Claude Code vertex

All VERTEX Bug Fixes

• Fixed a command injection vulnerability in the POSIX which fallback used by LSP binary detection.(v2.1.101)
• Fixed a memory leak where long sessions retained dozens of historical copies of the message list in the virtual scroller.(v2.1.101)
• Fixed resume/continue losing conversation context on large sessions when the loader anchored on a dead-end branch.(v2.1.101)
• Fixed resume chain recovery bridging into an unrelated subagent conversation when a subagent message landed near a main-chain write gap.(v2.1.101)
• Fixed a crash on resume when a persisted Edit\/Write tool result was missing its file_path.(v2.1.101)
• Fixed a hardcoded 5-minute request timeout that aborted slow backends regardless of API_TIMEOUT_MS.(v2.1.101)
• Fixed permissions.deny rules not overriding a PreToolUse hook's permissionDecision: "ask", preventing hooks from downgrading denies to prompts.(v2.1.101)
• Fixed setting sources without user causing background cleanup to ignore cleanupPeriodDays and delete history older than 30 days.(v2.1.101)
• Fixed Bedrock SigV4 authentication failing with 403 when Authorization headers were set via environment variables or helpers.(v2.1.101)
• Fixed claude -w <name> failing with "already exists" after stale worktree cleanup from a previous session.(v2.1.101)
• Fixed subagents not inheriting MCP tools from dynamically-injected servers.(v2.1.101)
• Fixed sub-agents running in isolated worktrees being denied Read\/Edit access to files inside their own worktree.(v2.1.101)
• Fixed sandboxed Bash commands failing with mktemp: No such file or directory after a fresh boot.(v2.1.101)
• Fixed claude mcp serve tool calls failing with "Tool execution failed" in MCP clients that validate outputSchema.(v2.1.101)
• Fixed RemoteTrigger tool's run action sending an empty body and being rejected by the server.(v2.1.101)
• Fixed several resume picker issues including narrow default view, unreachable preview on Windows Terminal, incorrect cwd, missing session-not-found errors, and terminal title not being set.(v2.1.101)
• Fixed Grep tool ENOENT when the embedded ripgrep binary path becomes stale; now falls back to system rg and self-heals.(v2.1.101)
• Fixed \/btw writing a copy of the entire conversation to disk on every use.(v2.1.101)
• Fixed \/context Free space and Messages breakdown disagreeing with the header percentage.(v2.1.101)
• Fixed several plugin issues including slash commands resolving incorrectly, \/plugin update failing with ENAMETOOLONG, Discover showing installed plugins, directory-source plugins loading stale cache, and skills not honoring context and agent frontmatter.(v2.1.101)
• Fixed the \/mcp menu offering OAuth-specific actions for servers configured with headersHelper; Reconnect is now offered instead.(v2.1.101)
• Fixed ctrl+], ctrl+\, and ctrl+^ keybindings not firing in terminals that send raw C0 control bytes.(v2.1.101)
• Fixed \/login OAuth URL rendering with padding that prevented clean mouse selection.(v2.1.101)
• Fixed rendering issues including flicker in non-fullscreen mode, scrollback wiping, and mouse-scroll escape sequences leaking into the prompt.(v2.1.101)
• Fixed crash when settings.json env values are numbers instead of strings.(v2.1.101)
• Fixed in-app settings writes not refreshing the in-memory snapshot, preventing removed directories from being revoked mid-session.(v2.1.101)
• Fixed custom keybindings not loading on Bedrock, Vertex, and other third-party providers.(v2.1.101)
• Fixed claude --continue -p not correctly continuing sessions created by -p or the SDK.(v2.1.101)
• Fixed several Remote Control issues including worktrees removed on session crash, connection failures not persisting, spurious Disconnected indicator in brief mode, and \/remote-control failing over SSH when only Organization UUID is set.(v2.1.101)
• Fixed \/insights sometimes omitting the report file link from its response.(v2.1.101)
• Fixed the file attachment below the chat input not clearing when the last editor tab is closed in VSCode.(v2.1.101)
• Fixed a Bash tool permission bypass where an escaped flag could be auto-allowed as read-only, potentially leading to arbitrary code execution.(v2.1.98)
• Fixed compound Bash commands bypassing forced permission prompts for safety checks and explicit ask rules in auto and bypass-permissions modes.(v2.1.98)
• Fixed read-only commands with environment variable prefixes not prompting unless the variable is known-safe (e.g., `LANG`, `TZ`).(v2.1.98)
• Fixed redirects to `/dev/tcp/...` or `/dev/udp/...` not prompting instead of auto-allowing.(v2.1.98)
• Fixed stalled streaming responses timing out instead of falling back to non-streaming mode.(v2.1.98)
• Fixed 429 retries burning all attempts too quickly by ensuring exponential backoff applies as a minimum.(v2.1.98)
• Fixed MCP OAuth `oauth.authServerMetadataUrl` configuration override not being honored on token refresh after restart.(v2.1.98)
• Fixed capital letters being dropped to lowercase in xterm and VS Code integrated terminals when the kitty keyboard protocol is active.(v2.1.98)
• Fixed macOS text replacements deleting the trigger word instead of inserting the substitution.(v2.1.98)
• Fixed `--dangerously-skip-permissions` being silently downgraded to accept-edits mode after approving a write to a protected path via Bash.(v2.1.98)
• Fixed managed-settings allow rules remaining active after an admin removed them until process restart.(v2.1.98)
• Fixed `permissions.additionalDirectories` changes not applying mid-session; removed directories now lose access immediately.(v2.1.98)
• Fixed removing a directory from `additionalDirectories` revoking access to the same directory passed via `--add-dir`.(v2.1.98)
• Fixed `Bash(cmd:*)` and `Bash(git commit *)` wildcard permission rules failing to match commands with extra spaces or tabs.(v2.1.98)
• Fixed `Bash(...)` deny rules being downgraded to a prompt for piped commands that mix `cd` with other segments.(v2.1.98)
• Fixed false Bash permission prompts for commands like `cut -d /` and filenames containing `%`.(v2.1.98)
• Fixed permission rules with names matching JavaScript prototype properties (e.g., `toString`) causing `settings.json` to be silently ignored.(v2.1.98)
• Fixed agent team members not inheriting the leader's permission mode when using `--dangerously-skip-permissions`.(v2.1.98)
• Fixed a crash in fullscreen mode when hovering over MCP tool results.(v2.1.98)
• Fixed copying wrapped URLs in fullscreen mode inserting spaces at line breaks.(v2.1.98)
• Fixed file-edit diffs disappearing from the UI on `--resume` when the edited file was larger than 10KB.(v2.1.98)
• Fixed several `/resume` picker issues including uneditable resumes, search state wiping, and transient status text.(v2.1.98)
• Fixed `/export` not honoring absolute paths and `~`, and silently rewriting user-supplied extensions to `.txt`.(v2.1.98)
• Fixed `/effort max` being denied for unknown or future model IDs.(v2.1.98)
• Fixed slash command picker breaking when a plugin's frontmatter `name` is a YAML boolean keyword.(v2.1.98)
• Fixed rate-limit upsell text being hidden after message remounts.(v2.1.98)
• Fixed MCP tools with `_meta["anthropic/maxResultSizeChars"]` not bypassing the token-based persist layer.(v2.1.98)
• Fixed voice mode leaking space characters into input when re-holding the push-to-talk key during transcript processing.(v2.1.98)
• Fixed `DISABLE_AUTOUPDATER` not fully suppressing the npm registry version check and symlink modification.(v2.1.98)
• Fixed a memory leak where Remote Control permission handler entries were retained for the entire session.(v2.1.98)
• Fixed background subagents that fail with an error not reporting partial progress to the parent agent.(v2.1.98)
• Fixed prompt-type Stop/SubagentStop hooks failing on long sessions.(v2.1.98)
• Fixed feedback survey rendering when dismissed.(v2.1.98)
• Fixed Bash `grep -f FILE` / `rg -f FILE` not prompting when reading a pattern file outside the working directory.(v2.1.98)
• Fixed stale subagent worktree cleanup removing worktrees that contain untracked files.(v2.1.98)
• Fixed `sandbox.network.allowMachLookup` not taking effect on macOS.(v2.1.98)
• Fixed `CLAUDE_CODE_MAX_CONTEXT_TOKENS` not honoring `DISABLE_COMPACT` when set.(v2.1.98)
• Fixed VSCode reporting a false-positive "requires git-bash" error on Windows when the path is correctly configured.(v2.1.98)
• Fixed agents appearing stuck after a 429 rate-limit response with a long Retry-After header; the error now surfaces immediately.(v2.1.94)
• Fixed Console login on macOS silently failing when the login keychain is locked or out of sync; the error is now surfaced and `claude doctor` diagnoses the fix.(v2.1.94)
• Fixed plugin skill hooks defined in YAML frontmatter being silently ignored.(v2.1.94)
• Fixed plugin hooks failing with "No such file or directory" when `CLAUDE_PLUGIN_ROOT` was not set.(v2.1.94)
• Fixed `${CLAUDE_PLUGIN_ROOT}` resolving incorrectly for local-marketplace plugins on startup.(v2.1.94)
• Fixed scrollback showing repeated diffs and blank pages in long-running sessions.(v2.1.94)
• Fixed multiline user prompts in the transcript indenting wrapped lines incorrectly under the caret.(v2.1.94)
• Fixed Shift+Space inserting the literal word "space" instead of a space character in search inputs.(v2.1.94)
• Fixed hyperlinks opening two browser tabs when clicked inside tmux running in an xterm.js-based terminal.(v2.1.94)
• Fixed an alt-screen rendering bug that could leave compounding ghost lines during scrolling.(v2.1.94)
• Fixed the `FORCE_HYPERLINK` environment variable being ignored when set via `settings.json` `env`.(v2.1.94)
• Fixed native terminal cursor not tracking the selected tab in dialogs.(v2.1.94)
• Fixed Bedrock invocation of Sonnet 3.5 v2 by correctly using the `us.` inference profile ID.(v2.1.94)
• Fixed SDK/print mode not preserving the partial assistant response in conversation history when interrupted mid-stream.(v2.1.94)
• Fixed CJK and other multibyte text being corrupted with U+FFFD in stream-json input/output when chunk boundaries split a UTF-8 sequence.(v2.1.94)
• Fixed VSCode dropdown menus selecting the wrong item when the mouse was over the list while typing or using arrow keys.(v2.1.94)
• Fixed --resume failing with "tool_use ids were found without tool_result blocks" on sessions created before v2.1.85.(v2.1.86)
• Fixed Write/Edit/Read failing on files outside the project root (e.g., ~/.claude/CLAUDE.md) when conditional skills or rules are configured.(v2.1.86)
• Fixed unnecessary config disk writes on every skill invocation that could cause performance issues and config corruption on Windows.(v2.1.86)
• Fixed potential out-of-memory crash when using /feedback on very long sessions with large transcript files.(v2.1.86)
• Fixed --bare mode dropping MCP tools in interactive sessions and silently discarding messages enqueued mid-turn.(v2.1.86)
• Fixed the c shortcut copying only ~20 characters of the OAuth login URL instead of the full URL.(v2.1.86)
• Fixed masked input (e.g., OAuth code paste) leaking the start of the token when wrapping across multiple lines on narrow terminals.(v2.1.86)
• Fixed official marketplace plugin scripts failing with "Permission denied" on macOS/Linux since v2.1.83.(v2.1.86)
• Fixed statusline showing another session's model when running multiple Claude Code instances and using /model in one of them.(v2.1.86)
• Fixed scroll not following new messages after wheel scroll or click-to-select at the bottom of a long conversation.(v2.1.86)
• Fixed /plugin uninstall dialog: pressing n now correctly uninstalls the plugin while preserving its data directory.(v2.1.86)
• Fixed a regression where pressing Enter after clicking could leave the transcript blank until the response arrived.(v2.1.86)
• Fixed ultrathink hint lingering after deleting the keyword.(v2.1.86)
• Fixed memory growth in long sessions from markdown/highlight render caches retaining full content strings.(v2.1.86)
• Fixed VSCode extension incorrectly showing "Not responding" during long-running operations.(v2.1.86)
• Fixed VSCode extension defaulting Max plan users to Sonnet after the OAuth token refreshes (8 hours after login).(v2.1.86)
• Fixed voice push-to-talk: holding the voice key no longer leaks characters into the text input, and transcripts now insert at the correct position.(v2.1.84)
• Fixed up/down arrow keys being unresponsive when a footer item is focused.(v2.1.84)
• Fixed `Ctrl+U` (kill-to-line-start) being a no-op at line boundaries in multiline input, so repeated `Ctrl+U` now clears across lines.(v2.1.84)
• Fixed null-unbinding a default chord binding (e.g. `"ctrl+x ctrl+k": null`) still entering chord-wait mode instead of freeing the prefix key.(v2.1.84)
• Fixed mouse events inserting literal "mouse" text into transcript search input.(v2.1.84)
• Fixed workflow subagents failing with API 400 when the outer session uses `--json-schema` and the subagent also specifies a schema.(v2.1.84)
• Fixed missing background color behind certain emoji in user message bubbles on some terminals.(v2.1.84)
• Fixed the "allow Claude to edit its own settings for this session" permission option not sticking for users with `Edit(.claude)` allow rules.(v2.1.84)
• Fixed a hang when generating attachment snippets for large edited files.(v2.1.84)
• Fixed MCP tool/resource cache leak on server reconnect.(v2.1.84)
• Fixed a startup performance issue where partial clone repositories (Scalar/GVFS) triggered mass blob downloads.(v2.1.84)
• Fixed native terminal cursor not tracking the text input caret, so IME composition (CJK input) now renders inline and screen readers can follow the input position.(v2.1.84)
• Fixed spurious "Not logged in" errors on macOS caused by transient keychain read failures.(v2.1.84)
• Fixed cold-start race where core tools could be deferred without their bypass active, causing Edit/Write to fail with InputValidationError on typed parameters.(v2.1.84)
• Fixed multiple concurrent Claude Code sessions requiring repeated re-authentication when one session refreshed its OAuth token.(v2.1.81)
• Fixed voice mode silently swallowing retry failures and showing a misleading "check your network" message instead of the actual error.(v2.1.81)
• Fixed voice mode audio not recovering when the server silently drops the WebSocket connection.(v2.1.81)
• Fixed structured-outputs beta header causing 400 errors on proxy gateways by ensuring CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS correctly suppresses it.(v2.1.81)
• Fixed --channels bypass issue for Team/Enterprise organizations lacking other managed settings.(v2.1.81)
• Fixed a crash occurring specifically on Node.js 18 environments.(v2.1.81)
• Fixed unnecessary permission prompts appearing for Bash commands containing dashes within strings.(v2.1.81)
• Fixed plugin hooks blocking prompt submission when the plugin directory was deleted during an active session.(v2.1.81)
• Fixed a race condition where background agent task output could hang indefinitely if the task completed between polling intervals.(v2.1.81)
• Fixed resuming a session in a worktree now correctly switches the user back to that worktree.(v2.1.81)
• Fixed /btw command not including pasted text when used during an active response.(v2.1.81)
• Fixed a race condition where fast Cmd+Tab followed by paste could fail due to clipboard copy timing under tmux.(v2.1.81)
• Fixed terminal tab title not updating correctly with an auto-generated session description.(v2.1.81)
• Fixed invisible hook attachments inflating the message count when viewing transcripts.(v2.1.81)
• Fixed Remote Control sessions showing a generic title instead of deriving the title from the first prompt.(v2.1.81)
• Fixed /rename command not reliably syncing the title for Remote Control sessions.(v2.1.81)
• Fixed Remote Control /exit command not reliably archiving the session.(v2.1.81)
• Fixed Windows PATH inheritance issue for the Bash tool when using Git Bash within VSCode (a regression from v2.1.78).(v2.1.81)
• Fixed `--resume` dropping parallel tool results, ensuring all tool_use/tool_result pairs are restored instead of showing placeholders(v2.1.80)
• Fixed voice mode WebSocket failures caused by Cloudflare bot detection on non-browser TLS fingerprints(v2.1.80)
• Fixed 400 errors when using fine-grained tool streaming through API proxies, Bedrock, or Vertex(v2.1.80)
• Fixed `/remote-control` appearing for gateway and third-party provider deployments where it is non-functional(v2.1.80)
• Fixed `/sandbox` tab switching not responding to Tab or arrow keys(v2.1.80)
• Fixed managed settings (like `enabledPlugins`, `permissions.defaultMode`, policy-set env vars) not being applied at startup when `remote-settings.json` was cached(v2.1.80)
• Fixed freezes and 100% CPU loops triggered by permission prompts for complex bash commands(v2.1.73)
• Fixed a deadlock that could freeze Claude Code when many skill files changed at once (e.g. during `git pull` in a repo with a large `.claude/skills/` directory)(v2.1.73)
• Fixed Bash tool output being lost when running multiple Claude Code sessions in the same project directory(v2.1.73)
• Fixed subagents with `model: opus`/`sonnet`/`haiku` being silently downgraded to older model versions on Bedrock, Vertex, and Microsoft Foundry(v2.1.73)
• Fixed background bash processes spawned by subagents not being cleaned up when the agent exits(v2.1.73)
• Fixed `/resume` showing the current session in the picker(v2.1.73)
• Fixed `/ide` crashing with `onInstall is not defined` when auto-installing the extension(v2.1.73)
• Fixed `/loop` not being available on Bedrock/Vertex/Foundry and when telemetry was disabled(v2.1.73)
• Fixed SessionStart hooks firing twice when resuming a session via `--resume` or `--continue`(v2.1.73)
• Fixed JSON-output hooks injecting no-op system-reminder messages into the model's context on every turn(v2.1.73)
• Fixed voice mode session corruption when a slow connection overlaps a new recording(v2.1.73)
• Fixed Linux sandbox failing to start with "ripgrep (rg) not found" on native builds(v2.1.73)
• Fixed Linux native modules not loading on Amazon Linux 2 and other glibc 2.26 systems(v2.1.73)
• Fixed "media_type: Field required" API error when receiving images via Remote Control(v2.1.73)
• Fixed `/heapdump` failing on Windows with `EEXIST` error when the Desktop folder already exists(v2.1.73)
• VSCode: Fixed HTTP 400 errors for users behind proxies or on Bedrock/Vertex with Claude 4.5 models(v2.1.73)
• Fixed FileWriteTool line counting to preserve intentional trailing blank lines instead of stripping them.(v2.1.47)
• Fixed Windows terminal rendering bugs where line counts showed incorrect values (always 1) due to `os.EOL` (`\r\n`) in display code.(v2.1.47)
• Fixed bold and colored text in markdown output shifting to the wrong characters on Windows due to `\r\n` line endings.(v2.1.47)
• Fixed compaction failing when conversations contain many PDF documents by stripping document blocks alongside images before sending to the compaction API.(v2.1.47)
• Fixed bash tool output being silently discarded on Windows when using MSYS2 or Cygwin shells.(v2.1.47)
• Fixed the bash permission classifier from incorrectly granting permissions based on hallucinated descriptions.(v2.1.47)
• Fixed user-defined agents only loading one file on NFS/FUSE filesystems that report zero inodes.(v2.1.47)
• Fixed plugin agent skills silently failing to load when referenced by bare name instead of fully-qualified plugin name.(v2.1.47)
• Fixed CWD tracking temp files never being cleaned up on Windows, preventing indefinite accumulation.(v2.1.47)
• Fixed API 400 errors ("thinking blocks cannot be modified") in sessions with concurrent agents caused by interleaved streaming content blocks.(v2.1.47)
• Fixed a single file write/edit error from aborting all other parallel file write/edit operations; independent mutations now complete on failure.(v2.1.47)
• Fixed custom session titles set via `/rename` being lost after resuming a conversation.(v2.1.47)
• Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start.(v2.1.47)
• Fixed bash commands using backslash-newline continuation lines (`\` followed by newline) producing spurious empty arguments.(v2.1.47)
• Fixed built-in slash commands being hidden from the autocomplete dropdown when many user skills are installed.(v2.1.47)
• Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading.(v2.1.47)
• Fixed session name persisting in status bar after `/clear` command.(v2.1.47)
• Fixed crash when a skill's `name` or `description` in SKILL.md frontmatter is a bare number, by coercing the value to a string.(v2.1.47)
• Fixed `/resume` silently dropping sessions when the first message exceeds 16KB or uses array-format content.(v2.1.47)
• Fixed `claude doctor` misclassifying mise and asdf-managed installations as native installs.(v2.1.47)
• Fixed zsh heredoc failing with "read-only file system" error in sandboxed commands.(v2.1.47)
• Fixed agent progress indicator showing inflated tool use count.(v2.1.47)
• Fixed image pasting not working on WSL2 systems where Windows copies images as BMP format.(v2.1.47)
• Fixed background agent results returning raw transcript data instead of the agent's final answer.(v2.1.47)
• Fixed Warp terminal incorrectly prompting for Shift+Enter setup when it supports it natively.(v2.1.47)
• Fixed CJK wide characters causing misaligned timestamps and layout elements in the TUI.(v2.1.47)
• Fixed custom agent `model` field in `.claude/agents/*.md` being ignored when spawning team teammates.(v2.1.47)
• Fixed plan mode being lost after context compaction, causing the model to switch from planning to implementation mode.(v2.1.47)
• Fixed `alwaysThinkingEnabled: true` in settings.json not enabling thinking mode on Bedrock and Vertex providers.(v2.1.47)
• Fixed `tool_decision` OTel telemetry event not being emitted in headless/SDK mode.(v2.1.47)
• Fixed session name being lost after context compaction; renamed sessions now preserve their custom title through compaction.(v2.1.47)
• Fixed `/resume <session-id>` failing to find sessions whose first message exceeds 16KB.(v2.1.47)
• Fixed "Always allow" on multiline bash commands creating invalid permission patterns that corrupt settings.(v2.1.47)
• Fixed React crash (error #31) when a skill's `argument-hint` in SKILL.md frontmatter uses YAML sequence syntax, by coercing the value to a string.(v2.1.47)
• Fixed crash when using `/fork` on sessions that used web search by gracefully handling null entries in search results.(v2.1.47)
• Fixed read-only git commands triggering FSEvents file watcher loops on macOS by adding --no-optional-locks flag.(v2.1.47)
• Fixed custom agents and skills not being discovered when running from a git worktree; project-level agent/skill directories are now included.(v2.1.47)
• Fixed non-interactive subcommands like `claude doctor` and `claude plugin validate` being blocked inside nested Claude sessions.(v2.1.47)
• Windows: Fixed the same CLAUDE.md file being loaded twice when drive letter casing differs between paths.(v2.1.47)
• Fixed inline code spans in markdown being incorrectly parsed as bash commands.(v2.1.47)
• Fixed teammate spinners not respecting custom spinnerVerbs from settings.(v2.1.47)
• Fixed shell commands permanently failing after a command deletes its own working directory.(v2.1.47)
• Fixed hooks (PreToolUse, PostToolUse) silently failing.(v2.1.47)
• Fixed Agent Teams teammates failing on Bedrock, Vertex, and Foundry by correctly propagating API provider environment variables to tmux-spawned processes.(v2.1.45)
• Resolved sandbox "operation not permitted" errors on macOS when writing temporary files by ensuring the correct per-user temp directory is used.(v2.1.45)
• Fixed a crash in the Task tool (backgrounded agents) caused by a `ReferenceError` upon task completion.(v2.1.45)
• Fixed autocomplete suggestions not being accepted via the Enter key when images have been pasted into the input field.(v2.1.45)
• Fixed skills invoked by subagents incorrectly appearing in the main session context after compaction.(v2.1.45)
• Fixed the accumulation of excessive `.claude.json.backup` files during every startup.(v2.1.45)
• Fixed plugin-provided commands, agents, and hooks not being available immediately after installation without requiring a full restart.(v2.1.45)
• Fixed /resume command showing interrupt messages as session titles.(v2.1.42)
• Fixed Opus 4.6 launch announcement incorrectly displaying for Bedrock, Vertex, and Foundry users.(v2.1.42)
• Fixed permanent session lockups caused by excessively large PDF uploads, which previously required starting a new conversation(v2.1.31)
• Fixed bash commands incorrectly reporting "Read-only file system" errors when sandbox mode was enabled(v2.1.31)
• Fixed a crash that rendered sessions unusable after entering plan mode when the project configuration in `~/.claude.json` was missing default fields(v2.1.31)
• Fixed the `temperatureOverride` parameter being silently ignored in the streaming API path, ensuring configured overrides are respected(v2.1.31)