Claude Code sdk

All SDK Bug Fixes

• Fixed a security issue where `statusLine` and `fileSuggestion` hook commands could execute without workspace trust acceptance in interactive mode.(v2.1.51)
• Fixed a security issue where HTTP hooks could interpolate arbitrary environment variables from header values; env var interpolation now requires an explicit `allowedEnvVars` list.(v2.1.51)
• Fixed a bug where duplicate `control_response` messages (e.g. from WebSocket reconnects) could cause API 400 errors by pushing duplicate assistant messages into the conversation.(v2.1.51)
• Fixed slash command autocomplete crashing when a plugin's SKILL.md description is a YAML array or other non-string type(v2.1.51)
• Fixed Ctrl+C and ESC being silently ignored when background agents are running; pressing twice within 3 seconds now kills all background agents.(v2.1.49)
• Fixed prompt suggestion cache regression that was reducing cache hit rates.(v2.1.49)
• Fixed `plugin enable` and `plugin disable` to auto-detect the correct scope when `--scope` is omitted, instead of defaulting to user scope.(v2.1.49)
• Fixed verbose mode not updating the thinking block display when toggled via `/config` by ensuring memo comparators correctly detect verbose changes.(v2.1.49)
• Fixed unbounded WASM memory growth during long sessions by periodically resetting the tree-sitter parser.(v2.1.49)
• Fixed potential rendering issues caused by stale yoga layout references.(v2.1.49)
• Fixed unbounded memory growth during long-running sessions caused by Yoga WASM linear memory never shrinking.(v2.1.49)
• Fixed `disableAllHooks` setting to respect managed settings hierarchy, preventing non-managed settings from disabling policy-set managed hooks.(v2.1.49)
• Fixed the `--resume` session picker showing raw XML tags for sessions starting with commands like `/clear`; it now correctly falls through to the session ID fallback.(v2.1.49)
• Fixed FileWriteTool line counting to preserve intentional trailing blank lines instead of stripping them.(v2.1.47)
• Fixed Windows terminal rendering bugs where line counts showed incorrect values (always 1) due to `os.EOL` (`\r\n`) in display code.(v2.1.47)
• Fixed bold and colored text in markdown output shifting to the wrong characters on Windows due to `\r\n` line endings.(v2.1.47)
• Fixed compaction failing when conversations contain many PDF documents by stripping document blocks alongside images before sending to the compaction API.(v2.1.47)
• Fixed bash tool output being silently discarded on Windows when using MSYS2 or Cygwin shells.(v2.1.47)
• Fixed the bash permission classifier from incorrectly granting permissions based on hallucinated descriptions.(v2.1.47)
• Fixed user-defined agents only loading one file on NFS/FUSE filesystems that report zero inodes.(v2.1.47)
• Fixed plugin agent skills silently failing to load when referenced by bare name instead of fully-qualified plugin name.(v2.1.47)
• Fixed CWD tracking temp files never being cleaned up on Windows, preventing indefinite accumulation.(v2.1.47)
• Fixed API 400 errors ("thinking blocks cannot be modified") in sessions with concurrent agents caused by interleaved streaming content blocks.(v2.1.47)
• Fixed a single file write/edit error from aborting all other parallel file write/edit operations; independent mutations now complete on failure.(v2.1.47)
• Fixed custom session titles set via `/rename` being lost after resuming a conversation.(v2.1.47)
• Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start.(v2.1.47)
• Fixed bash commands using backslash-newline continuation lines (`\` followed by newline) producing spurious empty arguments.(v2.1.47)
• Fixed built-in slash commands being hidden from the autocomplete dropdown when many user skills are installed.(v2.1.47)
• Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading.(v2.1.47)
• Fixed session name persisting in status bar after `/clear` command.(v2.1.47)
• Fixed crash when a skill's `name` or `description` in SKILL.md frontmatter is a bare number, by coercing the value to a string.(v2.1.47)
• Fixed `/resume` silently dropping sessions when the first message exceeds 16KB or uses array-format content.(v2.1.47)
• Fixed `claude doctor` misclassifying mise and asdf-managed installations as native installs.(v2.1.47)
• Fixed zsh heredoc failing with "read-only file system" error in sandboxed commands.(v2.1.47)
• Fixed agent progress indicator showing inflated tool use count.(v2.1.47)
• Fixed image pasting not working on WSL2 systems where Windows copies images as BMP format.(v2.1.47)
• Fixed background agent results returning raw transcript data instead of the agent's final answer.(v2.1.47)
• Fixed Warp terminal incorrectly prompting for Shift+Enter setup when it supports it natively.(v2.1.47)
• Fixed CJK wide characters causing misaligned timestamps and layout elements in the TUI.(v2.1.47)
• Fixed custom agent `model` field in `.claude/agents/*.md` being ignored when spawning team teammates.(v2.1.47)
• Fixed plan mode being lost after context compaction, causing the model to switch from planning to implementation mode.(v2.1.47)
• Fixed `alwaysThinkingEnabled: true` in settings.json not enabling thinking mode on Bedrock and Vertex providers.(v2.1.47)
• Fixed `tool_decision` OTel telemetry event not being emitted in headless/SDK mode.(v2.1.47)
• Fixed session name being lost after context compaction; renamed sessions now preserve their custom title through compaction.(v2.1.47)
• Fixed `/resume <session-id>` failing to find sessions whose first message exceeds 16KB.(v2.1.47)
• Fixed "Always allow" on multiline bash commands creating invalid permission patterns that corrupt settings.(v2.1.47)
• Fixed React crash (error #31) when a skill's `argument-hint` in SKILL.md frontmatter uses YAML sequence syntax, by coercing the value to a string.(v2.1.47)
• Fixed crash when using `/fork` on sessions that used web search by gracefully handling null entries in search results.(v2.1.47)
• Fixed read-only git commands triggering FSEvents file watcher loops on macOS by adding --no-optional-locks flag.(v2.1.47)
• Fixed custom agents and skills not being discovered when running from a git worktree; project-level agent/skill directories are now included.(v2.1.47)
• Fixed non-interactive subcommands like `claude doctor` and `claude plugin validate` being blocked inside nested Claude sessions.(v2.1.47)
• Windows: Fixed the same CLAUDE.md file being loaded twice when drive letter casing differs between paths.(v2.1.47)
• Fixed inline code spans in markdown being incorrectly parsed as bash commands.(v2.1.47)
• Fixed teammate spinners not respecting custom spinnerVerbs from settings.(v2.1.47)
• Fixed shell commands permanently failing after a command deletes its own working directory.(v2.1.47)
• Fixed hooks (PreToolUse, PostToolUse) silently failing.(v2.1.47)
• Fixed Agent Teams teammates failing on Bedrock, Vertex, and Foundry by correctly propagating API provider environment variables to tmux-spawned processes.(v2.1.45)
• Resolved sandbox "operation not permitted" errors on macOS when writing temporary files by ensuring the correct per-user temp directory is used.(v2.1.45)
• Fixed a crash in the Task tool (backgrounded agents) caused by a `ReferenceError` upon task completion.(v2.1.45)
• Fixed autocomplete suggestions not being accepted via the Enter key when images have been pasted into the input field.(v2.1.45)
• Fixed skills invoked by subagents incorrectly appearing in the main session context after compaction.(v2.1.45)
• Fixed the accumulation of excessive `.claude.json.backup` files during every startup.(v2.1.45)
• Fixed plugin-provided commands, agents, and hooks not being available immediately after installation without requiring a full restart.(v2.1.45)
• Fixed AWS authentication refresh hanging indefinitely by implementing a 3-minute timeout(v2.1.41)
• Fixed file resolution failing for @-mentions that include anchor fragments (e.g., `@README.md#installation`)(v2.1.41)
• Fixed FileReadTool blocking the main process when reading from FIFOs, `/dev/stdin`, or very large files(v2.1.41)
• Fixed background task notifications failing to deliver when operating in streaming Agent SDK mode(v2.1.41)
• Fixed cursor jumping to the end of the input field on every keystroke within classifier rule input(v2.1.41)
• Fixed markdown link display text being incorrectly dropped, showing only the raw URL(v2.1.41)
• Fixed users being incorrectly shown auto-compact failure error notifications(v2.1.41)
• Fixed permission wait time being incorrectly included in the elapsed time displayed for subagents(v2.1.41)
• Fixed proactive ticks firing erroneously while the tool is in plan mode(v2.1.41)
• Fixed stale permission rules not being cleared when settings are modified on disk(v2.1.41)
• Fixed hook blocking errors incorrectly displaying stderr content within the user interface(v2.1.41)
• Fixed agent teammate sessions in tmux to send and receive messages correctly(v2.1.33)
• Fixed warnings about agent teams not being available on your current plan(v2.1.33)
• Fixed an issue where submitting a new message while the model was in extended thinking would interrupt the thinking phase(v2.1.33)
• Fixed an API error that could occur when aborting mid-stream, where whitespace text combined with a thinking block would bypass normalization and produce an invalid request(v2.1.33)
• Fixed API proxy compatibility issue where 404 errors on streaming endpoints no longer triggered non-streaming fallback(v2.1.33)
• Fixed an issue where proxy settings configured via `settings.json` environment variables were not applied to WebFetch and other HTTP requests on the Node.js build(v2.1.33)
• Fixed `/resume` session picker showing raw XML markup instead of clean titles for sessions started with slash commands(v2.1.33)
• VSCode: Fixed scroll-to-bottom under-scrolling on initial session load and session switch(v2.1.33)
• Fixed permanent session lockups caused by excessively large PDF uploads, which previously required starting a new conversation(v2.1.31)
• Fixed bash commands incorrectly reporting "Read-only file system" errors when sandbox mode was enabled(v2.1.31)
• Fixed a crash that rendered sessions unusable after entering plan mode when the project configuration in `~/.claude.json` was missing default fields(v2.1.31)
• Fixed the `temperatureOverride` parameter being silently ignored in the streaming API path, ensuring configured overrides are respected(v2.1.31)
• Fixed phantom "(no content)" text blocks appearing in API conversation history, which reduced token waste and potential model confusion.(v2.1.30)
• Fixed prompt cache not correctly invalidating when tool descriptions or input schemas changed (it previously only invalidated when tool names changed).(v2.1.30)
• Fixed 400 errors that could occur after running `/login` when the conversation contained thinking blocks.(v2.1.30)
• Fixed a hang that occurred when resuming sessions with corrupted transcript files containing `parentUuid` cycles.(v2.1.30)
• Fixed rate limit message showing an incorrect "/upgrade" suggestion for Max 20x users when extra-usage is unavailable.(v2.1.30)
• Fixed permission dialogs stealing focus while the user was actively typing.(v2.1.30)
• Fixed subagents being unable to access SDK-provided MCP tools because they were not synced to the shared application state.(v2.1.30)
• Fixed a regression where Windows users with a `.bashrc` file could not run bash commands.(v2.1.30)
• Fixed duplicate sessions appearing in the VSCode session list when starting a new conversation.(v2.1.30)
• Fixed crashes occurring on processors that lack AVX instruction support.(v2.1.19)
• Fixed dangling Claude Code processes when the terminal is closed by implementing SIGKILL as a fallback upon catching EIO errors from `process.exit()`. (v2.1.19)
• Fixed `/rename` and `/tag` commands failing to update the correct session when resuming from a different directory (e.g., git worktrees).(v2.1.19)
• Fixed session resuming by custom title failing when executed from a different directory.(v2.1.19)
• Fixed pasted text content being lost when using prompt stash (Ctrl+S) and subsequent restore.(v2.1.19)
• Fixed the agent list incorrectly displaying "Sonnet (default)" instead of "Inherit (default)" for agents without an explicit model setting.(v2.1.19)
• Fixed backgrounded hook commands not returning early, which previously caused the session to wait unnecessarily.(v2.1.19)
• Fixed file write preview incorrectly omitting empty lines.(v2.1.19)
• Fixed API errors related to orphan tool_result blocks occurring during long sessions with parallel tool calls.(v2.1.9)
• Fixed MCP server reconnection hanging when the cached connection promise fails to resolve.(v2.1.9)
• Fixed Ctrl+Z suspend functionality not working in terminals utilizing the Kitty keyboard protocol (including Ghostty, iTerm2, kitty, and WezTerm).(v2.1.9)
• Fixed a security vulnerability where wildcard permission rules could incorrectly match compound commands containing shell operators.(v2.1.7)
• Fixed false "file modified" errors occurring on Windows due to cloud sync tools or antivirus scanners touching file timestamps without content changes.(v2.1.7)
• Fixed orphaned `tool_result` errors when sibling tools failed during streaming execution.(v2.1.7)
• Fixed context window blocking limit calculation to use the effective context window (reserving space for max output tokens) instead of the full context window.(v2.1.7)
• Fixed a visual glitch where the spinner briefly flashed when running local slash commands like `/model` or `/theme`.(v2.1.7)
• Fixed terminal title animation jitter by utilizing fixed-width braille characters.(v2.1.7)
• Fixed plugins with git submodules not being fully initialized upon installation.(v2.1.7)
• Fixed bash commands failing on Windows when temporary directory paths contained characters like `t` or `n` that were misinterpreted as escape sequences.(v2.1.7)
• [VSCode] Fixed an issue where the `claudeProcessWrapper` setting was incorrectly passing the wrapper path instead of the Claude binary path.(v2.1.7)
• Fixed a command injection vulnerability in bash command processing where malformed input could execute arbitrary commands(v2.1.2)
• Fixed a memory leak where tree-sitter parse trees were not being freed, causing WASM memory to grow unbounded over long sessions(v2.1.2)
• Fixed binary files (images, PDFs, etc.) being accidentally included in memory when using @include directives in CLAUDE.md files(v2.1.2)
• Fixed updates incorrectly claiming another installation is in progress(v2.1.2)
• Fixed crash when socket files exist in watched directories(v2.1.2)
• Fixed remote session URL and teleport being broken when using /tasks command(v2.1.2)
• Fixed MCP tool names being exposed in analytics events by sanitizing user-specific server configurations(v2.1.2)
• Fixed usage display not updating after manual compact in VSCode(v2.1.2)