Claude Code vertex

All VERTEX Bug Fixes

• Fixed typed or pasted characters occasionally landing out of order or being dropped during fast input or key repeat.(v2.1.261)
• Fixed `/add-dir <subdirectory>` printing a false "couldn't be resolved" error when the working directory is on a `/net` automount.(v2.1.261)
• Fixed the Bedrock setup wizard hanging when AWS or an AWS credential helper never responds, now it times out with a clear error.(v2.1.261)
• Fixed Bedrock model checks failing behind a TLS-inspecting proxy.(v2.1.261)
• Fixed cloud sessions discarding a plugin synced from claude.ai when managed settings force-enable it, then falling back to a potentially failing marketplace clone.(v2.1.261)
• Fixed inability to delete the character immediately before an inline `[Image #N]` chip in the prompt input.(v2.1.261)
• Fixed resuming a session losing hook output and other context around parallel tool calls, which previously altered the resumed request.(v2.1.261)
• Fixed Remote Control showing a stale permission mode when a phone, browser, or claude.ai app attaches to a terminal session or after the mode changes.(v2.1.261)
• Fixed Remote Control sessions appearing to still be working after stopping a turn or executing a local slash command like `/clear`.(v2.1.261)
• Fixed SDK and cloud sessions ignoring a Stop or interrupt sent just after the first prompt, before the turn had started; turns now stop correctly.(v2.1.261)
• Fixed Remote Control uploading a session pulled with `/teleport` into the connected session, which previously appeared appended to the original.(v2.1.261)
• Fixed Remote Control's inbound event stream failing behind TLS-inspecting corporate proxies on native Windows.(v2.1.261)
• Fixed Remote Control sessions showing the default effort level on claude.ai when the effort level is specified in settings.(v2.1.261)
• Fixed `gcpAuthRefresh` opening a browser at startup when the Google credential check was slow, even if the credential was still valid.(v2.1.261)
• Fixed claude.ai connectors staying absent for the entire session when the startup connector fetch timed out; the CLI now retries in the background.(v2.1.261)
• Fixed sustained high CPU usage when a background agent could not be resumed and its wake-up was retried in a tight loop.(v2.1.261)
• Fixed feature flags gated to a newer version occasionally applying to an older Claude Code version on the same machine.(v2.1.261)
• Fixed `/usage` and the VS Code usage panel dropping a model-specific weekly limit row when the usage endpoint is rate limited or opened right after startup.(v2.1.261)
• Fixed `claude -p --resume <file>` adopting a malformed session ID recorded in the transcript; it now resumes under a fresh session ID.(v2.1.261)
• Fixed the terminal progress indicator showing the session as finished while a background workflow or agent was still running.(v2.1.261)
• Fixed a rare layout glitch where a box could render with the wrong height after its container switched between row and column direction.(v2.1.261)
• Fixed Claude apps gateway client IP when a trusted proxy appends a port to `X-Forwarded-For`; unreadable entries now result in a 403.(v2.1.261)
• Fixed Claude apps gateway telling Claude Desktop to export OpenTelemetry as JSON even when the terminal CLI uses protobuf, preventing collector rejection.(v2.1.261)
• Fixed Desktop and web showing a session as busy when it is only watching an artifact for updates.(v2.1.261)
• Fixed Claude in Chrome `file_upload` failing with an error in local Cowork sessions run from the Claude Desktop app.(v2.1.261)
• Fixed `SendMessage` to an offline Remote Control session on another machine incorrectly reading as delivered; delivery is now queued until the machine reconnects.(v2.1.261)
• Fixed plugin install hints from CLIs run in background Bash commands from leaking the raw `<claude-code-hint>` tag into the conversation.(v2.1.261)
• Fixed in-process agent-team teammates re-sending their first-turn tool and skill announcements on the second turn, which altered the request prefix and missed the prompt cache.(v2.1.261)
• Fixed a VS Code session teleported from Claude Code on the web treating a question that was cut off when the cloud session shut down as declined.(v2.1.261)
• Fixed the VS Code session tab's Rename box opening empty for a tab restored with the window; it now starts with the current name.(v2.1.261)
• Fixed collapsed sections in the VS Code session list panel briefly showing expanded each time the panel loaded.(v2.1.261)
• Fixed VS Code Focus view showing a tool call as still running after Claude had moved on.(v2.1.261)
• Fixed the VS Code session list's active-row highlight going stale when an unfocused Claude tab's session ID is corrected.(v2.1.261)
• Fixed Cmd/Ctrl+Shift+T reopen and deep-link opens placing the VS Code Claude tab outside the Claude editor group when a Claude tab has focus.(v2.1.261)
• Fixed the VS Code session tab's "Add to group" action for a session opened from Claude Code on the Web.(v2.1.261)
• Fixed concurrent sessions silently reverting each other's `~/.claude.json` changes, preventing workspace trust resets and loss of MCP/project state.(v2.1.259)
• Fixed a bug where a rejected conversation turn would be repeatedly rejected on subsequent turns.(v2.1.259)
• Fixed Bash `Read()` deny rules not correctly covering files provided as option values, `git diff`/`git grep` file operands, or `cd DIR && cat FILE` compounds.(v2.1.259)
• Fixed the prompt cache being invalidated upon OAuth token refresh in sessions with telemetry disabled.(v2.1.259)
• Fixed fullscreen mode displaying a blank conversation after a long turn with numerous tool calls.(v2.1.259)
• Fixed auto mode incorrectly running a turn on an unsupported model when a command or skill's frontmatter specified one; the session model is now used.(v2.1.259)
• Fixed `CLAUDE_CODE_MAX_CONTEXT_TOKENS` being ignored for unrecognized Vertex-style model IDs.(v2.1.259)
• Fixed the live output preview of running shell commands hiding newest lines when an earlier line wrapped.(v2.1.259)
• Fixed a background GitHub connection check for claude.ai users that ran on every launch; the result is now remembered.(v2.1.259)
• Fixed `--resume` failing and `--continue` opening an empty conversation when a saved session contained an attachment entry without a payload.(v2.1.259)
• Fixed frontmatter `model:` on custom commands and skills being ignored in interactive sessions.(v2.1.259)
• Fixed Artifact publishing failing with an "unexpected parameter `note`" error in conversations continued from older versions.(v2.1.259)
• Fixed managed `forceRemoteSettingsRefresh` being ignored at startup when a policy helper had already run.(v2.1.259)
• Fixed worktree isolation refusing hook-created worktrees on machines where `git rev-parse` fails with non-"not a git repository" messages.(v2.1.259)
• Fixed OpenTelemetry metrics and events from cloud sessions missing `user.email`, `organization.id`, and `user.account_uuid` attributes.(v2.1.259)
• Fixed MCP servers disconnecting during tool listing at startup, which previously showed as connected with no tools instead of reporting an error.(v2.1.259)
• Fixed the file edit permission dialog sometimes truncating changed lines without indication.(v2.1.259)
• Fixed repository detection dropping a known repo identity after a transient git probe failure.(v2.1.259)
• Fixed managed settings silently going unenforced when parsing failed; Claude Code now refuses to start and names the source of the failure.(v2.1.259)
• Fixed Stop not actually stopping background agents and workflows in remote-control sessions; killed tasks now remain visible and re-stoppable.(v2.1.259)
• Fixed resuming a workflow run while its previous stopped run was still exiting, preventing duplicate agent copies.(v2.1.259)
• Fixed marketplace repo URLs on github.com with trailing slashes or dangling `?`/`#` producing unusable `.git` clone URLs.(v2.1.259)
• Fixed blocking Stop hooks causing the subsequent turn to lose model reasoning and potentially miss the prompt cache.(v2.1.259)
• Fixed remote (claude.ai) sessions taking 60 seconds to start a turn after a browser-hosted MCP server's page disappeared.(v2.1.259)
• Fixed worktree-isolated sessions refusing common Bash loops, xargs pipelines, and launcher-wrapped commands that cannot reach the main checkout.(v2.1.259)
• Fixed remote and scheduled sessions doing nothing after a connector-tool permission prompt was approved while the session was paused.(v2.1.259)
• Fixed settings in a `.claude/` folder created after startup not being recognized until the application was restarted.(v2.1.257)
• Resolved an issue where sessions dispatched from an agent view using `←` incorrectly inherited the original session's permission mode, overriding target directory defaults.(v2.1.257)
• Fixed `keybindings.json` rebinds of Ctrl+G being ignored in `claude agents`; Ctrl+S and Ctrl+T are now rebindable within the new `Agents` context.(v2.1.257)
• Corrected background session startup failures on macOS npm installs during self-updates and on Windows when a stale daemon lock file pointed to a reused process ID.(v2.1.257)
• Fixed the working spinner incorrectly stopping while a response was streaming behind a slash-command panel.(v2.1.257)
• Resolved an issue where a background session's `state.json` `detail` would repeat its own dispatch prompt after a scheduled wake-up.(v2.1.257)
• Ensured `claude agents` correctly handles background sessions that finish after being re-prompted, ordering them by latest finish time in the Completed list.(v2.1.257)
• Fixed `claude --bg` from a deleted directory to now print the reason for failure and exit with code 1, instead of reporting "backgrounded" and leaving a crashed session row.(v2.1.257)
• Prevented Remote Control from re-sending the Bash tool definition mid-session, which caused prompt-cache misses.(v2.1.257)
• Fixed a doubly-listed custom `Authorization` header overriding configured credentials on Bedrock, Mantle, Vertex, and WIF, and the Vertex setup wizard incorrectly picking up old Anthropic profiles.(v2.1.257)
• Corrected Claude apps gateway behavior to prevent sending stray host `Authorization` or profile headers to Foundry, Vertex, and Bedrock, and resolved Foundry Entra ID upstream startup issues when `ANTHROPIC_FOUNDRY_API_KEY` is set.(v2.1.257)
• Prevented a leftover Anthropic API key or auth token from being sent alongside a Foundry subscription key in API-key mode.(v2.1.257)
• Fixed `/schedule` routines where prompts saved without a message role would run with no action.(v2.1.257)
• Improved `claude agents` to now indicate when a background session is waiting for message approval from another session and who sent it.(v2.1.257)
• Resolved a bug where prompts stashed with Ctrl+S inside an opened background session were lost when the session became idle or was stopped and reopened.(v2.1.257)
• Fixed telemetry (OTEL) settings pushed via server-managed settings being ignored on warm starts, including in desktop-app Code sessions.(v2.1.257)
• Prevented a teammate permission request from being answered twice when the leader's mailbox write was briefly locked.(v2.1.257)
• Fixed a phantom duplicate slash-command row rendering below the in-flight turn while a command's auto-continued response streamed.(v2.1.257)
• Clamped `policyHelper` `timeoutMs` and `refreshIntervalMs` values above the timer maximum to prevent failures or millisecond re-runs.(v2.1.257)
• Fixed the token counter freezing or crawling after switching to another subagent's transcript, and ensured background subagents' and teammates' counters update live during response streaming.(v2.1.257)
• Resolved an issue where sandbox network hosts written with a trailing dot (e.g., `example.com.`) were not blocked by `deniedDomains` entries and the "don't ask again" option failed.(v2.1.257)
• Fixed dismissing the Remote Control consent prompt (Esc or `n`) from being incorrectly counted as consent.(v2.1.257)
• Prevented `/mcp` reconnect and enable from connecting a settings-file MCP server that should have been blocked by managed MCP allow/deny lists or `strictPluginOnlyCustomization`.(v2.1.257)
• Fixed `claude mcp remove` from leaving stored OAuth credentials behind when `strictPluginOnlyCustomization` locks MCP to plugin-only servers.(v2.1.257)
• Ensured Remote Control sessions started from the Claude app now respect the selected model instead of defaulting to the machine's default.(v2.1.257)
• Corrected `--disallowedTools` and session deny rules from being dropped after the first settings reload when `allowManagedPermissionRulesOnly` is enabled.(v2.1.257)
• Fixed `--resume` listing a backgrounded conversation twice and `--continue` reopening its stalled pre-background copy; `--continue` now also opens finished background sessions.(v2.1.257)
• Enabled clicking `!` shell command output to expand it in fullscreen mode.(v2.1.257)
• Ensured background sessions running an older Claude Code binary are retired during auto-updates instead of piling up.(v2.1.257)
• Fixed `claude agents --json` from briefly switching the terminal to raw mode and undoing other programs' terminal settings on exit.(v2.1.257)
• Prevented Proactive output style sessions from busy-looping with filler messages and repeated log reads while a background command or Monitor was still running.(v2.1.257)
• Resolved subagents stopping when a response was cut off mid-stream due to computer sleep, connection drops, or server errors; they now automatically continue.(v2.1.257)
• Fixed `←` in the `/btw` panel within a `claude agents` session to now return to the agents list and reopen the panel when the session is revisited.(v2.1.257)
• Ensured sessions with an advisor model set now utilize the prompt cache for background requests, preventing re-sending the full conversation uncached.(v2.1.257)
• Fixed `claude -p` from exiting prematurely while a Monitor was still running; it now waits for the watch to fire or time out.(v2.1.257)
• Prevented a `permissions.ask` rule from being skipped in auto mode when the matching command ran inside a compound command or subshell, ensuring confirmation prompts are shown.(v2.1.257)
• Prevented plugins from reading files outside their own directory through symlinked paths, now refusing such paths with an error.(v2.1.257)
• Enabled `/add-dir` to now load skills, commands, and agents from a directory within the current working directory, similar to `--add-dir` at startup.(v2.1.257)
• Ensured the main agent is now notified when you resume a subagent that was previously stopped from its transcript view.(v2.1.257)
• Fixed a crash occurring when pasting ANSI-colored text into dialogs like `/feedback`.(v2.1.257)
• Prevented `claude mcp add/remove` from hanging or exhausting memory when the project's `.mcp.json` is a FIFO or device-file symlink, now failing fast with an actionable message.(v2.1.257)
• Resolved unbounded memory growth when non-JSONL data is piped into `claude -p --input-format stream-json`, now failing fast with a clear error.(v2.1.257)
• Fixed backgrounding a turn (`←` or Ctrl+B) while a subagent or tool was running from occasionally causing the background session to treat that tool as rejected instead of re-running it.(v2.1.257)
• Ensured Bash `Read()`/`Edit()` deny rules now apply to `< file` redirects and reader commands like `tac` and `egrep`.(v2.1.257)
• Fixed file tools (Read, Write, Edit) from incorrectly accessing files outside the approved location when following symlinks.(v2.1.251)
• Fixed plugin commands declared in marketplace entries from pointing outside the plugin directory, preventing path-traversal vulnerabilities.(v2.1.251)
• Fixed project settings from allowing the enablement of detailed beta tracing or raw API body logging, and bypassing OTLP collector pinning.(v2.1.251)
• Fixed the Workflow tool from incorrectly reading and quoting `scriptPath` values outside the session's readable scope.(v2.1.251)
• Fixed Grep and Glob from not applying `Read(...)` deny rules to files accessed through symlinked search paths.(v2.1.251)
• Fixed conversations from getting stuck on 'text content blocks must be non-empty' errors when the model produced only thinking.(v2.1.251)
• Fixed the first launch on a fresh install from defaulting to default mode instead of auto mode for accounts configured for auto mode startup.(v2.1.251)
• Fixed Opus 5 requests failing with an 'effort not supported when thinking is disabled' error by sending effort as `high` in that scenario.(v2.1.251)
• Fixed TUI lag with many parallel subagents by replacing per-second progress ticks instead of piling them up.(v2.1.251)
• Fixed agent teams so that a teammate's final answer now correctly reaches the team lead.(v2.1.251)
• Fixed background subagents from being unable to reply to messages from unnamed sibling or parent agents.(v2.1.251)
• Fixed managed-settings `disableAutoMode` from not moving an already-running auto-mode session back to default mode when arriving mid-session.(v2.1.251)
• Fixed a tip about switching to Opus 1M for more context from appearing when the current Opus model already had a 1M context window.(v2.1.251)
• Fixed Claude apps gateway sessions from incorrectly treating stored Anthropic profiles as active.(v2.1.251)
• Fixed cloud sessions from incorrectly advising the model had changed when the host was only setting the initial model.(v2.1.251)
• Fixed Remote Control from reporting a failure when an organization policy disables it, now showing a quiet notice instead.(v2.1.251)
• Fixed `/mcp reconnect` on Remote Control from showing a generic error instead of the actual remedy when a server was disabled.(v2.1.251)
• Fixed `--input-format stream-json` from losing assistant tool call results when client-injected calls were sent without a message id.(v2.1.251)
• Fixed session transcripts from being silently overwritten when a directory change relocated a session onto an existing same-ID transcript.(v2.1.251)
• Fixed background sessions and subagents from being unable to edit files inside a git worktree they created.(v2.1.251)
• Fixed background sessions from occasionally starting without plugin skills when the plugin marketplace was refreshing.(v2.1.251)
• Fixed text selection in opened background sessions inside tmux over SSH from copying to the tmux buffer correctly.(v2.1.251)
• Fixed SDK and cloud sessions from hanging indefinitely when an SDK MCP server's handshake acknowledgment was lost, now timing out.(v2.1.251)
• Fixed self-hosted runner from leaving stuck Bash tool processes running after a session was force-stopped.(v2.1.251)
• Fixed `/usage-credits` for Team and Enterprise members with a $0 org limit from offering to ask the admin instead of stating a cap was reached.(v2.1.251)
• Fixed `--worktree --tmux` with a gitlab.com merge-request number from trying a GitHub-style fetch instead of fetching the GitLab ref directly.(v2.1.251)
• Fixed Ctrl+G from failing with an 'Emacs quit unexpectedly' error in background sessions for editors opening `/dev/tty`.(v2.1.251)
• Fixed startup crashes or broken settings updates caused by an `additionalDirectories` entry containing a null byte.(v2.1.251)
• Fixed the MCP server menu's copy shortcut from incorrectly claiming success instead of stating how the sign-in URL was copied.(v2.1.251)
• Fixed italic text rendering as highlighted blocks in GNU screen and tmux sessions using a `screen` terminal type.(v2.1.251)
• Fixed `claude mcp add --header` and `claude mcp add-json` help text from naming the wrong transports.(v2.1.251)
• Fixed `claude ultrareview` and `/ultrareview` from waiting the full 30 minutes when the cloud session failed to start, now stopping early.(v2.1.251)
• Fixed Bash permission checks from auto-approving commands that assign arithmetic expressions to integer shell variables, now prompting for approval.(v2.1.251)
• Fixed backgrounded sessions from losing exported Vertex/Bedrock gateway variables, causing requests to fail.(v2.1.251)
• Fixed `claude --bg --model fable` on Max plans from stopping to ask for usage credits when the interactive session still had allowance.(v2.1.251)
• Fixed the one-time 'make auto mode your default' offer from appearing in unattended sessions where it could be accidentally accepted.(v2.1.251)
• Fixed the managed-settings approval prompt from re-appearing after re-signing in when settings were unchanged.(v2.1.251)
• Fixed disabled `/bug` and `/share` from incorrectly reporting that `/feedback` was disabled, and now correctly hides `/feedback` suggestions.(v2.1.251)
• Fixed cloud session creation from advising GitHub setup after a transient GitHub connection failure, now suggesting a retry.(v2.1.251)
• Fixed background sessions and their subagents from being unable to edit files inside a git worktree they created with `git worktree add`.(v2.1.251)
• Fixed a prompt-cache miss that occurred roughly once an hour in long sessions due to tool definitions re-rendering after an OAuth token refresh.(v2.1.248)
• Fixed the `ScheduleWakeup` tool definition changing between sessions when an account entered usage overage, preventing prompt-cache misses on resumed sessions.(v2.1.248)
• Resolved Claude Desktop and Cowork sessions disappearing after 30 days by updating transcript cleanup to retain desktop-written sessions.(v2.1.248)
• Prevented being sent to the login screen when another Claude Code process held the token refresh lock by failing the request with a retryable error instead.(v2.1.248)
• Fixed the `claude agents` list on Windows not responding to the keyboard after detaching from a session or when launched in a terminal tab left in win32-input-mode.(v2.1.248)
• Fixed the recommended Console sign-in in `/login` failing with an OAuth error on machines where it cannot be used, by falling back to API-key sign-in.(v2.1.248)
• Ensured model names in `/model` and fast-mode switch notices render as code to display suffixes like `[1m]` literally.(v2.1.248)
• Fixed `claude agents` skipping the workspace trust prompt when the `CI` environment variable is set.(v2.1.248)
• Fixed `claude agents` crashing on launch when the PR-status cache contained a malformed entry.(v2.1.248)
• Fixed agent view resurrecting week-old background sessions by showing them as stopped and prompting before resuming.(v2.1.248)
• Corrected agent view sometimes opening an older conversation and dropping the typed prompt when starting a new session.(v2.1.248)
• Prevented `claude agents` from starting a second process on a conversation when opening a stopped session already resumed in another terminal.(v2.1.248)
• Fixed `claude agents` and `claude rm` refusing to delete a session with unpushed commits when its worktree branch was already merged into the default branch.(v2.1.248)
• Fixed background sessions waiting silently when a `PermissionRequest` or `PreToolUse` hook printed an invalid answer by naming the hook and schema error.(v2.1.248)
• Fixed hooks silently treating non-JSON stdout objects as plain text by reporting them as hook errors with parse messages.(v2.1.248)
• Fixed `/mcp` listing a project `.mcp.json` entry under the wrong heading by displaying it under its real scope.(v2.1.248)
• Prevented MCP servers with `headersHelper` from falling into OAuth discovery on a 401 by correctly re-running the helper and retrying the call.(v2.1.248)
• Fixed `/login` to a Claude apps gateway hanging when the managed-settings security approval dialog was required.(v2.1.248)
• Fixed gateway model discovery never running when `apiKeyHelper` was the only credential.(v2.1.248)
• Fixed `claude logs` leaving terminal settings like mouse tracking and alternate screen enabled after execution.(v2.1.248)
• Corrected a garbled character in the trust dialog's list of repo permission rules when a long rule was cut off mid-emoji.(v2.1.248)
• Fixed the permission mode indicator staying hidden behind the 'Press Ctrl-C again to exit' hint.(v2.1.248)
• Prevented `/ultrareview` and locally seeded cloud sessions from uploading uncommitted edits and sensitive file copies by keeping them on the local machine.(v2.1.248)
• Resolved Remote Control sessions occasionally not showing a permission prompt or latest messages after silent reconnection.(v2.1.248)
• Fixed cloud sessions occasionally failing at startup when container session credentials were not yet readable.(v2.1.248)
• Prevented `claude remote-control` from rejecting its own flags when a global flag or wrapper-injected option preceded the subcommand.(v2.1.248)
• Fixed startup warnings rendering one column to the right of the rest of the transcript.(v2.1.248)
• Ensured a backgrounded worktree session retains its checkout by holding the worktree's lock while it runs.(v2.1.248)
• Fixed @-mentions of other sessions not matching names typed with non-Latin characters.(v2.1.248)
• Prevented an invalid `crossSessionInbound` value from being silently ignored by warning and holding or refusing messages until fixed.(v2.1.248)
• Fixed rate-limit, usage, and fast-mode messages incorrectly telling users to run `/usage-credits` when the command was unavailable.(v2.1.248)
• [VSCode] Fixed a chat tab getting stuck on 'No conversation found' by starting a new conversation instead.(v2.1.248)
• Fixed an issue where fast arrow-key + Enter sequences in history search and various commands (`/config`, `/mcp`, `/skills`, etc.) would incorrectly act on the row above the navigated one.(v2.1.247)
• Resolved a problem where sub-agents would die on a first-call model 404 error; they now use the session's fallback model chain and return detailed error information.(v2.1.247)
• Fixed a bug where hooks or background agents printing excessive error output could overflow the conversation and cause sessions to get stuck with a 'Prompt is too long' error.(v2.1.247)
• Corrected an issue where Ctrl keyboard shortcuts were not firing in kitty-protocol terminals with non-Latin keyboard layouts.(v2.1.247)
• Prevented text like `<35;150;7M` from being inserted into prompts when mouse reports were split across reads immediately after the escape prefix.(v2.1.247)
• Fixed the Bash sandbox's cleanup process from incorrectly deleting dotfile-managed `~/.claude/settings.json` symlinks when they were repointed outside the sandbox's writable area.(v2.1.247)
• Resolved an issue where `/terminal-setup` would overwrite the entire Zed `keymap.json` instead of merging keybindings.(v2.1.247)
• Fixed `/rename` to provide a notification when the session registry could not be updated, informing users that other sessions might still display the old name.(v2.1.247)
• Corrected `/compact` and 'Summarize from here' in `--agent` sessions to summarize using the conversation's system prompt instead of the default one.(v2.1.247)
• Fixed background sessions that were stuck showing 'opening…' after their terminal host process died; these sessions now fail with a reason and can be restarted.(v2.1.247)
• Addressed unbounded memory growth when a hook's or background task's output file could not be written; the file now indicates where output was lost.(v2.1.247)
• Fixed `/install-github-app` over SSH so the copy shortcut accurately reports success and the sign-in URL appears immediately if a browser cannot be opened.(v2.1.247)
• Resolved an issue where shell commands carried over from the foreground could log internal errors or show misleading exit codes when finishing in background sessions.(v2.1.247)
• Fixed a version-less marketplace plugin's live cache directory being deleted and recreated on a second-scope install, which could disrupt running sessions.(v2.1.247)
• Corrected Remote Control sessions started with `/remote-control` to properly report the working-tree diff to connected clients.(v2.1.247)
• Fixed self-hosted runner sessions reporting 'running' before Claude Code had started, preventing premature 'Claude is waiting for your input' notifications.(v2.1.247)
• Resolved first-run setup failures that occurred when managed settings configured gateway sign-in and Anthropic endpoints were unreachable.(v2.1.247)
• Fixed cloud sessions that sometimes showed the previous permission mode when switching modes immediately after sending a message.(v2.1.247)
• Addressed cloud sessions going silent when the session's container restarted between turns while background processes were running; resumed sessions now report lost work.(v2.1.247)
• Improved plugin marketplace security by rejecting names with control or invisible characters and ensuring marketplace text is escape-safe.(v2.1.247)
• Fixed fullscreen mode showing a blank transcript after resizing the terminal and jumping to the bottom until the next keypress(v2.1.246)
• Fixed a severe transcript slowdown when a diff contained a very long single line by truncating and marking such lines(v2.1.246)
• Fixed erratic fullscreen scrolling when positioned at an earlier message, preventing jump-to-bottom from getting stuck(v2.1.246)
• Fixed background sessions failing to open after 45 seconds due to deleted directories, machine sleep, or slow process startup(v2.1.246)
• Fixed background sessions failing to open with an EACCES error when another Claude Code process was re-installing the npm package(v2.1.246)
• Fixed markdown rendering being disabled for entire messages under specific conditions (no markdown in first 500 chars, or for certain list/heading types)(v2.1.246)
• Fixed MCP tool calls interrupted by an incoming message in headless/remote sessions being incorrectly reported as completed with no output(v2.1.246)
• Fixed MCP tool arguments being sent as JSON strings when the parameter's schema is empty, instead of their correct type(v2.1.246)
• Fixed commands interrupted mid-run showing as completed without indicating they were cut short(v2.1.246)
• Fixed pressing back arrow or running /background during a dynamic workflow from restarting finished subagents; now prompts for confirmation(v2.1.246)
• Fixed opening a just-started session in 'claude agents' while its worker was booting from stopping unexpectedly(v2.1.246)
• Fixed 'claude agents' listing a backgrounded named session twice; now numbers subsequent backgroundings of the same conversation(v2.1.246)
• Fixed the background retention sweep removing user-created git worktrees under .claude/worktrees/(v2.1.246)
• Fixed auto mode tool calls being denied on very large sessions by scaling the safety-check deadline with prompt size(v2.1.246)
• Fixed the plugin cache creating duplicate SHA-named directories for the same plugin(v2.1.246)
• Fixed plugin skills showing doubled names in the slash menu when the frontmatter 'name' already includes the '<plugin>:' prefix(v2.1.246)
• Fixed 'claude plugin update' failing for installed plugins given only their bare name(v2.1.246)
• Fixed plugin installation failing when 'plugin.json' was saved with a UTF-8 byte-order mark (BOM)(v2.1.246)
• Fixed '/reload-plugins' reporting 0 skills for plugins that define skills under 'skills/*/SKILL.md'(v2.1.246)
• Fixed hook error messages showing a literal "${CLAUDE_PLUGIN_ROOT}" instead of the resolved plugin path(v2.1.246)
• Fixed '/rename' replacing the theme's prompt border color with default cyan; border now retains theme color unless overridden(v2.1.246)
• Fixed custom theme diff colors being ignored in diffs and the '/theme' preview(v2.1.246)
• Fixed a 'keybindings.json' binding with an unknown action name silently disabling the key; now logs a warning and keeps default binding(v2.1.246)
• Fixed '/stats' activity heatmap showing days off by one cell in timezones east of UTC(v2.1.246)
• Fixed '/fork' from an already-forked or backgrounded session starting the new session with an empty conversation(v2.1.246)
• Fixed the '@' file picker staying open after typed text stopped matching a real path(v2.1.246)
• Fixed the status line's cost and duration resetting to zero after navigating to the agents view and back(v2.1.246)
• Fixed fullscreen mode moving keyboard focus unexpectedly when clicking the terminal window(v2.1.246)
• Fixed path completion failing when the completion token or working directory contained a null byte(v2.1.246)
• Fixed headless sessions not cleaning up stale entries in '~/.claude/sessions' on Windows/macOS after unclean exits(v2.1.246)
• Fixed the UI stopping with a render error on the first tool call when a third-party Anthropic-compatible endpoint streams a 'tool_use' block without an 'id'(v2.1.246)
• Fixed the Write tool reporting 'Out of memory' or freezing after overwriting a very large file(v2.1.246)
• Fixed 'claude plugin install <name>' exiting silently or hanging when '~/.claude/plugins/known_marketplaces.json' is empty or corrupted(v2.1.246)
• Fixed resumed sessions failing every turn with a 400 error when saved history contains tool blocks not accepted by the Anthropic API(v2.1.246)
• Fixed 'curl -fsSL https://claude.ai/install.sh | bash' failing with 'Raw mode is not supported' for some Team/Enterprise users(v2.1.246)
• Fixed sessions ending in plan mode resuming outside plan mode in the VS Code extension or with '--continue'/'--resume' with a permission prompt tool(v2.1.246)
• Fixed the 'Notification' hook not firing while the sandbox 'Network request outside of sandbox' permission prompt is waiting(v2.1.246)
• Fixed Bash permission checks to always require approval for malformed commands with dangling '&&' or '||' operators(v2.1.246)
• Fixed '--strict-mcp-config' sessions prompting to approve servers they would never load, leaving background sessions waiting at startup(v2.1.246)
• Fixed telemetry and metrics requests to Anthropic carrying the API key for a third-party gateway; credential now only sent to its own host(v2.1.246)
• Fixed a visible API error on the first prompt after idle when 'apiKeyHelper' returns short-lived JWTs; expired tokens are now refreshed before sending(v2.1.246)
• Fixed memory growing with session length in fullscreen and Ctrl+O transcript views by optimizing message row rendering(v2.1.246)
• Fixed '/ultrareview' runs and cloud sessions launched simultaneously from one repository sometimes starting with another launch's uncommitted changes(v2.1.246)
• Fixed the task progress count for background cloud sessions occasionally missing a task(v2.1.246)
• Fixed Remote Control sessions keeping their placeholder name in claude.ai and the Claude app until the second prompt; auto-generated title now appears after the first prompt(v2.1.246)
• Fixed MCP tools marked 'requiresUserInteraction' still offering 'Yes, and don't ask again' in their permission prompt(v2.1.246)
• Fixed the self-hosted runner ending live sessions or exiting when a work-poll response is malformed; now retries the poll(v2.1.246)
• Fixed prompts beginning with '/--' (e.g. Lean doc comments) being rejected as an unknown slash command instead of being sent to Claude(v2.1.246)
• Fixed remote MCP servers in non-interactive and SDK sessions from failing to recover after a dropped connection; they now reconnect automatically or report as failed.(v2.1.243)
• Fixed MCP server sign-in started from the desktop app failing with an "Invalid redirect URI" error on servers supporting client ID metadata documents.(v2.1.243)
• Fixed auto mode from staying unavailable at startup when a temporary server-side disable was cached and subsequent flag fetches failed.(v2.1.243)
• Fixed auto mode tool calls being incorrectly denied as "temporarily unavailable" after a brief API overload.(v2.1.243)
• Fixed the /model picker from silently ignoring an Ultracode selection; picking Ultracode now correctly applies it to the current session.(v2.1.243)
• Fixed /resume from only listing the 50 most recent sessions; the picker now loads more sessions as you scroll.(v2.1.243)
• Fixed cloud sessions resuming after a mid-turn restart with a pending hook or background-task notification from being re-sent as the prompt instead of the normal continuation message.(v2.1.243)
• Fixed cross-session messaging from silently turning off inside user namespaces and rootless containers after socket-directory hardening.(v2.1.243)
• Fixed text that hangs outside its container, such as the sign-in URL in /login, from losing its leading columns when another part of the screen repaints.(v2.1.243)
• Fixed spellcheck from not underlining a misspelled word typed directly after an emoji.(v2.1.243)
• Fixed background subagents from not waking up when their last background Bash task completes.(v2.1.243)
• Fixed sessions going silent for extended periods when the Anthropic API never starts a response; requests now time out and display an error message.(v2.1.243)
• Fixed authentication, model-availability, and other client-generated error messages from rendering like model output instead of as error lines.(v2.1.243)
• Fixed workload identity federation in CI so processes in one job share the exchanged token, preventing re-exchange issues.(v2.1.243)
• Fixed server-managed companyAnnouncements from not showing at startup in sessions that began with signing in.(v2.1.243)
• Fixed hook `if` conditions like `Bash(cat *)` from firing on unrelated Bash commands when the command contained `$()` or backtick command substitution.(v2.1.243)
• Fixed plugin dependencies declared with a `marketplace` field from never resolving when both plugins are loaded together.(v2.1.243)
• Fixed /reload-plugins from keeping the LSP tool after the last LSP plugin is disabled.(v2.1.243)
• Fixed --agents from silently ignoring invalid JSON or agent definitions; it now exits with a clear error.(v2.1.243)
• Fixed /status from showing "Found invalid entries in: ." with no filename when `~/.claude.json` has an invalid MCP server entry.(v2.1.243)
• Fixed /clear from removing the /rename session name from the prompt bar even when the name was kept for the new session.(v2.1.243)
• Fixed Ctrl+[ from not leaving vim INSERT mode in terminals that encode modified keys.(v2.1.243)
• Fixed the local IDE connection from being incorrectly routed through `HTTPS_PROXY` when `localhost` was listed in `NO_PROXY`.(v2.1.243)
• Fixed sandbox network-violation details being dropped from the Bash tool result when the blocked command still exited 0.(v2.1.243)
• Fixed the status line `rate_limits` fields and `/usage` from showing incorrect usage percentage after a rate-limit window reset.(v2.1.243)
• Fixed `claude --teleport <session>` from exiting on uncommitted changes instead of offering to stash them.(v2.1.243)
• Fixed /web-setup from repeatedly asking users to log in when an older GitHub CLI was already authenticated.(v2.1.243)
• Fixed Claude in Chrome losing its connection to Claude Code after an auto-update cleaned up the version it was set up with.(v2.1.243)
• [VSCode] Fixed sessions started before feature flags were fetched from opening in the default permission mode instead of the configured mode.(v2.1.243)
• [VSCode] Fixed Focus view sections expanding collapsing on their own during subagent tool activity.(v2.1.243)
• Fixed Bedrock streaming behind proxies that strip the Content-Type header, which prevented doubled API call billing.(v2.1.239)
• Fixed Claude Code hanging at startup behind an HTTPS proxy when using Bedrock with an SSO profile and `awsAuthRefresh` by honoring `HTTPS_PROXY` for credential pre-checks.(v2.1.239)
• Fixed a crash dump when starting Claude Code from a deleted directory, now printing a clear message instead.(v2.1.239)
• Fixed Edit and Write calls pausing for approximately 5 seconds in JetBrains IDE terminals when the Claude Code plugin is connected.(v2.1.239)
• Fixed a race condition where pressing Esc with a queued prompt could cause the next turn to finish early, leaving the session idle while Claude was still working.(v2.1.239)
• Fixed WebFetch retaining expired page content in memory for the entire session instead of the intended 15 minutes.(v2.1.239)
• Fixed cloud sessions resuming out of plan mode after an idle worker restart.(v2.1.239)
• Fixed MCP elicitation forms taller than the terminal being clipped in fullscreen mode, ensuring the form fits the window with scrolling for hidden fields and visible Accept/Decline buttons.(v2.1.239)
• Fixed remote MCP servers staying failed after a transient 5xx error on a mid-session reconnect or via SDK `setMcpServers()`.(v2.1.239)
• Fixed custom session titles disappearing from `/resume` after more than ~64 KB of conversation was written following a rename.(v2.1.239)
• Fixed `claude -c`/resume picking up sessions from a different directory whose path differed only by characters like `_`, `-`, or `.`.(v2.1.239)
• Fixed `/resume` and the agents view showing a session as recently changed when only its file was touched or it was reopened.(v2.1.239)
• Fixed `/resume` in all-projects mode telling users to `cd` into a deleted directory; such sessions now resume in the current directory.(v2.1.239)
• Fixed the `dark-ansi` theme rendering expanded tool results in fullscreen mode with text the same color as the background.(v2.1.239)
• Fixed the fullscreen renderer prompt reappearing on every launch when it could never be answered; it now stops after being shown three times.(v2.1.239)
• Fixed `.worktreeinclude` patterns starting with `**/` silently matching nothing when the target lived in a gitignored directory.(v2.1.239)
• Fixed agents, skills, and commands whose `.md` file starts with a UTF-8 BOM being silently ignored.(v2.1.239)
• Fixed `/insights` echoing literal `<message>` tags in its response on some models.(v2.1.239)
• Fixed marketplace `metadata.pluginRoot` having no effect; bare plugin source names now resolve under it as documented.(v2.1.239)
• Fixed mouse movement in browser-based terminals inserting text like `"35;150;7M"` into the prompt when a mouse report arrived split across writes.(v2.1.239)
• Fixed custom theme overrides for effort/ultracode status badge colors being ignored.(v2.1.239)
• Fixed OpenTelemetry trace fragmentation where tool executions deferred by a `PreToolUse` hook started a new trace instead of resuming the original turn's trace.(v2.1.239)
• Fixed vim mode in the agent view: Escape now switches to NORMAL mode and keeps text instead of clearing the prompt.(v2.1.239)
• Fixed the `selection:copy` keybinding silently dropping a text selection that had been extended with Shift+Arrow keys.(v2.1.239)
• Fixed the `/voice` startup tip still appearing after voice dictation was enabled via the `voice.enabled` setting.(v2.1.239)
• Fixed shell-mode (`!`) Tab completion dropping the `./` from a `./script` path, preventing the shell from running the command.(v2.1.239)
• Fixed fullscreen mode answering a permission prompt or pressing a button when the terminal window was clicked to bring it back into focus.(v2.1.239)
• Fixed slash-command panels in fullscreen mode covering the latest messages; the conversation now stays pinned above the panel.(v2.1.239)
• Fixed the `/workflows` detail dialog overflowing the terminal and losing its header off-screen when opened while Claude is still responding.(v2.1.239)
• Fixed the Linux sandbox making a nonexistent `.git/config.worktree` unreadable, which broke sandboxed git commands in repos with `extensions.worktreeConfig` set.(v2.1.239)
• Fixed hooks failing with "posix_spawn ENOENT" after the session's working directory was deleted; they now run from the project root or home directory.(v2.1.239)
• Fixed `claudeMdExcludes` not excluding a symlinked `.claude/rules` file when the pattern named the rules directory or the symlink rather than its target.(v2.1.239)
• Fixed runaway session-title syncing to Remote Control when two Claude Code processes shared one background job's state; title updates are now deduplicated and rate-limited.(v2.1.239)
• Fixed sessions whose title starts with `/` being unaddressable by `SendMessage` and shown as "(untitled)" in `ListAgents`.(v2.1.239)
• Fixed Ctrl+W, Ctrl+U, Ctrl+K, Option+Backspace, Option+D and vim `df`/`dt` leaving a broken `[Pasted text #N]` placeholder when the cursor was inside it.(v2.1.239)
• Fixed masked (password-style) inputs letting their text be pasted back with Ctrl+Y elsewhere or saved to prompt history when cleared with double Esc.(v2.1.239)
• Fixed Ctrl+Backspace deleting one character instead of a word in search boxes.(v2.1.239)
• Fixed a request rejected by an organization policy check being re-sent before the rejection was shown.(v2.1.239)
• Fixed the fullscreen mode answering a permission prompt or pressing a button when the terminal window was clicked to bring it back into focus.(v2.1.239)
• Fixed the `dark-ansi` theme rendering expanded tool results in fullscreen mode with text the same color as the background.(v2.1.239)
• Fixed the fullscreen renderer prompt reappearing on every launch when it could never be answered; it now stops after being shown on three launches.(v2.1.239)
• Fixed `.worktreeinclude` patterns starting with `**/` silently matching nothing when the target lived in a gitignored directory.(v2.1.239)
• Fixed agents, skills, and commands whose `.md` file starts with a UTF-8 BOM being silently ignored.(v2.1.239)
• Fixed `/insights` echoing literal `<message>` tags in its response on some models.(v2.1.239)
• Fixed marketplace `metadata.pluginRoot` having no effect: bare plugin source names now resolve under it as the docs describe.(v2.1.239)
• Fixed mouse movement in browser-based terminals inserting text like `"35;150;7M"` into the prompt when a mouse report arrived split across writes.(v2.1.239)
• Fixed custom theme overrides for the effort/ultracode status badge colors being ignored.(v2.1.239)
• Fixed OpenTelemetry trace fragmentation: tool executions deferred by a `PreToolUse` hook now resume in the original turn's trace instead of starting a new trace.(v2.1.239)
• Fixed vim mode in the agent view: Escape now switches to NORMAL mode and keeps your text instead of clearing the prompt.(v2.1.239)
• Fixed the `selection:copy` keybinding silently dropping a text selection that had been extended with Shift+Arrow keys.(v2.1.239)
• Fixed the `/voice` startup tip still appearing after voice dictation was enabled via the `voice.enabled` setting.(v2.1.239)
• Fixed shell-mode (`!`) Tab completion dropping the `./` from a `./script` path, which left a command the shell couldn't run.(v2.1.239)
• Fixed fullscreen mode answering a permission prompt or pressing a button when you clicked the terminal window only to bring it back into focus.(v2.1.239)
• Fixed slash-command panels (e.g. `/config`, `/model`) in fullscreen mode covering the latest messages; the conversation now stays pinned above the panel.(v2.1.239)
• Fixed the `/workflows` detail dialog overflowing the terminal and losing its header off-screen when opened while Claude is still responding.(v2.1.239)
• Fixed the Linux sandbox making a nonexistent `.git/config.worktree` unreadable, which broke every sandboxed git command in repos with `extensions.worktreeConfig` set.(v2.1.239)
• Fixed hooks failing with "posix_spawn ENOENT" after the session's working directory was deleted; they now run from the project root or home directory instead.(v2.1.239)
• Fixed `claudeMdExcludes` not excluding a symlinked `.claude/rules` file when the pattern names the rules directory or the symlink rather than its target.(v2.1.239)
• Fixed runaway session-title syncing to Remote Control when two Claude Code processes shared one background job's state (2.1.232 regression); title updates are now deduplicated and rate-limited.(v2.1.239)
• Fixed sessions whose title starts with `/` being unaddressable by `SendMessage` and shown as "(untitled)" in `ListAgents`.(v2.1.239)
• Fixed Ctrl+W, Ctrl+U, Ctrl+K, Option+Backspace, Option+D and vim `df`/`dt` leaving a broken `[Pasted text #N]` placeholder when the cursor was inside it.(v2.1.239)
• Fixed masked (password-style) inputs such as the login code field letting their text be pasted back with Ctrl+Y elsewhere or saved to prompt history when cleared with double Esc.(v2.1.239)
• Fixed Ctrl+Backspace deleting one character instead of a word in search boxes.(v2.1.239)
• Fixed a request rejected by an organization policy check being re-sent before the rejection was shown.(v2.1.239)
• Fixed clipboard copy, background housekeeping, background sessions, and local MCP logs breaking when a session's directory was removed.(v2.1.236)
• Fixed the fullscreen renderer failing permanently after a single failed start by falling back to the classic renderer.(v2.1.236)
• Fixed the `/model` picker rendering taller than the terminal by showing only models that fit the window, with others accessible via scrolling.(v2.1.236)
• Fixed `SendMessage` calls being rejected when a malformed closing tag left message text in the summary field.(v2.1.236)
• Fixed unhandled promise rejections when a subprocess fails to start, such as `powershell.exe` on WSL with Windows interop disabled.(v2.1.236)
• Fixed fullscreen mode sometimes not showing a newly sent message until the terminal was resized.(v2.1.236)
• Fixed a blank band remaining above the prompt after clearing a multi-line prompt and panes not repainting after terminal resizing in fullscreen mode.(v2.1.236)
• Fixed the managed-settings approval prompt sometimes not appearing at startup while still capturing the first keypress.(v2.1.236)
• Fixed terminal tab titles jumping in tmux by writing the title only when its text changes.(v2.1.236)
• Fixed an unclear error when the cloud environments list returned empty or malformed.(v2.1.236)
• Fixed the Fable 5 first-time usage-credits prompt auto-selecting the fallback model after 60 seconds with no user input when using Remote Control.(v2.1.236)
• Fixed spinner tips never appearing and a repeated background error when the cached guest-pass reward in `~/.claude.json` was malformed.(v2.1.236)
• Fixed skills hot-reload in SDK/VS Code sessions raising an error on every skills change after the session's working directory was deleted.(v2.1.236)
• Fixed self-hosted runner sessions occasionally resuming on another runner before the post-session hook had finished.(v2.1.236)
• Fixed the Clawd mascot's eyes and feet rendering unevenly in iTerm2 at some font sizes.(v2.1.236)
• Fixed occasional runaway session recaps by capping recap text at 400 characters and cutting at a word boundary.(v2.1.236)
• Fixed slash-command typos or unavailable commands reporting an error instead of running the closest fuzzy match.(v2.1.236)
• Fixed `SendMessage` refusing further messages to a session when a rapid burst would exceed its inbox capacity, instead of reporting them as sent.(v2.1.236)
• Fixed the git status check being fooled by a repo's `status.showUntrackedFiles=no` setting.(v2.1.236)
• Fixed cloud sessions being marked as lost when the environment shut down during a permission prompt.(v2.1.233)
• Resolved MCP v2 connections endlessly reopening streams against servers that terminate long-held streams.(v2.1.233)
• Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code.(v2.1.233)
• Fixed idle sessions on Linux from keeping one CPU core at 100% when sandboxing is enabled.(v2.1.233)
• Fixed bundled skill aliases like `/checkup` and `/review` reporting 'Unknown command' when a user or project skill shadows the bundled skill.(v2.1.233)
• Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers.(v2.1.233)
• Fixed Windows paths with the NT `\??` device prefix bypassing UNC path validation, preventing NTLM credential leaks.(v2.1.233)
• Fixed auto mode repeatedly stopping for manual approval on ordinary `cd <dir> && <command> > file` Bash commands on Windows (a regression).(v2.1.233)
• Fixed a PowerShell permission bypass where variable-writing parameters could silently overwrite `$PSDefaultParameterValues`.(v2.1.232)
• Fixed a Windows permission bypass where Git Bash followed Cygwin-style symlinks that path validation saw as regular files.(v2.1.232)
• Fixed nested git repositories inheriting trust from a parent directory; each repository now requires its own trust confirmation.(v2.1.232)
• Fixed MCP connections hanging for the full 30-second connect timeout when a server fails to answer or sends a malformed reply.(v2.1.232)
• Fixed Remote Control sessions hosted by a bridge inside a cloud session inheriting that session's transcript or credentials.(v2.1.232)
• Fixed Remote Control sessions started from Claude Desktop or an IDE appearing as a new claude.ai session each time the local session was resumed; they now reattach to the existing one.(v2.1.232)
• Fixed Remote Control sessions appearing unreachable to newly attached clients while idle.(v2.1.232)
• Fixed Remote Control bridge sessions not restoring conversation history when the session worker restarts.(v2.1.232)
• Fixed Remote Control resuming a conversation whose session was deleted from claude.ai or the app, which now starts a replacement instead of failing.(v2.1.232)
• Fixed Cloud gateway `/login` exiting silently or leaving an unresponsive terminal when managed settings failed to load; the reason is now shown.(v2.1.232)
• Fixed voice mode on native builds getting stuck on "listening…" when the voice service rejected the connection; the rejection is now shown immediately.(v2.1.232)
• Fixed mTLS client certificate rotation requiring a restart; Claude Code now reloads the rotated cert and key automatically on connection errors.(v2.1.232)
• Fixed malformed AWS or Vertex region values being used to build request URLs; they now fall back to the default region.(v2.1.232)
• Fixed stream idle timeout errors failing the request instead of recovering on Bedrock, Vertex, and gateway deployments.(v2.1.232)
• Fixed content-sized overlays containing truncated text rendering one column too wide, and start-truncated text collapsing to an ellipsis.(v2.1.232)
• Fixed a stray garbled character where a long shell-command or agent-description preview was cut off mid-emoji.(v2.1.232)
• Fixed a startup race that could silently unregister a plugin marketplace due to concurrent writes to `known_marketplaces.json`.(v2.1.232)
• Fixed `/update` and `/tui` refusing to restart while work that survives the relaunch was running.(v2.1.232)
• Fixed usage-limit guidance suggesting unavailable slash commands in SDK and remote sessions.(v2.1.232)
• Fixed the consent message for interactive `--advisor fable` launches, which told you to run `/model fable` in an interactive session that had just exited.(v2.1.232)
• Fixed Remote Control reconnecting after a network blip; it now keeps reconnecting for about 30 minutes and no longer drops after a few blips spread across an hour.(v2.1.232)
• Fixed Remote Control resuming a conversation silently taking Remote Control away from another Claude Code on the same machine; it now prompts to move it.(v2.1.232)
• Fixed Bash input redirections (`< file`) on all platforms to be permission-checked like their argument spellings.(v2.1.232)
• Fixed Cowork sessions inlining external @-imports from user-scope memory files.(v2.1.232)
• Fixed the auto-generated cross-session messaging socket directory on shared `/tmp` to refuse pre-planted symlinks or other users' directories.(v2.1.232)
• Fixed the Linux filesystem sandbox against a protected-path bypass.(v2.1.232)
• Fixed project settings overriding the sandbox's ripgrep binary; `sandbox.ripgrep` is now honored only from user, managed, and `--settings` settings.(v2.1.232)
• Fixed long responses partly disappearing while streaming and being printed twice in the terminal.(v2.1.229)
• Fixed a crash to the error screen when a tool call had a non-string value for `glob`, `file_path`, or `command`.(v2.1.229)
• Fixed a RangeError crash when a progress bar or markdown table rendered in a very narrow terminal window, which could also crash `claude --continue`/`--resume` at startup.(v2.1.229)
• Fixed a crash on Windows when a tool call or message referenced a file by an extended-length (`\?`) or UNC path.(v2.1.229)
• Fixed auto mode failing on every tool call for users who disable the attribution header via `CLAUDE_CODE_ATTRIBUTION_HEADER`.(v2.1.229)
• Fixed `/model` rejecting Sonnet/Opus 1M for claude.ai subscribers using a custom `ANTHROPIC_BASE_URL` gateway.(v2.1.229)
• Fixed MCP OAuth with strict authorization servers by using `127.0.0.1` instead of `localhost` in the redirect URI.(v2.1.229)
• Fixed Remote Control clients showing a stuck working spinner after a slash command was typed in the laptop terminal.(v2.1.229)
• Fixed the Claude Code Review workflow generated by `/install-github-app` completing without posting its review on the pull request.(v2.1.229)
• Fixed multi-second UI stalls after editing a file with thousands of IDE diagnostics while the IDE extension is connected.(v2.1.229)
• Fixed one-shot `claude plugin` commands leaving a stray liveness file that could prevent cleanup of outdated plugin versions.(v2.1.229)
• Fixed dynamic workflows inside CPU-limited containers using the host machine's core count instead of the container's CPU limit.(v2.1.229)
• Fixed a file-watcher handle leak after atomic file replacements, and an uncaught error on Windows when the scheduled-tasks watcher failed on a network or virtual filesystem.(v2.1.229)
• Fixed SDK and `--input-format stream-json` sessions getting a 400 API error when a whitespace-only message was submitted.(v2.1.229)
• Fixed conversations whose messages alone exceed the API's 32 MB request limit retrying compaction when no images or documents can be stripped; they now fail once with a clear message.(v2.1.229)
• Fixed OpenTelemetry export from Claude Desktop sessions being rejected by the Desktop-managed gateway when that gateway is also the telemetry endpoint.(v2.1.229)
• Fixed self-hosted runner and other remote sessions exiting at startup when `managed-mcp.json` is deployed and the server delivers MCP servers; those servers are now skipped with a warning.(v2.1.229)
• Fixed self-hosted runner repository preparation hanging on a Git Credential Manager prompt; git now fails fast when credentials are missing.(v2.1.229)
• Fixed interactive sessions that stopped redrawing due to a rare internal layout error.(v2.1.228)
• Fixed Git Bash not being found on Windows when Claude Code is launched from a parent folder of the git installation.(v2.1.228)
• Fixed `/tui` reverting the session to an earlier model when `/model` had been changed since the last response.(v2.1.228)
• Fixed cross-session messaging sometimes starting without an inbox in the first session after install or upgrade.(v2.1.228)
• Fixed Remote Control `/resume` command leaking conversation title or history into the connected session.(v2.1.228)
• Fixed `claude self-hosted-runner` sessions failing on every fresh runner when the `checkout` hook fails for a repository the session doesn't push to; these repositories are now skipped with a warning.(v2.1.228)
• Fixed self-hosted runners ending sessions in the gap between a background task finishing and the follow-up turn starting.(v2.1.228)
• Fixed session cleanup incorrectly deleting contents inside a project's memory folder.(v2.1.228)
• Fixed background plugin-cache cleanup deleting a plugin's cache when its only version is a symlinked development checkout.(v2.1.228)
• Fixed a settings-merge issue where marketplace entries could inherit incorrect custom headers; marketplace entries now merge as whole units.(v2.1.228)
• Fixed the deferred-tools reminder occasionally being sent to the model twice after a skill invocation.(v2.1.228)
• Fixed a Bash tool permission-check bypass where zsh could execute hidden commands in `[[ ]]` regex conditionals; affected commands now prompt for permission.(v2.1.221)
• Fixed PowerShell permission checks mishandling paths containing quote characters on Windows; such paths now prompt for approval.(v2.1.221)
• Fixed the thinking toggle having no effect for the rest of a session that started with thinking off; disabling an MCP server mid-connect no longer silently reverts.(v2.1.221)
• Fixed MCP servers from `--mcp-config` not being connected before the first turn in print mode (`-p`), which made the model emit tool calls as literal text.(v2.1.221)
• Fixed @-mentioned files being silently dropped when pressing Esc to retract a prompt and resubmitting it.(v2.1.221)
• Fixed a crash when preparing API requests for SDK MCP tools named after built-in object properties such as `constructor`.(v2.1.221)
• Fixed WebSearch failing with a 400 error at effort `xhigh`/`max` when thinking is disabled.(v2.1.221)
• Fixed sandboxed large uploads failing with TLS errors through the sandbox proxy.(v2.1.221)
• Fixed Team and Enterprise spend-limit message incorrectly blaming the org's monthly limit instead of your individual spend limit.(v2.1.221)
• Fixed Bedrock authentication with AWS SSO named profiles failing in desktop-managed sessions on Windows machines that set a stray `HOME` environment variable.(v2.1.221)
• Fixed `CLAUDE_CODE_RESUME_INTERRUPTED_TURN=0` not disabling interrupted-turn auto-resume; falsy values are now honored.(v2.1.221)
• Fixed a rare wake-from-sleep race where two Claude Code processes could both refresh the same MCP connector or WIF OAuth token at once, forcing re-authentication.(v2.1.221)
• Fixed renaming a session from Claude Code Desktop or claude.ai not updating the CLI's session name; session names from every rename surface are now sanitized.(v2.1.221)
• Fixed plugin- and org-delivered skills named after terminal-only built-ins (e.g. `/help`, `/feedback`) being un-invocable in non-interactive sessions.(v2.1.221)
• Fixed the "Plugins changed" notification lingering after plugins were reloaded instead of clearing.(v2.1.221)
• Fixed Vim mode: the yank register now survives dialogs, history search, and the transcript view instead of being silently emptied.(v2.1.221)
• Fixed Vim mode: undoing back to an empty prompt now arms the "press ← again" confirm before returning to the agent view.(v2.1.221)
• Fixed Up/Down arrows jumping past wrapped rows of long input lines; they now move through each visual row first, and history recall enters at the near edge.(v2.1.169)
• Fixed enterprise managed MCP policies not being enforced correctly across various session states (reconnect, IDE-typed configs, initial session after install, before remote settings load) and fixed slow cold starts for orgs without remote settings.(v2.1.169)
• Fixed a ~30-50ms UI stall at the start of each turn for macOS users logged in with claude.ai credentials.(v2.1.169)
• Fixed 'claude -p' being slow or hanging on Windows while waiting for the slash-command/skill scan (regression).(v2.1.169)
• Fixed Remote Control getting stuck on "reconnecting" after resuming a session when an OAuth token refresh occurred simultaneously.(v2.1.169)
• Fixed Git Credential Manager's "Connect to GitHub" popup appearing on Windows at startup when background git commands ran without cached credentials.(v2.1.169)
• Fixed footer hints (e.g. "esc to interrupt") not showing for users with a custom statusline.(v2.1.169)
• Fixed stale permission and dialog prompts reappearing every time you reattached to a remote session whose worker had died while waiting on them.(v2.1.169)
• Fixed 'claude agents --json' omitting blocked and just-dispatched background sessions; added --all to include completed sessions, plus new id and state fields.(v2.1.169)
• Fixed agents view leaving a stale/garbled frame after navigating back from an agent on WSL in Windows Terminal.(v2.1.169)
• Fixed background agents ignoring project-level settings env values (e.g. ANTHROPIC_MODEL) when dispatched onto a pre-warmed worker.(v2.1.169)
• Fixed MCPB plugin cache being spuriously invalidated on Windows, causing unnecessary re-extraction.(v2.1.169)
• Fixed plugin .in_use PID lock files accumulating; stale markers from crashed sessions are now swept once per day.(v2.1.169)
• Fixed untrusted project settings being able to set OTEL client-certificate paths without trust confirmation.(v2.1.169)
• Auto-updater on Windows now stops retrying within a session once 'claude.exe' is held by another process.(v2.1.169)
• Fixed `claude -p` hanging indefinitely after its final result when a backgrounded command never exits by stopping background shells after ~5s.(v2.1.163)
• Fixed `claude -p` failing with "ANTHROPIC_API_KEY required" on Bedrock/Vertex/Foundry when `CI=true` and no Anthropic API key is set.(v2.1.163)
• Fixed Bash commands failing under bazel and EDR-protected Go workflows by correcting the override of `$TMPDIR` to only apply to sandboxed commands.(v2.1.163)
• Fixed Bash commands failing on Windows with "EEXIST: file already exists" on the session-env directory when it was read-only or inside OneDrive.(v2.1.163)
• Fixed org-managed permission rules not applying for the entire session when managed settings fetch completed during startup on a fresh config directory.(v2.1.163)
• Fixed background sessions in `claude agents` losing running background tasks when reattaching after a Claude Code update.(v2.1.163)
• Fixed terminal misalignment and a multi-second hang when exiting the agent view by pressing Esc.(v2.1.163)
• Fixed clicking Stop on a background-task chip in the desktop app not clearing the chip when the underlying process was already gone.(v2.1.163)
• Fixed keyboard input becoming permanently unresponsive after a paste operation whose end marker was dropped by the terminal.(v2.1.163)
• Fixed hook `if: "Bash(...)"` conditions firing incorrectly by ensuring the pattern matches commands inside subshells and backticks.(v2.1.163)
• Fixed deny rules on home-directory paths (e.g. `Read(~/Desktop/**)`) not blocking Bash commands that reference the path via `$HOME`.(v2.1.163)
• Fixed workflow animations, prompt keyword shimmer, and the /effort dialog ignoring the "Reduce motion" setting.(v2.1.161)
• Fixed managed-settings policies (forceLoginOrgUUID/forceLoginMethod) incorrectly blocking third-party provider sessions when the org pin was active.(v2.1.161)
• Fixed background subagent output corrupting stdout when using --output-format text or json with claude -p.(v2.1.161)
• Fixed /usage-credits incorrectly initiating a re-login for Team/Enterprise admins instead of navigating to the organization's usage settings.(v2.1.161)
• Fixed /autofix-pr incorrectly reporting it cannot run on the default branch when operating inside a git worktree or another repository.(v2.1.161)
• Fixed the --resume picker failing to show sessions from the current directory if it was not a git worktree (e.g., jj workspaces).(v2.1.161)
• Fixed Windows hooks that explicitly invoke bash (e.g., /usr/bin/bash script.sh) failing with command not found errors.(v2.1.161)
• Fixed OpenTelemetry log events being silently dropped if emitted before telemetry initialization was complete.(v2.1.161)
• Fixed claude mcp list/get/add commands from printing secrets to the terminal by redacting credential headers, URL secrets, and preventing expansion of ${VAR} references.(v2.1.161)
• Fixed Workflow agents spawned with isolation: "worktree" being blocked from editing files inside their own worktree during background sessions.(v2.1.161)
• Fixed background sessions dispatched from claude agents booting using a stale model from the daemon's environment instead of the model specified in settings.json.(v2.1.161)
• Fixed a potential crash that occurred when rendering Write tool results after resuming a session.(v2.1.161)
• Fixed completed subagents getting stuck showing as running when an error occurred during result finalization.(v2.1.161)
• Fixed EADDRINUSE errors for tools binding Unix sockets under $TMPDIR when CLAUDE_CODE_TMPDIR was set to a deep path.(v2.1.161)
• Fixed copy-on-select not writing to the Windows clipboard on WSL by using PowerShell interop instead of OSC 52(v2.1.160)
• Fixed restoring a completed session from `claude agents` dropping chat history and re-running the original prompt(v2.1.160)
• Fixed background sessions re-attached after overnight retire losing their conversation and re-running the original prompt(v2.1.160)
• Fixed `claude --bg` occasionally failing with "socket missing" when the background daemon was cold-starting on a loaded machine(v2.1.160)
• Fixed an issue on Windows where the directory a background session was started in could not be deleted after `claude rm` until the background daemon exited(v2.1.160)
• Fixed background agents that resumed work being shown under Completed in the agents list(v2.1.160)
• Fixed `claude agents` freezing for several seconds when returning to the session list due to the auto-updater re-checking on every exit(v2.1.160)
• Fixed Esc, arrow keys, and typing becoming unresponsive on Windows when attached to a background session or in the agent view while the host is under heavy CPU load(v2.1.160)
• Fixed background agents emitting terminal sync-output markers to unsupported terminals (Apple Terminal, tmux), preventing render artifacts when entering a running agent(v2.1.160)
• Fixed mouse wheel scrolling prompt history instead of the transcript right after opening a session from the agents list(v2.1.160)
• Fixed CJK IME composition appearing at the bottom-left of the screen instead of at the input caret in the `claude agents` view(v2.1.160)
• Fixed valid `file:///C:/...` links being rewritten to a broken path on Windows terminals with hyperlink support(v2.1.160)
• Fixed voice mode failing to connect when the project directory or branch name contains non-ASCII or special characters(v2.1.160)
• Fixed the auto mode unavailability message on third-party providers (Bedrock/Vertex/Foundry) to point to the `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in(v2.1.160)
• Fixed `/effort ultracode` incorrectly blaming the dynamic workflows setting when the model cannot run xhigh; ultracode is no longer offered on models that do not support it(v2.1.160)
• Fixed model-not-found errors suggesting `--model` when running via the SDK or other hosts where the CLI flag doesn't apply(v2.1.160)
• Fixed Claude's past replies disappearing from scrollback when resuming a brief mode session with brief mode turned off(v2.1.160)
• Fixed vim mode `p` pasting on the line below instead of at the cursor when the register was yanked with `v$`(v2.1.160)
• Fixed startup hanging up to 75s when `api.anthropic.com` is unreachable by implementing a 15s timeout for side-channel API calls(v2.1.144)
• Fixed garbled terminal output after missed window-resize events by enabling self-healing on the next frame(v2.1.144)
• Fixed progressive terminal display corruption (stale/garbled glyphs) in long sessions that previously required a resize or restart to clear(v2.1.144)
• Fixed macOS background sessions crashing with "exit 1 before init" when the project is in a Full Disk Access-protected folder(v2.1.144)
• Fixed unrecoverable conversation state when reading a file with an image extension that mismatches its content (e.g. HTML saved as .png) by falling back to text processing(v2.1.144)
• Fixed spurious tool errors during search by ensuring `head`/`tail` file views satisfy read-before-edit checks and treating non-matches from grep/diff as informational instead of command failures(v2.1.144)
• Fixed /branch failing with "No conversation to branch" after entering a worktree or in some background sessions(v2.1.144)
• Fixed pressing Escape in the AskUserQuestion notes field aborting the turn instead of returning to answer selection(v2.1.144)
• Fixed model selection not applying when changed via the IDE model picker or `applyFlagSettings` after startup(v2.1.144)
• Fixed resumed sessions incorrectly inheriting the model choice from another session instead of retaining their original model(v2.1.144)
• Fixed Bedrock and Vertex users being unable to select "Opus (1M context)" from the /model picker(v2.1.144)
• Fixed remote-session login failing with "Can't access this organization" for users with specific configuration settings(v2.1.144)
• Fixed MCP servers with paginated `tools/list` responses only returning the first page of tools(v2.1.144)
• Fixed MCP images with unsupported MIME types (e.g. SVG) breaking the conversation by saving them to disk and referencing them in the tool result(v2.1.144)
• Fixed file descriptor exhaustion during builds inside skill directories by preventing non-`.md` files from triggering skill reloads(v2.1.144)
• Fixed session title being generated from plugin monitor output instead of the user's first prompt(v2.1.144)
• Fixed Skill tool failing with a permission error in headless mode(v2.1.144)
• Fixed plugins enabled in user settings showing "not cached" errors on fresh machines; added an install hint for project-specific plugins(v2.1.144)
• Fixed `claude mcp list` silently reporting no servers when configuration files were unparsable, now showing configuration errors instead(v2.1.144)
• Fixed background side-queries on custom `ANTHROPIC_BASE_URL` setups and Bedrock Mantle not using Haiku correctly(v2.1.144)
• Fixed scrolling and transcript navigation (PgUp/PgDn, mouse wheel, Ctrl+O) not working in attached background sessions on Windows(v2.1.144)
• Fixed a crash when closing the terminal while attached to a background session(v2.1.144)
• Fixed `! <cmd>` exec sessions not interrupting when Ctrl+C is pressed while attached(v2.1.144)
• Fixed agent view shell-command rows lingering under Working after completion and re-running commands on Enter press(v2.1.144)
• Fixed keyboard input becoming unresponsive in `claude agents` on Windows Terminal after pressing ←(v2.1.144)
• Fixed ghost characters appearing at the left edge when switching panes in Agent View on Windows Terminal with CJK content(v2.1.144)
• Ensured /bg and ←-detach preserve directories added via /add-dir(v2.1.144)
• Fixed Edit/Write refusing to operate right after detaching a session that was editing in place(v2.1.144)
• Fixed `claude respawn <id>` showing "stopped" for a stopped background session instead of running it(v2.1.144)
• Fixed /resume picker not showing sessions forked from a background session(v2.1.144)
• Fixed hanging when opening a session from `claude agents` or running `claude logs <id>` if the background service was unresponsive, now with a 10s timeout(v2.1.144)
• Fixed background Bash tasks spawned by subagents staying "Running" in SDK task panels after process exit(v2.1.144)
• Fixed completed or stopped background sessions being permanently marked as a startup crash(v2.1.144)
• Fixed markdown links in `claude agents` attached sessions rendering as plain text instead of hyperlinks(v2.1.144)
• Restored custom `spinnerVerbs` to apply only to the command execution message, not the post-turn duration message(v2.1.144)
• Made `claude agents` / --bg rejection messages name the specific gate that caused rejection(v2.1.144)
• Echoed the session name in the post-spawn confirmation when using `claude --bg --name <label>`(v2.1.144)
• Ensured renaming a background session via Ctrl+R in `claude agents` immediately updates the attached session's banner(v2.1.144)
• Applied background session worktree isolation guard for non-git VCS users with `WorktreeCreate` hooks(v2.1.144)
• Ensured plugin marketplace add/update respects `CLAUDE_CODE_PLUGIN_PREFER_HTTPS`(v2.1.144)
• Made /plugin return to the Installed list after enabling, disabling, or uninstalling a plugin(v2.1.144)
• Updated /doctor to show an exec-form example when a command hook is missing the `command` field(v2.1.144)
• Stopped showing skill-listing truncation as a startup notification; users must now run /doctor(v2.1.144)
• Improved recovery from rare pre-response stream stalls by retrying streaming once instead of falling back to non-streaming(v2.1.144)
• Improved SDK/headless MCP startup by overlapping pre-wait with startup, potentially saving up to 2s with slow servers(v2.1.144)
• Ensured the post-survey follow-up hint appears after every non-dismiss survey response with context-aware copy(v2.1.144)
• Fixed corruption of `.credentials.json` when the `scopes` value was not an array, which previously caused CLI hangs or silent OAuth token refresh failures.(v2.1.143)
• Fixed inability to right-click paste in `claude agents` sessions on Windows Terminal and WSL.(v2.1.143)
• Fixed stop hooks that could loop indefinitely; turns now end with a warning after 8 consecutive blocks.(v2.1.143)
• Fixed Esc or Ctrl+C failing to cancel a pending /loop wakeup while Claude was idle between iterations.(v2.1.143)
• Fixed the /goal evaluator firing prematurely while background shells or delegated subagents were still running.(v2.1.143)
• Fixed `NO_COLOR`/`FORCE_COLOR` settings in `settings.json` incorrectly stripping Claude Code's UI colors; these settings now only apply to subprocesses.(v2.1.143)
• Fixed agent view spawning duplicate PowerShell processes on Windows when listing sessions.(v2.1.143)
• Fixed /bg without a prompt sending "continue" to the forked session; the fork now correctly waits for input.(v2.1.143)
• Fixed `--agent <name>` failing to find plugin-contributed agents unless the `plugin:` prefix was used.(v2.1.143)
• Fixed deleting a session from the agent view failing to remove its corresponding transcript file.(v2.1.143)
• Fixed stale-fragment rendering issues when scrolling in attached background sessions on Windows Terminal.(v2.1.143)
• Fixed background agents experiencing false-positive worker-stall detection storms after host sleep or macOS App Nap.(v2.1.143)
• Fixed 5xx error messages incorrectly pointing to status.claude.com instead of the configured gateway or cloud provider.(v2.1.143)
• Fixed background sessions silently capturing IDE file references into the warm spare's input, causing references to be prepended to subsequent prompts.(v2.1.143)
• Fixed worktree cleanup falling back to `rm -rf` when `git worktree remove` failed, preventing loss of gitignored or in-progress files.(v2.1.143)
• Fixed background-job sessions on macOS receiving "Operation not permitted" errors when reading files in protected directories like `~/Documents`, even with Full Disk Access granted.(v2.1.143)
• Fixed background sessions launched from `claude agents` incorrectly overriding `permissions.defaultMode` from settings.json (it was previously overridden to auto mode).(v2.1.143)
• Fixed unresponsive agents list on Windows when pressing ← during response streaming.(v2.1.143)
• Fixed background daemon spawn failing when the `~/.local/bin/claude` launcher was missing or non-executable.(v2.1.143)
• Fixed `claude agents --allow-dangerously-skip-permissions` incorrectly defaulting dispatched sessions to bypass mode instead of making it available in the permission cycle.(v2.1.143)
• Fixed background side-queries sending an unavailable Haiku model ID on Bedrock/Vertex/Foundry/gateway when no `ANTHROPIC_SMALL_FAST_MODEL` override is set; it now correctly falls back to the main-loop model.(v2.1.141)
• Fixed `claude daemon status` and `/doctor` on Windows throwing an opaque failure when the daemon pipe key file is locked or unreadable; it now shows the underlying error.(v2.1.141)
• Fixed `claude agents` showing the agent-type list instead of the dashboard when launched through a wrapper that adds flags.(v2.1.141)
• Fixed `claude agents` firing redundant dispatches when opening a crashed session where the working directory was deleted.(v2.1.141)
• Fixed background jobs on a custom `ANTHROPIC_BASE_URL` gateway not getting auto-named; the namer now uses the main model when no Haiku model is configured.(v2.1.141)
• Fixed `/model` command in one session silently changing the autocompact threshold in other concurrent sessions.(v2.1.141)
• Fixed switching permission mode while a tool-permission prompt is open not auto-dismissing the prompt when the new setting permits the tool.(v2.1.141)
• Fixed pressing Enter while a permission/dialog prompt is open from also submitting text in the input box.(v2.1.141)
• Fixed hooks receiving a non-existent `transcript_path` after `EnterWorktree` switches the working directory.(v2.1.141)
• Fixed markdown tables with cell wrapping falling back to the vertical key-value layout instead of rendering as a bordered grid.(v2.1.141)
• Fixed cancelled prompts being removed from Up-arrow history when auto-restored into the input box, preventing duplicate entries.(v2.1.141)
• Fixed prompts cancelled with Ctrl+C/Esc before any response being dropped from Up-arrow history.(v2.1.141)
• Fixed Ctrl+C not interrupting a running turn while in vim INSERT/VISUAL mode.(v2.1.141)
• Fixed alternative `chat:submit` keybindings (e.g. `meta+enter`, `ctrl+enter`) not working when `enter` is rebound to `chat:newline`.(v2.1.141)
• Fixed prompt suggestions being silently disabled when an output style was configured.(v2.1.141)
• Fixed `spinnerVerbs` setting not being honored in turn-completion messages.(v2.1.141)
• Fixed AskUserQuestion popup hiding the last line of preceding chat content.(v2.1.141)
• Fixed Web Search status showing "Did 0 searches" when searches actually returned errors.(v2.1.141)
• Fixed multi-line statusline output dropping or corrupting rows when any line exceeds terminal width.(v2.1.141)
• Fixed light-ansi theme using invisible white for diff context lines on light backgrounds; it now uses black.(v2.1.141)
• Fixed error overlay dumping minified bundle source that hid the original error message.(v2.1.141)
• Fixed pressing Enter after typing a feedback survey rating digit submitting it as a chat message instead of submitting the rating.(v2.1.141)
• Fixed pressing `x` on a selected subagent in the agent panel typing into the prompt instead of stopping the agent.(v2.1.141)
• Fixed session title being derived from plugin monitor notifications before the user's first prompt.(v2.1.141)
• Fixed "Allowed by PermissionRequest hook" repeating once per tool call under a collapsed read/search group.(v2.1.141)
• Fixed `/tui` silently dropping running background shells and subagents; it now refuses and asks to wait for them to finish.(v2.1.141)
• Fixed welcome banner showing "API Usage Billing" on Bedrock, Vertex, Foundry, and other third-party providers; it now shows the provider name.(v2.1.141)
• Fixed `/mcp` server list not keeping the focused server visible in short terminals in fullscreen mode.(v2.1.141)
• Fixed redaction in `/feedback` bundles producing invalid JSON for quoted values like session IDs.(v2.1.141)
• Fixed desktop and third-party provider sessions incorrectly inheriting `apiKeyHelper`/`ANTHROPIC_AUTH_TOKEN` from host managed-settings.(v2.1.141)
• Fixed early analytics events being silently dropped when fired before logger initialization.(v2.1.141)
• Fixed `claude plugin install` failing for plugins whose marketplace `ref` no longer exists upstream when a `sha` is also pinned.(v2.1.141)
• Fixed plugin details pane showing 0 MCP servers for plugins that declare them via `.mcp.json`.(v2.1.141)
• Fixed plugin MCP servers with unset config variables showing a generic connection failure instead of a "config issue" message with a fix-it hint; malformed `.mcp.json` entries no longer drop other MCP servers.(v2.1.141)
• Fixed MCP HTTP/SSE servers returning 403 on connect showing as "failed" instead of "needs auth".(v2.1.141)
• Fixed remote MCP servers disconnecting unnecessarily when the optional server-events stream failed to reconnect; tool calls continue over POST.(v2.1.141)
• Fixed Remote Control MCP connectors all failing with 401 when the worker session token rotated mid-session.(v2.1.141)
• Fixed Remote Control automatically re-enrolling a trusted device when the server rejects a stale token, instead of looping through `/login`.(v2.1.141)
• Fixed a race where early OTel spans could be silently dropped in SDK/headless mode with beta tracing enabled.(v2.1.141)
• Fixed custom `voice:pushToTalk` keybindings and `"space": null` unbinds being silently ignored.(v2.1.141)
• Fixed Windows Alt+V image paste reporting "no image found" when the clipboard contains a screenshot.(v2.1.141)
• Fixed SDK "Claude Code native binary not found" on Linux when both glibc and musl platform packages are installed.(v2.1.141)
• Fixed Bedrock: `awsCredentialExport` being skipped when ambient AWS credentials resolve, ensuring it now always runs when configured for cross-account access.(v2.1.141)
• Fixed in-chat mic in VSCode showing no feedback when the microphone produced only silence; it now shows "No audio detected".(v2.1.141)
• Fixed WSL error in VSCode Voice mode suggesting installing `sox libsox-fmt-pulse` for WSLg users.(v2.1.141)
• Fixed `claude agents` failing to launch a session when the pre-warmed background worker is unhealthy; it now falls back to a fresh launch.(v2.1.141)
• Fixed `claude agents` showing empty placeholder sessions left over from backgrounding a fresh REPL, and now shows onboarding text when entered via `←` with no other agents.(v2.1.141)
• Fixed empty idle background sessions left over from `←` being automatically retired by the daemon after 5 minutes.(v2.1.141)
• Fixed external SIGINT (e.g., IDE stop button, `kill -INT`) not triggering graceful shutdown; terminal modes are now restored and the `--resume` hint is printed.(v2.1.132)
• Fixed an uncaught exception occurring when the terminal is closed or SSH disconnects mid-session on the native build.(v2.1.132)
• Fixed `--resume` failing with `no low surrogate in string` when a tool error truncation split an emoji; pre-corrupted sessions are now sanitized on load.(v2.1.132)
• Fixed `--permission-mode` flag being ignored when resuming a plan-mode session with `-p --continue` or `--resume`, and ensured plan mode is re-applied after `ExitPlanMode` within the same session.(v2.1.132)
• Fixed fullscreen mode showing a blank screen after laptop sleep/wake or Ctrl+Z/ `fg` until the next keystroke or stream output.(v2.1.132)
• Fixed cursor landing mid-grapheme on Ctrl+E/A/K/U/arrow keys when an Indic conjunct or ZWJ emoji wraps across lines.(v2.1.132)
• Fixed vim operators corrupting text containing decomposed (NFD) accented characters.(v2.1.132)
• Fixed pasting text starting with `/` silently swallowing the input or triggering an unknown-command reply.(v2.1.132)
• Fixed pasting dumping stray escape sequences into the prompt when focus events or mouse-tracking reports interleave with the bracketed paste.(v2.1.132)
• Fixed mouse wheel scrolling being too fast in Cursor and VS Code 1.92–1.104 due to an upstream xterm.js bug.(v2.1.132)
• Fixed scroll-wheel handling in JetBrains IDE 2025.2 terminals (resolved spurious arrow keys, wrong-direction events, and runaway acceleration).(v2.1.132)
• Fixed `/usage` Ctrl+S hanging when copying the stats screenshot to the clipboard on Linux/X11.(v2.1.132)
• Fixed `/terminal-setup` showing a contradictory error in Windows Terminal (Shift+Enter is natively supported there).(v2.1.132)
• Fixed `/effort` picker not reflecting the `CLAUDE_CODE_EFFORT_LEVEL` environment variable override.(v2.1.132)
• Fixed `/status` showing the wrong default model for some users.(v2.1.132)
• Fixed slash command autocomplete popup being capped at ~3–5 visible commands instead of scaling with terminal height.(v2.1.132)
• Fixed statusline `context_window` token counts reflecting cumulative session totals instead of current context usage.(v2.1.132)
• Fixed Alt+T (thinking toggle) not working on macOS terminals without "Option as Meta" enabled (iTerm2, Terminal.app defaults).(v2.1.132)
• Fixed dead keyboard input on Windows after re-opening a background session from `claude agents`.(v2.1.132)
• Fixed unbounded memory growth (10GB+ RSS) when an stdio MCP server writes non-protocol data to stdout.(v2.1.132)
• Fixed MCP servers that connect but fail `tools/list` silently showing 0 tools; they now retry once and show "connected · tools fetch failed" in `/mcp`.(v2.1.132)
• Fixed unauthorized claude.ai MCP connectors showing as "failed" instead of "needs auth", and headless `-p` mode retrying non-transient 4xx connection failures.(v2.1.132)
• Fixed Bedrock and Vertex 400 errors when `ENABLE_PROMPT_CACHING_1H` is set.(v2.1.132)
• Fixed API errors with unrecognized 400 status codes showing raw JSON instead of the underlying error message(v2.1.129)
• Fixed /clear command not resetting the terminal tab title after a conversation ends(v2.1.129)
• Fixed session title chip from /rename disappearing while a permission or other dialog is active(v2.1.129)
• Fixed agent panel below the prompt being hidden when subagents are running (regression)(v2.1.129)
• Fixed external-editor handoff (Ctrl+G) blanking the conversation history above the prompt(v2.1.129)
• Fixed /context command dumping its rendered ASCII visualization grid into the conversation, preventing token waste(v2.1.129)
• Fixed /agents Library list arrow-key navigation so the highlighted agent remains visible when the list exceeds the viewport(v2.1.129)
• Fixed /branch success message not including the new branch's session id for subsequent /resume commands(v2.1.129)
• Fixed bold headers containing keycap/ZWJ/skin-tone emoji losing trailing characters in fullscreen mode(v2.1.129)
• Fixed server-managed settings policy not applying for enterprise/team users whose stored OAuth credentials lacked the `user:inference` scope(v2.1.129)
• Fixed OAuth refresh race condition occurring after wake-from-sleep that could log out all running sessions(v2.1.129)
• Fixed 1-hour prompt cache TTL being silently downgraded to 5 minutes(v2.1.129)
• Fixed cache-miss warning appearing spuriously after /clear or compaction when changing /effort or /model(v2.1.129)
• Fixed `Bash(mkdir *)`, `Bash(touch *)` and similar allow rules not being honored for in-project paths(v2.1.129)
• Fixed `deniedMcpServers` patterns with a `*://` scheme wildcard not matching mixed-case hostnames(v2.1.129)
• Fixed harmless WebSocket warning being logged as an error in --debug mode during voice mode(v2.1.129)
• Fixed /clear command not clearing the conversation context and displayed transcript in VSCode integration(v2.1.129)
• Fixed crash when pasting an image larger than 2000px by automatically downscaling images on paste and retrying requests for oversized images in history.(v2.1.126)
• Fixed login screen being shown instead of guidance when encountering "OAuth not allowed for organization" errors; now directs users to contact their admin.(v2.1.126)
• Fixed OAuth login failing due to timeouts on slow/proxied connections, IPv6-only devcontainers, and when the browser callback cannot reach localhost.(v2.1.126)
• Fixed a rare race condition where a concurrent credential write could incorrectly clear a valid OAuth refresh token.(v2.1.126)
• Fixed API retry countdown sticking at "0s" instead of continuing to count down between attempts.(v2.1.126)
• Fixed "Stream idle timeout" error occurring after waking a Mac from sleep mid-request.(v2.1.126)
• Fixed background and remote sessions falsely aborting with "Stream idle timeout" during long model thinking pauses.(v2.1.126)
• Fixed a hang where the assistant finished thinking but displayed no output after a sequence of empty turns.(v2.1.126)
• Fixed overly fast trackpad scrolling behavior within Cursor and VS Code 1.92–1.104 integrated terminals.(v2.1.126)
• Fixed claude.ai MCP connectors being suppressed by manual servers stuck in a needs-auth state.(v2.1.126)
• Fixed Japanese, Korean, and Chinese text rendering as garbled characters on Windows when using no-flicker mode.(v2.1.126)
• Fixed `Ctrl+L` clearing the prompt input; it now correctly forces a screen redraw, matching readline behavior.(v2.1.126)
• Fixed deferred tools (like WebSearch) not being available to skills using `context: fork` or other subagents on their initial turn.(v2.1.126)
• Fixed plan-mode tools being unavailable in interactive sessions launched with `--channels`.(v2.1.126)
• Fixed `/plugin` Uninstall command incorrectly reporting "Enabled" instead of "Uninstalled".(v2.1.126)
• Fixed `/remote-control` retries appearing stuck on "connecting..."; each retry now displays its result.(v2.1.126)
• Fixed Remote Control failure notification not showing the error reason for initial connection failures.(v2.1.126)
• Fixed Windows clipboard writes exposing copied content in process command-line arguments visible to EDR/SIEM telemetry, and fixed issues with selections larger than 22KB not reaching the clipboard.(v2.1.126)
• Fixed PowerShell tool mis-flagging bare `--` (e.g., `git diff -- file`) as the stop-parsing token `--%`. (v2.1.126)
• Fixed Agent SDK hang when the model emitted a malformed tool name in a parallel tool call batch.(v2.1.126)
• Fixed Security issue where `allowManagedDomainsOnly` / `allowManagedReadPathsOnly` were ignored when a higher-priority managed-settings source lacked a `sandbox` block.(v2.1.126)
• Fixed `/branch` producing forks that failed with a `tool_use ids were found without tool_result blocks` error when the source session included entries from rewound timelines.(v2.1.122)
• Fixed `/model` failing to show the Effort option for Bedrock application inference profile ARNs and preventing those ARNs from receiving `output_config.effort`.(v2.1.122)
• Fixed Vertex AI / Bedrock returning `invalid_request_error: output_config: Extra inputs are not permitted` errors during session-title generation and other structured-output queries.(v2.1.122)
• Fixed Vertex AI `count_tokens` endpoint returning 400 errors for users operating behind proxy gateways.(v2.1.122)
• Fixed `spinnerTipsOverride.excludeDefault` not correctly suppressing the default time-based spinner tips.(v2.1.122)
• Fixed ToolSearch failing to find MCP tools that connected after the session started in nonblocking mode.(v2.1.122)
• Fixed `!exit` / `!quit` commands in bash mode terminating the CLI instead of executing as a shell command.(v2.1.122)
• Fixed images sent to newer models being incorrectly resized to 2576px per side instead of the maximum allowed 2000px.(v2.1.122)
• Fixed remote control session idle status redrawing too frequently (twice per second), which could flood `tmux -CC` control pipes and cause terminal pauses.(v2.1.122)
• Fixed assistant messages appearing blank in some sessions due to a stale view preference.(v2.1.122)
• Fixed a malformed hooks entry in `settings.json` no longer invalidating the entire settings file.(v2.1.122)
• Fixed voice mode keybindings bound to Caps Lock showing an error because terminals do not deliver Caps Lock as a standard key event.(v2.1.122)
• Fixed unbounded memory growth (multi-GB RSS) that occurred when processing many images in a single session.(v2.1.121)
• Fixed a memory leak in `/usage` that consumed up to ~2GB of memory on machines with large transcript histories.(v2.1.121)
• Fixed a memory leak that occurred when long-running tools failed to emit a clear progress event.(v2.1.121)
• Fixed the Bash tool becoming permanently unusable if the directory Claude was started in was deleted or moved during a session.(v2.1.121)
• Fixed `--resume` crashing on startup in external builds.(v2.1.121)
• Fixed `--resume` failing on large sessions when a transcript line was corrupted by an unclean shutdown; the corrupt line is now skipped.(v2.1.121)
• Fixed `thinking.type.enabled is not supported` error when using Bedrock application inference profile ARNs.(v2.1.121)
• Fixed Microsoft 365 MCP OAuth failures caused by duplicate or unsupported `prompt` parameters.(v2.1.121)
• Fixed scrollback duplication when pressing Ctrl+L or triggering a redraw in non-fullscreen mode across tmux, GNOME Terminal, Windows Terminal, and Konsole.(v2.1.121)
• Fixed claude.ai MCP connectors silently disappearing if the connector-list fetch encountered a transient authentication error at startup.(v2.1.121)
• Fixed "Always allow" rules for built-in tools in remote sessions failing to persist across worker restarts.(v2.1.121)
• Fixed `NO_PROXY` setting not being respected by all HTTP clients when set via `managed-settings.json` in native builds.(v2.1.121)
• Fixed the managed settings approval prompt incorrectly exiting the session upon acceptance; settings are now applied and the session continues.(v2.1.121)
• Fixed `/usage` returning "rate limited" due to a stale OAuth token; tokens now refresh automatically.(v2.1.121)
• Fixed invalid legacy enum values in `settings.json` from invalidating the entire settings file.(v2.1.121)
• Fixed `/usage` dialog content being clipped when no-flicker mode was disabled.(v2.1.121)
• Fixed `/focus` showing "Unknown command" when the fullscreen renderer was off; it now explains how to enable fullscreen rendering.(v2.1.121)
• Fixed embedded grep/find/rg shell wrappers failing if the running binary was deleted mid-session; now falls back to installed tools.(v2.1.121)
• Fixed pasting CRLF content (from Windows clipboards or Xcode console) from inserting an extra blank line between every line.(v2.1.119)
• Fixed multi-line paste losing newlines when using terminals that employ kitty keyboard protocol sequences inside bracketed paste.(v2.1.119)
• Fixed Glob and Grep tools disappearing on native macOS/Linux builds when the Bash tool was denied via permissions.(v2.1.119)
• Fixed scrolling up in fullscreen mode snapping back to the bottom every time a tool finished execution.(v2.1.119)
• Fixed MCP HTTP connections failing with "Invalid OAuth error response" when servers returned non-JSON bodies during OAuth discovery requests.(v2.1.119)
• Fixed the Rewind overlay incorrectly showing "(no prompt)" for messages that contained image attachments.(v2.1.119)
• Fixed auto mode overriding plan mode when conflicting "Execute immediately" instructions were present.(v2.1.119)
• Fixed async `PostToolUse` hooks that emit no response payload from writing empty entries to the session transcript.(v2.1.119)
• Fixed the spinner remaining active when a subagent task notification became orphaned in the queue.(v2.1.119)
• Fixed `@`-file Tab completion from replacing the entire prompt when used inside a slash command with an absolute path.(v2.1.119)
• Fixed a stray `p` character appearing at the prompt on startup when running in macOS Terminal.app via Docker or SSH.(v2.1.119)
• Fixed `${ENV_VAR}` placeholders in `headers` for HTTP/SSE/WebSocket MCP servers from not being substituted before requests.(v2.1.119)
• Fixed MCP OAuth client secret provided via `--client-secret` not being sent during token exchange for servers requiring `client_secret_post`.(v2.1.119)
• Fixed the Enter key in the `/skills` dialog from closing the dialog instead of pre-filling `/<skill-name>` into the prompt.(v2.1.119)
• Fixed the `/agents` detail view from mislabeling built-in tools unavailable to subagents as "Unrecognized".(v2.1.119)
• Fixed MCP servers originating from plugins from failing to spawn on Windows when the plugin cache was incomplete.(v2.1.119)
• Fixed `/export` from showing the current default model instead of the model the conversation actually used.(v2.1.119)
• Fixed the verbose output setting from not persisting correctly after a restart.(v2.1.119)
• Fixed `/usage` progress bars from overlapping with their corresponding "Resets …" labels.(v2.1.119)
• Fixed plugin MCP servers from failing when `${user_config.*}` references an optional field that was left blank.(v2.1.119)
• Fixed list items containing a sentence-final number from wrapping that number onto its own line.(v2.1.119)
• Fixed `/plan` and `/plan open` from not acting on the existing plan when entering plan mode.(v2.1.119)
• Fixed skills invoked before auto-compaction from being re-executed against the next user message.(v2.1.119)
• Fixed `/reload-plugins` and `/doctor` from reporting load errors for plugins that were disabled.(v2.1.119)
• Fixed Agent tool instances using `isolation: "worktree"` from reusing stale worktrees from prior sessions.(v2.1.119)
• Fixed disabled MCP servers from incorrectly appearing as "failed" in the `/status` command output.(v2.1.119)
• Fixed `TaskList` from returning tasks in arbitrary filesystem order instead of sorting them by ID.(v2.1.119)
• Fixed spurious "GitHub API rate limit exceeded" hints appearing when `gh` output contained PR titles that mentioned "rate limit".(v2.1.119)
• Fixed SDK/bridge `read_file` functionality from not correctly enforcing the size cap on growing files.(v2.1.119)
• Fixed the PR not being linked to the session when working within a git worktree.(v2.1.119)
• Fixed `/doctor` from incorrectly warning about MCP server entries that were overridden by a higher-precedence scope.(v2.1.119)
• Removed a false-positive warning on Windows regarding the need for a `'cmd /c' wrapper` for MCP configuration.(v2.1.119)
• Fixed voice dictation's first recording producing no output on macOS while the microphone permission prompt was visible in VSCode.(v2.1.119)
• Fixed concurrent-call timeout handling where a message for one tool call could silently disarm another call's watchdog(v2.1.113)
• Fixed Cmd-backspace / `Ctrl+U` to correctly delete from the cursor to the start of the line(v2.1.113)
• Fixed markdown tables breaking when a cell contains an inline code span with a pipe character(v2.1.113)
• Fixed session recap auto-firing while composing unsent text in the prompt(v2.1.113)
• Fixed `/copy` "Full response" not aligning markdown table columns correctly for pasting into GitHub, Notion, or Slack(v2.1.113)
• Fixed messages typed while viewing a running subagent being hidden from its transcript and misattributed to the parent AI(v2.1.113)
• Fixed Bash `dangerouslyDisableSandbox` running commands outside the sandbox without triggering a permission prompt(v2.1.113)
• Fixed `/effort auto` confirmation message to correctly state "Effort level set to max"(v2.1.113)
• Fixed the "copied N chars" toast overcounting emoji and other multi-code-unit characters(v2.1.113)
• Fixed `/insights` crashing with `EBUSY` on Windows(v2.1.113)
• Fixed exit confirmation dialog mislabeling one-shot scheduled tasks as recurring; it now correctly shows a countdown(v2.1.113)
• Fixed slash/@ completion menu not sitting flush against the prompt border in fullscreen mode(v2.1.113)
• Fixed `CLAUDE_CODE_EXTRA_BODY` `output_config.effort` causing 400 errors on subagent calls to models that don't support effort and on Vertex AI(v2.1.113)
• Fixed prompt cursor disappearing when `NO_COLOR` is set(v2.1.113)
• Fixed `ToolSearch` ranking so pasted MCP tool names surface the actual tool instead of description-matching siblings(v2.1.113)
• Fixed compacting a resumed long-context session failing with "Extra usage is required for long context requests"(v2.1.113)
• Fixed `plugin install` succeeding when a dependency version conflicts with an already-installed plugin; it now correctly reports `range-conflict`(v2.1.113)
• Fixed "Refine with Ultraplan" not showing the remote session URL in the transcript(v2.1.113)
• Fixed SDK image content blocks that fail to process from crashing the session; they now degrade to a text placeholder(v2.1.113)
• Fixed Remote Control sessions not streaming subagent transcripts(v2.1.113)
• Fixed Remote Control sessions not being archived when Claude Code exits(v2.1.113)
• Fixed `thinking.type.enabled is not supported` 400 error when using Opus 4.7 via a Bedrock Application Inference Profile ARN(v2.1.113)
• Fixed permission prompts being triggered by read-only bash commands using glob patterns (e.g., `ls *.ts`) and commands starting with `cd <project-dir> &&`.(v2.1.111)
• Fixed the tool suggesting the closest matching subcommand when invoked with a near-miss typo (e.g., `claude udpate` now suggests `claude update`).(v2.1.111)
• Fixed LSP diagnostics from before an edit appearing after the edit, preventing the model from re-reading already edited files.(v2.1.111)
• Fixed tab-completing `/resume` immediately resuming an arbitrary titled session instead of showing the session picker.(v2.1.111)
• Fixed `/context` grid rendering issues showing extra blank lines between rows.(v2.1.111)
• Fixed `/clear` dropping the session name set by `/rename`, which caused the statusline output to lose `session_name`.(v2.1.111)
• Fixed plugin dependency errors: distinguishing conflicting, invalid, and overly complex version requirements; fixed stale resolved versions after `plugin update`; `plugin install` now recovers from interrupted prior installs.(v2.1.111)
• Fixed Claude calling a non-existent `commit` skill and showing "Unknown skill: commit" for users without a custom `/commit` command.(v2.1.111)
• Fixed 429 rate-limit errors on Bedrock/Vertex/Foundry incorrectly referencing status.claude.com.(v2.1.111)
• Fixed feedback surveys appearing back-to-back after dismissing one.(v2.1.111)
• Fixed bare URLs in bash/PowerShell/MCP tool output being unclickable when the terminal wraps them across lines.(v2.1.111)
• Fixed Windows environment file application: `CLAUDE_ENV_FILE` and SessionStart hook environment files now apply correctly.(v2.1.111)
• Fixed Windows permission rules: paths with drive-letter paths are now correctly root-anchored, and paths differing only by drive-letter case are recognized as the same path.(v2.1.111)
• Fixed terminal display tearing (random characters, drifting input) in iTerm2 + tmux setups when terminal notifications are sent.(v2.1.111)
• Fixed `@` file suggestions re-scanning the entire project on every turn in non-git working directories, and fixed showing only config files in freshly-initialized git repos with no tracked files.(v2.1.111)
• Fixed MCP tool calls hanging indefinitely when the server connection drops mid-response on SSE/HTTP transports.(v2.1.110)
• Fixed non-streaming fallback retries causing multi-minute hangs when the API is unreachable.(v2.1.110)
• Fixed session recap, local slash-command output, and other system status lines not appearing in focus mode.(v2.1.110)
• Fixed high CPU usage in fullscreen when text is selected while a tool is running.(v2.1.110)
• Fixed plugin install not honoring dependencies declared in `plugin.json` when the marketplace entry omits them; /plugin install now lists auto-installed dependencies.(v2.1.110)
• Fixed skills with `disable-model-invocation: true` failing when invoked via /<skill> mid-message.(v2.1.110)
• Fixed `--resume` sometimes showing the first prompt instead of the /rename name for sessions still running or exited uncleanly.(v2.1.110)
• Fixed queued messages briefly appearing twice during multi-tool-call turns.(v2.1.110)
• Fixed session cleanup not removing the full session directory including subagent transcripts.(v2.1.110)
• Fixed dropped keystrokes after the CLI relaunches (e.g. /tui, provider setup wizards).(v2.1.110)
• Fixed garbled startup rendering in macOS Terminal.app and other terminals that don't support synchronized output.(v2.1.110)
• Hardened "Open in editor" actions against command injection from untrusted filenames.(v2.1.110)
• Fixed `PermissionRequest` hooks returning `updatedInput` not being re-checked against `permissions.deny` rules; `setMode:'bypassPermissions'` updates now respect `disableBypassPermissionsMode`.(v2.1.110)
• Fixed `PreToolUse` hook `additionalContext` being dropped when the tool call fails.(v2.1.110)
• Fixed stdio MCP servers that print stray non-JSON lines to stdout being disconnected on the first stray line (regression in 2.1.105).(v2.1.110)
• Fixed headless/SDK session auto-title firing an extra Haiku request when `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` or `CLAUDE_CODE_DISABLE_TERMINAL_TITLE` is set.(v2.1.110)
• Fixed potential excessive memory allocation when piped (non-TTY) Ink output contains a single very wide line.(v2.1.110)
• Fixed /skills menu not scrolling when the list overflows the modal in fullscreen mode.(v2.1.110)
• Fixed Remote Control sessions showing a generic error instead of prompting for re-login when the session is too old.(v2.1.110)
• Fixed Remote Control session renames from claude.ai not persisting the title to the local CLI session.(v2.1.110)
• Fixed paste not working in the /login code prompt (regression in 2.1.105)(v2.1.108)
• Fixed subscribers who set DISABLE_TELEMETRY falling back to 5-minute prompt cache TTL instead of 1 hour(v2.1.108)
• Fixed Agent tool prompting for permission in auto mode when the safety classifier's transcript exceeded its context window(v2.1.108)
• Fixed Bash tool producing no output when CLAUDE_ENV_FILE (e.g. ~/.zprofile) ends with a # comment line(v2.1.108)
• Fixed claude --resume <session-id> losing the session's custom name and color set via /rename(v2.1.108)
• Fixed session titles showing placeholder example text when the first message is a short greeting(v2.1.108)
• Fixed terminal escape codes appearing as garbage text in the prompt input after --teleport(v2.1.108)
• Fixed /feedback retry: pressing Enter to resubmit after a failure now works without first editing the description(v2.1.108)
• Fixed --teleport and --resume <id> precondition errors (e.g. dirty git tree, session not found) exiting silently instead of showing the error message(v2.1.108)
• Fixed Remote Control session titles set in the web UI being overwritten by auto-generated titles after the third message(v2.1.108)
• Fixed --resume truncating sessions when the transcript contained a self-referencing message(v2.1.108)
• Fixed transcript write failures (e.g. disk full) being silently dropped instead of being logged(v2.1.108)
• Fixed diacritical marks (accents, umlauts, cedillas) being dropped from responses when the language setting is configured(v2.1.108)
• Fixed policy-managed plugins never auto-updating when running from a different project than where they were first installed(v2.1.108)
• Fixed images attached to queued messages (sent while Claude is working) being dropped.(v2.1.105)
• Fixed the screen going blank when the prompt input wraps to a second line in long conversations.(v2.1.105)
• Fixed leading whitespace being copied when selecting multi-line assistant responses in fullscreen mode.(v2.1.105)
• Fixed leading whitespace being trimmed from assistant messages, which broke ASCII art and indented diagrams.(v2.1.105)
• Fixed garbled bash output when commands print clickable file links (e.g. Python `rich`/`loguru` logging).(v2.1.105)
• Fixed alt+enter not inserting a newline in terminals using ESC-prefix alt encoding, and Ctrl+J not inserting a newline (regression in 2.1.100).(v2.1.105)
• Fixed duplicate "Creating worktree" text in EnterWorktree/ExitWorktree tool display.(v2.1.105)
• Fixed queued user prompts disappearing from focus mode.(v2.1.105)
• Fixed one-shot scheduled tasks re-firing repeatedly when the file watcher missed the post-fire cleanup.(v2.1.105)
• Fixed inbound channel notifications being silently dropped after the first message for Team/Enterprise users.(v2.1.105)
• Fixed marketplace plugins with `package.json` and lockfile not having dependencies installed automatically after install/update.(v2.1.105)
• Fixed marketplace auto-update leaving the official marketplace in a broken state when a plugin process holds files open during the update.(v2.1.105)
• Fixed "Resume this session with..." hint not printing on exit after `/resume`, `--worktree`, or `/branch`.(v2.1.105)
• Fixed feedback survey shortcut keys firing when typed at the end of a longer prompt.(v2.1.105)
• Fixed stdio MCP server emitting malformed (non-JSON) output hanging the session instead of failing fast with "Connection closed".(v2.1.105)
• Fixed MCP tools missing on the first turn of headless/remote-trigger sessions when MCP servers connect asynchronously.(v2.1.105)
• Fixed `/model` picker on AWS Bedrock in non-US regions persisting invalid `us.*` model IDs to `settings.json` when inference profile discovery is still in-flight.(v2.1.105)
• Fixed 429 rate-limit errors showing a raw JSON dump instead of a clean message for API-key, Bedrock, and Vertex users.(v2.1.105)
• Fixed crash on resume when session contains malformed text blocks.(v2.1.105)
• Fixed `/help` dropping the tab bar, Shortcuts heading, and footer at short terminal heights.(v2.1.105)
• Fixed malformed keybinding entry values in `keybindings.json` being silently loaded instead of rejected with a clear error.(v2.1.105)
• Fixed `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` in one project's settings permanently disabling usage metrics for all projects on the machine.(v2.1.105)
• Fixed washed-out 16-color palette when using Ghostty, Kitty, Alacritty, WezTerm, foot, rio, or Contour over SSH/mosh.(v2.1.105)
• Fixed Bash tool suggesting `acceptEdits` permission mode when exiting plan mode would downgrade from a higher permission level.(v2.1.105)
• Fixed a command injection vulnerability in the POSIX which fallback used by LSP binary detection.(v2.1.101)
• Fixed a memory leak where long sessions retained dozens of historical copies of the message list in the virtual scroller.(v2.1.101)
• Fixed resume/continue losing conversation context on large sessions when the loader anchored on a dead-end branch.(v2.1.101)
• Fixed resume chain recovery bridging into an unrelated subagent conversation when a subagent message landed near a main-chain write gap.(v2.1.101)
• Fixed a crash on resume when a persisted Edit\/Write tool result was missing its file_path.(v2.1.101)
• Fixed a hardcoded 5-minute request timeout that aborted slow backends regardless of API_TIMEOUT_MS.(v2.1.101)
• Fixed permissions.deny rules not overriding a PreToolUse hook's permissionDecision: "ask", preventing hooks from downgrading denies to prompts.(v2.1.101)
• Fixed setting sources without user causing background cleanup to ignore cleanupPeriodDays and delete history older than 30 days.(v2.1.101)
• Fixed Bedrock SigV4 authentication failing with 403 when Authorization headers were set via environment variables or helpers.(v2.1.101)
• Fixed claude -w <name> failing with "already exists" after stale worktree cleanup from a previous session.(v2.1.101)
• Fixed subagents not inheriting MCP tools from dynamically-injected servers.(v2.1.101)
• Fixed sub-agents running in isolated worktrees being denied Read\/Edit access to files inside their own worktree.(v2.1.101)
• Fixed sandboxed Bash commands failing with mktemp: No such file or directory after a fresh boot.(v2.1.101)
• Fixed claude mcp serve tool calls failing with "Tool execution failed" in MCP clients that validate outputSchema.(v2.1.101)
• Fixed RemoteTrigger tool's run action sending an empty body and being rejected by the server.(v2.1.101)
• Fixed several resume picker issues including narrow default view, unreachable preview on Windows Terminal, incorrect cwd, missing session-not-found errors, and terminal title not being set.(v2.1.101)
• Fixed Grep tool ENOENT when the embedded ripgrep binary path becomes stale; now falls back to system rg and self-heals.(v2.1.101)
• Fixed \/btw writing a copy of the entire conversation to disk on every use.(v2.1.101)
• Fixed \/context Free space and Messages breakdown disagreeing with the header percentage.(v2.1.101)
• Fixed several plugin issues including slash commands resolving incorrectly, \/plugin update failing with ENAMETOOLONG, Discover showing installed plugins, directory-source plugins loading stale cache, and skills not honoring context and agent frontmatter.(v2.1.101)
• Fixed the \/mcp menu offering OAuth-specific actions for servers configured with headersHelper; Reconnect is now offered instead.(v2.1.101)
• Fixed ctrl+], ctrl+\, and ctrl+^ keybindings not firing in terminals that send raw C0 control bytes.(v2.1.101)
• Fixed \/login OAuth URL rendering with padding that prevented clean mouse selection.(v2.1.101)
• Fixed rendering issues including flicker in non-fullscreen mode, scrollback wiping, and mouse-scroll escape sequences leaking into the prompt.(v2.1.101)
• Fixed crash when settings.json env values are numbers instead of strings.(v2.1.101)
• Fixed in-app settings writes not refreshing the in-memory snapshot, preventing removed directories from being revoked mid-session.(v2.1.101)
• Fixed custom keybindings not loading on Bedrock, Vertex, and other third-party providers.(v2.1.101)
• Fixed claude --continue -p not correctly continuing sessions created by -p or the SDK.(v2.1.101)
• Fixed several Remote Control issues including worktrees removed on session crash, connection failures not persisting, spurious Disconnected indicator in brief mode, and \/remote-control failing over SSH when only Organization UUID is set.(v2.1.101)
• Fixed \/insights sometimes omitting the report file link from its response.(v2.1.101)
• Fixed the file attachment below the chat input not clearing when the last editor tab is closed in VSCode.(v2.1.101)
• Fixed a Bash tool permission bypass where an escaped flag could be auto-allowed as read-only, potentially leading to arbitrary code execution.(v2.1.98)
• Fixed compound Bash commands bypassing forced permission prompts for safety checks and explicit ask rules in auto and bypass-permissions modes.(v2.1.98)
• Fixed read-only commands with environment variable prefixes not prompting unless the variable is known-safe (e.g., `LANG`, `TZ`).(v2.1.98)
• Fixed redirects to `/dev/tcp/...` or `/dev/udp/...` not prompting instead of auto-allowing.(v2.1.98)
• Fixed stalled streaming responses timing out instead of falling back to non-streaming mode.(v2.1.98)
• Fixed 429 retries burning all attempts too quickly by ensuring exponential backoff applies as a minimum.(v2.1.98)
• Fixed MCP OAuth `oauth.authServerMetadataUrl` configuration override not being honored on token refresh after restart.(v2.1.98)
• Fixed capital letters being dropped to lowercase in xterm and VS Code integrated terminals when the kitty keyboard protocol is active.(v2.1.98)
• Fixed macOS text replacements deleting the trigger word instead of inserting the substitution.(v2.1.98)
• Fixed `--dangerously-skip-permissions` being silently downgraded to accept-edits mode after approving a write to a protected path via Bash.(v2.1.98)
• Fixed managed-settings allow rules remaining active after an admin removed them until process restart.(v2.1.98)
• Fixed `permissions.additionalDirectories` changes not applying mid-session; removed directories now lose access immediately.(v2.1.98)
• Fixed removing a directory from `additionalDirectories` revoking access to the same directory passed via `--add-dir`.(v2.1.98)
• Fixed `Bash(cmd:*)` and `Bash(git commit *)` wildcard permission rules failing to match commands with extra spaces or tabs.(v2.1.98)
• Fixed `Bash(...)` deny rules being downgraded to a prompt for piped commands that mix `cd` with other segments.(v2.1.98)
• Fixed false Bash permission prompts for commands like `cut -d /` and filenames containing `%`.(v2.1.98)
• Fixed permission rules with names matching JavaScript prototype properties (e.g., `toString`) causing `settings.json` to be silently ignored.(v2.1.98)
• Fixed agent team members not inheriting the leader's permission mode when using `--dangerously-skip-permissions`.(v2.1.98)
• Fixed a crash in fullscreen mode when hovering over MCP tool results.(v2.1.98)
• Fixed copying wrapped URLs in fullscreen mode inserting spaces at line breaks.(v2.1.98)
• Fixed file-edit diffs disappearing from the UI on `--resume` when the edited file was larger than 10KB.(v2.1.98)
• Fixed several `/resume` picker issues including uneditable resumes, search state wiping, and transient status text.(v2.1.98)
• Fixed `/export` not honoring absolute paths and `~`, and silently rewriting user-supplied extensions to `.txt`.(v2.1.98)
• Fixed `/effort max` being denied for unknown or future model IDs.(v2.1.98)
• Fixed slash command picker breaking when a plugin's frontmatter `name` is a YAML boolean keyword.(v2.1.98)
• Fixed rate-limit upsell text being hidden after message remounts.(v2.1.98)
• Fixed MCP tools with `_meta["anthropic/maxResultSizeChars"]` not bypassing the token-based persist layer.(v2.1.98)
• Fixed voice mode leaking space characters into input when re-holding the push-to-talk key during transcript processing.(v2.1.98)
• Fixed `DISABLE_AUTOUPDATER` not fully suppressing the npm registry version check and symlink modification.(v2.1.98)
• Fixed a memory leak where Remote Control permission handler entries were retained for the entire session.(v2.1.98)
• Fixed background subagents that fail with an error not reporting partial progress to the parent agent.(v2.1.98)
• Fixed prompt-type Stop/SubagentStop hooks failing on long sessions.(v2.1.98)
• Fixed feedback survey rendering when dismissed.(v2.1.98)
• Fixed Bash `grep -f FILE` / `rg -f FILE` not prompting when reading a pattern file outside the working directory.(v2.1.98)
• Fixed stale subagent worktree cleanup removing worktrees that contain untracked files.(v2.1.98)
• Fixed `sandbox.network.allowMachLookup` not taking effect on macOS.(v2.1.98)
• Fixed `CLAUDE_CODE_MAX_CONTEXT_TOKENS` not honoring `DISABLE_COMPACT` when set.(v2.1.98)
• Fixed VSCode reporting a false-positive "requires git-bash" error on Windows when the path is correctly configured.(v2.1.98)
• Fixed agents appearing stuck after a 429 rate-limit response with a long Retry-After header; the error now surfaces immediately.(v2.1.94)
• Fixed Console login on macOS silently failing when the login keychain is locked or out of sync; the error is now surfaced and `claude doctor` diagnoses the fix.(v2.1.94)
• Fixed plugin skill hooks defined in YAML frontmatter being silently ignored.(v2.1.94)
• Fixed plugin hooks failing with "No such file or directory" when `CLAUDE_PLUGIN_ROOT` was not set.(v2.1.94)
• Fixed `${CLAUDE_PLUGIN_ROOT}` resolving incorrectly for local-marketplace plugins on startup.(v2.1.94)
• Fixed scrollback showing repeated diffs and blank pages in long-running sessions.(v2.1.94)
• Fixed multiline user prompts in the transcript indenting wrapped lines incorrectly under the caret.(v2.1.94)
• Fixed Shift+Space inserting the literal word "space" instead of a space character in search inputs.(v2.1.94)
• Fixed hyperlinks opening two browser tabs when clicked inside tmux running in an xterm.js-based terminal.(v2.1.94)
• Fixed an alt-screen rendering bug that could leave compounding ghost lines during scrolling.(v2.1.94)
• Fixed the `FORCE_HYPERLINK` environment variable being ignored when set via `settings.json` `env`.(v2.1.94)
• Fixed native terminal cursor not tracking the selected tab in dialogs.(v2.1.94)
• Fixed Bedrock invocation of Sonnet 3.5 v2 by correctly using the `us.` inference profile ID.(v2.1.94)
• Fixed SDK/print mode not preserving the partial assistant response in conversation history when interrupted mid-stream.(v2.1.94)
• Fixed CJK and other multibyte text being corrupted with U+FFFD in stream-json input/output when chunk boundaries split a UTF-8 sequence.(v2.1.94)
• Fixed VSCode dropdown menus selecting the wrong item when the mouse was over the list while typing or using arrow keys.(v2.1.94)
• Fixed --resume failing with "tool_use ids were found without tool_result blocks" on sessions created before v2.1.85.(v2.1.86)
• Fixed Write/Edit/Read failing on files outside the project root (e.g., ~/.claude/CLAUDE.md) when conditional skills or rules are configured.(v2.1.86)
• Fixed unnecessary config disk writes on every skill invocation that could cause performance issues and config corruption on Windows.(v2.1.86)
• Fixed potential out-of-memory crash when using /feedback on very long sessions with large transcript files.(v2.1.86)
• Fixed --bare mode dropping MCP tools in interactive sessions and silently discarding messages enqueued mid-turn.(v2.1.86)
• Fixed the c shortcut copying only ~20 characters of the OAuth login URL instead of the full URL.(v2.1.86)
• Fixed masked input (e.g., OAuth code paste) leaking the start of the token when wrapping across multiple lines on narrow terminals.(v2.1.86)
• Fixed official marketplace plugin scripts failing with "Permission denied" on macOS/Linux since v2.1.83.(v2.1.86)
• Fixed statusline showing another session's model when running multiple Claude Code instances and using /model in one of them.(v2.1.86)
• Fixed scroll not following new messages after wheel scroll or click-to-select at the bottom of a long conversation.(v2.1.86)
• Fixed /plugin uninstall dialog: pressing n now correctly uninstalls the plugin while preserving its data directory.(v2.1.86)
• Fixed a regression where pressing Enter after clicking could leave the transcript blank until the response arrived.(v2.1.86)
• Fixed ultrathink hint lingering after deleting the keyword.(v2.1.86)
• Fixed memory growth in long sessions from markdown/highlight render caches retaining full content strings.(v2.1.86)
• Fixed VSCode extension incorrectly showing "Not responding" during long-running operations.(v2.1.86)
• Fixed VSCode extension defaulting Max plan users to Sonnet after the OAuth token refreshes (8 hours after login).(v2.1.86)
• Fixed voice push-to-talk: holding the voice key no longer leaks characters into the text input, and transcripts now insert at the correct position.(v2.1.84)
• Fixed up/down arrow keys being unresponsive when a footer item is focused.(v2.1.84)
• Fixed `Ctrl+U` (kill-to-line-start) being a no-op at line boundaries in multiline input, so repeated `Ctrl+U` now clears across lines.(v2.1.84)
• Fixed null-unbinding a default chord binding (e.g. `"ctrl+x ctrl+k": null`) still entering chord-wait mode instead of freeing the prefix key.(v2.1.84)
• Fixed mouse events inserting literal "mouse" text into transcript search input.(v2.1.84)
• Fixed workflow subagents failing with API 400 when the outer session uses `--json-schema` and the subagent also specifies a schema.(v2.1.84)
• Fixed missing background color behind certain emoji in user message bubbles on some terminals.(v2.1.84)
• Fixed the "allow Claude to edit its own settings for this session" permission option not sticking for users with `Edit(.claude)` allow rules.(v2.1.84)
• Fixed a hang when generating attachment snippets for large edited files.(v2.1.84)
• Fixed MCP tool/resource cache leak on server reconnect.(v2.1.84)
• Fixed a startup performance issue where partial clone repositories (Scalar/GVFS) triggered mass blob downloads.(v2.1.84)
• Fixed native terminal cursor not tracking the text input caret, so IME composition (CJK input) now renders inline and screen readers can follow the input position.(v2.1.84)
• Fixed spurious "Not logged in" errors on macOS caused by transient keychain read failures.(v2.1.84)
• Fixed cold-start race where core tools could be deferred without their bypass active, causing Edit/Write to fail with InputValidationError on typed parameters.(v2.1.84)
• Fixed multiple concurrent Claude Code sessions requiring repeated re-authentication when one session refreshed its OAuth token.(v2.1.81)
• Fixed voice mode silently swallowing retry failures and showing a misleading "check your network" message instead of the actual error.(v2.1.81)
• Fixed voice mode audio not recovering when the server silently drops the WebSocket connection.(v2.1.81)
• Fixed structured-outputs beta header causing 400 errors on proxy gateways by ensuring CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS correctly suppresses it.(v2.1.81)
• Fixed --channels bypass issue for Team/Enterprise organizations lacking other managed settings.(v2.1.81)
• Fixed a crash occurring specifically on Node.js 18 environments.(v2.1.81)
• Fixed unnecessary permission prompts appearing for Bash commands containing dashes within strings.(v2.1.81)
• Fixed plugin hooks blocking prompt submission when the plugin directory was deleted during an active session.(v2.1.81)
• Fixed a race condition where background agent task output could hang indefinitely if the task completed between polling intervals.(v2.1.81)
• Fixed resuming a session in a worktree now correctly switches the user back to that worktree.(v2.1.81)
• Fixed /btw command not including pasted text when used during an active response.(v2.1.81)
• Fixed a race condition where fast Cmd+Tab followed by paste could fail due to clipboard copy timing under tmux.(v2.1.81)
• Fixed terminal tab title not updating correctly with an auto-generated session description.(v2.1.81)
• Fixed invisible hook attachments inflating the message count when viewing transcripts.(v2.1.81)
• Fixed Remote Control sessions showing a generic title instead of deriving the title from the first prompt.(v2.1.81)
• Fixed /rename command not reliably syncing the title for Remote Control sessions.(v2.1.81)
• Fixed Remote Control /exit command not reliably archiving the session.(v2.1.81)
• Fixed Windows PATH inheritance issue for the Bash tool when using Git Bash within VSCode (a regression from v2.1.78).(v2.1.81)
• Fixed `--resume` dropping parallel tool results, ensuring all tool_use/tool_result pairs are restored instead of showing placeholders(v2.1.80)
• Fixed voice mode WebSocket failures caused by Cloudflare bot detection on non-browser TLS fingerprints(v2.1.80)
• Fixed 400 errors when using fine-grained tool streaming through API proxies, Bedrock, or Vertex(v2.1.80)
• Fixed `/remote-control` appearing for gateway and third-party provider deployments where it is non-functional(v2.1.80)
• Fixed `/sandbox` tab switching not responding to Tab or arrow keys(v2.1.80)
• Fixed managed settings (like `enabledPlugins`, `permissions.defaultMode`, policy-set env vars) not being applied at startup when `remote-settings.json` was cached(v2.1.80)
• Fixed freezes and 100% CPU loops triggered by permission prompts for complex bash commands(v2.1.73)
• Fixed a deadlock that could freeze Claude Code when many skill files changed at once (e.g. during `git pull` in a repo with a large `.claude/skills/` directory)(v2.1.73)
• Fixed Bash tool output being lost when running multiple Claude Code sessions in the same project directory(v2.1.73)
• Fixed subagents with `model: opus`/`sonnet`/`haiku` being silently downgraded to older model versions on Bedrock, Vertex, and Microsoft Foundry(v2.1.73)
• Fixed background bash processes spawned by subagents not being cleaned up when the agent exits(v2.1.73)
• Fixed `/resume` showing the current session in the picker(v2.1.73)
• Fixed `/ide` crashing with `onInstall is not defined` when auto-installing the extension(v2.1.73)
• Fixed `/loop` not being available on Bedrock/Vertex/Foundry and when telemetry was disabled(v2.1.73)
• Fixed SessionStart hooks firing twice when resuming a session via `--resume` or `--continue`(v2.1.73)
• Fixed JSON-output hooks injecting no-op system-reminder messages into the model's context on every turn(v2.1.73)
• Fixed voice mode session corruption when a slow connection overlaps a new recording(v2.1.73)
• Fixed Linux sandbox failing to start with "ripgrep (rg) not found" on native builds(v2.1.73)
• Fixed Linux native modules not loading on Amazon Linux 2 and other glibc 2.26 systems(v2.1.73)
• Fixed "media_type: Field required" API error when receiving images via Remote Control(v2.1.73)
• Fixed `/heapdump` failing on Windows with `EEXIST` error when the Desktop folder already exists(v2.1.73)
• VSCode: Fixed HTTP 400 errors for users behind proxies or on Bedrock/Vertex with Claude 4.5 models(v2.1.73)
• Fixed FileWriteTool line counting to preserve intentional trailing blank lines instead of stripping them.(v2.1.47)
• Fixed Windows terminal rendering bugs where line counts showed incorrect values (always 1) due to `os.EOL` (`\r\n`) in display code.(v2.1.47)
• Fixed bold and colored text in markdown output shifting to the wrong characters on Windows due to `\r\n` line endings.(v2.1.47)
• Fixed compaction failing when conversations contain many PDF documents by stripping document blocks alongside images before sending to the compaction API.(v2.1.47)
• Fixed bash tool output being silently discarded on Windows when using MSYS2 or Cygwin shells.(v2.1.47)
• Fixed the bash permission classifier from incorrectly granting permissions based on hallucinated descriptions.(v2.1.47)
• Fixed user-defined agents only loading one file on NFS/FUSE filesystems that report zero inodes.(v2.1.47)
• Fixed plugin agent skills silently failing to load when referenced by bare name instead of fully-qualified plugin name.(v2.1.47)
• Fixed CWD tracking temp files never being cleaned up on Windows, preventing indefinite accumulation.(v2.1.47)
• Fixed API 400 errors ("thinking blocks cannot be modified") in sessions with concurrent agents caused by interleaved streaming content blocks.(v2.1.47)
• Fixed a single file write/edit error from aborting all other parallel file write/edit operations; independent mutations now complete on failure.(v2.1.47)
• Fixed custom session titles set via `/rename` being lost after resuming a conversation.(v2.1.47)
• Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start.(v2.1.47)
• Fixed bash commands using backslash-newline continuation lines (`\` followed by newline) producing spurious empty arguments.(v2.1.47)
• Fixed built-in slash commands being hidden from the autocomplete dropdown when many user skills are installed.(v2.1.47)
• Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading.(v2.1.47)
• Fixed session name persisting in status bar after `/clear` command.(v2.1.47)
• Fixed crash when a skill's `name` or `description` in SKILL.md frontmatter is a bare number, by coercing the value to a string.(v2.1.47)
• Fixed `/resume` silently dropping sessions when the first message exceeds 16KB or uses array-format content.(v2.1.47)
• Fixed `claude doctor` misclassifying mise and asdf-managed installations as native installs.(v2.1.47)
• Fixed zsh heredoc failing with "read-only file system" error in sandboxed commands.(v2.1.47)
• Fixed agent progress indicator showing inflated tool use count.(v2.1.47)
• Fixed image pasting not working on WSL2 systems where Windows copies images as BMP format.(v2.1.47)
• Fixed background agent results returning raw transcript data instead of the agent's final answer.(v2.1.47)
• Fixed Warp terminal incorrectly prompting for Shift+Enter setup when it supports it natively.(v2.1.47)
• Fixed CJK wide characters causing misaligned timestamps and layout elements in the TUI.(v2.1.47)
• Fixed custom agent `model` field in `.claude/agents/*.md` being ignored when spawning team teammates.(v2.1.47)
• Fixed plan mode being lost after context compaction, causing the model to switch from planning to implementation mode.(v2.1.47)
• Fixed `alwaysThinkingEnabled: true` in settings.json not enabling thinking mode on Bedrock and Vertex providers.(v2.1.47)
• Fixed `tool_decision` OTel telemetry event not being emitted in headless/SDK mode.(v2.1.47)
• Fixed session name being lost after context compaction; renamed sessions now preserve their custom title through compaction.(v2.1.47)
• Fixed `/resume <session-id>` failing to find sessions whose first message exceeds 16KB.(v2.1.47)
• Fixed "Always allow" on multiline bash commands creating invalid permission patterns that corrupt settings.(v2.1.47)
• Fixed React crash (error #31) when a skill's `argument-hint` in SKILL.md frontmatter uses YAML sequence syntax, by coercing the value to a string.(v2.1.47)
• Fixed crash when using `/fork` on sessions that used web search by gracefully handling null entries in search results.(v2.1.47)
• Fixed read-only git commands triggering FSEvents file watcher loops on macOS by adding --no-optional-locks flag.(v2.1.47)
• Fixed custom agents and skills not being discovered when running from a git worktree; project-level agent/skill directories are now included.(v2.1.47)
• Fixed non-interactive subcommands like `claude doctor` and `claude plugin validate` being blocked inside nested Claude sessions.(v2.1.47)
• Windows: Fixed the same CLAUDE.md file being loaded twice when drive letter casing differs between paths.(v2.1.47)
• Fixed inline code spans in markdown being incorrectly parsed as bash commands.(v2.1.47)
• Fixed teammate spinners not respecting custom spinnerVerbs from settings.(v2.1.47)
• Fixed shell commands permanently failing after a command deletes its own working directory.(v2.1.47)
• Fixed hooks (PreToolUse, PostToolUse) silently failing.(v2.1.47)
• Fixed Agent Teams teammates failing on Bedrock, Vertex, and Foundry by correctly propagating API provider environment variables to tmux-spawned processes.(v2.1.45)
• Resolved sandbox "operation not permitted" errors on macOS when writing temporary files by ensuring the correct per-user temp directory is used.(v2.1.45)
• Fixed a crash in the Task tool (backgrounded agents) caused by a `ReferenceError` upon task completion.(v2.1.45)
• Fixed autocomplete suggestions not being accepted via the Enter key when images have been pasted into the input field.(v2.1.45)
• Fixed skills invoked by subagents incorrectly appearing in the main session context after compaction.(v2.1.45)
• Fixed the accumulation of excessive `.claude.json.backup` files during every startup.(v2.1.45)
• Fixed plugin-provided commands, agents, and hooks not being available immediately after installation without requiring a full restart.(v2.1.45)
• Fixed /resume command showing interrupt messages as session titles.(v2.1.42)
• Fixed Opus 4.6 launch announcement incorrectly displaying for Bedrock, Vertex, and Foundry users.(v2.1.42)
• Fixed permanent session lockups caused by excessively large PDF uploads, which previously required starting a new conversation(v2.1.31)
• Fixed bash commands incorrectly reporting "Read-only file system" errors when sandbox mode was enabled(v2.1.31)
• Fixed a crash that rendered sessions unusable after entering plan mode when the project configuration in `~/.claude.json` was missing default fields(v2.1.31)
• Fixed the `temperatureOverride` parameter being silently ignored in the streaming API path, ensuring configured overrides are respected(v2.1.31)