, skills, and commands whose `.md` file starts with a UTF-8 BOM being silently ignored.(v2.1.239)
• Fixed `/insights` echoing literal `<message>` tags in its response on some models.(v2.1.239)
• Fixed marketplace `metadata.pluginRoot` having no effect; bare plugin source names now resolve under it as documented.(v2.1.239)
• Fixed mouse movement in browser-based terminals inserting text like `"35;150;7M"` into the prompt when a mouse report arrived split across writes.(v2.1.239)
• Fixed custom theme overrides for effort/ultracode status badge colors being ignored.(v2.1.239)
• Fixed OpenTelemetry trace fragmentation where tool executions deferred by a `PreToolUse` hook started a new trace instead of resuming the original turn's trace.(v2.1.239)
• Fixed vim mode in the agent view: Escape now switches to NORMAL mode and keeps text instead of clearing the prompt.(v2.1.239)
• Fixed the `selection:copy` keybinding silently dropping a text selection that had been extended with Shift+Arrow keys.(v2.1.239)
• Fixed the `/voice` startup tip still appearing after voice dictation was enabled via the `voice.enabled` setting.(v2.1.239)
• Fixed shell-mode (`!`) Tab completion dropping the `./` from a `./script` path, preventing the shell from running the command.(v2.1.239)
• Fixed fullscreen mode answering a permission prompt or pressing a button when the terminal window was clicked to bring it back into focus.(v2.1.239)
• Fixed slash-command panels in fullscreen mode covering the latest messages; the conversation now stays pinned above the panel.(v2.1.239)
• Fixed the `/workflows` detail dialog overflowing the terminal and losing its header off-screen when opened while Claude is still responding.(v2.1.239)
• Fixed the Linux sandbox making a nonexistent `.git/config.worktree` unreadable, which broke sandboxed git commands in repos with `extensions.worktreeConfig` set.(v2.1.239)
• Fixed hooks failing with "posix_spawn ENOENT" after the session's working directory was deleted; they now run from the project root or home directory.(v2.1.239)
• Fixed `claudeMdExcludes` not excluding a symlinked `.claude/rules` file when the pattern named the rules directory or the symlink rather than its target.(v2.1.239)
• Fixed runaway session-title syncing to Remote Control when two Claude Code processes shared one background job's state; title updates are now deduplicated and rate-limited.(v2.1.239)
• Fixed sessions whose title starts with `/` being unaddressable by `SendMessage` and shown as "(untitled)" in `ListAgents`.(v2.1.239)
• Fixed Ctrl+W, Ctrl+U, Ctrl+K, Option+Backspace, Option+D and vim `df`/`dt` leaving a broken `[Pasted text #N]` placeholder when the cursor was inside it.(v2.1.239)
• Fixed masked (password-style) inputs letting their text be pasted back with Ctrl+Y elsewhere or saved to prompt history when cleared with double Esc.(v2.1.239)
• Fixed Ctrl+Backspace deleting one character instead of a word in search boxes.(v2.1.239)
• Fixed a request rejected by an organization policy check being re-sent before the rejection was shown.(v2.1.239)
• Fixed the fullscreen mode answering a permission prompt or pressing a button when the terminal window was clicked to bring it back into focus.(v2.1.239)
• Fixed the `dark-ansi` theme rendering expanded tool results in fullscreen mode with text the same color as the background.(v2.1.239)
• Fixed the fullscreen renderer prompt reappearing on every launch when it could never be answered; it now stops after being shown on three launches.(v2.1.239)
• Fixed `.worktreeinclude` patterns starting with `**/` silently matching nothing when the target lived in a gitignored directory.(v2.1.239)
• Fixed agents, skills, and commands whose `.md` file starts with a UTF-8 BOM being silently ignored.(v2.1.239)
• Fixed `/insights` echoing literal `<message>` tags in its response on some models.(v2.1.239)
• Fixed marketplace `metadata.pluginRoot` having no effect: bare plugin source names now resolve under it as the docs describe.(v2.1.239)
• Fixed mouse movement in browser-based terminals inserting text like `"35;150;7M"` into the prompt when a mouse report arrived split across writes.(v2.1.239)
• Fixed custom theme overrides for the effort/ultracode status badge colors being ignored.(v2.1.239)
• Fixed OpenTelemetry trace fragmentation: tool executions deferred by a `PreToolUse` hook now resume in the original turn's trace instead of starting a new trace.(v2.1.239)
• Fixed vim mode in the agent view: Escape now switches to NORMAL mode and keeps your text instead of clearing the prompt.(v2.1.239)
• Fixed the `selection:copy` keybinding silently dropping a text selection that had been extended with Shift+Arrow keys.(v2.1.239)
• Fixed the `/voice` startup tip still appearing after voice dictation was enabled via the `voice.enabled` setting.(v2.1.239)
• Fixed shell-mode (`!`) Tab completion dropping the `./` from a `./script` path, which left a command the shell couldn't run.(v2.1.239)
• Fixed fullscreen mode answering a permission prompt or pressing a button when you clicked the terminal window only to bring it back into focus.(v2.1.239)
• Fixed slash-command panels (e.g. `/config`, `/model`) in fullscreen mode covering the latest messages; the conversation now stays pinned above the panel.(v2.1.239)
• Fixed the `/workflows` detail dialog overflowing the terminal and losing its header off-screen when opened while Claude is still responding.(v2.1.239)
• Fixed the Linux sandbox making a nonexistent `.git/config.worktree` unreadable, which broke every sandboxed git command in repos with `extensions.worktreeConfig` set.(v2.1.239)
• Fixed hooks failing with "posix_spawn ENOENT" after the session's working directory was deleted; they now run from the project root or home directory instead.(v2.1.239)
• Fixed `claudeMdExcludes` not excluding a symlinked `.claude/rules` file when the pattern names the rules directory or the symlink rather than its target.(v2.1.239)
• Fixed runaway session-title syncing to Remote Control when two Claude Code processes shared one background job's state (2.1.232 regression); title updates are now deduplicated and rate-limited.(v2.1.239)
• Fixed sessions whose title starts with `/` being unaddressable by `SendMessage` and shown as "(untitled)" in `ListAgents`.(v2.1.239)
• Fixed Ctrl+W, Ctrl+U, Ctrl+K, Option+Backspace, Option+D and vim `df`/`dt` leaving a broken `[Pasted text #N]` placeholder when the cursor was inside it.(v2.1.239)
• Fixed masked (password-style) inputs such as the login code field letting their text be pasted back with Ctrl+Y elsewhere or saved to prompt history when cleared with double Esc.(v2.1.239)
• Fixed Ctrl+Backspace deleting one character instead of a word in search boxes.(v2.1.239)
• Fixed a request rejected by an organization policy check being re-sent before the rejection was shown.(v2.1.239)
• Fixed unbounded memory growth in long interactive sessions by releasing subagent tool results once they leave the recent display window.(v2.1.238)
• Fixed custom, project, and plugin output styles from drifting back to the default voice mid-session.(v2.1.238)
• Fixed prompt suggestions not staying enabled when an account is near its usage limit.(v2.1.238)
• Fixed Bash refusals in worktree-isolation incorrectly instructing users to remove a redirect when none existed.(v2.1.238)
• Fixed self-hosted runners occasionally being removed by the server after a single slow or lost poll request.(v2.1.238)
• Fixed MCP elicitation dialogs showing nothing for URLs longer than 4,096 characters.(v2.1.238)
• Fixed permission prompts dropping the "don't ask again" option when the project path did not fit the terminal width.(v2.1.238)
• Fixed leftover `/tmp/claude-*-cwd` files when a Bash command is killed, times out, or is interrupted.(v2.1.238)
• Fixed held Backspace being ignored on terminals that send Ctrl+H for Backspace when keystrokes arrive in large bursts.(v2.1.238)
• Fixed text-wrapping in permission prompt diffs for lines containing wide multi-code-point characters or tabs.(v2.1.238)
• Fixed killing a suspended session sometimes leaving the terminal in bracketed-paste mode with the cursor hidden.(v2.1.238)
• Fixed stdio MCP servers receiving a `server/discover` request before `initialize`, preventing lazy servers from starting their backend on every session open.(v2.1.238)
• Fixed a proxy's refusal of a connection being reported as a generic network error instead of naming the proxy.(v2.1.238)
• Fixed the `/model` and `/effort` cache-miss warning appearing when the prompt cache had already expired.(v2.1.238)
• Fixed per-task Stop from the Remote Control tasks panel doing nothing on CLI-hosted sessions.(v2.1.238)
• Fixed remote sessions exiting when a client delivered a user message without a valid role.(v2.1.238)
• Fixed Remote Control sessions started by `claude remote-control` inheriting session-scoped environment variables from the launching shell.(v2.1.238)
• Fixed a Remote Control session whose process crashed staying unavailable until `claude remote-control` was restarted.(v2.1.238)
• Fixed Remote Control messages sent from the web or Desktop while Claude is mid-turn disappearing from the transcript after the turn finishes.(v2.1.238)
• Fixed Remote Control model picks made on a phone or web not updating the model shown in the terminal.(v2.1.238)
• Fixed Remote Control disconnecting with "login expired" on brief network hiccups; it now retries and stays connected.(v2.1.238)
• Fixed Remote Control reporting a failed reconnect on sign-out.(v2.1.238)
• Fixed `ListAgents`/`SendMessage` reporting "Remote Control is not connected" in certain server modes; they now list and reach Remote Control peers.(v2.1.238)
• Fixed `ListAgents` and `SendMessage` exposing idle workers that are pre-warmed for background sessions.(v2.1.238)
• Changed Ctrl+L and Cmd+K in fullscreen to always just repaint, removing the double-press `/clear` shortcut and preventing automatic `/clear` loops in 1-row nvim terminals.(v2.1.238)
• Changed `claude mcp list` and `claude mcp get` to show disabled servers as `⊘ Disabled` instead of attempting to connect to them.(v2.1.238)
• Fixed clipboard copy, background housekeeping, background sessions, and local MCP logs breaking when a session's directory was removed.(v2.1.236)
• Fixed the fullscreen renderer failing permanently after a single failed start by falling back to the classic renderer.(v2.1.236)
• Fixed the `/model` picker rendering taller than the terminal by showing only models that fit the window, with others accessible via scrolling.(v2.1.236)
• Fixed `SendMessage` calls being rejected when a malformed closing tag left message text in the summary field.(v2.1.236)
• Fixed unhandled promise rejections when a subprocess fails to start, such as `powershell.exe` on WSL with Windows interop disabled.(v2.1.236)
• Fixed fullscreen mode sometimes not showing a newly sent message until the terminal was resized.(v2.1.236)
• Fixed a blank band remaining above the prompt after clearing a multi-line prompt and panes not repainting after terminal resizing in fullscreen mode.(v2.1.236)
• Fixed the managed-settings approval prompt sometimes not appearing at startup while still capturing the first keypress.(v2.1.236)
• Fixed terminal tab titles jumping in tmux by writing the title only when its text changes.(v2.1.236)
• Fixed an unclear error when the cloud environments list returned empty or malformed.(v2.1.236)
• Fixed the Fable 5 first-time usage-credits prompt auto-selecting the fallback model after 60 seconds with no user input when using Remote Control.(v2.1.236)
• Fixed spinner tips never appearing and a repeated background error when the cached guest-pass reward in `~/.claude.json` was malformed.(v2.1.236)
• Fixed skills hot-reload in SDK/VS Code sessions raising an error on every skills change after the session's working directory was deleted.(v2.1.236)
• Fixed self-hosted runner sessions occasionally resuming on another runner before the post-session hook had finished.(v2.1.236)
• Fixed the Clawd mascot's eyes and feet rendering unevenly in iTerm2 at some font sizes.(v2.1.236)
• Fixed occasional runaway session recaps by capping recap text at 400 characters and cutting at a word boundary.(v2.1.236)
• Fixed slash-command typos or unavailable commands reporting an error instead of running the closest fuzzy match.(v2.1.236)
• Fixed `SendMessage` refusing further messages to a session when a rapid burst would exceed its inbox capacity, instead of reporting them as sent.(v2.1.236)
• Fixed the git status check being fooled by a repo's `status.showUntrackedFiles=no` setting.(v2.1.236)
• Fixed whole-prompt-cache invalidation when a language server disconnected or reconnected mid-session.(v2.1.235)
• Fixed nested markdown list items misaligning at depth 3+ and added a hanging indent to wrapped list items in the terminal UI.(v2.1.235)
• Fixed prompt input highlights (slash commands, keywords, mentions) appearing shifted by one or more characters in some multi-line prompts.(v2.1.235)
• Fixed Shift+Tab inside the permission prompt's comment field approving edits and granting session-wide permission instead of closing the field.(v2.1.235)
• Fixed notebook cell delete/replace approval dialogs silently omitting existing cell content when the notebook or cell could not be read.(v2.1.235)
• Fixed slash commands run while Claude is responding showing HTML entities instead of actual characters.(v2.1.235)
• Fixed the prompt footer not showing the "Update installed" restart notice after a background auto-update.(v2.1.235)
• Fixed the expanded task list (`ctrl+t`) always starting collapsed when resuming or relaunching into a session with open tasks.(v2.1.235)
• Fixed focus jumping between open Claude tabs on its own in VSCode when a window with several Claude panels is restored or reloaded.(v2.1.235)
• Fixed auto mode in long sessions from repeatedly re-checking and denying sandboxed commands' network access after conversation compaction.(v2.1.234)
• Fixed session-scoped permission answers (including denies) from being dropped when answering background subagent tool permission prompts.(v2.1.234)
• Fixed a crash occurring when an API response on the non-streaming fallback path contained a thinking block missing its thinking field or a text block missing its text field.(v2.1.234)
• Fixed markdown rendering becoming extremely slow for messages containing unusual Unicode sequences.(v2.1.234)
• Fixed `SendMessage` rejecting a recipient copied from `ListAgents` when the session name was at the 200-character cap or emoji-heavy.(v2.1.234)
• Fixed repository detection mis-reading the host of git remotes with unusual userinfo, preventing incorrect links and repo-specific behavior.(v2.1.234)
• Fixed MCP diagnostics printing resolved secrets; scope-conflict warnings now show the configured `${VAR}` form, and connection-failure details show only the server origin.(v2.1.234)
• Fixed `strictKnownMarketplaces` allowlists accepting SCP-style git marketplace sources whose host differs from the one git would actually connect to.(v2.1.234)
• Fixed modal text, such as the `/login` OAuth URL, from losing characters when copied in fullscreen.(v2.1.234)
• Fixed a `---` horizontal rule in rendered markdown from running into the line after it.(v2.1.234)
• Fixed consecutive shell commands splitting into multiple 'Ran 1 shell command' rows when todo/task updates were interleaved.(v2.1.234)
• Fixed dialogs like `/permissions` opened during a `!` shell command from being dismissed when the command finished.(v2.1.234)
• Fixed a queued `!` shell command from being sent to the model as plain text after pressing up-arrow to edit the queued input.(v2.1.234)
• Fixed queued messages reappearing in the prompt history while still queued, and Esc while selecting a queued message no longer interrupts the turn.(v2.1.234)
• Fixed accepting the 'Try the new fullscreen renderer?' prompt from restarting the session without its permission mode, tool allow/deny rules, model, or effort flags.(v2.1.234)
• Fixed `/tui` dropping launch `--allowed-tools`/`--disallowed-tools` rules when it restarts; it now declines to switch with a reason when session restrictions cannot be carried over.(v2.1.234)
• Fixed trust prompts omitting the repository-wide scope warning when the directory was first seen before the repository existed.(v2.1.234)
• Fixed a case where an IDE diff tab closing during a permission re-prompt could answer the new prompt with the previous input.(v2.1.234)
• Fixed files sent to the user during Remote Control sessions hosted by Claude Code Desktop or VS Code from not uploading, ensuring they open on phone and web.(v2.1.234)
• Fixed the stale-token reminder from leaking into Claude's automatically resumed turn after `/login` when `CLAUDE_CODE_OAUTH_TOKEN` is set; it now appears only to the user.(v2.1.234)
• Fixed permission previews from not relaying only to channel servers admitted by the inbound trust gate, and ensured a server's explicit permission-capability opt-out is honored.(v2.1.234)
• Fixed credential masking on relayed permission previews from hiding commands, paths, or destinations from the approver; oversized private-key blocks now redact correctly.(v2.1.234)
• Fixed provider API tokens that mask on permission previews from masking even when directly followed by shell delimiters.(v2.1.234)
• Fixed Claude Desktop inter-session messages from being silently dropped by the recipient session when cross-session messaging was read as disabled, preventing prolonged 'thinking' states.(v2.1.234)
• Remote Control: Fixed signing into a different claude.ai account or organization from not stopping the running session within seconds and stating the reason, preventing misleading HTTP 404 errors hours later.(v2.1.234)
• Expired Anthropic profile credential now correctly points the user to `/login` when a claude.ai login would take precedence.(v2.1.234)
• Fixed cloud sessions being marked as lost when the environment shut down during a permission prompt.(v2.1.233)
• Resolved MCP v2 connections endlessly reopening streams against servers that terminate long-held streams.(v2.1.233)
• Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code.(v2.1.233)
• Fixed idle sessions on Linux from keeping one CPU core at 100% when sandboxing is enabled.(v2.1.233)
• Fixed bundled skill aliases like `/checkup` and `/review` reporting 'Unknown command' when a user or project skill shadows the bundled skill.(v2.1.233)
• Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers.(v2.1.233)
• Fixed Windows paths with the NT `\??` device prefix bypassing UNC path validation, preventing NTLM credential leaks.(v2.1.233)
• Fixed auto mode repeatedly stopping for manual approval on ordinary `cd <dir> && <command> > file` Bash commands on Windows (a regression).(v2.1.233)
• Fixed a PowerShell permission bypass where variable-writing parameters could silently overwrite `$PSDefaultParameterValues`.(v2.1.232)
• Fixed a Windows permission bypass where Git Bash followed Cygwin-style symlinks that path validation saw as regular files.(v2.1.232)
• Fixed nested git repositories inheriting trust from a parent directory; each repository now requires its own trust confirmation.(v2.1.232)
• Fixed MCP connections hanging for the full 30-second connect timeout when a server fails to answer or sends a malformed reply.(v2.1.232)
• Fixed Remote Control sessions hosted by a bridge inside a cloud session inheriting that session's transcript or credentials.(v2.1.232)
• Fixed Remote Control sessions started from Claude Desktop or an IDE appearing as a new claude.ai session each time the local session was resumed; they now reattach to the existing one.(v2.1.232)
• Fixed Remote Control sessions appearing unreachable to newly attached clients while idle.(v2.1.232)
• Fixed Remote Control bridge sessions not restoring conversation history when the session worker restarts.(v2.1.232)
• Fixed Remote Control resuming a conversation whose session was deleted from claude.ai or the app, which now starts a replacement instead of failing.(v2.1.232)
• Fixed Cloud gateway `/login` exiting silently or leaving an unresponsive terminal when managed settings failed to load; the reason is now shown.(v2.1.232)
• Fixed voice mode on native builds getting stuck on "listening…" when the voice service rejected the connection; the rejection is now shown immediately.(v2.1.232)
• Fixed mTLS client certificate rotation requiring a restart; Claude Code now reloads the rotated cert and key automatically on connection errors.(v2.1.232)
• Fixed malformed AWS or Vertex region values being used to build request URLs; they now fall back to the default region.(v2.1.232)
• Fixed stream idle timeout errors failing the request instead of recovering on Bedrock, Vertex, and gateway deployments.(v2.1.232)
• Fixed content-sized overlays containing truncated text rendering one column too wide, and start-truncated text collapsing to an ellipsis.(v2.1.232)
• Fixed a stray garbled character where a long shell-command or agent-description preview was cut off mid-emoji.(v2.1.232)
• Fixed a startup race that could silently unregister a plugin marketplace due to concurrent writes to `known_marketplaces.json`.(v2.1.232)
• Fixed `/update` and `/tui` refusing to restart while work that survives the relaunch was running.(v2.1.232)
• Fixed usage-limit guidance suggesting unavailable slash commands in SDK and remote sessions.(v2.1.232)
• Fixed the consent message for interactive `--advisor fable` launches, which told you to run `/model fable` in an interactive session that had just exited.(v2.1.232)
• Fixed Remote Control reconnecting after a network blip; it now keeps reconnecting for about 30 minutes and no longer drops after a few blips spread across an hour.(v2.1.232)
• Fixed Remote Control resuming a conversation silently taking Remote Control away from another Claude Code on the same machine; it now prompts to move it.(v2.1.232)
• Fixed Bash input redirections (`< file`) on all platforms to be permission-checked like their argument spellings.(v2.1.232)
• Fixed Cowork sessions inlining external @-imports from user-scope memory files.(v2.1.232)
• Fixed the auto-generated cross-session messaging socket directory on shared `/tmp` to refuse pre-planted symlinks or other users' directories.(v2.1.232)
• Fixed the Linux filesystem sandbox against a protected-path bypass.(v2.1.232)
• Fixed project settings overriding the sandbox's ripgrep binary; `sandbox.ripgrep` is now honored only from user, managed, and `--settings` settings.(v2.1.232)
• Fixed MCP OAuth sign-in failing with a redirect URI mismatch for servers that use a pre-registered OAuth client, such as Slack.(v2.1.231)
• Fixed long responses partly disappearing while streaming and being printed twice in the terminal.(v2.1.229)
• Fixed a crash to the error screen when a tool call had a non-string value for `glob`, `file_path`, or `command`.(v2.1.229)
• Fixed a RangeError crash when a progress bar or markdown table rendered in a very narrow terminal window, which could also crash `claude --continue`/`--resume` at startup.(v2.1.229)
• Fixed a crash on Windows when a tool call or message referenced a file by an extended-length (`\?`) or UNC path.(v2.1.229)
• Fixed auto mode failing on every tool call for users who disable the attribution header via `CLAUDE_CODE_ATTRIBUTION_HEADER`.(v2.1.229)
• Fixed `/model` rejecting Sonnet/Opus 1M for claude.ai subscribers using a custom `ANTHROPIC_BASE_URL` gateway.(v2.1.229)
• Fixed MCP OAuth with strict authorization servers by using `127.0.0.1` instead of `localhost` in the redirect URI.(v2.1.229)
• Fixed Remote Control clients showing a stuck working spinner after a slash command was typed in the laptop terminal.(v2.1.229)
• Fixed the Claude Code Review workflow generated by `/install-github-app` completing without posting its review on the pull request.(v2.1.229)
• Fixed multi-second UI stalls after editing a file with thousands of IDE diagnostics while the IDE extension is connected.(v2.1.229)
• Fixed one-shot `claude plugin` commands leaving a stray liveness file that could prevent cleanup of outdated plugin versions.(v2.1.229)
• Fixed dynamic workflows inside CPU-limited containers using the host machine's core count instead of the container's CPU limit.(v2.1.229)
• Fixed a file-watcher handle leak after atomic file replacements, and an uncaught error on Windows when the scheduled-tasks watcher failed on a network or virtual filesystem.(v2.1.229)
• Fixed SDK and `--input-format stream-json` sessions getting a 400 API error when a whitespace-only message was submitted.(v2.1.229)
• Fixed conversations whose messages alone exceed the API's 32 MB request limit retrying compaction when no images or documents can be stripped; they now fail once with a clear message.(v2.1.229)
• Fixed OpenTelemetry export from Claude Desktop sessions being rejected by the Desktop-managed gateway when that gateway is also the telemetry endpoint.(v2.1.229)
• Fixed self-hosted runner and other remote sessions exiting at startup when `managed-mcp.json` is deployed and the server delivers MCP servers; those servers are now skipped with a warning.(v2.1.229)
• Fixed self-hosted runner repository preparation hanging on a Git Credential Manager prompt; git now fails fast when credentials are missing.(v2.1.229)
• Fixed interactive sessions that stopped redrawing due to a rare internal layout error.(v2.1.228)
• Fixed Git Bash not being found on Windows when Claude Code is launched from a parent folder of the git installation.(v2.1.228)
• Fixed `/tui` reverting the session to an earlier model when `/model` had been changed since the last response.(v2.1.228)
• Fixed cross-session messaging sometimes starting without an inbox in the first session after install or upgrade.(v2.1.228)
• Fixed Remote Control `/resume` command leaking conversation title or history into the connected session.(v2.1.228)
• Fixed `claude self-hosted-runner` sessions failing on every fresh runner when the `checkout` hook fails for a repository the session doesn't push to; these repositories are now skipped with a warning.(v2.1.228)
• Fixed self-hosted runners ending sessions in the gap between a background task finishing and the follow-up turn starting.(v2.1.228)
• Fixed session cleanup incorrectly deleting contents inside a project's memory folder.(v2.1.228)
• Fixed background plugin-cache cleanup deleting a plugin's cache when its only version is a symlinked development checkout.(v2.1.228)
• Fixed a settings-merge issue where marketplace entries could inherit incorrect custom headers; marketplace entries now merge as whole units.(v2.1.228)
• Fixed the deferred-tools reminder occasionally being sent to the model twice after a skill invocation.(v2.1.228)
• Fixed a transient 401 error that incorrectly replaced long-lived OAuth tokens, preventing headless sessions from working until a restart.(v2.1.225)
• Resolved an issue where MCP OAuth servers on macOS intermittently failed with 401 errors after a keychain read timeout.(v2.1.225)
• Corrected auto mode's behavior of counting safety-filter refusals towards the consecutive-block limit, ensuring the model moves on after denial.(v2.1.225)
• Fixed cross-session messages that were not being noticed or expiring in headless sessions and during startup.(v2.1.225)
• Resolved an issue where conversation history would break on Remote Control session resume after very large conversations were compacted.(v2.1.225)
• Fixed hovering over a session in another project in the agents list from changing the directory for the next agent.(v2.1.225)
• Ensured `claude self-hosted-runner` now exits at startup with a clear error if the `--base-dir` cannot be created or written, instead of failing every session.(v2.1.225)
• Corrected Claude Code web sessions that were being misreported as stuck and re-sending event backlogs on reconnect.(v2.1.225)
• Fixed the Focus view in VSCode from folding away the latest to-do list, pending questions, and settled answers.(v2.1.225)
• Fixed an issue where long project paths (>200 characters) could incorrectly resolve to another project's session directory, preventing session list, rename, fork, delete, and `/resume` commands from crossing projects.(v2.1.224)
• Fixed `SendMessage` incorrectly reporting "Message sent" when the write to a teammate's inbox failed; failed deliveries are now reported as errors.(v2.1.224)
• Fixed sandbox filesystem deny entries with a trailing slash (e.g., `denyRead: "~/.aws/"`) being silently bypassable on Linux and macOS.(v2.1.224)
• Fixed sandbox violation details not appearing in Bash tool results, ensuring Claude now sees which file or network access was denied and why.(v2.1.224)
• Fixed MCP tools connecting mid-turn being deferred for tool search without their names being announced to the model.(v2.1.224)
• Fixed plugin install records being silently corrupted when the same plugin was installed in multiple projects.(v2.1.224)
• Fixed recalled or restored paste content occasionally attaching incorrect data or silently losing text when the paste had aged out or placeholder numbers collided.(v2.1.224)
• Fixed copy-on-select on Wayland not always reaching the clipboard due to a race condition between selection writes.(v2.1.224)
• Fixed the feedback survey's transcript share silently failing on long sessions; failed shares now display an error instead of a success message.(v2.1.224)
• Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token.(v2.1.224)
• Fixed Remote Control and SDK clients showing a blank "(no content)" message after `/clear` and other output-less commands.(v2.1.224)
• Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session.(v2.1.224)
• Fixed the VSCode extension showing Remote Control as connected after the connection failed.(v2.1.224)
• Fixed sessions not honoring `remoteControlAtStartup` when explicitly enabled in VSCode.(v2.1.224)
• Fixed a Bash permission bypass vulnerability that allowed crafted commands to obscure parts of themselves from permission checks.(v2.1.223)
• Fixed permission prompts to prevent commands padded with tabs or invisible Unicode characters from hiding parts of the command from the approval dialog.(v2.1.223)
• Fixed workflow scripts from using dynamic `import()` to execute code outside the designated workflow sandbox.(v2.1.223)
• Fixed a permission gap where the `bypassPermissions` mode in agent definitions incorrectly ignored the organization's policy to disable bypass-permissions.(v2.1.223)
• Fixed resumed sessions to correctly restore context after a mid-session `/cd` command, preventing empty sessions.(v2.1.223)
• Fixed gateway model discovery to properly display Claude models registered with provider-prefixed IDs (e.g., `vertex_ai/claude-*` or `bedrock/anthropic.claude-*`).(v2.1.223)
• Fixed `modelOverrides` to ignore keys that are not Anthropic model IDs, preventing them from being treated as the session's canonical model ID.(v2.1.223)
• Fixed managed settings to ensure server-delivered settings no longer disable the environment block of local `managed-settings.json` or MDM profiles; admin environments now merge settings per key.(v2.1.223)
• Fixed sandboxed commands on Linux to start correctly when `sandbox.filesystem.denyWrite` covers the working directory.(v2.1.223)
• Fixed forked background agents from getting stuck in an 'already resuming' state when the fork's parent prompt rebuild failed during resume.(v2.1.223)
• Fixed resumed sessions from failing every turn or displaying an unresponsive error screen by handling malformed diagnostics attachments in session history.(v2.1.223)
• Fixed a rare hang issue encountered when parsing unusual `git push` output.(v2.1.223)
• Fixed issues with resumed sessions failing or leaving the interactive app on an unresponsive error screen when session history contained a malformed diagnostics attachment.(v2.1.223)
• Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type.(v2.1.222)
• Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks (summaries, compaction, renames).(v2.1.222)
• Fixed /usage-credits on Team and Enterprise showing "you've already sent a usage credit request" for members whose earlier request was dismissed, blocking them from sending a new one.(v2.1.222)
• Fixed the startup connectivity check hanging and then failing behind an HTTPS proxy; it now uses the same proxy-aware transport as API requests and times out with a clear message.(v2.1.222)
• Fixed "Connection closed mid-response" errors being reported on responses that had actually completed.(v2.1.222)
• Fixed /usage overattributing usage to MCP servers: a server's share now reflects only the requests that actually consumed its tool results, instead of every turn after any call to it.(v2.1.222)
• Fixed sessions not linking to pull requests created after the branch was pushed, including through the GitHub REST API.(v2.1.222)
• Fixed org-restricted model: opus-style subagent and teammate family aliases dropping to the parent model instead of stepping down to the newest org-allowed model in the family.(v2.1.222)
• Fixed stream idle timeout firing on custom ANTHROPIC_BASE_URL gateways despite server keep-alive pings arriving on the wire.(v2.1.222)
• Fixed claude.ai connectors being falsely marked as needing authorization when the session token is invalid — they now show a /login hint instead.(v2.1.222)
• Fixed tool errors not being displayed for tools no longer available locally, for example after an MCP server is removed.(v2.1.222)
• Fixed SendMessage rejecting a long summary — it now truncates instead, so sends no longer fail on a character limit.(v2.1.222)
• Fixed the spinner's effort label in a subagent's transcript view showing the session's effort level instead of the subagent's own effort: setting.(v2.1.222)
• Fixed rare crashes when a file watcher hit a filesystem error or during file-watcher teardown.(v2.1.222)
• Fixed screen readers re-reading the whole input line on every backspace in --ax-screen-reader mode — end-of-line deletions now echo just the deleted characters.(v2.1.222)
• Fixed host model-selection keys not taking precedence over a stale on-disk managed-settings.json when CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST is set.(v2.1.222)
• Fixed a Bash tool permission-check bypass where zsh could execute hidden commands in `[[ ]]` regex conditionals; affected commands now prompt for permission.(v2.1.221)
• Fixed PowerShell permission checks mishandling paths containing quote characters on Windows; such paths now prompt for approval.(v2.1.221)
• Fixed the thinking toggle having no effect for the rest of a session that started with thinking off; disabling an MCP server mid-connect no longer silently reverts.(v2.1.221)
• Fixed MCP servers from `--mcp-config` not being connected before the first turn in print mode (`-p`), which made the model emit tool calls as literal text.(v2.1.221)
• Fixed @-mentioned files being silently dropped when pressing Esc to retract a prompt and resubmitting it.(v2.1.221)
• Fixed a crash when preparing API requests for SDK MCP tools named after built-in object properties such as `constructor`.(v2.1.221)
• Fixed WebSearch failing with a 400 error at effort `xhigh`/`max` when thinking is disabled.(v2.1.221)
• Fixed sandboxed large uploads failing with TLS errors through the sandbox proxy.(v2.1.221)
• Fixed Team and Enterprise spend-limit message incorrectly blaming the org's monthly limit instead of your individual spend limit.(v2.1.221)
• Fixed Bedrock authentication with AWS SSO named profiles failing in desktop-managed sessions on Windows machines that set a stray `HOME` environment variable.(v2.1.221)
• Fixed `CLAUDE_CODE_RESUME_INTERRUPTED_TURN=0` not disabling interrupted-turn auto-resume; falsy values are now honored.(v2.1.221)
• Fixed a rare wake-from-sleep race where two Claude Code processes could both refresh the same MCP connector or WIF OAuth token at once, forcing re-authentication.(v2.1.221)
• Fixed renaming a session from Claude Code Desktop or claude.ai not updating the CLI's session name; session names from every rename surface are now sanitized.(v2.1.221)
• Fixed plugin- and org-delivered skills named after terminal-only built-ins (e.g. `/help`, `/feedback`) being un-invocable in non-interactive sessions.(v2.1.221)
• Fixed the "Plugins changed" notification lingering after plugins were reloaded instead of clearing.(v2.1.221)
• Fixed Vim mode: the yank register now survives dialogs, history search, and the transcript view instead of being silently emptied.(v2.1.221)
• Fixed Vim mode: undoing back to an empty prompt now arms the "press ← again" confirm before returning to the agent view.(v2.1.221)
• Fixed --json-schema silently producing unstructured output when the schema was invalid, and schemas using the format keyword being rejected(v2.1.205)
• Fixed a message sent while Claude was working being silently lost when the turn ended at the --max-turns limit(v2.1.205)
• Fixed Windows worktree removal deleting files outside the worktree when an NTFS junction or directory symlink existed inside it(v2.1.205)
• Fixed background agents staying shown as "failed" or "completed" in the agent list after being resumed with SendMessage(v2.1.205)
• Fixed background jobs flipping from "needs input" back to "working" in the agent list when the agent's turn contained no readable text(v2.1.205)
• Fixed claude attach erroring when a background agent was mid-upgrade restart instead of waiting for it to come back(v2.1.205)
• Fixed session-to-PR linking missing a PR created in a Bash call whose output exceeded the 30K inline limit(v2.1.205)
• Fixed claude mcp add-from-claude-desktop getting stuck when a server name contains unsupported characters; invalid names are now reported and remaining servers still import(v2.1.205)
• Fixed a plugin LSP server that fails to initialize preventing a valid LSP server from another plugin handling the same file extension(v2.1.205)
• Fixed a Windows crash when the directory Claude was launched from is deleted, locked, or unmounted while a command is running(v2.1.205)
• Fixed a crash when a file watcher was closed while a directory scan was still in flight(v2.1.205)
• Fixed project verify skills being rewritten on every session instead of only when a documented command changed(v2.1.205)
• Fixed the agent view rendering one line too high and clipping its header when the job list slightly overflowed the screen(v2.1.205)
• Fixed background tasks in the web and mobile Remote Control panels showing stale "Running" status by forwarding full task state on every membership change(v2.1.205)
• Fixed Cowork VM-mode local-agent sessions failing to start with "Not logged in 342200224 Please run /login" on CLI 2.1.203+(v2.1.205)
• Fixed opening or switching background agent sessions on macOS stalling for 15–20 seconds due to a false low-memory detection(v2.1.203)
• Fixed background sessions becoming permanently unresponsive to attach, replies, and stop when the daemon's session token went stale; the session now recovers automatically(v2.1.203)
• Fixed returning to `claude agents` silently stopping running subagents and re-running the prompt from scratch; their work now carries over(v2.1.203)
• Fixed a memory and per-turn CPU regression in interactive sessions where the context-usage indicator re-analyzed the entire transcript after every turn(v2.1.203)
• Fixed background agents inheriting a stale `PATH` from the daemon instead of the dispatching shell, causing missing tools on Windows(v2.1.203)
• Fixed background and agent-view sessions dropping a shell-exported `ANTHROPIC_BASE_URL`, preventing API key leakage and fixing 401 errors(v2.1.203)
• Fixed Bash failing with "argument list too long" in repos with many git worktrees(v2.1.203)
• Fixed worktree-isolated subagents sometimes running shell commands in the parent checkout instead of their own worktree(v2.1.203)
• Fixed worktree creation rejecting nested repositories in multi-repo workspaces, allowing background sessions to isolate and edit correctly(v2.1.203)
• Fixed background agents crash-looping when their working directory was deleted, replaced by a file, or became an invalid path; they now fail once with a clear error(v2.1.203)
• Fixed a background daemon auto-upgrade failure silently killing all running background sessions(v2.1.203)
• Fixed `TaskStop` and `TaskOutput` failing to find background agents spawned by another agent; errors now list running agents by id and description(v2.1.203)
• Fixed the `claude agents` composer discarding your typed message when a slash command isn't available there(v2.1.203)
• Fixed the agent list crashing when opening a stopped session whose conversation was already open in another session(v2.1.203)
• Fixed background sessions showing "Needs input" in the agent list after the question was already answered(v2.1.203)
• Fixed background agent startup failures showing only "exit_with_message" instead of the actual error(v2.1.203)
• Fixed background sessions ignoring `effortLevel` changes in settings.json when forked through the daemon(v2.1.203)
• Fixed attached background sessions ignoring `CLAUDE_CODE_DISABLE_MOUSE` and `CLAUDE_CODE_DISABLE_MOUSE_CLICKS` opt-outs(v2.1.203)
• Fixed `/exit` incorrectly warning about running background agents after all named agents had completed(v2.1.203)
• Fixed background sessions started from a non-git directory unable to edit files when a `WorktreeCreate` hook was configured(v2.1.203)
• Fixed the `@` directory picker in `claude agents` not showing registered git worktrees(v2.1.203)
• Fixed background task output on Windows being permanently replaced by an empty file after `/clear`(v2.1.203)
• Fixed content jumping when scrolling up through long transcript history(v2.1.203)
• Fixed the terminal flickering and jumping while typing in bash mode when a shell-history suggestion was shown(v2.1.203)
• Fixed literal `^[[I` / `^[[O` escape codes being printed when reattaching to a background session(v2.1.203)
• Fixed LSP-only plugins being incorrectly flagged for disuse when their language servers deliver diagnostics or answer navigation requests(v2.1.203)
• Fixed a crash occurring in the inline Ctrl+R history search when accepting or cancelling while the search was actively scanning history.(v2.1.202)
• Fixed background sessions losing their new name after a job restart when using /rename.(v2.1.202)
• Fixed transient mTLS handshake failures that occurred when settings were re-applied during in-place client certificate rotation.(v2.1.202)
• Fixed commands sent from Remote Control (mobile/web) to interactive sessions failing with an "Unknown command" error.(v2.1.202)
• Fixed images and files sent from the Remote Control mobile or web app without a caption being silently dropped.(v2.1.202)
• Fixed the sign-in URL emitted by claude auth login and claude mcp login --no-browser not being reliably clickable when wrapped over SSH; it is now emitted as a single hyperlink.(v2.1.202)
• Fixed instances where opening a chat from claude agents failed with a "currently running as a background agent" error, leading to a worker crash/respawn loop.(v2.1.202)
• Fixed corruption of workflow scripts containing unicode quote escapes in strings; workflow parse errors now correctly point to the offending line.(v2.1.202)
• Fixed voice dictation retrying indefinitely when the microphone or audio recorder fails; repeated capture failures now pause voice input.(v2.1.202)
• Fixed /remote-control sessions displaying the incorrect permission mode in the mobile and web apps.(v2.1.202)
• Fixed resuming a session by name, or opening the resume picker, taking minutes and consuming excessive memory in repositories with many git worktrees.(v2.1.202)
• Fixed installer and updater downloads immediately failing with "aborted" when a proxy or network connection dropped mid-download; transient connection drops now retry.(v2.1.202)
• Fixed re-invoking an already-loaded skill resulting in a duplicate copy of its instructions being appended to context.(v2.1.202)
• Fixed crash at startup when `disabledMcpServers` or `enabledMcpServers` in `.claude.json` was set to a non-array value.(v2.1.200)
• Fixed background sessions silently stopping mid-turn after sleep/wake or when reopening a stalled session.(v2.1.200)
• Fixed background sessions re-running a turn cancelled with Esc after a stall respawn.(v2.1.200)
• Fixed background agents never starting again after a crash left a stale `daemon.lock` whose PID the OS reused.(v2.1.200)
• Fixed background-agent daemon handover preventing reinstalled older builds from taking over the daemon.(v2.1.200)
• Fixed background-agent roster issues including transient corruption disabling orphan cleanup, older binaries not preserving fields, and socket auth tokens being stripped during daemon restarts.(v2.1.200)
• Fixed subagents cut off by a rate limit before producing output returning an empty result instead of failing cleanly.(v2.1.200)
• Fixed control bytes from background-agent output reaching the terminal in the agent view.(v2.1.200)
• Fixed `claude agents --plugin-dir <dir>` not showing plugin agents and skills when the flag was placed after `agents`.(v2.1.200)
• Fixed project-scoped plugins not loading correctly from git worktrees of the same repository.(v2.1.200)
• Fixed `/mcp` server list not tracking focus for screen readers and magnifiers.(v2.1.200)
• Fixed voice dictation showing a misleading "Voice connection failed" message when a recording captures no audio.(v2.1.200)
• Fixed SSL certificate errors (TLS-inspecting proxies, missing NODE_EXTRA_CA_CERTS, expired certs) causing unnecessary retries; they now fail immediately with a fix hint.(v2.1.199)
• Fixed streaming responses being discarded when the API emits a mid-stream overloaded/server error; the partial output is now kept with an incomplete-response notice.(v2.1.199)
• Fixed subagents silently failing instead of returning partial work to the parent when cut off by a rate limit or server error.(v2.1.199)
• Fixed subagents incorrectly reporting API errors (like usage limit reached) as successful results; errors are now reported to the parent agent.(v2.1.199)
• Fixed the background-agent daemon on Linux killing itself and all running agents due to a corrupted worker record after an unclean shutdown.(v2.1.199)
• Fixed background agents failing to cold-start over SSH on macOS with "Could not switch to audit session" (regression in 2.1.196).(v2.1.199)
• Fixed 'claude stop' being silently undone when it raced a background-agent respawn; respawns now honor the stop command.(v2.1.199)
• Fixed background job progress indicators stalling for minutes while the job executed long commands.(v2.1.199)
• Fixed background sessions on memory-starved machines showing a generic error; they now indicate low memory and suggest freeing resources.(v2.1.199)
• Fixed remote sessions briefly flapping between Working and Idle in the agent view when a background agent completed.(v2.1.199)
• Fixed idle subagents vanishing from the agent panel while other subagents were still working; surplus idle agents now collapse into an expandable summary row.(v2.1.199)
• Fixed typing '/model' or '/fast' while viewing a subagent silently opening the lead's model picker; a notice now explains the command applies to the lead.(v2.1.199)
• Fixed 'SessionStart', 'Setup', and 'SubagentStart' hooks silently hiding stderr when exiting with code 2; the error is now shown in the transcript.(v2.1.199)
• Fixed 'claude --dangerously-skip-permissions daemon <subcommand>' being treated as a chat prompt instead of running the subcommand.(v2.1.199)
• Fixed 'SendMessage' silently misrouting when a re-spawned agent reused a previous agent's name; the tool now detects the mismatch and prompts the caller to retarget.(v2.1.199)
• Fixed opening or resuming a session with no new messages needlessly growing the transcript file.(v2.1.199)
• Fixed backgrounding a session with '←' or '/background' dropping its '/color' setting from the agent view row.(v2.1.199)
• Fixed resetting a corrupted config file from the startup recovery dialog destroying it unrecoverably; the file is now backed up first.(v2.1.199)
• Fixed Claude in Chrome repeatedly opening the reconnect page when sessions run from different builds or config directories.(v2.1.199)
• Fixed plan mode not prompting for state-changing browser tool calls; read-only 'browser_batch' calls are now correctly auto-allowed.(v2.1.199)
• Fixed turns aborting due to brief network drops mid-response; transient errors like ECONNRESET now retry with backoff instead of failing.(v2.1.198)
• Fixed excessive background classifier requests when sandboxed processes repeatedly accessed the same network host.(v2.1.198)
• Fixed background tasks in web, desktop, and VS Code task panels getting stuck on "Running" after they finish or resume.(v2.1.198)
• Fixed agent teams so a teammate dying on an API error now reports "failed" to the lead, and messaging a stuck teammate wakes it to retry immediately.(v2.1.198)
• Fixed the `/diff` panel not refreshing when switching branches or commits outside the session.(v2.1.198)
• Fixed markdown tables overflowing and wrapping their right border when rendered in fullscreen mode.(v2.1.198)
• Fixed Claude Platform on AWS and Mantle sessions dead-ending with "Please run /login" upon STS token expiration by automatically running `awsAuthRefresh`.(v2.1.198)
• Fixed "no route to host" errors for local-network hosts in macOS background agent sessions by declaring Local Network entitlements.(v2.1.198)
• Fixed `/desktop` failing with "Cannot determine working directory" after entering and exiting a worktree.(v2.1.198)
• Fixed background agents repeatedly showing "Reconnecting…" every ~52 seconds on macOS while the agents view was open.(v2.1.198)
• Fixed pressing `←` inside `claude attach <id>` exiting to the shell instead of opening the agent view.(v2.1.198)
• Fixed `claude --bg` silently creating an unattachable session when combined with `--print`/`-p`; conflicting flags are now rejected.(v2.1.198)
• Fixed the workflow progress view dropping the earliest agents from the list while the phase counter remained correct in SDK and desktop-app sessions.(v2.1.198)
• Fixed conditional rules in `.claude/rules/` not loading when the target file is reached via a symlinked path.(v2.1.198)
• Fixed Cmd+click not opening URLs in fullscreen mode in Warp on macOS.(v2.1.198)
• Fixed double-click word selection in fullscreen mode to correctly select the entire URL including the scheme.(v2.1.198)
• Fixed plan mode not auto-allowing read-only tool calls when a session starts in plan mode.(v2.1.198)
• Fixed `/branch` deriving its default fork name from the compaction summary instead of the first real prompt.(v2.1.198)
• Fixed background job waking up permanently deleting its conversation and re-running the prompt due to transcript probe misreading.(v2.1.196)
• Fixed rate-limit warning flickering off and over-counting telemetry when multiple parallel requests hit a usage limit simultaneously.(v2.1.196)
• Fixed duplicate recap lines appearing after a background session's turn when a schema-rejected StructuredOutput attempt was retried.(v2.1.196)
• Fixed PowerShell failures for `git diff`/`git grep`, `egrep`/`fgrep`, and quoted search patterns containing `|` when they exit with status 1.(v2.1.196)
• Fixed multiple issues in the `claude agents` side panel, including stuck keyboard focus, background jobs losing subagent types on open, and incorrect status display for running sessions.(v2.1.196)
• Fixed `claude agents --dangerously-skip-permissions` silently falling back to auto mode instead of showing the bypass disclaimer.(v2.1.196)
• Fixed mid-turn crash recovery for Remote sessions interrupted by server restarts, ensuring sessions auto-resume on the next worker.(v2.1.196)
• Fixed sessions moved via `/cd` reappearing in the old directory's resume list after a non-graceful exit when the old path contained special characters.(v2.1.196)
• Fixed `claude plugin validate` skipping local plugins sourced from "." and stopping prematurely after the first error class.(v2.1.196)
• Fixed Esc Esc at an idle prompt not opening the rewind menu (regression); Ctrl+C or Ctrl+X Ctrl+K must now be used to stop background agents.(v2.1.196)
• Fixed MCP OAuth requesting the full `scopes_supported` catalog when no scope was specified, preventing `invalid_scope` failures with enterprise IdPs like GitLab self-hosted.(v2.1.196)
• Fixed `/context` incorrectly showing 0 tokens for all tool groups when using Bedrock.(v2.1.196)
• Fixed `/deep-research` misreporting verifier failures as "all claims refuted" instead of `unverified`.(v2.1.196)
• Fixed plugin dependency version pins not being honored when the marketplace was added as a local folder path backed by a git repository.(v2.1.196)
• Fixed `claude agents` session status display, ensuring completed rows show a stable status, stalled agents are labeled "Needs attention", and PR results show clickable links.(v2.1.196)
• Fixed voice dictation swallowing spaces and spuriously starting recordings during fast typing when voice mode was enabled.(v2.1.196)
• Fixed hook matchers with hyphenated identifiers (e.g. code-reviewer) from accidentally substring-matching; they now perform exact matching.(v2.1.195)
• Fixed voice dictation on macOS from capturing silence during long sessions after the default input device changes.(v2.1.195)
• Fixed voice dictation auto-submit from never firing for languages written without spaces (Japanese, Chinese, Thai).(v2.1.195)
• Fixed external plugins enabled only via project .claude/settings.json from incorrectly requiring explicit install consent on every loader path.(v2.1.195)
• Fixed the /plugin Enable/Disable command from failing when a plugin's plugin.json name differs from its marketplace entry name.(v2.1.195)
• Fixed background jobs from disappearing or losing data when written by a newer Claude Code version.(v2.1.195)
• Fixed reopening a crashed background task from showing a blank screen for up to 5 seconds instead of restarting immediately.(v2.1.195)
• Fixed background agent daemons from running unreachable when the control socket fails to start, which previously blocked restarts.(v2.1.195)
• Fixed stale or empty state appearing immediately after `/login` in the `/model` command and other client-data-gated UIs.(v2.1.193)
• Fixed backgrounding (using ←←) spuriously cancelling with a message about abandoning background tasks when all tasks were correctly carried over.(v2.1.193)
• Fixed pinned background agents being incorrectly re-prompted to "Continue from where you left off" after every automatic update.(v2.1.193)
• Fixed backgrounding the main turn causing a phantom "general-purpose (resumed)" subagent to spawn and re-run the main conversation.(v2.1.193)
• Fixed the agent panel incorrectly hiding sibling agents when a subagent was being viewed.(v2.1.193)
• Fixed scroll position jumping to the bottom while reading earlier output during a streaming response(v2.1.191)
• Fixed background agents resurrecting after being stopped; stopping an agent from the tasks panel is now permanent(v2.1.191)
• Fixed /voice showing a generic "not available" message when disabled by an organization's policy; it now explains the restriction(v2.1.191)
• Fixed /login URL opening truncated in Windows Terminal when it wraps across lines(v2.1.191)
• Fixed Cmd+click on links in fullscreen mode for Ghostty over ssh/tmux(v2.1.191)
• Fixed claude agents sending builtin slash commands like /usage to background sessions as prompt text instead of showing a hint(v2.1.191)
• Fixed claude agents job rows showing full filesystem paths for pasted images instead of the [Image #N] placeholder(v2.1.191)
• Fixed hooks with comma-separated matchers (e.g. "Bash,PowerShell") silently never firing(v2.1.191)
• Fixed /permissions Recently-denied tab: approving a denial now persists on close instead of being silently discarded(v2.1.191)
• Fixed the agent panel jumping by one row when scrolling the roster past the overflow cap(v2.1.191)
• Fixed the welcome splash art overflowing the default 80×24 macOS Terminal window(v2.1.191)
• Fixed managed settings: forceRemoteSettingsRefresh now takes effect when set via MDM or file policy, and the fetch sends Cache-Control: no-cache to prevent proxies from serving stale responses(v2.1.191)
• Fixed `--resume` failing with "No conversation found" when the original `-p` run produced no model turns(v2.1.187)
• Fixed `--json-schema` and workflow `agent({schema})` structured output so the model cannot re-call `StructuredOutput` indefinitely and follow-up turns reliably return structured output(v2.1.187)
• Fixed remote MCP tool calls hanging for 5 minutes by aborting with an error instead of blocking indefinitely(v2.1.187)
• Fixed Claude Code Remote sessions taking ~2.7s longer to start due to the agent proxy CA system-trust install(v2.1.187)
• Fixed pasted Korean/CJK text turning into mojibake in terminals that deliver paste as per-byte extended-key events(v2.1.187)
• Fixed `/update` over Remote Control hanging when a startup trust dialog would have shown(v2.1.187)
• Fixed background jobs in the agents view getting stuck in "working" indefinitely when the agent ended a turn without producing structured output(v2.1.187)
• Fixed channel connections dropping after navigating to the agents view and back, and after `/bg`, `/tui`, or `/update`(v2.1.187)
• Fixed agent stop notifications not correctly attributing who stopped the agent(v2.1.187)
• Fixed subagent depth tracking: resumed subagents now restore their original spawn depth, and forked subagents now count toward the depth cap(v2.1.187)
• Fixed leaked agent worktree registrations: locked `.git/worktrees/` entries from killed agents are now cleaned up automatically(v2.1.187)
• Fixed Cmd+click not opening URLs in fullscreen mode in Ghostty on macOS(v2.1.187)
• Fixed `claude --help` not listing the `--bg`/`--background` flag(v2.1.187)
• Fixed Esc, Ctrl-C, and Ctrl-D not working while `/share` is uploading(v2.1.187)
• Fixed VSCode extension becoming unresponsive when resuming a large session(v2.1.187)
• Fixed streaming requests failing with "Content block not found" or JSON parse errors after the machine wakes from sleep.(v2.1.186)
• Fixed subagent transcript scroll position incorrectly bleeding into the main transcript upon subagent exit.(v2.1.186)
• Fixed background task previews briefly flashing raw tool names before the agent's plan loaded.(v2.1.186)
• Fixed Chrome tab-group isolation not applying correctly when the in-product permissions gate is disabled for concurrent CLI sessions.(v2.1.186)
• Fixed background session recaps being duplicated; the agent's own end-of-turn summary is now correctly shown as the recap line.(v2.1.186)
• Fixed opening a background session from `claude agents` leaving the previous screen content visible behind the new session.(v2.1.186)
• Fixed `Agent(type)` deny rules and `Agent(x,y)` allowed-types restrictions not being enforced during named subagent spawns.(v2.1.186)
• Fixed Esc and Ctrl+C not responding while background agents were still running after the main turn concluded.(v2.1.186)
• Fixed misaligned option numbers in permission prompts when the option text wrapped to a new line.(v2.1.186)
• Fixed pressing `x` on a finished subagent in the agent panel failing to dismiss it.(v2.1.186)
• Fixed a misleading "MCP server disconnected" notice appearing for intentionally retired tools when resuming older sessions.(v2.1.186)
• Fixed the `/plugin` Installed view showing a "more above" indicator when already scrolled to the top.(v2.1.186)
• Fixed `~~strikethrough~~ ` rendering as literal tildes instead of strikethrough formatting in assistant messages.(v2.1.186)
• Fixed `--tools` flag allowing feature-gated tools to load prematurely on a cold first launch.(v2.1.186)
• Fixed background job status in `claude agents` showing a stale "needs input" message after a reply was sent.(v2.1.186)
• Fixed a dark-theme flash occurring when opening a background session from `claude agents` in a light terminal theme.(v2.1.186)
• Fixed mouse-selected text remaining highlighted after being deleted within `claude agents`.(v2.1.186)
• Fixed session cost not displaying for usage-based Enterprise and Team subscribers.(v2.1.186)
• Fixed agent teams: teammates spawned via tmux/pane backends no longer inherit the leader's `--effort` level incorrectly.(v2.1.186)
• Fixed Workflow `agent({schema})` subagents looping indefinitely on repeated schema validation failures instead of aborting after 5 attempts.(v2.1.186)
• Fixed `thinking.disabled.display: Extra inputs are not permitted` 400 errors on subagent spawns and session-title generation for affected configurations(v2.1.183)
• Fixed WebSearch returning empty results in subagents(v2.1.183)
• Fixed the terminal cursor being stranded above the prompt after navigating history in vim mode with the native cursor enabled(v2.1.183)
• Fixed fullscreen TUI corruption (statusline mid-screen, duplicated spinner rows, merged text) in Windows Terminal under heavy nested-subagent load(v2.1.183)
• Fixed turns silently completing with no visible output when the model returned only a thinking block; Claude now re-prompts once(v2.1.183)
• Fixed user-level skills appearing multiple times in slash-command autocomplete when multiple plugins are enabled(v2.1.183)
• Fixed MCP servers requiring authentication exposing auth-stub tools to the model in headless/SDK mode(v2.1.183)
• Fixed tmux teammate panes failing to launch when the shell has slow rc-file initialization, and keystrokes typed during agent spawn leaking into the new tmux pane instead of the leader prompt(v2.1.183)
• Fixed background tasks started by a teammate being killed when the teammate finishes a turn(v2.1.183)
• Fixed scheduled task and webhook trigger deliveries being treated as keyboard input; they now classify as task notifications and can no longer approve a pending action or set the session title in auto mode(v2.1.183)
• Fixed focus mode showing "Ran N PostToolUse hooks" timing lines under each response(v2.1.183)
• Fixed prompt caching failing to read when using a custom ANTHROPIC_BASE_URL or on Foundry due to per-request attestation token changes.(v2.1.181)
• Fixed Write/Edit operations producing 0-byte or truncated files when saving to network drives or cloud-synced folders.(v2.1.181)
• Fixed open, osascript, and browser-based authentication flows failing with error -600 on macOS by correctly adding the Apple Events entitlement.(v2.1.181)
• Fixed a startup regression causing the first prompt to wait for managed-settings fetch when no MCP servers are configured.(v2.1.181)
• Fixed startup blocking with a blank terminal for up to 15 seconds when the account settings fetch is slow on a degraded network.(v2.1.181)
• Fixed a startup crash (TypeError: Cannot read properties of null) occurring when .claude.json contains corrupted null project entries.(v2.1.181)
• Fixed macOS TUI freezing at session start (Ctrl+C unresponsive) when Spotlight is busy reindexing.(v2.1.181)
• Fixed long-running idle sessions losing their history when another Claude Code process executed the 30-day transcript cleanup.(v2.1.181)
• Fixed foreground subagents spawning unbounded nested chains; they now correctly respect the 5-level depth limit.(v2.1.181)
• Fixed /recap and conversation forks incorrectly using the previous model immediately after a model switch.(v2.1.181)
• Fixed subagent "Thinking" duration incorrectly showing the parent agent's elapsed time instead of the subagent's own time.(v2.1.181)
• Fixed subagents blocked on a nested agent incorrectly showing a ticking elapsed time instead of "waiting" in the agent panel.(v2.1.181)
• Fixed the API retry indicator staying visible after the retry attempt successfully completed.(v2.1.181)
• Fixed AWS awsCredentialExport credentials with short remaining lifetimes causing unnecessary minute-by-minute refreshes, and now correctly accepts the JSON shape from aws configure export-credentials.(v2.1.181)
• Fixed claude mcp get/list showing ● Connected when tool fetching failed; they now correctly show ! Connected · tools fetch failed with error details.(v2.1.181)
• Fixed /remote-control leaving a stale "connecting…" line; it now confirms connection in the transcript.(v2.1.181)
• Fixed ExitWorktree refusing to remove a clean worktree with an error when bare git cannot be resolved on Windows.(v2.1.181)
• Fixed settings changes (like /effort or /model) failing with ENOENT when ~/.claude/settings.json is a relative symlink under a symlinked ~/.claude.(v2.1.181)
• Fixed IDE selection line numbers in context reminders being off by one in IntelliJ and VS Code.(v2.1.181)
• Fixed Ctrl+C in fullscreen after a native terminal selection overwriting the clipboard with the app's prior selection.(v2.1.181)
• Fixed Ctrl+V pasting text incorrectly showing "No image found in clipboard" when the clipboard contained text.(v2.1.181)
• Fixed agent creation failing with EEXIST: file already exists when the agents directory already existed (Windows/OneDrive).(v2.1.181)
• Fixed AskUserQuestion preview content being cut off at the dialog edge instead of word-wrapping.(v2.1.181)
• Fixed AskUserQuestion multi-select questions silently dropping a typed "Other" free-text answer upon submission.(v2.1.181)
• Fixed /stats "Most active day" and daily token chart dates showing one day early in UTC-negative timezones.(v2.1.181)
• Fixed /copy and copy-on-select on Linux not detecting an installed clipboard utility after Claude Code started.(v2.1.181)
• Fixed tab-indented code rendering with incorrect indentation in the Write (create-file) preview.(v2.1.181)
• Fixed user prompts queued mid-turn not showing a full-width background highlight in the transcript.(v2.1.181)
• Fixed the activity spinner's pulse dwelling on the wrong glyph size in Ghostty.(v2.1.181)
• Fixed mid-stream connection drops, ensuring partial responses are preserved instead of showing a raw error, and preventing the spinner from getting stuck at "running tool".(v2.1.179)
• Fixed mouse-wheel scrolling regression in WSL2 environments when using Windows Terminal and VS Code.(v2.1.179)
• Fixed issue where a sandbox `denyRead`/`allowRead` glob over a large directory tree caused the Bash tool description to become enormous and render the session unusable on Linux.(v2.1.179)
• Fixed feedback survey incorrectly capturing single-digit replies as a session rating immediately after a turn completed.(v2.1.179)
• Fixed welcome screen stacking multiple promotional banners; now only one promo displays per session.(v2.1.179)
• Fixed Ctrl+O not displaying the subagent's transcript when viewing a subagent.(v2.1.179)
• Fixed clicking the prompt input failing to return focus from the subagent/footer panel.(v2.1.179)
• Fixed remote session background tasks appearing stuck as "still running" between turns.(v2.1.179)
• Fixed a crash (out-of-memory) when the CLI inherited stale websocket/OAuth file-descriptor environment variables from a parent process.(v2.1.178)
• Fixed Claude in Chrome silently failing to connect when the OAuth token belonged to a different account than the currently logged-in Claude Code user.(v2.1.178)
• Fixed permission prompts blocking directory-qualified skills in nested `.claude/skills` during non-interactive runs.(v2.1.178)
• Fixed several subagent issues: viewing subagent transcripts now correctly shows tool results and live progress, messages sent while a subagent finishes are no longer dropped, and backgrounding a running subagent no longer restarts it.(v2.1.178)
• Fixed `claude agents` workers failing with `401 Invalid bearer token` when the daemon was started with custom API gateway settings via environment variables.(v2.1.178)
• Fixed compaction not honoring the `--fallback-model` setting, ensuring it now falls back correctly on overload or model-availability errors.(v2.1.178)
• Fixed model requests continuing to fail with authentication errors after credentials were refreshed due to a stale cached request configuration.(v2.1.178)
• Fixed background sessions created with `/bg` or `←←` appearing as "Working" indefinitely in the agents list after a turn completed.(v2.1.178)
• Fixed `CLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILURE=1` preventing fresh marketplace installs from cloning correctly.(v2.1.178)
• Fixed MCP server-level specs being silently ignored in subagent `disallowedTools` configurations.(v2.1.178)
• Fixed vim mode undo (`u`) merging multiple quick commands into a single undo step; it now steps through NORMAL/VISUAL-mode commands individually.(v2.1.178)
• Fixed statusline links using custom URI schemes (e.g., `vscode://`) not opening when clicked in `claude agents`.(v2.1.178)
• Fixed pressing Esc to dismiss a CJK IME candidate window canceling the running Claude task in VSCode.(v2.1.178)
• Fixed enforcement of available models, preventing alias model picks from redirecting to blocked models via environment variables, and ensuring `/fast` respects the allowlist(v2.1.176)
• Fixed auto mode failing on Fable 5 for organizations without Opus 4.8 enabled by falling back to the best available Opus model(v2.1.176)
• Fixed hook `if` conditions for Read/Edit/Write tool paths so documented patterns like `Edit(src/**)`, `Read(~/.ssh/**)`, and `Read(.env)` now match correctly(v2.1.176)
• Fixed Linux sandbox failing to start when `.claude/settings.json` is an absolute symlink(v2.1.176)
• Fixed `/copy` and mouse-selection copy not reaching the system clipboard inside tmux over SSH, and resolved tmux paste buffer loading issues on versions older than 3.2(v2.1.176)
• Fixed Remote Control silently switching the session model when connecting from web/mobile(v2.1.176)
• Fixed Remote Control disconnect notifications showing bare numeric codes instead of human-readable reasons, and prevented duplicate lines on connection failure transcripts(v2.1.176)
• Fixed Remote Control sessions failing to disconnect when signing into a different account(v2.1.176)
• Fixed `/cd` and worktree moves leaving the session reporting the previous directory's git branch(v2.1.176)
• Fixed an issue where pressing back in one window detached other windows attached to the same `claude agents` session(v2.1.176)
• Fixed backgrounded sessions showing "Working" indefinitely when `/bg` mid-turn had no further work(v2.1.176)
• Fixed background agent search by PR URL so PRs opened during scheduled wakeups or blocked jobs now appear in `claude agents` search(v2.1.176)
• Fixed the agents view input on Windows from showing no text cursor(v2.1.176)
• Fixed `claude --bg -cn <name>` failing to seed the session name(v2.1.176)
• Fixed background sessions to neutralize Windows network paths in persisted state before respawn(v2.1.176)
• Fixed background-session respawn rejecting resume attempts from corrupted state files(v2.1.176)
• Fixed the Windows background-service daemon failing to start if `~/.claude/daemon` has the ReadOnly attribute set(v2.1.176)
• Fixed cloud sessions failing with authentication errors when idle for too long before being claimed(v2.1.176)
• Fixed the `/model` picker incorrectly hiding the model family that Default resolves to; Opus/Sonnet now correctly displays based on the user's plan(v2.1.174)
• Fixed the `/model` picker showing a hardcoded Sonnet version label when `ANTHROPIC_DEFAULT_SONNET_MODEL` is set to a different Sonnet version(v2.1.174)
• Fixed the banner incorrectly stating "Fable 5 is now consuming usage credits" for enterprise accounts using usage-based billing(v2.1.174)
• Fixed Bedrock GovCloud regions (`us-gov-*`) deriving the wrong inference profile prefix, which caused 400 errors on derived model IDs(v2.1.174)
• Fixed background sessions inheriting provider environment variables (gateway URL, custom headers, `/model` aliases) from the shell that started the background daemon(v2.1.174)
• Fixed a 1-2 second pause when exiting Claude Code shortly after a shell command was interrupted or killed on macOS and Linux(v2.1.174)
• Fixed git commit co-author attribution showing an incorrect model name for certain models(v2.1.174)
• Fixed the `/advisor` dialog pre-selecting a saved advisor model that is blocked by the `availableModels` allowlist(v2.1.174)
• Fixed Workflow tool `agent()` subagents missing per-agent attribution headers(v2.1.174)
• Fixed pre-warmed background workers failing with "Could not resolve authentication method" when claimed after being idle(v2.1.174)
• Fixed sessions using 1M context without usage credits getting permanently stuck; sessions now automatically compact under the standard context limit.(v2.1.172)
• Fixed a repeating error message about an image being removed when the conversation contained multiple images.(v2.1.172)
• Fixed the agents view incorrectly keeping a session under 'Working' with a busy spinner for up to 30 seconds after the worker responded.(v2.1.172)
• Fixed background agents potentially reading another directory's project settings (approvals, trust) when dispatched to a pre-warmed worker.(v2.1.172)
• Fixed background-session attach failing with EAUTH for sessions started on an older version after the daemon auto-updated.(v2.1.172)
• Fixed a background sub-agent remaining stuck as 'active' in the agent panel after a nested agent it spawned was stopped.(v2.1.172)
• Fixed /model suggestions in the `claude agents` dispatch input rendering with an incorrect slash prefix and showing models disabled for the organization.(v2.1.172)
• Fixed `availableModels` restrictions not being applied correctly to subagent model overrides, the agent dispatch model picker, and the advisor model.(v2.1.172)
• Fixed `availableModels` allowlists incorrectly hiding Opus and Sonnet 1M rows in the /model picker when version-specific IDs were used.(v2.1.172)
• Fixed the /model picker on Bedrock offering models the provider does not serve, which previously caused silent model switching.(v2.1.172)
• Fixed model IDs receiving a doubled 1M-context suffix when `ANTHROPIC_DEFAULT_OPUS_MODEL` already included one.(v2.1.172)
• Fixed the `opusplan` model setting not correctly enabling 1M context in plan mode for entitled users.(v2.1.172)
• Fixed wildcard domain rules (`WebFetch(domain:*.example.com)`) and file permission rules with mid-pattern wildcards not matching correctly.(v2.1.172)
• Fixed the up-arrow prompt history showing the main agent's prompts while a subagent's chat tab was active.(v2.1.172)
• Fixed memory recall failing to find mounted team memory stores (`CLAUDE_MEMORY_STORES`) in remote sessions.(v2.1.172)
• Fixed workflow validation incorrectly rejecting scripts whose prompt strings or comments contained `Date.now()` or `Math.random()`. (v2.1.172)
• Fixed the /plugin marketplace list losing cursor position after navigating out of a long list, and Esc from the plugin browser returning to the wrong tab.(v2.1.172)
• Fixed PowerShell tool calls rendering as raw JSON instead of a command display and permission dialog in VSCode, and stripped ANSI escape codes from displayed shell output.(v2.1.172)
• Fixed Up/Down arrows jumping past wrapped rows of long input lines; they now move through each visual row first, and history recall enters at the near edge.(v2.1.169)
• Fixed enterprise managed MCP policies not being enforced correctly across various session states (reconnect, IDE-typed configs, initial session after install, before remote settings load) and fixed slow cold starts for orgs without remote settings.(v2.1.169)
• Fixed a ~30-50ms UI stall at the start of each turn for macOS users logged in with claude.ai credentials.(v2.1.169)
• Fixed 'claude -p' being slow or hanging on Windows while waiting for the slash-command/skill scan (regression).(v2.1.169)
• Fixed Remote Control getting stuck on "reconnecting" after resuming a session when an OAuth token refresh occurred simultaneously.(v2.1.169)
• Fixed Git Credential Manager's "Connect to GitHub" popup appearing on Windows at startup when background git commands ran without cached credentials.(v2.1.169)
• Fixed footer hints (e.g. "esc to interrupt") not showing for users with a custom statusline.(v2.1.169)
• Fixed stale permission and dialog prompts reappearing every time you reattached to a remote session whose worker had died while waiting on them.(v2.1.169)
• Fixed 'claude agents --json' omitting blocked and just-dispatched background sessions; added --all to include completed sessions, plus new id and state fields.(v2.1.169)
• Fixed agents view leaving a stale/garbled frame after navigating back from an agent on WSL in Windows Terminal.(v2.1.169)
• Fixed background agents ignoring project-level settings env values (e.g. ANTHROPIC_MODEL) when dispatched onto a pre-warmed worker.(v2.1.169)
• Fixed MCPB plugin cache being spuriously invalidated on Windows, causing unnecessary re-extraction.(v2.1.169)
• Fixed plugin .in_use PID lock files accumulating; stale markers from crashed sessions are now swept once per day.(v2.1.169)
• Fixed untrusted project settings being able to set OTEL client-certificate paths without trust confirmation.(v2.1.169)
• Auto-updater on Windows now stops retrying within a session once 'claude.exe' is held by another process.(v2.1.169)
• Fixed a recurring "image could not be processed" error and associated extra token usage when an unprocessable image was sent in a session.(v2.1.166)
• Fixed remote sessions becoming permanently stuck during startup if a brief backend disruption occurred while the worker was registering.(v2.1.166)
• Fixed Shift+non-ASCII characters (e.g., Shift+ä → Ä) being dropped when typing in terminals using the Kitty keyboard protocol (like WezTerm or Ghostty).(v2.1.166)
• Fixed PowerShell command validation occasionally hanging excessively on Windows when a killed process's children held its output pipes.(v2.1.166)
• Fixed orphaned `claude --bg-pty-host` processes consuming 100% CPU after the daemon died while a connection was active on macOS.(v2.1.166)
• Fixed voice mode incorrectly requiring `/login` to clear a stale authentication check after toggling `/voice".(v2.1.166)
• Fixed managed settings with one invalid entry silently disabling enforcement of their remaining valid policies.(v2.1.166)
• Fixed managed-settings predicates `allowedMcpServers`/`deniedMcpServers` failing to match when they utilized ${VAR} references.(v2.1.166)
• Fixed background agent sessions that entered a git worktree crash-looping with "No conversation found" upon reopening from the `claude agents` list.(v2.1.166)
• Fixed duplicated thinking text appearing in the Ctrl+O transcript view during streaming.(v2.1.166)
• Fixed `/doctor` incorrectly reporting a failed "Not inside a remote session" check when executed inside an active remote session.(v2.1.166)
• Fixed the cursor sticking at the end of the first line when typing a multiline prompt within the `claude agents` dispatch and reply inputs.(v2.1.166)
• Fixed blank lines appearing between background agent rows in the task list on terminals lacking Unicode support.(v2.1.166)
• Fixed `claude -p` hanging indefinitely after its final result when a backgrounded command never exits by stopping background shells after ~5s.(v2.1.163)
• Fixed `claude -p` failing with "ANTHROPIC_API_KEY required" on Bedrock/Vertex/Foundry when `CI=true` and no Anthropic API key is set.(v2.1.163)
• Fixed Bash commands failing under bazel and EDR-protected Go workflows by correcting the override of `$TMPDIR` to only apply to sandboxed commands.(v2.1.163)
• Fixed Bash commands failing on Windows with "EEXIST: file already exists" on the session-env directory when it was read-only or inside OneDrive.(v2.1.163)
• Fixed org-managed permission rules not applying for the entire session when managed settings fetch completed during startup on a fresh config directory.(v2.1.163)
• Fixed background sessions in `claude agents` losing running background tasks when reattaching after a Claude Code update.(v2.1.163)
• Fixed terminal misalignment and a multi-second hang when exiting the agent view by pressing Esc.(v2.1.163)
• Fixed clicking Stop on a background-task chip in the desktop app not clearing the chip when the underlying process was already gone.(v2.1.163)
• Fixed keyboard input becoming permanently unresponsive after a paste operation whose end marker was dropped by the terminal.(v2.1.163)
• Fixed hook `if: "Bash(...)"` conditions firing incorrectly by ensuring the pattern matches commands inside subshells and backticks.(v2.1.163)
• Fixed deny rules on home-directory paths (e.g. `Read(~/Desktop/**)`) not blocking Bash commands that reference the path via `$HOME`.(v2.1.163)
• Fixed a silent startup hang when the configuration directory is read-only or unwritable; Claude Code now starts with in-memory config and shows startup errors.(v2.1.162)
• Fixed WebFetch permission rules not applying to built-in preapproved domains; explicit deny/ask/allow rules now correctly override the auto-allow.(v2.1.162)
• Fixed Windows permission rules failing to match when paths used backslashes (\, \\server\share) or varied case, and fixed Read deny rules failing to hide files from Glob/Grep results.(v2.1.162)
• Fixed an interrupt (Esc) sent at the very start of a turn being silently dropped in stream-json/SDK sessions, resulting in no "Interrupted" feedback.(v2.1.162)
• Fixed API 400 "no low surrogate in string" errors occurring for classifier side-queries and MCP server descriptions containing emoji near a truncation boundary.(v2.1.162)
• Fixed MCP per-server `timeout` values below 1000 ms being incorrectly floored to 1 second; sub-1000 ms values are now ignored, falling back to the default timeout.(v2.1.162)
• Fixed the LSP tool's `workspaceSymbol` operation returning no results; it now correctly accepts and passes a `query` parameter to the language server.(v2.1.162)
• Fixed `claude agents` cutting live status text (tool args, replies, prompts, exec output) short on wide terminals; status detail now uses the full terminal width.(v2.1.162)
• Fixed `claude agents` truncating long session names at 40 columns; the name column now adjusts based on terminal width.(v2.1.162)
• Fixed `claude agents` attach occasionally failing to connect on the first try after a background-service restart.(v2.1.162)
• Fixed Ctrl+V image pasting doing nothing in the `claude agents` dispatch input and reply box; pasting non-image content now shows a hint.(v2.1.162)
• Fixed backgrounding a session with ← silently losing the conversation if the background service failed to start; the session now remains in the list as a failed row that can be woken with Enter.(v2.1.162)
• Fixed replies from the agents view that fail to send being lost; they are now queued for delivery upon the next session start.(v2.1.162)
• Fixed cross-session messaging (`SendMessage`) breaking silently when temporary directory variables pointed to deep paths.(v2.1.162)
• Fixed opening a running background session from `claude agents` stalling for 5 seconds before attaching.(v2.1.162)
• Fixed workflow animations, prompt keyword shimmer, and the /effort dialog ignoring the "Reduce motion" setting.(v2.1.161)
• Fixed managed-settings policies (forceLoginOrgUUID/forceLoginMethod) incorrectly blocking third-party provider sessions when the org pin was active.(v2.1.161)
• Fixed background subagent output corrupting stdout when using --output-format text or json with claude -p.(v2.1.161)
• Fixed /usage-credits incorrectly initiating a re-login for Team/Enterprise admins instead of navigating to the organization's usage settings.(v2.1.161)
• Fixed /autofix-pr incorrectly reporting it cannot run on the default branch when operating inside a git worktree or another repository.(v2.1.161)
• Fixed the --resume picker failing to show sessions from the current directory if it was not a git worktree (e.g., jj workspaces).(v2.1.161)
• Fixed Windows hooks that explicitly invoke bash (e.g., /usr/bin/bash script.sh) failing with command not found errors.(v2.1.161)
• Fixed OpenTelemetry log events being silently dropped if emitted before telemetry initialization was complete.(v2.1.161)
• Fixed claude mcp list/get/add commands from printing secrets to the terminal by redacting credential headers, URL secrets, and preventing expansion of ${VAR} references.(v2.1.161)
• Fixed Workflow agents spawned with isolation: "worktree" being blocked from editing files inside their own worktree during background sessions.(v2.1.161)
• Fixed background sessions dispatched from claude agents booting using a stale model from the daemon's environment instead of the model specified in settings.json.(v2.1.161)
• Fixed a potential crash that occurred when rendering Write tool results after resuming a session.(v2.1.161)
• Fixed completed subagents getting stuck showing as running when an error occurred during result finalization.(v2.1.161)
• Fixed EADDRINUSE errors for tools binding Unix sockets under $TMPDIR when CLAUDE_CODE_TMPDIR was set to a deep path.(v2.1.161)
• Fixed copy-on-select not writing to the Windows clipboard on WSL by using PowerShell interop instead of OSC 52(v2.1.160)
• Fixed restoring a completed session from `claude agents` dropping chat history and re-running the original prompt(v2.1.160)
• Fixed background sessions re-attached after overnight retire losing their conversation and re-running the original prompt(v2.1.160)
• Fixed `claude --bg` occasionally failing with "socket missing" when the background daemon was cold-starting on a loaded machine(v2.1.160)
• Fixed an issue on Windows where the directory a background session was started in could not be deleted after `claude rm` until the background daemon exited(v2.1.160)
• Fixed background agents that resumed work being shown under Completed in the agents list(v2.1.160)
• Fixed `claude agents` freezing for several seconds when returning to the session list due to the auto-updater re-checking on every exit(v2.1.160)
• Fixed Esc, arrow keys, and typing becoming unresponsive on Windows when attached to a background session or in the agent view while the host is under heavy CPU load(v2.1.160)
• Fixed background agents emitting terminal sync-output markers to unsupported terminals (Apple Terminal, tmux), preventing render artifacts when entering a running agent(v2.1.160)
• Fixed mouse wheel scrolling prompt history instead of the transcript right after opening a session from the agents list(v2.1.160)
• Fixed CJK IME composition appearing at the bottom-left of the screen instead of at the input caret in the `claude agents` view(v2.1.160)
• Fixed valid `file:///C:/...` links being rewritten to a broken path on Windows terminals with hyperlink support(v2.1.160)
• Fixed voice mode failing to connect when the project directory or branch name contains non-ASCII or special characters(v2.1.160)
• Fixed the auto mode unavailability message on third-party providers (Bedrock/Vertex/Foundry) to point to the `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in(v2.1.160)
• Fixed `/effort ultracode` incorrectly blaming the dynamic workflows setting when the model cannot run xhigh; ultracode is no longer offered on models that do not support it(v2.1.160)
• Fixed model-not-found errors suggesting `--model` when running via the SDK or other hosts where the CLI flag doesn't apply(v2.1.160)
• Fixed Claude's past replies disappearing from scrollback when resuming a brief mode session with brief mode turned off(v2.1.160)
• Fixed vim mode `p` pasting on the line below instead of at the cursor when the register was yanked with `v$`(v2.1.160)
• Fixed terminal styling degradation in very long sessions by recycling the renderer's style pool.(v2.1.152)
• Fixed the sandbox-enabled warning failing to appear in condensed startup mode; it now shows in all layouts.(v2.1.152)
• Fixed the loading spinner incorrectly showing "still thinking"/"almost done thinking" while a tool was running, and now resets the thinking status after each tool execution.(v2.1.152)
• Fixed focus mode displaying a spurious "N messages hidden" count when no hidden activity occurred.(v2.1.152)
• Fixed clicking a link inside an expanded tool result incorrectly collapsing the section instead of opening the link.(v2.1.152)
• Fixed various markdown rendering issues including table cell borders inheriting inline code color, wrapped continuation lines losing style, and empty header cells showing an incorrect label in narrow-terminal stacked layout.(v2.1.152)
• Fixed plugin MCP servers with identical commands but different environment variables being incorrectly deduplicated.(v2.1.152)
• Fixed `/doctor` reporting marketplace or plugin not found errors due to stale `enabledPlugins` entries referencing removed resources.(v2.1.152)
• Fixed plugins tracking a git branch silently failing to receive updates after the plugin registry was rebuilt.(v2.1.152)
• Fixed remote MCP servers failing to connect in Claude Code Remote sessions when the egress proxy was enabled.(v2.1.152)
• Fixed the effort-change confirmation dialog appearing unnecessarily when the conversation was empty or when switching between equivalent effort levels.(v2.1.152)
• Fixed the Agent tool description incorrectly referencing an unavailable agent list when running with `--bare` or attachments disabled.(v2.1.152)
• Fixed a background worker crash in `claude agents` when accepting a stale permission prompt after a subagent cancellation.(v2.1.152)
• Fixed `cache_creation_input_tokens` reporting as 0 in usage statistics when cache writes were reported only via the nested `cache_creation` breakdown.(v2.1.152)
• Fixed the PushNotification tool incorrectly reporting failure when Remote Control was enabled in SDK-hosted sessions.(v2.1.152)
• Fixed sessions getting stuck after model or login switches by proactively stripping stale thinking-block signatures from history.(v2.1.152)
• Fixed a PowerShell permission bypass where built-in cd functions (cd.., cd\, cd~) changed the working directory undetected, potentially allowing commands to read outside the workspace.(v2.1.149)
• Fixed the sandbox write allowlist in git worktrees to cover only the shared .git directory, correctly denying access to the entire main repository root (except hooks/ and config).(v2.1.149)
• Fixed PowerShell prefix/wildcard allow rules (e.g. PowerShell(dotnet.exe build *)) not pre-approving native executables and scripts.(v2.1.149)
• Fixed a permission-analysis gap where the parser trusted stale variable-tracking values for PWD/OLDPWD/DIRSTACK across cd/pushd/popd operations.(v2.1.149)
• Fixed the find command in the Bash tool exhausting the macOS system file/vnode table and crashing the host when processing large directory trees.(v2.1.149)
• Fixed the managed-settings approval dialog freezing the terminal after accepting settings at startup.(v2.1.149)
• Fixed /ultraplan and remote session creation failing with "Could not capture uncommitted changes" when the working tree genuinely has no uncommitted changes.(v2.1.149)
• Fixed otelHeadersHelper failing silently when the script path contains spaces; failures are now reported in /doctor and the debug log.(v2.1.149)
• Fixed the thinking spinner remaining amber across tool calls and persisting onto subsequent fresh thinking bursts.(v2.1.149)
• Fixed collapsed Bash output reporting an incorrect hidden-line count for outputs containing many short lines.(v2.1.149)
• Fixed slash-command argument-hint clipping trailing typed characters when the hint overflows the input box.(v2.1.149)
• Fixed argument-hint and progressive arg suggestions not appearing after Tab-completing a skill whose frontmatter name differs from its directory basename.(v2.1.149)
• Fixed the status bar incorrectly showing the user's baseline /effort setting instead of the effort level specified by skill/agent effort: frontmatter.(v2.1.149)
• Fixed the Ctrl+O transcript view freezing upon opening instead of correctly tailing new messages.(v2.1.149)
• Fixed editing a recalled prompt-history entry losing the edit when navigating further up/down using arrow keys.(v2.1.149)
• Fixed /config exit summary reporting phantom changes to auto-compact and theme when toggling unrelated settings.(v2.1.149)
• Fixed /insights crashing when cached session-meta files are missing optional fields.(v2.1.149)
• Fixed malformed PowerShell and History tool calls missing input being misclassified as reads during transcript collapsing.(v2.1.149)
• Fixed renaming a Remote Control session from claude.ai or the Claude mobile app not updating the local session name required for claude --resume.(v2.1.149)
• Fixed a race condition where a just-submitted prompt could appear twice in the up-arrow history.(v2.1.149)
• Fixed tapping the "Jump to bottom" pill in fullscreen mode not dismissing it immediately.(v2.1.149)
• Fixed the Bash tool returning exit code 127 on every command for some users (a regression introduced in 2.1.147).(v2.1.148)
• Fixed enterprise login restrictions not being enforced against third-party-provider and API-key sessions(v2.1.147)
• Fixed ampersand (&) in command output displaying as &amp;, which broke copy-pasting URLs from commands like gcloud auth login on headless machines(v2.1.147)
• Fixed unknown slash commands silently doing nothing in headless/SDK mode; they now display an error message(v2.1.147)
• Fixed /help rendering a broken tab header and showing only one command per page on small terminals when not in fullscreen mode(v2.1.147)
• Fixed shell snapshot dropping user functions whose names start with a single underscore, breaking aliases referencing them(v2.1.147)
• Fixed plugin agents declaring multiple Agent(...) types in tools: frontmatter dropping all but the last entry(v2.1.147)
• Fixed hook if conditions like PowerShell(git push*) never matching(v2.1.147)
• Fixed PowerShell tool dropping output for commands that rely on the default formatter(v2.1.147)
• Fixed Windows setting for "Yes, and don't ask again" on PowerShell script invocation not writing a matching rule for subsequent runs(v2.1.147)
• Fixed PowerShell tool failing on Windows with exit code 1 when pwsh is installed via winget or the Microsoft Store(v2.1.147)
• Fixed /effort opening with the slider on the wrong level; it now starts at the current effort level(v2.1.147)
• Fixed paginating MCP servers dropping resources, templates, and prompts past page 1(v2.1.147)
• Fixed full-screen strobing in attached background sessions on Windows Terminal while Claude is streaming(v2.1.147)
• Fixed Windows behavior where removing a background-job worktree followed NTFS junctions into the main repo(v2.1.147)
• Fixed /background refusing sessions whose only typed input was a skill or custom slash command(v2.1.147)
• Fixed auto mode suppressing AskUserQuestion when the user or skill explicitly relies on it(v2.1.147)
• Fixed /theme New custom theme and color editor dialogs not responding to Esc(v2.1.147)
• Fixed an uncaught exception at the end of streaming sessions when running via the Agent SDK(v2.1.147)
• Fixed a rare hang when waiting for scroll to settle on Windows(v2.1.147)
• Fixed stale and doubled rows in the agent view list on Windows when background session results contain wide (CJK) characters(v2.1.147)
• Fixed pasted text being delivered to agents as an unreadable [Pasted text #N] placeholder instead of the actual content(v2.1.147)
• Fixed plugin component counts in claude plugin details and /plugin being doubled when a plugin's manifest listed overlapping paths(v2.1.147)
• Fixed backgrounded sessions re-prompting for tool permissions already granted with "don't ask again"(v2.1.147)
• Fixed GNOME Terminal right-click and middle-click paste not inserting text(v2.1.147)
• Fixed CLAUDE_CODE_SUBAGENT_MODEL not applying to teammate processes spawned by agent teams(v2.1.147)
• Fixed slash commands followed by a tab or newline being treated as an unknown command(v2.1.147)
• Fixed stripped images prompting the model to repeatedly re-read media that was no longer present(v2.1.147)
• Fixed Windows PowerShell tool failing with "command line is invalid" when `pwsh` is installed via winget or the Microsoft Store(v2.1.146)
• Fixed MCP `resources/list`, `resources/templates/list`, and `prompts/list` dropping items past page 1 on paginating servers(v2.1.146)
• Fixed full-screen strobing in attached background sessions on Windows Terminal while Claude is streaming(v2.1.146)
• Fixed the auto-updater status line not showing your current version when an update fails(v2.1.146)
• Fixed on Windows, removing a background-job worktree no longer follows NTFS junctions into the main repo(v2.1.146)
• Fixed /background refusing sessions whose only typed input was a skill or custom slash command(v2.1.146)
• Fixed backgrounded sessions re-prompting for tool permissions you already granted with "don't ask again"(v2.1.146)
• Fixed /theme color editor and "New custom theme" dialogs not responding to Esc(v2.1.146)
• Fixed an uncaught exception at the end of streaming sessions when running via the Agent SDK(v2.1.146)
• Fixed `forceLoginOrgUUID` and `forceLoginMethod` managed-settings policies not being enforced against third-party-provider and API-key sessions(v2.1.146)
• Fixed GNOME Terminal right-click and middle-click paste not inserting text(v2.1.146)
• Fixed `CLAUDE_CODE_SUBAGENT_MODEL` not being forwarded to child processes in multi-agent sessions(v2.1.146)
• Fixed a security vulnerability where bare variable assignments to non-allowlisted environment variables in Bash commands bypassed permission prompts.(v2.1.145)
• Fixed MCP prompt slash commands that previously showed raw server validation errors when an argument was missing; the error now correctly names the missing argument and shows expected usage.(v2.1.145)
• Fixed the spinner and elapsed-time display freezing until a keypress occurred after the terminal window was resized or refocused.(v2.1.145)
• Fixed the cross-project resume hint failing on Windows PowerShell 5.1 by ensuring Windows uses `;` as the command separator.(v2.1.145)
• Fixed voice push-to-talk functionality not working within the reply pane of the agent view.(v2.1.145)
• Fixed task lists rendering in a random order when multiple tasks were created simultaneously.(v2.1.145)
• Fixed a stale "Failed to install Anthropic marketplace" banner persisting after the marketplace was already installed.(v2.1.145)
• Fixed the PR badge in the footer failing to update immediately after PR-state-changing commands (like `gh pr create`) were run in-session.(v2.1.145)
• Fixed Agent Teams API calls failing for teammates with non-ASCII names due to invalid header encoding.(v2.1.145)
• Fixed the `/review` command using a deprecated GraphQL query that errored on repositories using Classic Projects.(v2.1.145)
• Fixed `claude plugin validate` failing to flag `skills:` entries pointing to a file instead of a directory; the error now suggests the parent directory.(v2.1.145)
• Fixed an infinite loop where a skill configured with `context: fork` would repeatedly re-invoke itself instead of executing.(v2.1.145)
• Fixed startup hanging up to 75s when `api.anthropic.com` is unreachable by implementing a 15s timeout for side-channel API calls(v2.1.144)
• Fixed garbled terminal output after missed window-resize events by enabling self-healing on the next frame(v2.1.144)
• Fixed progressive terminal display corruption (stale/garbled glyphs) in long sessions that previously required a resize or restart to clear(v2.1.144)
• Fixed macOS background sessions crashing with "exit 1 before init" when the project is in a Full Disk Access-protected folder(v2.1.144)
• Fixed unrecoverable conversation state when reading a file with an image extension that mismatches its content (e.g. HTML saved as .png) by falling back to text processing(v2.1.144)
• Fixed spurious tool errors during search by ensuring `head`/`tail` file views satisfy read-before-edit checks and treating non-matches from grep/diff as informational instead of command failures(v2.1.144)
• Fixed /branch failing with "No conversation to branch" after entering a worktree or in some background sessions(v2.1.144)
• Fixed pressing Escape in the AskUserQuestion notes field aborting the turn instead of returning to answer selection(v2.1.144)
• Fixed model selection not applying when changed via the IDE model picker or `applyFlagSettings` after startup(v2.1.144)
• Fixed resumed sessions incorrectly inheriting the model choice from another session instead of retaining their original model(v2.1.144)
• Fixed Bedrock and Vertex users being unable to select "Opus (1M context)" from the /model picker(v2.1.144)
• Fixed remote-session login failing with "Can't access this organization" for users with specific configuration settings(v2.1.144)
• Fixed MCP servers with paginated `tools/list` responses only returning the first page of tools(v2.1.144)
• Fixed MCP images with unsupported MIME types (e.g. SVG) breaking the conversation by saving them to disk and referencing them in the tool result(v2.1.144)
• Fixed file descriptor exhaustion during builds inside skill directories by preventing non-`.md` files from triggering skill reloads(v2.1.144)
• Fixed session title being generated from plugin monitor output instead of the user's first prompt(v2.1.144)
• Fixed Skill tool failing with a permission error in headless mode(v2.1.144)
• Fixed plugins enabled in user settings showing "not cached" errors on fresh machines; added an install hint for project-specific plugins(v2.1.144)
• Fixed `claude mcp list` silently reporting no servers when configuration files were unparsable, now showing configuration errors instead(v2.1.144)
• Fixed background side-queries on custom `ANTHROPIC_BASE_URL` setups and Bedrock Mantle not using Haiku correctly(v2.1.144)
• Fixed scrolling and transcript navigation (PgUp/PgDn, mouse wheel, Ctrl+O) not working in attached background sessions on Windows(v2.1.144)
• Fixed a crash when closing the terminal while attached to a background session(v2.1.144)
• Fixed `! <cmd>` exec sessions not interrupting when Ctrl+C is pressed while attached(v2.1.144)
• Fixed agent view shell-command rows lingering under Working after completion and re-running commands on Enter press(v2.1.144)
• Fixed keyboard input becoming unresponsive in `claude agents` on Windows Terminal after pressing ←(v2.1.144)
• Fixed ghost characters appearing at the left edge when switching panes in Agent View on Windows Terminal with CJK content(v2.1.144)
• Ensured /bg and ←-detach preserve directories added via /add-dir(v2.1.144)
• Fixed Edit/Write refusing to operate right after detaching a session that was editing in place(v2.1.144)
• Fixed `claude respawn <id>` showing "stopped" for a stopped background session instead of running it(v2.1.144)
• Fixed /resume picker not showing sessions forked from a background session(v2.1.144)
• Fixed hanging when opening a session from `claude agents` or running `claude logs <id>` if the background service was unresponsive, now with a 10s timeout(v2.1.144)
• Fixed background Bash tasks spawned by subagents staying "Running" in SDK task panels after process exit(v2.1.144)
• Fixed completed or stopped background sessions being permanently marked as a startup crash(v2.1.144)
• Fixed markdown links in `claude agents` attached sessions rendering as plain text instead of hyperlinks(v2.1.144)
• Restored custom `spinnerVerbs` to apply only to the command execution message, not the post-turn duration message(v2.1.144)
• Made `claude agents` / --bg rejection messages name the specific gate that caused rejection(v2.1.144)
• Echoed the session name in the post-spawn confirmation when using `claude --bg --name <label>`(v2.1.144)
• Ensured renaming a background session via Ctrl+R in `claude agents` immediately updates the attached session's banner(v2.1.144)
• Applied background session worktree isolation guard for non-git VCS users with `WorktreeCreate` hooks(v2.1.144)
• Ensured plugin marketplace add/update respects `CLAUDE_CODE_PLUGIN_PREFER_HTTPS`(v2.1.144)
• Made /plugin return to the Installed list after enabling, disabling, or uninstalling a plugin(v2.1.144)
• Updated /doctor to show an exec-form example when a command hook is missing the `command` field(v2.1.144)
• Stopped showing skill-listing truncation as a startup notification; users must now run /doctor(v2.1.144)
• Improved recovery from rare pre-response stream stalls by retrying streaming once instead of falling back to non-streaming(v2.1.144)
• Improved SDK/headless MCP startup by overlapping pre-wait with startup, potentially saving up to 2s with slow servers(v2.1.144)
• Ensured the post-survey follow-up hint appears after every non-dismiss survey response with context-aware copy(v2.1.144)
• Fixed corruption of `.credentials.json` when the `scopes` value was not an array, which previously caused CLI hangs or silent OAuth token refresh failures.(v2.1.143)
• Fixed inability to right-click paste in `claude agents` sessions on Windows Terminal and WSL.(v2.1.143)
• Fixed stop hooks that could loop indefinitely; turns now end with a warning after 8 consecutive blocks.(v2.1.143)
• Fixed Esc or Ctrl+C failing to cancel a pending /loop wakeup while Claude was idle between iterations.(v2.1.143)
• Fixed the /goal evaluator firing prematurely while background shells or delegated subagents were still running.(v2.1.143)
• Fixed `NO_COLOR`/`FORCE_COLOR` settings in `settings.json` incorrectly stripping Claude Code's UI colors; these settings now only apply to subprocesses.(v2.1.143)
• Fixed agent view spawning duplicate PowerShell processes on Windows when listing sessions.(v2.1.143)
• Fixed /bg without a prompt sending "continue" to the forked session; the fork now correctly waits for input.(v2.1.143)
• Fixed `--agent <name>` failing to find plugin-contributed agents unless the `plugin:` prefix was used.(v2.1.143)
• Fixed deleting a session from the agent view failing to remove its corresponding transcript file.(v2.1.143)
• Fixed stale-fragment rendering issues when scrolling in attached background sessions on Windows Terminal.(v2.1.143)
• Fixed background agents experiencing false-positive worker-stall detection storms after host sleep or macOS App Nap.(v2.1.143)
• Fixed 5xx error messages incorrectly pointing to status.claude.com instead of the configured gateway or cloud provider.(v2.1.143)
• Fixed background sessions silently capturing IDE file references into the warm spare's input, causing references to be prepended to subsequent prompts.(v2.1.143)
• Fixed worktree cleanup falling back to `rm -rf` when `git worktree remove` failed, preventing loss of gitignored or in-progress files.(v2.1.143)
• Fixed background-job sessions on macOS receiving "Operation not permitted" errors when reading files in protected directories like `~/Documents`, even with Full Disk Access granted.(v2.1.143)
• Fixed background sessions launched from `claude agents` incorrectly overriding `permissions.defaultMode` from settings.json (it was previously overridden to auto mode).(v2.1.143)
• Fixed unresponsive agents list on Windows when pressing ← during response streaming.(v2.1.143)
• Fixed background daemon spawn failing when the `~/.local/bin/claude` launcher was missing or non-executable.(v2.1.143)
• Fixed `claude agents --allow-dangerously-skip-permissions` incorrectly defaulting dispatched sessions to bypass mode instead of making it available in the permission cycle.(v2.1.143)
• Fixed `MCP_TOOL_TIMEOUT` not raising the per-request fetch timeout for remote HTTP and SSE MCP servers, which capped tool calls at 60 seconds regardless of the configured value(v2.1.142)
• Fixed background sessions not recognizing pre-existing git worktrees, blocking Edit while EnterWorktree refused to create a duplicate(v2.1.142)
• Fixed background sessions disappearing and daemon reconnect failing after macOS sleep/wake — the daemon now detects clock jumps instead of treating them as elapsed idle time(v2.1.142)
• Fixed daemon not exiting cleanly after the binary is upgraded (e.g. `brew upgrade`), causing dispatched agents to crash-loop on the deleted path(v2.1.142)
• Fixed background agents crash-looping when the Claude-in-Chrome extension is connected without a shared tab(v2.1.142)
• Fixed clicking links in an attached `claude agents` session — the background worker's headless browser shim no longer applies while attached(v2.1.142)
• Fixed `claude agents` "v to open in editor" using the daemon's default editor instead of your shell's `$EDITOR`/`$VISUAL`(v2.1.142)
• Fixed `claude agents` deadlocking on Windows with network-drive working directories; Ctrl+C now works during startup(v2.1.142)
• Fixed background-color bleed when attaching to a `claude agents` session from Apple Terminal or other 256-color-only terminals(v2.1.142)
• Fixed `claude --bg --dangerously-skip-permissions` not persisting across retire/wake(v2.1.142)
• Fixed session titles being derived from the URL when the first message is a link(v2.1.142)
• Fixed redundant `set_model` requests from remote clients injecting duplicate `/model` breadcrumbs into the transcript(v2.1.142)
• Fixed plugins using `skills: ["./"]` showing a false "path escapes plugin directory" error(v2.1.142)
• Fixed plugin cache cleanup deleting the active plugin version directory when no installation metadata is present(v2.1.142)
• Fixed `/plugin` browse pane showing "0 installs" for newly published plugins(v2.1.142)
• Fixed plugin advisories not naming every `plugin.json` key that shadows a default folder(v2.1.142)
• Fixed background side-queries sending an unavailable Haiku model ID on Bedrock/Vertex/Foundry/gateway when no `ANTHROPIC_SMALL_FAST_MODEL` override is set; it now correctly falls back to the main-loop model.(v2.1.141)
• Fixed `claude daemon status` and `/doctor` on Windows throwing an opaque failure when the daemon pipe key file is locked or unreadable; it now shows the underlying error.(v2.1.141)
• Fixed `claude agents` showing the agent-type list instead of the dashboard when launched through a wrapper that adds flags.(v2.1.141)
• Fixed `claude agents` firing redundant dispatches when opening a crashed session where the working directory was deleted.(v2.1.141)
• Fixed background jobs on a custom `ANTHROPIC_BASE_URL` gateway not getting auto-named; the namer now uses the main model when no Haiku model is configured.(v2.1.141)
• Fixed `/model` command in one session silently changing the autocompact threshold in other concurrent sessions.(v2.1.141)
• Fixed switching permission mode while a tool-permission prompt is open not auto-dismissing the prompt when the new setting permits the tool.(v2.1.141)
• Fixed pressing Enter while a permission/dialog prompt is open from also submitting text in the input box.(v2.1.141)
• Fixed hooks receiving a non-existent `transcript_path` after `EnterWorktree` switches the working directory.(v2.1.141)
• Fixed markdown tables with cell wrapping falling back to the vertical key-value layout instead of rendering as a bordered grid.(v2.1.141)
• Fixed cancelled prompts being removed from Up-arrow history when auto-restored into the input box, preventing duplicate entries.(v2.1.141)
• Fixed prompts cancelled with Ctrl+C/Esc before any response being dropped from Up-arrow history.(v2.1.141)
• Fixed Ctrl+C not interrupting a running turn while in vim INSERT/VISUAL mode.(v2.1.141)
• Fixed alternative `chat:submit` keybindings (e.g. `meta+enter`, `ctrl+enter`) not working when `enter` is rebound to `chat:newline`.(v2.1.141)
• Fixed prompt suggestions being silently disabled when an output style was configured.(v2.1.141)
• Fixed `spinnerVerbs` setting not being honored in turn-completion messages.(v2.1.141)
• Fixed AskUserQuestion popup hiding the last line of preceding chat content.(v2.1.141)
• Fixed Web Search status showing "Did 0 searches" when searches actually returned errors.(v2.1.141)
• Fixed multi-line statusline output dropping or corrupting rows when any line exceeds terminal width.(v2.1.141)
• Fixed light-ansi theme using invisible white for diff context lines on light backgrounds; it now uses black.(v2.1.141)
• Fixed error overlay dumping minified bundle source that hid the original error message.(v2.1.141)
• Fixed pressing Enter after typing a feedback survey rating digit submitting it as a chat message instead of submitting the rating.(v2.1.141)
• Fixed pressing `x` on a selected subagent in the agent panel typing into the prompt instead of stopping the agent.(v2.1.141)
• Fixed session title being derived from plugin monitor notifications before the user's first prompt.(v2.1.141)
• Fixed "Allowed by PermissionRequest hook" repeating once per tool call under a collapsed read/search group.(v2.1.141)
• Fixed `/tui` silently dropping running background shells and subagents; it now refuses and asks to wait for them to finish.(v2.1.141)
• Fixed welcome banner showing "API Usage Billing" on Bedrock, Vertex, Foundry, and other third-party providers; it now shows the provider name.(v2.1.141)
• Fixed `/mcp` server list not keeping the focused server visible in short terminals in fullscreen mode.(v2.1.141)
• Fixed redaction in `/feedback` bundles producing invalid JSON for quoted values like session IDs.(v2.1.141)
• Fixed desktop and third-party provider sessions incorrectly inheriting `apiKeyHelper`/`ANTHROPIC_AUTH_TOKEN` from host managed-settings.(v2.1.141)
• Fixed early analytics events being silently dropped when fired before logger initialization.(v2.1.141)
• Fixed `claude plugin install` failing for plugins whose marketplace `ref` no longer exists upstream when a `sha` is also pinned.(v2.1.141)
• Fixed plugin details pane showing 0 MCP servers for plugins that declare them via `.mcp.json`.(v2.1.141)
• Fixed plugin MCP servers with unset config variables showing a generic connection failure instead of a "config issue" message with a fix-it hint; malformed `.mcp.json` entries no longer drop other MCP servers.(v2.1.141)
• Fixed MCP HTTP/SSE servers returning 403 on connect showing as "failed" instead of "needs auth".(v2.1.141)
• Fixed remote MCP servers disconnecting unnecessarily when the optional server-events stream failed to reconnect; tool calls continue over POST.(v2.1.141)
• Fixed Remote Control MCP connectors all failing with 401 when the worker session token rotated mid-session.(v2.1.141)
• Fixed Remote Control automatically re-enrolling a trusted device when the server rejects a stale token, instead of looping through `/login`.(v2.1.141)
• Fixed a race where early OTel spans could be silently dropped in SDK/headless mode with beta tracing enabled.(v2.1.141)
• Fixed custom `voice:pushToTalk` keybindings and `"space": null` unbinds being silently ignored.(v2.1.141)
• Fixed Windows Alt+V image paste reporting "no image found" when the clipboard contains a screenshot.(v2.1.141)
• Fixed SDK "Claude Code native binary not found" on Linux when both glibc and musl platform packages are installed.(v2.1.141)
• Fixed Bedrock: `awsCredentialExport` being skipped when ambient AWS credentials resolve, ensuring it now always runs when configured for cross-account access.(v2.1.141)
• Fixed in-chat mic in VSCode showing no feedback when the microphone produced only silence; it now shows "No audio detected".(v2.1.141)
• Fixed WSL error in VSCode Voice mode suggesting installing `sox libsox-fmt-pulse` for WSLg users.(v2.1.141)
• Fixed `claude agents` failing to launch a session when the pre-warmed background worker is unhealthy; it now falls back to a fresh launch.(v2.1.141)
• Fixed `claude agents` showing empty placeholder sessions left over from backgrounding a fresh REPL, and now shows onboarding text when entered via `←` with no other agents.(v2.1.141)
• Fixed empty idle background sessions left over from `←` being automatically retired by the daemon after 5 minutes.(v2.1.141)
• Fixed `/goal` command hanging silently when `disableAllHooks` or `allowManagedHooksOnly` is set; it now displays a clear message.(v2.1.140)
• Fixed a regression where symlinked settings files caused incorrect change events and unnecessary `ConfigChange` hooks during settings hot-reload.(v2.1.140)
• Fixed `claude --bg` failing with a "connection dropped mid-request" error when the background service was idling.(v2.1.140)
• Fixed background service startup failures on machines with enterprise endpoint security by increasing startup timeout.(v2.1.140)
• Fixed remote managed settings not retrying after a 401 error; it now retries once after forcing a token refresh.(v2.1.140)
• Fixed managed `extraKnownMarketplaces` auto-update policy not being saved correctly to `known_marketplaces.json`.(v2.1.140)
• Fixed `/loop` scheduling unnecessary wakeups to poll for background tasks that had already signaled completion.(v2.1.140)
• Fixed a recurring event-loop stall on Windows caused by synchronous `where.exe` re-spawns when a required executable (like `gh`) was missing.(v2.1.140)
• Fixed `Read` tool calls failing validation when the `offset` parameter was provided as a whitespace-padded or `+`-prefixed string.(v2.1.140)
• Fixed the native terminal cursor not remaining at the input caret when the terminal window lost focus.(v2.1.140)
• Fixed a deadlock that occurred when expired credentials and the `forceRemoteSettingsRefresh` policy blocked `claude auth login`, `logout`, or `status` commands.(v2.1.139)
• Fixed `autoAllowBashIfSandboxed` not auto-approving commands containing shell expansions like `$VAR` and `$(cmd)`.(v2.1.139)
• Fixed a bug where a hook writing to the terminal could corrupt an on-screen interactive prompt; hooks now run without terminal access.(v2.1.139)
• Fixed unbounded memory growth when an HTTP/SSE MCP server streamed non-protocol data by capping response bodies at 16 MB per SSE frame.(v2.1.139)
• Fixed `Skill(name *)` permission rules so the wildcard form now correctly functions as a prefix match, consistent with `Bash(ls *)` behavior.(v2.1.139)
• Fixed settings hot-reload failing to detect edits made to symlinked `~/.claude/settings.json` files.(v2.1.139)
• Fixed plugin details failing to load when the marketplace key differed from the manifest name.(v2.1.139)
• Fixed the `/model` picker's "Default" row not correctly reflecting overrides set by `ANTHROPIC_DEFAULT_OPUS_MODEL` or `ANTHROPIC_DEFAULT_SONNET_MODEL`.(v2.1.139)
• Fixed spurious "stream idle timeout" errors occurring 5 minutes after a response completed because the watchdog timer was not cleared on stream cancellation.(v2.1.139)
• Fixed silent `exit 1` errors when 10+ MCP servers were configured and the cache directory was unwritable; the error message now shows the underlying cause.(v2.1.139)
• Fixed a blinking typing cursor appearing on tab names, list pointers, and select rows within dialogs.(v2.1.139)
• Fixed transcript view letter shortcuts failing to work after a mouse click.(v2.1.139)
• Fixed the Bash-mode up-arrow history repeating the first entry and overwriting the in-progress draft.(v2.1.139)
• Fixed pasting or dropping multiple images resulting in only the last image being inserted.(v2.1.139)
• Fixed hyperlinks appearing in an unreadable dark navy color on dark themes; they now adapt to the active theme.(v2.1.139)
• Fixed the model picker showing a redundant "Current model" row for third-party users whose model was set to the `opus` alias.(v2.1.139)
• Fixed the legacy Opus picker entry on PAYG 3P providers resolving to the same model as the default entry.(v2.1.139)
• Fixed mouse wheel scrolling speed inconsistencies in Cursor and VS Code versions 1.92–1.104, ensuring steady trackpad scrolling and ~3 lines per notch for the mouse wheel.(v2.1.139)
• Fixed scroll behavior in Windows Terminal and VS Code when attached to background sessions.(v2.1.139)
• Fixed MCP resources from disconnected servers lingering in `@server:` autocomplete suggestions.(v2.1.139)
• Fixed two-file diff snippets over-reporting the number of truncated lines by one.(v2.1.139)
• Fixed Grep results failing to relativize Windows drive-letter paths, leading to incorrect count mode totals for single-file paths.(v2.1.139)
• Fixed text overflowing borders on CJK/emoji characters due to incorrect visual cell width calculation.(v2.1.139)
• Fixed fuzzy-match highlighting incorrectly splitting emoji and astral-plane characters mid-pair.(v2.1.139)
• Fixed skill argument names containing regex metacharacters breaking argument substitution.(v2.1.139)
• Fixed ProgressBar rendering a full block when it should have shown a fractional cell that was almost full.(v2.1.139)
• Fixed task polling and `fs.watch` being incorrectly resurrected when the last subscriber left while a fetch operation was still in flight.(v2.1.139)
• Fixed plugin dependency resolution leaving a stale count when the manifest name differed from the source identifier.(v2.1.139)
• Fixed the Insights Time-of-Day chart skewing results when a session contained an unparseable timestamp.(v2.1.139)
• Fixed keybindings that used only the cmd/super/win modifier being flagged as unparseable.(v2.1.139)
• Fixed the `claude_code.active_time.total` OpenTelemetry metric not being emitted when running in `--print` mode.(v2.1.139)
• Fixed `claude plugin update` failing to preserve cross-plugin symlinks inside a marketplace installation.(v2.1.139)
• Fixed MCP servers configured in `.mcp.json`, plugins, and claude.ai connectors silently disappearing after `/clear` in various clients.(v2.1.136)
• Fixed a rare login loop caused by concurrent credential writes overwriting OAuth tokens.(v2.1.136)
• Fixed MCP OAuth refresh tokens being lost during concurrent refreshes, preventing daily re-authentication for users with multiple remote MCP servers.(v2.1.136)
• Fixed an API error (400) when extended thinking emitted a redacted thinking block after a tool call.(v2.1.136)
• Fixed `--resume` / `--continue` failing to find sessions when the project path contains underscores.(v2.1.136)
• Fixed plan mode incorrectly allowing file writes when a matching `Edit(...)` allow rule existed.(v2.1.136)
• Fixed plugin `Stop`/`UserPromptSubmit` hooks failing when cache cleanup deleted a version still in use by a running session.(v2.1.136)
• Fixed colors appearing at wrong positions in bash command output and markdown code blocks.(v2.1.136)
• Fixed ReasonML diffs rendering corrupted "undefined" text artifacts at word-diff boundaries.(v2.1.136)
• Fixed worktree exit dialog incorrectly warning about uncommitted files in the wrong directory after worktree removal.(v2.1.136)
• Fixed `@` file picker not matching files created mid-session in small non-git directories.(v2.1.136)
• Fixed `@`-mention file picker not finding files in directories with more than 100 entries.(v2.1.136)
• Fixed failed tool calls not being click-to-expand in fullscreen mode when their output was truncated.(v2.1.136)
• Fixed Backspace and Ctrl+Backspace swapping functions after using Ctrl+G to open an external editor on terminals with persistent extended-key modes.(v2.1.136)
• Fixed `/usage` weekly reset displaying the time of day instead of the calendar date.(v2.1.136)
• Fixed welcome banner ellipsis causing column overflow on CJK terminals.(v2.1.136)
• Fixed `/insights` crashing when session history contained tool calls with malformed input fields.(v2.1.136)
• Fixed a renderer crash when a tool's collapsibility classification changed mid-session.(v2.1.136)
• Fixed a `skills` entry in `plugin.json` incorrectly hiding the plugin's default `skills/` directory; listing a file path now correctly shows an error.(v2.1.136)
• Fixed IDE shell-integration lock files not respecting `CLAUDE_CONFIG_DIR`.(v2.1.136)
• Fixed trailing whitespace being included when copying terminal output during streaming.(v2.1.136)
• Fixed plugin uninstall and enable/disable operations failing to match slugs case-insensitively.(v2.1.136)
• Fixed tool error truncation marker showing a negative count for surrogate-pair strings.(v2.1.136)
• Fixed environment variables from `CLAUDE_ENV_FILE` SessionStart hooks becoming stale after `/resume` or `/clear`.(v2.1.136)
• Fixed `/branch` saving a multi-line session title when given a pasted multi-line name.(v2.1.136)
• Fixed a stray leading space appearing on the second line of wrapped text at the column boundary.(v2.1.136)
• Fixed Esc key failing to dismiss dialogs in `/install-github-app`, `/desktop`, `/resume`, and `/web-setup`.(v2.1.136)
• Fixed `/doctor` MCP schema errors failing to name the missing field or show the source file path.(v2.1.136)
• Fixed Bash permission prompts displaying an internal parser diagnostic instead of a user-readable explanation.(v2.1.136)
• Fixed plugin slash commands containing spaces (e.g. `/myplugin review`) not resolving to their namespaced form.(v2.1.136)
• Fixed `AskUserQuestion` discarding multi-select answers when supplied as an array.(v2.1.136)
• Fixed `/clear <name>` failing to label the cleared session correctly for subsequent `/resume`.(v2.1.136)
• Fixed `CronList` output missing necessary qualifiers and the scheduled prompt information.(v2.1.136)
• Fixed "Jump to bottom" overlay leaving color artifacts on CJK characters in fullscreen mode.(v2.1.136)
• Fixed wide markdown tables leaving a stale bordered render in terminal scrollback while streaming.(v2.1.136)
• Fixed pasted text being silently dropped when a long prompt with a pasted-text placeholder was auto-truncated.(v2.1.136)
• Fixed `/release-notes` getting stuck on an old version after a failed changelog refresh.(v2.1.136)
• Fixed `/mcp` server list failing to scroll when more servers than fit in the terminal were present.(v2.1.136)
• Fixed mid-input slash command autocomplete failing to work after an initial slash command was used.(v2.1.136)
• Fixed scrolling to bottom re-engaging auto-follow behavior when `autoScrollEnabled` was set to false.(v2.1.136)
• Fixed prompt suggestions being auto-submitted by pressing Enter on an empty input instead of requiring Tab or arrow keys to accept.(v2.1.136)
• Fixed keyboard shortcut hints not reflecting rebound keys configured in `keybindings.json`.(v2.1.136)
• Fixed language changes made in `/settings` being reverted upon pressing Escape after confirmation.(v2.1.136)
• Fixed `/terminal-setup` only appearing in autocomplete on exact name match instead of partial prefixes.(v2.1.136)
• Fixed "Chat about this" action on an `AskUserQuestion` dialog erasing the original question text.(v2.1.136)
• Fixed MCP tool results being invisible when the server returned content blocks.(v2.1.136)
• Fixed parallel sessions dead-ending at 401 after a refresh-token race wiped shared credentials.(v2.1.133)
• Fixed `Edit`/`Write` allow rules scoped to a drive root (e.g., `C:`) or POSIX `/` matching incorrectly and always prompting.(v2.1.133)
• Fixed an unhandled rejection (`ECOMPROMISED`) when a history or session-log file lock is compromised by clock skew or slow disk.(v2.1.133)
• Fixed pressing Esc during conversation compaction showing a spurious "Error compacting conversation" notification.(v2.1.133)
• Fixed `HTTP(S)_PROXY` / `NO_PROXY` / mTLS not being respected for the full MCP OAuth flow, including discovery, dynamic client registration, token exchange, and token refresh.(v2.1.133)
• Fixed Read/Write/Edit being denied on mapped network drives passed via `--add-dir` or SDK `additionalDirectories`.(v2.1.133)
• Fixed Remote Control stop/interrupt from claude.ai not fully canceling the CLI session, causing queued messages to not advance after interrupting a stuck tool or prompt.(v2.1.133)
• Fixed `/effort` in one session unexpectedly changing the effort level of other concurrent sessions, and a related issue where an IDE effort change could be silently dropped.(v2.1.133)
• Fixed subagents not discovering project, user, or plugin skills via the Skill tool.(v2.1.133)
• [VSCode] Fixed `claudeCode.claudeProcessWrapper` failing with "Unsupported platform" when the extension build doesn't bundle a Claude binary.(v2.1.133)
• Fixed external SIGINT (e.g., IDE stop button, `kill -INT`) not triggering graceful shutdown; terminal modes are now restored and the `--resume` hint is printed.(v2.1.132)
• Fixed an uncaught exception occurring when the terminal is closed or SSH disconnects mid-session on the native build.(v2.1.132)
• Fixed `--resume` failing with `no low surrogate in string` when a tool error truncation split an emoji; pre-corrupted sessions are now sanitized on load.(v2.1.132)
• Fixed `--permission-mode` flag being ignored when resuming a plan-mode session with `-p --continue` or `--resume`, and ensured plan mode is re-applied after `ExitPlanMode` within the same session.(v2.1.132)
• Fixed fullscreen mode showing a blank screen after laptop sleep/wake or Ctrl+Z/ `fg` until the next keystroke or stream output.(v2.1.132)
• Fixed cursor landing mid-grapheme on Ctrl+E/A/K/U/arrow keys when an Indic conjunct or ZWJ emoji wraps across lines.(v2.1.132)
• Fixed vim operators corrupting text containing decomposed (NFD) accented characters.(v2.1.132)
• Fixed pasting text starting with `/` silently swallowing the input or triggering an unknown-command reply.(v2.1.132)
• Fixed pasting dumping stray escape sequences into the prompt when focus events or mouse-tracking reports interleave with the bracketed paste.(v2.1.132)
• Fixed mouse wheel scrolling being too fast in Cursor and VS Code 1.92–1.104 due to an upstream xterm.js bug.(v2.1.132)
• Fixed scroll-wheel handling in JetBrains IDE 2025.2 terminals (resolved spurious arrow keys, wrong-direction events, and runaway acceleration).(v2.1.132)
• Fixed `/usage` Ctrl+S hanging when copying the stats screenshot to the clipboard on Linux/X11.(v2.1.132)
• Fixed `/terminal-setup` showing a contradictory error in Windows Terminal (Shift+Enter is natively supported there).(v2.1.132)
• Fixed `/effort` picker not reflecting the `CLAUDE_CODE_EFFORT_LEVEL` environment variable override.(v2.1.132)
• Fixed `/status` showing the wrong default model for some users.(v2.1.132)
• Fixed slash command autocomplete popup being capped at ~3–5 visible commands instead of scaling with terminal height.(v2.1.132)
• Fixed statusline `context_window` token counts reflecting cumulative session totals instead of current context usage.(v2.1.132)
• Fixed Alt+T (thinking toggle) not working on macOS terminals without "Option as Meta" enabled (iTerm2, Terminal.app defaults).(v2.1.132)
• Fixed dead keyboard input on Windows after re-opening a background session from `claude agents`.(v2.1.132)
• Fixed unbounded memory growth (10GB+ RSS) when an stdio MCP server writes non-protocol data to stdout.(v2.1.132)
• Fixed MCP servers that connect but fail `tools/list` silently showing 0 tools; they now retry once and show "connected · tools fetch failed" in `/mcp`.(v2.1.132)
• Fixed unauthorized claude.ai MCP connectors showing as "failed" instead of "needs auth", and headless `-p` mode retrying non-transient 4xx connection failures.(v2.1.132)
• Fixed Bedrock and Vertex 400 errors when `ENABLE_PROMPT_CACHING_1H` is set.(v2.1.132)
• Fixed API errors with unrecognized 400 status codes showing raw JSON instead of the underlying error message(v2.1.129)
• Fixed /clear command not resetting the terminal tab title after a conversation ends(v2.1.129)
• Fixed session title chip from /rename disappearing while a permission or other dialog is active(v2.1.129)
• Fixed agent panel below the prompt being hidden when subagents are running (regression)(v2.1.129)
• Fixed external-editor handoff (Ctrl+G) blanking the conversation history above the prompt(v2.1.129)
• Fixed /context command dumping its rendered ASCII visualization grid into the conversation, preventing token waste(v2.1.129)
• Fixed /agents Library list arrow-key navigation so the highlighted agent remains visible when the list exceeds the viewport(v2.1.129)
• Fixed /branch success message not including the new branch's session id for subsequent /resume commands(v2.1.129)
• Fixed bold headers containing keycap/ZWJ/skin-tone emoji losing trailing characters in fullscreen mode(v2.1.129)
• Fixed server-managed settings policy not applying for enterprise/team users whose stored OAuth credentials lacked the `user:inference` scope(v2.1.129)
• Fixed OAuth refresh race condition occurring after wake-from-sleep that could log out all running sessions(v2.1.129)
• Fixed 1-hour prompt cache TTL being silently downgraded to 5 minutes(v2.1.129)
• Fixed cache-miss warning appearing spuriously after /clear or compaction when changing /effort or /model(v2.1.129)
• Fixed `Bash(mkdir *)`, `Bash(touch *)` and similar allow rules not being honored for in-project paths(v2.1.129)
• Fixed `deniedMcpServers` patterns with a `*://` scheme wildcard not matching mixed-case hostnames(v2.1.129)
• Fixed harmless WebSocket warning being logged as an error in --debug mode during voice mode(v2.1.129)
• Fixed /clear command not clearing the conversation context and displayed transcript in VSCode integration(v2.1.129)
• Fixed focus mode briefly dimming the previous response when submitting a new prompt.(v2.1.128)
• Fixed stray "4;0;" desktop notification appearing on every /exit in terminals like Kitty.(v2.1.128)
• Fixed Remote Control showing an empty "Opening your options…" message on rate limit instead of actionable upsell options.(v2.1.128)
• Fixed drag-and-drop image upload hanging on "Pasting text…" when image reading fails.(v2.1.128)
• Fixed crash loop when piping very large input (>10 MB) to claude -p via stdin.(v2.1.128)
• Fixed long URLs not being individually clickable on every wrapped row in fullscreen mode.(v2.1.128)
• Fixed /plugin Components panel showing "Marketplace 'inline' not found" for plugins loaded via --plugin-dir.(v2.1.128)
• Fixed MCP tool results dropping images when the server returns both structured content and content blocks.(v2.1.128)
• Fixed fenced code blocks inside list items carrying leading whitespace into the clipboard on copy-paste.(v2.1.128)
• Fixed tab navigation in /config stranding focus; the tab header now stays focused.(v2.1.128)
• Fixed markdown link labels being lost on terminals without OSC 8 support by rendering them as label (url).(v2.1.128)
• Fixed sessions on 1M-context models with smaller autocompact windows being falsely blocked with "Prompt is too long".(v2.1.128)
• Fixed parallel shell tool calls where a failing read-only command no longer cancels sibling calls.(v2.1.128)
• Fixed banner incorrectly showing "with X effort" on models that do not support effort.(v2.1.128)
• Fixed /fast on 3P providers fuzzy-matching to an unrelated skill instead of showing "not available".(v2.1.128)
• Fixed Bedrock default model resolving incorrectly to global.* instead of the region-appropriate prefix.(v2.1.128)
• Fixed vim mode: Space in NORMAL mode now correctly moves the cursor right.(v2.1.128)
• Fixed terminal progress indicator flickering off between tool calls; it now stays visible across the full turn.(v2.1.128)
• Fixed /rename without args failing on resumed sessions whose last entry is a compact boundary.(v2.1.128)
• Fixed stale "remote-control is active" status lines from prior sessions appearing after --resume/--continue.(v2.1.128)
• Fixed stale installed_plugins.json entries pointing at deleted cache directories polluting PATH.(v2.1.128)
• Fixed MCP stdio servers receiving corrupted arguments when CLAUDE_CODE_SHELL_PREFIX is set and an argument contains spaces or shell metacharacters.(v2.1.128)
• Fixed sub-agent progress summaries missing the prompt cache, resulting in significant creation time reduction.(v2.1.128)
• Fixed /plugin update never detecting new versions of npm-sourced plugins.(v2.1.128)
• Fixed sub-agent summaries firing repeatedly when a sub-agent's transcript is static, capping token cost on idle sub-agents.(v2.1.128)
• Fixed Headless --output-format stream-json: init.plugin_errors now correctly includes --plugin-dir load failures.(v2.1.128)
• Fixed crash when pasting an image larger than 2000px by automatically downscaling images on paste and retrying requests for oversized images in history.(v2.1.126)
• Fixed login screen being shown instead of guidance when encountering "OAuth not allowed for organization" errors; now directs users to contact their admin.(v2.1.126)
• Fixed OAuth login failing due to timeouts on slow/proxied connections, IPv6-only devcontainers, and when the browser callback cannot reach localhost.(v2.1.126)
• Fixed a rare race condition where a concurrent credential write could incorrectly clear a valid OAuth refresh token.(v2.1.126)
• Fixed API retry countdown sticking at "0s" instead of continuing to count down between attempts.(v2.1.126)
• Fixed "Stream idle timeout" error occurring after waking a Mac from sleep mid-request.(v2.1.126)
• Fixed background and remote sessions falsely aborting with "Stream idle timeout" during long model thinking pauses.(v2.1.126)
• Fixed a hang where the assistant finished thinking but displayed no output after a sequence of empty turns.(v2.1.126)
• Fixed overly fast trackpad scrolling behavior within Cursor and VS Code 1.92–1.104 integrated terminals.(v2.1.126)
• Fixed claude.ai MCP connectors being suppressed by manual servers stuck in a needs-auth state.(v2.1.126)
• Fixed Japanese, Korean, and Chinese text rendering as garbled characters on Windows when using no-flicker mode.(v2.1.126)
• Fixed `Ctrl+L` clearing the prompt input; it now correctly forces a screen redraw, matching readline behavior.(v2.1.126)
• Fixed deferred tools (like WebSearch) not being available to skills using `context: fork` or other subagents on their initial turn.(v2.1.126)
• Fixed plan-mode tools being unavailable in interactive sessions launched with `--channels`.(v2.1.126)
• Fixed `/plugin` Uninstall command incorrectly reporting "Enabled" instead of "Uninstalled".(v2.1.126)
• Fixed `/remote-control` retries appearing stuck on "connecting..."; each retry now displays its result.(v2.1.126)
• Fixed Remote Control failure notification not showing the error reason for initial connection failures.(v2.1.126)
• Fixed Windows clipboard writes exposing copied content in process command-line arguments visible to EDR/SIEM telemetry, and fixed issues with selections larger than 22KB not reaching the clipboard.(v2.1.126)
• Fixed PowerShell tool mis-flagging bare `--` (e.g., `git diff -- file`) as the stop-parsing token `--%`. (v2.1.126)
• Fixed Agent SDK hang when the model emitted a malformed tool name in a parallel tool call batch.(v2.1.126)
• Fixed Security issue where `allowManagedDomainsOnly` / `allowManagedReadPathsOnly` were ignored when a higher-priority managed-settings source lacked a `sandbox` block.(v2.1.126)
• Fixed `/branch` producing forks that failed with a `tool_use ids were found without tool_result blocks` error when the source session included entries from rewound timelines.(v2.1.122)
• Fixed `/model` failing to show the Effort option for Bedrock application inference profile ARNs and preventing those ARNs from receiving `output_config.effort`.(v2.1.122)
• Fixed Vertex AI / Bedrock returning `invalid_request_error: output_config: Extra inputs are not permitted` errors during session-title generation and other structured-output queries.(v2.1.122)
• Fixed Vertex AI `count_tokens` endpoint returning 400 errors for users operating behind proxy gateways.(v2.1.122)
• Fixed `spinnerTipsOverride.excludeDefault` not correctly suppressing the default time-based spinner tips.(v2.1.122)
• Fixed ToolSearch failing to find MCP tools that connected after the session started in nonblocking mode.(v2.1.122)
• Fixed `!exit` / `!quit` commands in bash mode terminating the CLI instead of executing as a shell command.(v2.1.122)
• Fixed images sent to newer models being incorrectly resized to 2576px per side instead of the maximum allowed 2000px.(v2.1.122)
• Fixed remote control session idle status redrawing too frequently (twice per second), which could flood `tmux -CC` control pipes and cause terminal pauses.(v2.1.122)
• Fixed assistant messages appearing blank in some sessions due to a stale view preference.(v2.1.122)
• Fixed a malformed hooks entry in `settings.json` no longer invalidating the entire settings file.(v2.1.122)
• Fixed voice mode keybindings bound to Caps Lock showing an error because terminals do not deliver Caps Lock as a standard key event.(v2.1.122)
• Fixed unbounded memory growth (multi-GB RSS) that occurred when processing many images in a single session.(v2.1.121)
• Fixed a memory leak in `/usage` that consumed up to ~2GB of memory on machines with large transcript histories.(v2.1.121)
• Fixed a memory leak that occurred when long-running tools failed to emit a clear progress event.(v2.1.121)
• Fixed the Bash tool becoming permanently unusable if the directory Claude was started in was deleted or moved during a session.(v2.1.121)
• Fixed `--resume` crashing on startup in external builds.(v2.1.121)
• Fixed `--resume` failing on large sessions when a transcript line was corrupted by an unclean shutdown; the corrupt line is now skipped.(v2.1.121)
• Fixed `thinking.type.enabled is not supported` error when using Bedrock application inference profile ARNs.(v2.1.121)
• Fixed Microsoft 365 MCP OAuth failures caused by duplicate or unsupported `prompt` parameters.(v2.1.121)
• Fixed scrollback duplication when pressing Ctrl+L or triggering a redraw in non-fullscreen mode across tmux, GNOME Terminal, Windows Terminal, and Konsole.(v2.1.121)
• Fixed claude.ai MCP connectors silently disappearing if the connector-list fetch encountered a transient authentication error at startup.(v2.1.121)
• Fixed "Always allow" rules for built-in tools in remote sessions failing to persist across worker restarts.(v2.1.121)
• Fixed `NO_PROXY` setting not being respected by all HTTP clients when set via `managed-settings.json` in native builds.(v2.1.121)
• Fixed the managed settings approval prompt incorrectly exiting the session upon acceptance; settings are now applied and the session continues.(v2.1.121)
• Fixed `/usage` returning "rate limited" due to a stale OAuth token; tokens now refresh automatically.(v2.1.121)
• Fixed invalid legacy enum values in `settings.json` from invalidating the entire settings file.(v2.1.121)
• Fixed `/usage` dialog content being clipped when no-flicker mode was disabled.(v2.1.121)
• Fixed `/focus` showing "Unknown command" when the fullscreen renderer was off; it now explains how to enable fullscreen rendering.(v2.1.121)
• Fixed embedded grep/find/rg shell wrappers failing if the running binary was deleted mid-session; now falls back to installed tools.(v2.1.121)
• Fixed a regression where pressing Esc during a stdio MCP tool call would close the entire server connection.(v2.1.120)
• Fixed interactive overlays like `/rewind` not responding to keyboard input after launching the tool with `claude --resume`.(v2.1.120)
• Fixed terminal scrollback duplication occurring during resizing, dialog dismissal, or long sessions in non-fullscreen mode.(v2.1.120)
• Fixed telemetry settings (`DISABLE_TELEMETRY` / `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC`) failing to suppress usage metrics for API and enterprise users.(v2.1.120)
• Fixed false-positive "Dangerous rm operation" permission prompts in auto mode for multi-line bash commands containing both a pipe and a redirect.(v2.1.120)
• Fixed long selection menus clipping below the terminal in fullscreen mode; the focused option now remains visible during scrolling.(v2.1.120)
• Fixed the Write tool output collapsing instead of expanding when clicking "+N lines" in fullscreen mode.(v2.1.120)
• Fixed the slash command picker jumping while typing and improved highlighting to only match contiguous substrings.(v2.1.120)
• Fixed the `/plugin` marketplace failing to load when one entry used an unrecognized source format (the entry is now shown with an update prompt upon installation attempt).(v2.1.120)
• Fixed the `find` command in the Bash tool exhausting open file descriptors on large directory trees, which caused host-wide crashes on macOS/Linux native builds.(v2.1.120)
• Fixed pasting CRLF content (from Windows clipboards or Xcode console) from inserting an extra blank line between every line.(v2.1.119)
• Fixed multi-line paste losing newlines when using terminals that employ kitty keyboard protocol sequences inside bracketed paste.(v2.1.119)
• Fixed Glob and Grep tools disappearing on native macOS/Linux builds when the Bash tool was denied via permissions.(v2.1.119)
• Fixed scrolling up in fullscreen mode snapping back to the bottom every time a tool finished execution.(v2.1.119)
• Fixed MCP HTTP connections failing with "Invalid OAuth error response" when servers returned non-JSON bodies during OAuth discovery requests.(v2.1.119)
• Fixed the Rewind overlay incorrectly showing "(no prompt)" for messages that contained image attachments.(v2.1.119)
• Fixed auto mode overriding plan mode when conflicting "Execute immediately" instructions were present.(v2.1.119)
• Fixed async `PostToolUse` hooks that emit no response payload from writing empty entries to the session transcript.(v2.1.119)
• Fixed the spinner remaining active when a subagent task notification became orphaned in the queue.(v2.1.119)
• Fixed `@`-file Tab completion from replacing the entire prompt when used inside a slash command with an absolute path.(v2.1.119)
• Fixed a stray `p` character appearing at the prompt on startup when running in macOS Terminal.app via Docker or SSH.(v2.1.119)
• Fixed `${ENV_VAR}` placeholders in `headers` for HTTP/SSE/WebSocket MCP servers from not being substituted before requests.(v2.1.119)
• Fixed MCP OAuth client secret provided via `--client-secret` not being sent during token exchange for servers requiring `client_secret_post`.(v2.1.119)
• Fixed the Enter key in the `/skills` dialog from closing the dialog instead of pre-filling `/<skill-name>` into the prompt.(v2.1.119)
• Fixed the `/agents` detail view from mislabeling built-in tools unavailable to subagents as "Unrecognized".(v2.1.119)
• Fixed MCP servers originating from plugins from failing to spawn on Windows when the plugin cache was incomplete.(v2.1.119)
• Fixed `/export` from showing the current default model instead of the model the conversation actually used.(v2.1.119)
• Fixed the verbose output setting from not persisting correctly after a restart.(v2.1.119)
• Fixed `/usage` progress bars from overlapping with their corresponding "Resets …" labels.(v2.1.119)
• Fixed plugin MCP servers from failing when `${user_config.*}` references an optional field that was left blank.(v2.1.119)
• Fixed list items containing a sentence-final number from wrapping that number onto its own line.(v2.1.119)
• Fixed `/plan` and `/plan open` from not acting on the existing plan when entering plan mode.(v2.1.119)
• Fixed skills invoked before auto-compaction from being re-executed against the next user message.(v2.1.119)
• Fixed `/reload-plugins` and `/doctor` from reporting load errors for plugins that were disabled.(v2.1.119)
• Fixed Agent tool instances using `isolation: "worktree"` from reusing stale worktrees from prior sessions.(v2.1.119)
• Fixed disabled MCP servers from incorrectly appearing as "failed" in the `/status` command output.(v2.1.119)
• Fixed `TaskList` from returning tasks in arbitrary filesystem order instead of sorting them by ID.(v2.1.119)
• Fixed spurious "GitHub API rate limit exceeded" hints appearing when `gh` output contained PR titles that mentioned "rate limit".(v2.1.119)
• Fixed SDK/bridge `read_file` functionality from not correctly enforcing the size cap on growing files.(v2.1.119)
• Fixed the PR not being linked to the session when working within a git worktree.(v2.1.119)
• Fixed `/doctor` from incorrectly warning about MCP server entries that were overridden by a higher-precedence scope.(v2.1.119)
• Removed a false-positive warning on Windows regarding the need for a `'cmd /c' wrapper` for MCP configuration.(v2.1.119)
• Fixed voice dictation's first recording producing no output on macOS while the microphone permission prompt was visible in VSCode.(v2.1.119)
• Fixed `/mcp` menu hiding OAuth Authenticate/Re-authenticate actions for servers configured with `headersHelper`, and HTTP/SSE MCP servers with custom headers being stuck in "needs authentication" after a transient 401(v2.1.118)
• Fixed MCP servers whose OAuth token response omits `expires_in` requiring re-authentication every hour(v2.1.118)
• Fixed MCP step-up authorization silently refreshing instead of prompting for re-consent when the server's `insufficient_scope` 403 names a scope the current token already has(v2.1.118)
• Fixed an unhandled promise rejection when an MCP server's OAuth flow times out or is cancelled(v2.1.118)
• Fixed MCP OAuth refresh proceeding without its cross-process lock under contention(v2.1.118)
• Fixed macOS keychain race where a concurrent MCP token refresh could overwrite a freshly-refreshed OAuth token, causing unexpected "Please run /login" prompts(v2.1.118)
• Fixed OAuth token refresh failing when the server revokes a token before its local expiry time(v2.1.118)
• Fixed credential save crash on Linux/Windows corrupting `~/.claude/.credentials.json`(v2.1.118)
• Fixed `/login` having no effect in a session launched with `CLAUDE_CODE_OAUTH_TOKEN`; the environment token is now cleared so disk credentials take effect(v2.1.118)
• Fixed unreadable text in the "new messages" scroll pill and `/plugin` badges(v2.1.118)
• Fixed plan acceptance dialog offering "auto mode" instead of "bypass permissions" when running with `--dangerously-skip-permissions`(v2.1.118)
• Fixed agent-type hooks failing with "Messages are required for agent hooks" when configured for events other than `Stop` or `SubagentStop`(v2.1.118)
• Fixed `prompt` hooks re-firing on tool calls made by an agent-hook verifier subagent(v2.1.118)
• Fixed `/fork` writing the full parent conversation to disk per fork; it now writes a pointer and hydrates on read(v2.1.118)
• Fixed Alt+K / Alt+X / Alt+^ / Alt+_ freezing keyboard input(v2.1.118)
• Fixed connecting to a remote session overwriting your local `model` setting in `~/.claude/settings.json`(v2.1.118)
• Fixed typeahead showing "No commands match" error when pasting file paths that start with `/`(v2.1.118)
• Fixed `plugin install` on an already-installed plugin not re-resolving a dependency installed at the wrong version(v2.1.118)
• Fixed unhandled errors from file watcher on invalid paths or fd exhaustion(v2.1.118)
• Fixed Remote Control sessions getting archived on transient CCR initialization blips during JWT refresh(v2.1.118)
• Fixed subagents resumed via `SendMessage` not restoring the explicit `cwd` they were spawned with(v2.1.118)
• Fixed Plain-CLI OAuth sessions dying with "Please run /login" when the access token expires mid-session by reactively refreshing the token on 401 errors.(v2.1.117)
• Fixed WebFetch hanging on very large HTML pages by truncating input before HTML-to-markdown conversion.(v2.1.117)
• Fixed a crash when a proxy returns HTTP 204 No Content, now surfacing a clear error instead of a TypeError.(v2.1.117)
• Fixed /login having no effect when launched with the CLAUDE_CODE_OAUTH_TOKEN environment variable if that token subsequently expires.(v2.1.117)
• Fixed prompt-input undo (Ctrl+_) doing nothing immediately after typing and skipping a state on each undo step.(v2.1.117)
• Fixed NO_PROXY not being respected for remote API requests when running under Bun.(v2.1.117)
• Fixed rare spurious escape/return triggers when key names arrive as coalesced text over slow connections.(v2.1.117)
• Fixed SDK reload_plugins reconnecting all user MCP servers serially.(v2.1.117)
• Fixed Bedrock application-inference-profile requests failing with 400 when backed by Opus 4.7 with thinking disabled.(v2.1.117)
• Fixed MCP elicitation/create requests auto-cancelling in print/SDK mode when the server finishes connecting mid-turn.(v2.1.117)
• Fixed subagents running a different model than the main agent incorrectly flagging file reads with a malware warning.(v2.1.117)
• Fixed Opus 4.7 sessions showing inflated /context percentages and autocompacting too early because the context window size was miscalculated.(v2.1.117)
• Fixed broken column alignment for Devanagari and other Indic scripts rendering in the terminal UI(v2.1.116)
• Fixed Ctrl+- not triggering undo in terminals using the Kitty keyboard protocol (iTerm2, Ghostty, kitty, WezTerm, Windows Terminal)(v2.1.116)
• Fixed Cmd+Left/Right not jumping to line start/end in terminals that use the Kitty keyboard protocol (Warp fullscreen, kitty, Ghostty, WezTerm)(v2.1.116)
• Fixed Ctrl+Z hanging the terminal when Claude Code is launched via a wrapper process (e.g. `npx`, `bun run`)(v2.1.116)
• Fixed scrollback duplication in inline mode that occurred when resizing the terminal or during large output bursts(v2.1.116)
• Fixed modal search dialogs overflowing the screen at short terminal heights, hiding the search box and keyboard hints(v2.1.116)
• Fixed scattered blank cells and disappearing composer chrome in the VS Code integrated terminal during scrolling(v2.1.116)
• Fixed an intermittent API 400 error related to cache control TTL ordering that occurred during parallel request setup(v2.1.116)
• Fixed `/branch` rejecting conversations with transcripts larger than 50MB(v2.1.116)
• Fixed `/resume` silently showing an empty conversation on large session files instead of reporting the load error(v2.1.116)
• Fixed `/plugin` Installed tab showing the same item twice when it appears under Needs attention or Favorites(v2.1.116)
• Fixed `/update` and `/tui` not working after entering a worktree mid-session(v2.1.116)
• Fixed security sandbox auto-allow bypassing the dangerous-path safety check for `rm`/`rmdir` targeting critical system directories like `/` or `$HOME`(v2.1.116)
• Fixed a crash in the permission dialog when an agent teams teammate requested tool permission(v2.1.114)
• Fixed concurrent-call timeout handling where a message for one tool call could silently disarm another call's watchdog(v2.1.113)
• Fixed Cmd-backspace / `Ctrl+U` to correctly delete from the cursor to the start of the line(v2.1.113)
• Fixed markdown tables breaking when a cell contains an inline code span with a pipe character(v2.1.113)
• Fixed session recap auto-firing while composing unsent text in the prompt(v2.1.113)
• Fixed `/copy` "Full response" not aligning markdown table columns correctly for pasting into GitHub, Notion, or Slack(v2.1.113)
• Fixed messages typed while viewing a running subagent being hidden from its transcript and misattributed to the parent AI(v2.1.113)
• Fixed Bash `dangerouslyDisableSandbox` running commands outside the sandbox without triggering a permission prompt(v2.1.113)
• Fixed `/effort auto` confirmation message to correctly state "Effort level set to max"(v2.1.113)
• Fixed the "copied N chars" toast overcounting emoji and other multi-code-unit characters(v2.1.113)
• Fixed `/insights` crashing with `EBUSY` on Windows(v2.1.113)
• Fixed exit confirmation dialog mislabeling one-shot scheduled tasks as recurring; it now correctly shows a countdown(v2.1.113)
• Fixed slash/@ completion menu not sitting flush against the prompt border in fullscreen mode(v2.1.113)
• Fixed `CLAUDE_CODE_EXTRA_BODY` `output_config.effort` causing 400 errors on subagent calls to models that don't support effort and on Vertex AI(v2.1.113)
• Fixed prompt cursor disappearing when `NO_COLOR` is set(v2.1.113)
• Fixed `ToolSearch` ranking so pasted MCP tool names surface the actual tool instead of description-matching siblings(v2.1.113)
• Fixed compacting a resumed long-context session failing with "Extra usage is required for long context requests"(v2.1.113)
• Fixed `plugin install` succeeding when a dependency version conflicts with an already-installed plugin; it now correctly reports `range-conflict`(v2.1.113)
• Fixed "Refine with Ultraplan" not showing the remote session URL in the transcript(v2.1.113)
• Fixed SDK image content blocks that fail to process from crashing the session; they now degrade to a text placeholder(v2.1.113)
• Fixed Remote Control sessions not streaming subagent transcripts(v2.1.113)
• Fixed Remote Control sessions not being archived when Claude Code exits(v2.1.113)
• Fixed `thinking.type.enabled is not supported` 400 error when using Opus 4.7 via a Bedrock Application Inference Profile ARN(v2.1.113)
• Fixed permission prompts being triggered by read-only bash commands using glob patterns (e.g., `ls *.ts`) and commands starting with `cd <project-dir> &&`.(v2.1.111)
• Fixed the tool suggesting the closest matching subcommand when invoked with a near-miss typo (e.g., `claude udpate` now suggests `claude update`).(v2.1.111)
• Fixed LSP diagnostics from before an edit appearing after the edit, preventing the model from re-reading already edited files.(v2.1.111)
• Fixed tab-completing `/resume` immediately resuming an arbitrary titled session instead of showing the session picker.(v2.1.111)
• Fixed `/context` grid rendering issues showing extra blank lines between rows.(v2.1.111)
• Fixed `/clear` dropping the session name set by `/rename`, which caused the statusline output to lose `session_name`.(v2.1.111)
• Fixed plugin dependency errors: distinguishing conflicting, invalid, and overly complex version requirements; fixed stale resolved versions after `plugin update`; `plugin install` now recovers from interrupted prior installs.(v2.1.111)
• Fixed Claude calling a non-existent `commit` skill and showing "Unknown skill: commit" for users without a custom `/commit` command.(v2.1.111)
• Fixed 429 rate-limit errors on Bedrock/Vertex/Foundry incorrectly referencing status.claude.com.(v2.1.111)
• Fixed feedback surveys appearing back-to-back after dismissing one.(v2.1.111)
• Fixed bare URLs in bash/PowerShell/MCP tool output being unclickable when the terminal wraps them across lines.(v2.1.111)
• Fixed Windows environment file application: `CLAUDE_ENV_FILE` and SessionStart hook environment files now apply correctly.(v2.1.111)
• Fixed Windows permission rules: paths with drive-letter paths are now correctly root-anchored, and paths differing only by drive-letter case are recognized as the same path.(v2.1.111)
• Fixed terminal display tearing (random characters, drifting input) in iTerm2 + tmux setups when terminal notifications are sent.(v2.1.111)
• Fixed `@` file suggestions re-scanning the entire project on every turn in non-git working directories, and fixed showing only config files in freshly-initialized git repos with no tracked files.(v2.1.111)
• Fixed MCP tool calls hanging indefinitely when the server connection drops mid-response on SSE/HTTP transports.(v2.1.110)
• Fixed non-streaming fallback retries causing multi-minute hangs when the API is unreachable.(v2.1.110)
• Fixed session recap, local slash-command output, and other system status lines not appearing in focus mode.(v2.1.110)
• Fixed high CPU usage in fullscreen when text is selected while a tool is running.(v2.1.110)
• Fixed plugin install not honoring dependencies declared in `plugin.json` when the marketplace entry omits them; /plugin install now lists auto-installed dependencies.(v2.1.110)
• Fixed skills with `disable-model-invocation: true` failing when invoked via /<skill> mid-message.(v2.1.110)
• Fixed `--resume` sometimes showing the first prompt instead of the /rename name for sessions still running or exited uncleanly.(v2.1.110)
• Fixed queued messages briefly appearing twice during multi-tool-call turns.(v2.1.110)
• Fixed session cleanup not removing the full session directory including subagent transcripts.(v2.1.110)
• Fixed dropped keystrokes after the CLI relaunches (e.g. /tui, provider setup wizards).(v2.1.110)
• Fixed garbled startup rendering in macOS Terminal.app and other terminals that don't support synchronized output.(v2.1.110)
• Hardened "Open in editor" actions against command injection from untrusted filenames.(v2.1.110)
• Fixed `PermissionRequest` hooks returning `updatedInput` not being re-checked against `permissions.deny` rules; `setMode:'bypassPermissions'` updates now respect `disableBypassPermissionsMode`.(v2.1.110)
• Fixed `PreToolUse` hook `additionalContext` being dropped when the tool call fails.(v2.1.110)
• Fixed stdio MCP servers that print stray non-JSON lines to stdout being disconnected on the first stray line (regression in 2.1.105).(v2.1.110)
• Fixed headless/SDK session auto-title firing an extra Haiku request when `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` or `CLAUDE_CODE_DISABLE_TERMINAL_TITLE` is set.(v2.1.110)
• Fixed potential excessive memory allocation when piped (non-TTY) Ink output contains a single very wide line.(v2.1.110)
• Fixed /skills menu not scrolling when the list overflows the modal in fullscreen mode.(v2.1.110)
• Fixed Remote Control sessions showing a generic error instead of prompting for re-login when the session is too old.(v2.1.110)
• Fixed Remote Control session renames from claude.ai not persisting the title to the local CLI session.(v2.1.110)
• Fixed paste not working in the /login code prompt (regression in 2.1.105)(v2.1.108)
• Fixed subscribers who set DISABLE_TELEMETRY falling back to 5-minute prompt cache TTL instead of 1 hour(v2.1.108)
• Fixed Agent tool prompting for permission in auto mode when the safety classifier's transcript exceeded its context window(v2.1.108)
• Fixed Bash tool producing no output when CLAUDE_ENV_FILE (e.g. ~/.zprofile) ends with a # comment line(v2.1.108)
• Fixed claude --resume <session-id> losing the session's custom name and color set via /rename(v2.1.108)
• Fixed session titles showing placeholder example text when the first message is a short greeting(v2.1.108)
• Fixed terminal escape codes appearing as garbage text in the prompt input after --teleport(v2.1.108)
• Fixed /feedback retry: pressing Enter to resubmit after a failure now works without first editing the description(v2.1.108)
• Fixed --teleport and --resume <id> precondition errors (e.g. dirty git tree, session not found) exiting silently instead of showing the error message(v2.1.108)
• Fixed Remote Control session titles set in the web UI being overwritten by auto-generated titles after the third message(v2.1.108)
• Fixed --resume truncating sessions when the transcript contained a self-referencing message(v2.1.108)
• Fixed transcript write failures (e.g. disk full) being silently dropped instead of being logged(v2.1.108)
• Fixed diacritical marks (accents, umlauts, cedillas) being dropped from responses when the language setting is configured(v2.1.108)
• Fixed policy-managed plugins never auto-updating when running from a different project than where they were first installed(v2.1.108)
• Fixed images attached to queued messages (sent while Claude is working) being dropped.(v2.1.105)
• Fixed the screen going blank when the prompt input wraps to a second line in long conversations.(v2.1.105)
• Fixed leading whitespace being copied when selecting multi-line assistant responses in fullscreen mode.(v2.1.105)
• Fixed leading whitespace being trimmed from assistant messages, which broke ASCII art and indented diagrams.(v2.1.105)
• Fixed garbled bash output when commands print clickable file links (e.g. Python `rich`/`loguru` logging).(v2.1.105)
• Fixed alt+enter not inserting a newline in terminals using ESC-prefix alt encoding, and Ctrl+J not inserting a newline (regression in 2.1.100).(v2.1.105)
• Fixed duplicate "Creating worktree" text in EnterWorktree/ExitWorktree tool display.(v2.1.105)
• Fixed queued user prompts disappearing from focus mode.(v2.1.105)
• Fixed one-shot scheduled tasks re-firing repeatedly when the file watcher missed the post-fire cleanup.(v2.1.105)
• Fixed inbound channel notifications being silently dropped after the first message for Team/Enterprise users.(v2.1.105)
• Fixed marketplace plugins with `package.json` and lockfile not having dependencies installed automatically after install/update.(v2.1.105)
• Fixed marketplace auto-update leaving the official marketplace in a broken state when a plugin process holds files open during the update.(v2.1.105)
• Fixed "Resume this session with..." hint not printing on exit after `/resume`, `--worktree`, or `/branch`.(v2.1.105)
• Fixed feedback survey shortcut keys firing when typed at the end of a longer prompt.(v2.1.105)
• Fixed stdio MCP server emitting malformed (non-JSON) output hanging the session instead of failing fast with "Connection closed".(v2.1.105)
• Fixed MCP tools missing on the first turn of headless/remote-trigger sessions when MCP servers connect asynchronously.(v2.1.105)
• Fixed `/model` picker on AWS Bedrock in non-US regions persisting invalid `us.*` model IDs to `settings.json` when inference profile discovery is still in-flight.(v2.1.105)
• Fixed 429 rate-limit errors showing a raw JSON dump instead of a clean message for API-key, Bedrock, and Vertex users.(v2.1.105)
• Fixed crash on resume when session contains malformed text blocks.(v2.1.105)
• Fixed `/help` dropping the tab bar, Shortcuts heading, and footer at short terminal heights.(v2.1.105)
• Fixed malformed keybinding entry values in `keybindings.json` being silently loaded instead of rejected with a clear error.(v2.1.105)
• Fixed `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` in one project's settings permanently disabling usage metrics for all projects on the machine.(v2.1.105)
• Fixed washed-out 16-color palette when using Ghostty, Kitty, Alacritty, WezTerm, foot, rio, or Contour over SSH/mosh.(v2.1.105)
• Fixed Bash tool suggesting `acceptEdits` permission mode when exiting plan mode would downgrade from a higher permission level.(v2.1.105)
• Fixed a command injection vulnerability in the POSIX which fallback used by LSP binary detection.(v2.1.101)
• Fixed a memory leak where long sessions retained dozens of historical copies of the message list in the virtual scroller.(v2.1.101)
• Fixed resume/continue losing conversation context on large sessions when the loader anchored on a dead-end branch.(v2.1.101)
• Fixed resume chain recovery bridging into an unrelated subagent conversation when a subagent message landed near a main-chain write gap.(v2.1.101)
• Fixed a crash on resume when a persisted Edit\/Write tool result was missing its file_path.(v2.1.101)
• Fixed a hardcoded 5-minute request timeout that aborted slow backends regardless of API_TIMEOUT_MS.(v2.1.101)
• Fixed permissions.deny rules not overriding a PreToolUse hook's permissionDecision: "ask", preventing hooks from downgrading denies to prompts.(v2.1.101)
• Fixed setting sources without user causing background cleanup to ignore cleanupPeriodDays and delete history older than 30 days.(v2.1.101)
• Fixed Bedrock SigV4 authentication failing with 403 when Authorization headers were set via environment variables or helpers.(v2.1.101)
• Fixed claude -w <name> failing with "already exists" after stale worktree cleanup from a previous session.(v2.1.101)
• Fixed subagents not inheriting MCP tools from dynamically-injected servers.(v2.1.101)
• Fixed sub-agents running in isolated worktrees being denied Read\/Edit access to files inside their own worktree.(v2.1.101)
• Fixed sandboxed Bash commands failing with mktemp: No such file or directory after a fresh boot.(v2.1.101)
• Fixed claude mcp serve tool calls failing with "Tool execution failed" in MCP clients that validate outputSchema.(v2.1.101)
• Fixed RemoteTrigger tool's run action sending an empty body and being rejected by the server.(v2.1.101)
• Fixed several resume picker issues including narrow default view, unreachable preview on Windows Terminal, incorrect cwd, missing session-not-found errors, and terminal title not being set.(v2.1.101)
• Fixed Grep tool ENOENT when the embedded ripgrep binary path becomes stale; now falls back to system rg and self-heals.(v2.1.101)
• Fixed \/btw writing a copy of the entire conversation to disk on every use.(v2.1.101)
• Fixed \/context Free space and Messages breakdown disagreeing with the header percentage.(v2.1.101)
• Fixed several plugin issues including slash commands resolving incorrectly, \/plugin update failing with ENAMETOOLONG, Discover showing installed plugins, directory-source plugins loading stale cache, and skills not honoring context and agent frontmatter.(v2.1.101)
• Fixed the \/mcp menu offering OAuth-specific actions for servers configured with headersHelper; Reconnect is now offered instead.(v2.1.101)
• Fixed ctrl+], ctrl+\, and ctrl+^ keybindings not firing in terminals that send raw C0 control bytes.(v2.1.101)
• Fixed \/login OAuth URL rendering with padding that prevented clean mouse selection.(v2.1.101)
• Fixed rendering issues including flicker in non-fullscreen mode, scrollback wiping, and mouse-scroll escape sequences leaking into the prompt.(v2.1.101)
• Fixed crash when settings.json env values are numbers instead of strings.(v2.1.101)
• Fixed in-app settings writes not refreshing the in-memory snapshot, preventing removed directories from being revoked mid-session.(v2.1.101)
• Fixed custom keybindings not loading on Bedrock, Vertex, and other third-party providers.(v2.1.101)
• Fixed claude --continue -p not correctly continuing sessions created by -p or the SDK.(v2.1.101)
• Fixed several Remote Control issues including worktrees removed on session crash, connection failures not persisting, spurious Disconnected indicator in brief mode, and \/remote-control failing over SSH when only Organization UUID is set.(v2.1.101)
• Fixed \/insights sometimes omitting the report file link from its response.(v2.1.101)
• Fixed the file attachment below the chat input not clearing when the last editor tab is closed in VSCode.(v2.1.101)
• Fixed a Bash tool permission bypass where an escaped flag could be auto-allowed as read-only, potentially leading to arbitrary code execution.(v2.1.98)
• Fixed compound Bash commands bypassing forced permission prompts for safety checks and explicit ask rules in auto and bypass-permissions modes.(v2.1.98)
• Fixed read-only commands with environment variable prefixes not prompting unless the variable is known-safe (e.g., `LANG`, `TZ`).(v2.1.98)
• Fixed redirects to `/dev/tcp/...` or `/dev/udp/...` not prompting instead of auto-allowing.(v2.1.98)
• Fixed stalled streaming responses timing out instead of falling back to non-streaming mode.(v2.1.98)
• Fixed 429 retries burning all attempts too quickly by ensuring exponential backoff applies as a minimum.(v2.1.98)
• Fixed MCP OAuth `oauth.authServerMetadataUrl` configuration override not being honored on token refresh after restart.(v2.1.98)
• Fixed capital letters being dropped to lowercase in xterm and VS Code integrated terminals when the kitty keyboard protocol is active.(v2.1.98)
• Fixed macOS text replacements deleting the trigger word instead of inserting the substitution.(v2.1.98)
• Fixed `--dangerously-skip-permissions` being silently downgraded to accept-edits mode after approving a write to a protected path via Bash.(v2.1.98)
• Fixed managed-settings allow rules remaining active after an admin removed them until process restart.(v2.1.98)
• Fixed `permissions.additionalDirectories` changes not applying mid-session; removed directories now lose access immediately.(v2.1.98)
• Fixed removing a directory from `additionalDirectories` revoking access to the same directory passed via `--add-dir`.(v2.1.98)
• Fixed `Bash(cmd:*)` and `Bash(git commit *)` wildcard permission rules failing to match commands with extra spaces or tabs.(v2.1.98)
• Fixed `Bash(...)` deny rules being downgraded to a prompt for piped commands that mix `cd` with other segments.(v2.1.98)
• Fixed false Bash permission prompts for commands like `cut -d /` and filenames containing `%`.(v2.1.98)
• Fixed permission rules with names matching JavaScript prototype properties (e.g., `toString`) causing `settings.json` to be silently ignored.(v2.1.98)
• Fixed agent team members not inheriting the leader's permission mode when using `--dangerously-skip-permissions`.(v2.1.98)
• Fixed a crash in fullscreen mode when hovering over MCP tool results.(v2.1.98)
• Fixed copying wrapped URLs in fullscreen mode inserting spaces at line breaks.(v2.1.98)
• Fixed file-edit diffs disappearing from the UI on `--resume` when the edited file was larger than 10KB.(v2.1.98)
• Fixed several `/resume` picker issues including uneditable resumes, search state wiping, and transient status text.(v2.1.98)
• Fixed `/export` not honoring absolute paths and `~`, and silently rewriting user-supplied extensions to `.txt`.(v2.1.98)
• Fixed `/effort max` being denied for unknown or future model IDs.(v2.1.98)
• Fixed slash command picker breaking when a plugin's frontmatter `name` is a YAML boolean keyword.(v2.1.98)
• Fixed rate-limit upsell text being hidden after message remounts.(v2.1.98)
• Fixed MCP tools with `_meta["anthropic/maxResultSizeChars"]` not bypassing the token-based persist layer.(v2.1.98)
• Fixed voice mode leaking space characters into input when re-holding the push-to-talk key during transcript processing.(v2.1.98)
• Fixed `DISABLE_AUTOUPDATER` not fully suppressing the npm registry version check and symlink modification.(v2.1.98)
• Fixed a memory leak where Remote Control permission handler entries were retained for the entire session.(v2.1.98)
• Fixed background subagents that fail with an error not reporting partial progress to the parent agent.(v2.1.98)
• Fixed prompt-type Stop/SubagentStop hooks failing on long sessions.(v2.1.98)
• Fixed feedback survey rendering when dismissed.(v2.1.98)
• Fixed Bash `grep -f FILE` / `rg -f FILE` not prompting when reading a pattern file outside the working directory.(v2.1.98)
• Fixed stale subagent worktree cleanup removing worktrees that contain untracked files.(v2.1.98)
• Fixed `sandbox.network.allowMachLookup` not taking effect on macOS.(v2.1.98)
• Fixed `CLAUDE_CODE_MAX_CONTEXT_TOKENS` not honoring `DISABLE_COMPACT` when set.(v2.1.98)
• Fixed VSCode reporting a false-positive "requires git-bash" error on Windows when the path is correctly configured.(v2.1.98)
• Fixed --dangerously-skip-permissions being silently downgraded to accept-edits mode after approving a write to a protected path(v2.1.97)
• Fixed and hardened Bash tool permissions, tightening checks around env-var prefixes and network redirects, and reducing false prompts on common commands(v2.1.97)
• Fixed permission rules with names matching JavaScript prototype properties (e.g. toString) causing settings.json to be silently ignored(v2.1.97)
• Fixed managed-settings allow rules remaining active after an admin removed them until process restart(v2.1.97)
• Fixed permissions.additionalDirectories changes in settings not applying mid-session(v2.1.97)
• Fixed removing a directory from settings.permissions.additionalDirectories revoking access to the same directory passed via --add-dir(v2.1.97)
• Fixed MCP HTTP/SSE connections accumulating ~50 MB/hr of unreleased buffers when servers reconnect(v2.1.97)
• Fixed MCP OAuth oauth.authServerMetadataUrl not being honored on token refresh after restart, fixing ADFS and similar IdPs(v2.1.97)
• Fixed 429 retries burning all attempts in ~13 seconds when the server returns a small Retry-After — exponential backoff now applies as a minimum(v2.1.97)
• Fixed rate-limit upgrade options disappearing after context compaction(v2.1.97)
• Fixed several /resume picker issues: --resume <name> opening uneditable, Ctrl+A reload wiping search, empty list swallowing navigation, task-status text replacing conversation summary, and cross-project staleness(v2.1.97)
• Fixed file-edit diffs disappearing on --resume when the edited file was larger than 10KB(v2.1.97)
• Fixed --resume cache misses and lost mid-turn input from attachment messages not being saved to the transcript(v2.1.97)
• Fixed messages typed while Claude is working not being persisted to the transcript(v2.1.97)
• Fixed prompt-type Stop/SubagentStop hooks failing on long sessions, and hook evaluator API errors displaying "JSON validation failed" instead of the actual message(v2.1.97)
• Fixed subagents with worktree isolation or cwd: override leaking their working directory back to the parent session's Bash tool(v2.1.97)
• Fixed compaction writing duplicate multi-MB subagent transcript files on prompt-too-long retries(v2.1.97)
• Fixed claude plugin update reporting "already at the latest version" for git-based marketplace plugins when the remote had newer commits(v2.1.97)
• Fixed slash command picker breaking when a plugin's frontmatter name is a YAML boolean keyword(v2.1.97)
• Fixed copying wrapped URLs in NO_FLICKER mode inserting spaces at line breaks(v2.1.97)
• Fixed scroll rendering artifacts in NO_FLICKER mode when running inside zellij(v2.1.97)
• Fixed a crash in NO_FLICKER mode when hovering over MCP tool results(v2.1.97)
• Fixed a NO_FLICKER mode memory leak where API retries left stale streaming state(v2.1.97)
• Fixed slow mouse-wheel scrolling in NO_FLICKER mode on Windows Terminal(v2.1.97)
• Fixed custom status line not displaying in NO_FLICKER mode on terminals shorter than 24 rows(v2.1.97)
• Fixed Shift+Enter and Alt/Cmd+arrow shortcuts not working in Warp with NO_FLICKER mode(v2.1.97)
• Fixed Korean/Japanese/Unicode text becoming garbled when copied in no-flicker mode on Windows(v2.1.97)
• Fixed Bedrock SigV4 authentication failing when AWS_BEARER_TOKEN_BEDROCK or ANTHROPIC_BEDROCK_BASE_URL are set to empty strings (as GitHub Actions does for unset inputs)(v2.1.97)
• Fixed agents appearing stuck after a 429 rate-limit response with a long Retry-After header; the error now surfaces immediately.(v2.1.94)
• Fixed Console login on macOS silently failing when the login keychain is locked or out of sync; the error is now surfaced and `claude doctor` diagnoses the fix.(v2.1.94)
• Fixed plugin skill hooks defined in YAML frontmatter being silently ignored.(v2.1.94)
• Fixed plugin hooks failing with "No such file or directory" when `CLAUDE_PLUGIN_ROOT` was not set.(v2.1.94)
• Fixed `${CLAUDE_PLUGIN_ROOT}` resolving incorrectly for local-marketplace plugins on startup.(v2.1.94)
• Fixed scrollback showing repeated diffs and blank pages in long-running sessions.(v2.1.94)
• Fixed multiline user prompts in the transcript indenting wrapped lines incorrectly under the caret.(v2.1.94)
• Fixed Shift+Space inserting the literal word "space" instead of a space character in search inputs.(v2.1.94)
• Fixed hyperlinks opening two browser tabs when clicked inside tmux running in an xterm.js-based terminal.(v2.1.94)
• Fixed an alt-screen rendering bug that could leave compounding ghost lines during scrolling.(v2.1.94)
• Fixed the `FORCE_HYPERLINK` environment variable being ignored when set via `settings.json` `env`.(v2.1.94)
• Fixed native terminal cursor not tracking the selected tab in dialogs.(v2.1.94)
• Fixed Bedrock invocation of Sonnet 3.5 v2 by correctly using the `us.` inference profile ID.(v2.1.94)
• Fixed SDK/print mode not preserving the partial assistant response in conversation history when interrupted mid-stream.(v2.1.94)
• Fixed CJK and other multibyte text being corrupted with U+FFFD in stream-json input/output when chunk boundaries split a UTF-8 sequence.(v2.1.94)
• Fixed VSCode dropdown menus selecting the wrong item when the mouse was over the list while typing or using arrow keys.(v2.1.94)
• Fixed subagent spawning permanently failing with "Could not determine pane count" after tmux windows were killed or renumbered during a long-running session.(v2.1.92)
• Fixed prompt-type Stop hooks incorrectly failing when the small fast model returns ok:false, restoring preventContinuation:true semantics for non-Stop prompt-type hooks.(v2.1.92)
• Fixed tool input validation failures when streaming emits array/object fields as JSON-encoded strings.(v2.1.92)
• Fixed an API 400 error that could occur when extended thinking produced a whitespace-only text block alongside real content.(v2.1.92)
• Fixed accidental feedback survey submissions caused by auto-pilot keypresses and consecutive-prompt digit collisions.(v2.1.92)
• Fixed misleading "esc to interrupt" hint appearing alongside "esc to clear" when text selection exists in fullscreen mode during processing.(v2.1.92)
• Fixed Homebrew install update prompts to use the correct release channel (claude-code → stable, claude-code@latest → latest).(v2.1.92)
• Fixed ctrl+e jumping to the end of the next line when already at the end of the line in multiline prompts.(v2.1.92)
• Fixed an issue where the same message could appear at two positions when scrolling up in fullscreen mode (for terminals supporting DEC 2026).(v2.1.92)
• Fixed idle-return "/clear to save X tokens" hint showing cumulative session tokens instead of the current context size.(v2.1.92)
• Fixed plugin MCP servers getting stuck "connecting" on session start when they duplicate an unauthenticated claude.ai connector.(v2.1.92)
• Restored unix-socket blocking for sandboxed commands by ensuring the apply-seccomp helper ships in both npm and native builds for the Linux sandbox.(v2.1.92)
• Fixed transcript chain breaks occurring with `--resume` that previously caused silent failures in async transcript writes, leading to lost conversation history.(v2.1.91)
• Fixed `cmd+delete` functionality not deleting text to the start of the line across iTerm2, kitty, WezTerm, Ghostty, and Windows Terminal.(v2.1.91)
• Fixed plan mode in remote sessions losing track of the plan file after a container restart, which previously caused permission prompts on plan edits and an empty plan-approval modal.(v2.1.91)
• Fixed JSON schema validation errors when setting `permissions.defaultMode: "auto"` in settings.json.(v2.1.91)
• Fixed an issue where Windows version cleanup was incorrectly protecting the rollback copy of the active version.(v2.1.91)
• Fixed an infinite loop where the rate-limit options dialog would repeatedly auto-open after hitting the usage limit, preventing session crashes(v2.1.90)
• Fixed regression where `--resume` caused a full prompt-cache miss on the first request for users with deferred tools, MCP servers, or custom agents(v2.1.90)
• Fixed Edit/Write operations failing with "File content has changed" when a PostToolUse format-on-save hook rewrites the file between consecutive edits(v2.1.90)
• Fixed PreToolUse hooks emitting JSON to stdout and exiting with code 2 not correctly blocking the tool call(v2.1.90)
• Fixed collapsed search/read summary badge appearing multiple times in fullscreen scrollback when a CLAUDE.md file auto-loads during a tool call(v2.1.90)
• Fixed auto mode not respecting explicit user boundaries (e.g., "don't push", "wait for X before Y")(v2.1.90)
• Fixed UI crash that occurred when malformed tool input reached the permission dialog(v2.1.90)
• Hardened PowerShell tool permission checks, fixing trailing & background job bypass, -ErrorAction Break debugger hang, archive-extraction TOCTOU, and parse-fail fallback deny-rule degradation(v2.1.90)
• Fixed Edit(//path/**) and Read(//path/**) allow rules to correctly check the resolved symlink target instead of just the requested path.(v2.1.89)
• Fixed voice push-to-talk activation issues with modifier-combo bindings and resolved WebSocket upgrade rejections in voice mode on Windows.(v2.1.89)
• Fixed Edit/Write tools incorrectly doubling CRLF and stripping Markdown hard line breaks (two trailing spaces) on Windows.(v2.1.89)
• Fixed StructuredOutput schema cache bug that caused approximately 50% failure rate when using multiple schemas.(v2.1.89)
• Fixed memory leak where large JSON inputs were retained as LRU cache keys during long-running sessions.(v2.1.89)
• Fixed crash occurring when removing a message from very large session files (over 50MB).(v2.1.89)
• Fixed LSP server zombie state after a crash; the server now restarts on the next request instead of failing until the session restarts.(v2.1.89)
• Fixed prompt history entries containing CJK or emoji being silently dropped when they fell on a 4KB boundary in ~/.claude/history.jsonl.(v2.1.89)
• Fixed /stats undercounting tokens by excluding subagent usage and losing historical data beyond 30 days when the stats cache format changed.(v2.1.89)
• Fixed -p --resume hangs when deferred tool input exceeds 64KB or lacks a deferred marker, and fixed -p --continue not resuming deferred tools.(v2.1.89)
• Fixed claude-cli:// deep links failing to open on macOS.(v2.1.89)
• Fixed MCP tool errors truncating to only the first content block when the server returned multi-element error content.(v2.1.89)
• Fixed skill reminders and other system context being dropped when sending messages with images via the SDK.(v2.1.89)
• Fixed PreToolUse/PostToolUse hooks receiving file_path as a relative path instead of the documented absolute path for Write/Edit/Read tools.(v2.1.89)
• Fixed autocompact thrash loop by detecting when context refills immediately after compacting three times and stopping with an actionable error.(v2.1.89)
• Fixed prompt cache misses in long sessions caused by tool schema bytes changing mid-session.(v2.1.89)
• Fixed nested CLAUDE.md files being re-injected dozens of times in long sessions that read many files.(v2.1.89)
• Fixed --resume crash when the transcript contained a tool result from an older CLI version or an interrupted write.(v2.1.89)
• Fixed misleading "Rate limit reached" message when the API returned an entitlement error; now shows the actual error.(v2.1.89)
• Fixed hooks if condition filtering not matching compound commands (e.g., ls && git push) or commands with env-var prefixes.(v2.1.89)
• Fixed collapsed search/read group badges duplicating in terminal scrollback during heavy parallel tool use.(v2.1.89)
• Fixed notification invalidates not clearing the currently-displayed notification immediately.(v2.1.89)
• Fixed prompt briefly disappearing after submit when background messages arrived during processing.(v2.1.89)
• Fixed truncation of Devanagari and other combining-mark text in assistant output.(v2.1.89)
• Fixed rendering artifacts on main-screen terminals after layout shifts.(v2.1.89)
• Fixed voice mode failing to request microphone permission on macOS Apple Silicon.(v2.1.89)
• Fixed Shift+Enter submitting instead of inserting a newline on Windows Terminal Preview 1.25.(v2.1.89)
• Fixed periodic UI jitter during streaming in iTerm2 when running inside tmux.(v2.1.89)
• Fixed PowerShell tool incorrectly reporting failures when commands like git push wrote progress to stderr on Windows PowerShell 5.1.(v2.1.89)
• Fixed potential out-of-memory crash when the Edit tool was used on very large files (>1 GiB).(v2.1.89)