v2.1.232
Claude CodeSummary
This release introduces enhanced subagent capabilities, allowing them to inherit conversation history and run in the background by default. You can now mention other Claude sessions directly and enjoy improved GitLab integration for plugin marketplaces. Several security enhancements have been added, including secret redaction for GitLab tokens and improved sandbox hardening.
New Features
- Introduced subagent forking by default, allowing subagents to inherit the full conversation and prompt cache, and running non-teammate agent spawns in interactive sessions in the background.
- Enabled mentioning other Claude sessions by name using '@' in the prompt, allowing direct communication via SendMessage.
- Added secret redaction for various GitLab token families and full redaction for routable GitLab tokens, enhancing security.
- Integrated GitLab support into plugin marketplaces, allowing cloning of bare gitlab.com repository URLs.
- Offered Fable 5 as an advisor in `/advisor` for organizations with Fable access, with usage-credits consent managed through `/model fable`.
- Enabled pasting and clipboard images to be read without blocking the event loop.
- Added `/code-review` at high, xhigh, and max effort to run in a background agent, similar to other levels.
Bug Fixes
- Fixed a PowerShell permission bypass where variable-writing parameters could silently overwrite `$PSDefaultParameterValues`.
- Fixed a Windows permission bypass where Git Bash followed Cygwin-style symlinks that path validation saw as regular files.
- Fixed nested git repositories inheriting trust from a parent directory; each repository now requires its own trust confirmation.
- Fixed MCP connections hanging for the full 30-second connect timeout when a server fails to answer or sends a malformed reply.
- Fixed Remote Control sessions hosted by a bridge inside a cloud session inheriting that session's transcript or credentials.
- Fixed Remote Control sessions started from Claude Desktop or an IDE appearing as a new claude.ai session each time the local session was resumed; they now reattach to the existing one.
- Fixed Remote Control sessions appearing unreachable to newly attached clients while idle.
- Fixed Remote Control bridge sessions not restoring conversation history when the session worker restarts.
- Fixed Remote Control resuming a conversation whose session was deleted from claude.ai or the app, which now starts a replacement instead of failing.
- Fixed Cloud gateway `/login` exiting silently or leaving an unresponsive terminal when managed settings failed to load; the reason is now shown.
- Fixed voice mode on native builds getting stuck on "listening…" when the voice service rejected the connection; the rejection is now shown immediately.
- Fixed mTLS client certificate rotation requiring a restart; Claude Code now reloads the rotated cert and key automatically on connection errors.
- Fixed malformed AWS or Vertex region values being used to build request URLs; they now fall back to the default region.
- Fixed stream idle timeout errors failing the request instead of recovering on Bedrock, Vertex, and gateway deployments.
- Fixed content-sized overlays containing truncated text rendering one column too wide, and start-truncated text collapsing to an ellipsis.
- Fixed a stray garbled character where a long shell-command or agent-description preview was cut off mid-emoji.
- Fixed a startup race that could silently unregister a plugin marketplace due to concurrent writes to `known_marketplaces.json`.
- Fixed `/update` and `/tui` refusing to restart while work that survives the relaunch was running.
- Fixed usage-limit guidance suggesting unavailable slash commands in SDK and remote sessions.
- Fixed the consent message for interactive `--advisor fable` launches, which told you to run `/model fable` in an interactive session that had just exited.
- Fixed Remote Control reconnecting after a network blip; it now keeps reconnecting for about 30 minutes and no longer drops after a few blips spread across an hour.
- Fixed Remote Control resuming a conversation silently taking Remote Control away from another Claude Code on the same machine; it now prompts to move it.
- Fixed Bash input redirections (`< file`) on all platforms to be permission-checked like their argument spellings.
- Fixed Cowork sessions inlining external @-imports from user-scope memory files.
- Fixed the auto-generated cross-session messaging socket directory on shared `/tmp` to refuse pre-planted symlinks or other users' directories.
- Fixed the Linux filesystem sandbox against a protected-path bypass.
- Fixed project settings overriding the sandbox's ripgrep binary; `sandbox.ripgrep` is now honored only from user, managed, and `--settings` settings.
Improvements
- Interactive sessions on one machine now keep unique names, preventing conflicts and informing users of name variants.
- Added `/config` rows for 'Dialog expiry' and 'Messages from your other sessions' for better session management.
- Settings `additionalMarketplaces` and `allowedMarketplaces` are now accepted as friendlier aliases for `extraKnownMarketplaces` and `strictKnownMarketplaces`.
- Enterprise policy `blockedMarketplaces` now blocks bare repo URLs when classified as git clones.
- Gateway now accepts all released Desktop settings, validated at boot against Desktop's own schema.
- Gateway now fails boot for empty `managed.policies[].match.groups`/`admin.admin_groups` entries and malformed `email_domain` values.
- Improved fullscreen streaming by keeping long sessions responsive and avoiding re-normalization on every update.
- Enhanced the managed settings approval dialog to show endpoint URLs, use clearer wording, skip routine OpenTelemetry options, and require approval for specific server-managed sandbox binary overrides.
- `/feedback` and `/bug` now open immediately when invoked while Claude is responding, instead of waiting for the turn to finish.
- `/plugin install plugin@marketplace` now refreshes the marketplace first, enabling installation of newly published plugins without a manual update.
- Pasted and clipboard images are read without blocking the event loop.
- Updated agent panel: completed subagents hide immediately with a `/tasks` footer hint, and the overflow indicator moved left for visibility.
- Remote Control terminal now indicates the reason a session was taken over, ended, or deleted, and stops suggesting reconnects that would undo it.
- Shortened the message shown when resuming a completed background agent.
- Hardened the Linux filesystem sandbox.
- Changed `sandbox.ripgrep` to be honored only from user, managed, and `--settings` settings.