v2.1.187
Claude CodeSummary
This release introduces enhanced security with a new setting to block sandboxed credential access and organizational controls for model selection. Several critical bugs related to structured output, remote tool calls, and session resumption have been fixed, improving overall stability and reliability across various workflows.
New Features
- Added `sandbox.credentials` setting to block sandboxed commands from reading credential files and secret environment variables
- Added organization-configured model restrictions to the model picker, `--model`, `/model`, and `ANTHROPIC_MODEL`
- Added mouse click support to select menus (permission prompts, `/model`, `/config`, etc.) in fullscreen mode
Bug Fixes
- Fixed `--resume` failing with "No conversation found" when the original `-p` run produced no model turns
- Fixed `--json-schema` and workflow `agent({schema})` structured output so the model cannot re-call `StructuredOutput` indefinitely and follow-up turns reliably return structured output
- Fixed remote MCP tool calls hanging for 5 minutes by aborting with an error instead of blocking indefinitely
- Fixed Claude Code Remote sessions taking ~2.7s longer to start due to the agent proxy CA system-trust install
- Fixed pasted Korean/CJK text turning into mojibake in terminals that deliver paste as per-byte extended-key events
- Fixed `/update` over Remote Control hanging when a startup trust dialog would have shown
- Fixed background jobs in the agents view getting stuck in "working" indefinitely when the agent ended a turn without producing structured output
- Fixed channel connections dropping after navigating to the agents view and back, and after `/bg`, `/tui`, or `/update`
- Fixed agent stop notifications not correctly attributing who stopped the agent
- Fixed subagent depth tracking: resumed subagents now restore their original spawn depth, and forked subagents now count toward the depth cap
- Fixed leaked agent worktree registrations: locked `.git/worktrees/` entries from killed agents are now cleaned up automatically
- Fixed Cmd+click not opening URLs in fullscreen mode in Ghostty on macOS
- Fixed `claude --help` not listing the `--bg`/`--background` flag
- Fixed Esc, Ctrl-C, and Ctrl-D not working while `/share` is uploading
- Fixed VSCode extension becoming unresponsive when resuming a large session
Improvements
- Improved `/install-github-app` so GitHub Actions workflow setup is now optional
- Improved `/btw` with ←/→ arrow navigation to step through earlier answers
- Improved `/plugin` to surface plugins you haven't used recently for cleanup
- Improved agent stop notification wording to use "finished"/"stopped" instead of "came to rest"