v2.1.107claude code
- ~Show thinking hints sooner during long operations
claude code / codex / cursor / gemini / grok
what shipped.
the latest updates to your ai tools, straight from their official changelogs.
2026-04-14
2026-04-13
v2.1.105claude code
- +Added
pathparameter to the `EnterWorktree` tool to switch into an existing worktree of the current repository - +Added PreCompact hook support: hooks can now block compaction by exiting with code 2 or returning `{"decision":"block"}`
- +Added background monitor support for plugins via a top-level `monitors` manifest key that auto-arms at session start or on skill invoke
+ 34 more− less
- ~
/proactiveis now an alias for `/loop`
- ↑Improved stalled API stream handling: streams now abort after 5 minutes of no data and retry non-streaming instead of hanging indefinitely
- ↑Improved network error messages: connection errors now show a retry message immediately instead of a silent spinner
- ↑Improved file write display: long single-line writes (e.g. minified JSON) are now truncated in the UI instead of paginating across many screens
- ↑Improved
/doctorlayout with status icons; press `f` to have Claude fix reported issues - ↑Improved
/configlabels and descriptions for clarity - ↑Improved skill description handling: raised the listing cap from 250 to 1,536 characters and added a startup warning when descriptions are truncated
- ↑Improved
WebFetchto strip `<style>` and `<script>` contents from fetched pages so CSS-heavy pages no longer exhaust the content budget before reaching actual text - ↑Improved stale agent worktree cleanup to remove worktrees whose PR was squash-merged instead of keeping them indefinitely
- ✓Fixed images attached to queued messages (sent while Claude is working) being dropped
- ✓Fixed screen going blank when the prompt input wraps to a second line in long conversations
- ✓Fixed leading whitespace getting copied when selecting multi-line assistant responses in fullscreen mode
- ✓Fixed leading whitespace being trimmed from assistant messages, breaking ASCII art and indented diagrams
- ✓Fixed garbled bash output when commands print clickable file links (e.g. Python `rich`/`loguru` logging)
- ✓Fixed alt+enter not inserting a newline in terminals using ESC-prefix alt encoding, and Ctrl+J not inserting a newline (regression in 2.1.100)
- ✓Fixed duplicate "Creating worktree" text in EnterWorktree/ExitWorktree tool display
- ✓Fixed queued user prompts disappearing from focus mode
2026-04-10
v2.1.101claude code
- +Added
/team-onboardingcommand to generate a teammate ramp-up guide from your local Claude Code usage - +Added OS CA certificate store trust by default, so enterprise TLS proxies work without extra setup (set `CLAUDE_CODE_CERT_STORE=bundled` to use only bundled CAs)
- ~
/ultraplanand other remote-session features now auto-create a default cloud environment instead of requiring web setup first
+ 43 more− less
- ↑Improved brief mode to retry once when Claude responds with plain text instead of a structured message
- ↑Improved focus mode: Claude now writes more self-contained summaries since it knows you only see its final message
- ↑Improved tool-not-available errors to explain why and how to proceed when the model calls a tool that exists but isn't available in the current context
- ↑Improved rate-limit retry messages to show which limit was hit and when it resets instead of an opaque seconds countdown
- ↑Improved refusal error messages to include the API-provided explanation when available
- ↑Improved
claude -p --resume <name>to accept session titles set via `/rename` or `--name` - ↑Improved settings resilience: an unrecognized hook event name in `settings.json` no longer causes the entire file to be ignored
- ↑Improved plugin hooks from plugins force-enabled by managed settings to run when `allowManagedHooksOnly` is set
- ✓Fixed a command injection vulnerability in the POSIX `which` fallback used by LSP binary detection
- ✓Fixed a memory leak where long sessions retained dozens of historical copies of the message list in the virtual scroller
- ✓Fixed
--resume/`--continue` losing conversation context on large sessions when the loader anchored on a dead-end branch instead of the live conversation - ✓Fixed
--resumechain recovery bridging into an unrelated subagent conversation when a subagent message landed near a main-chain write gap - ✓Fixed a crash on
--resumewhen a persisted Edit/Write tool result was missing its `file_path` - ✓Fixed a hardcoded 5-minute request timeout that aborted slow backends (local LLMs, extended thinking, slow gateways) regardless of `API_TIMEOUT_MS`
- ✓Fixed
permissions.denyrules not overriding a PreToolUse hook's `permissionDecision: "ask"` — previously the hook could downgrade a deny into a prompt - ✓Fixed
--setting-sourceswithout `user` causing background cleanup to ignore `cleanupPeriodDays` and delete conversation history older than 30 days
2026-04-09
- +Added interactive Google Vertex AI setup wizard accessible from the login screen when selecting "3rd-party platform", guiding you through GCP authentication, project and region configuration, credential verification, and model pinning
- +Added
CLAUDE_CODE_PERFORCE_MODEenv var: when set, Edit/Write/NotebookEdit fail on read-only files with a `p4 edit` hint instead of silently overwriting them - +Added Monitor tool for streaming events from background scripts
+ 54 more− less
- +Added subprocess sandboxing with PID namespace isolation on Linux when `CLAUDE_CODE_SUBPROCESS_ENV_SCRUB` is set, and `CLAUDE_CODE_SCRIPT_CAPS` env var to limit per-session script invocations
- +Added
--exclude-dynamic-system-prompt-sectionsflag to print mode for improved cross-user prompt caching - +Added
workspace.git_worktreeto the status line JSON input, set whenever the current directory is inside a linked git worktree - +Added W3C
TRACEPARENTenv var to Bash tool subprocesses when OTEL tracing is enabled, so child-process spans correctly parent to Claude Code's trace tree
- ~LSP: Claude Code now identifies itself to language servers via `clientInfo` in the initialize request
- ~Updated the
/claude-apiskill to cover Managed Agents alongside Claude API
- −Dropped
/compacthints when `DISABLE_COMPACT` is set.
- ↑Improved
/resumefilter hint labels and added project/worktree/branch names in the filter indicator - ↑Improved footer indicators (Focus, notifications) to stay on the mode-indicator row instead of wrapping at narrow terminal widths
- ↑Improved
/agentswith a tabbed layout: a Running tab shows live subagents, and the Library tab adds Run agent and View running instance actions - ↑Improved
/reload-pluginsto pick up plugin-provided skills without requiring a restart - ↑Improved Accept Edits mode to auto-approve filesystem commands prefixed with safe env vars or process wrappers
- ↑Improved Vim mode: `j`/`k` in NORMAL mode now navigate history and select the footer pill at the input boundary
- ↑Improved hook errors in the transcript to include the first line of stderr for self-diagnosis without `--debug`
- ↑Improved OTEL tracing: interaction spans now correctly wrap full turns under concurrent SDK calls, and headless turns end spans per-turn
- ✓Fixed a Bash tool permission bypass where a backslash-escaped flag could be auto-allowed as read-only and lead to arbitrary code execution
- ✓Fixed compound Bash commands bypassing forced permission prompts for safety checks and explicit ask rules in auto and bypass-permissions modes
- ✓Fixed read-only commands with env-var prefixes not prompting unless the var is known-safe (`LANG`, `TZ`, `NO_COLOR`, etc.)
- ✓Fixed redirects to
/dev/tcp/...or `/dev/udp/...` not prompting instead of auto-allowing - ✓Fixed stalled streaming responses timing out instead of falling back to non-streaming mode
- ✓Fixed 429 retries burning all attempts in ~13s when the server returns a small `Retry-After` — exponential backoff now applies as a minimum
- ✓Fixed MCP OAuth `oauth.authServerMetadataUrl` config override not being honored on token refresh after restart, affecting ADFS and similar IdPs
- ✓Fixed capital letters being dropped to lowercase on xterm and VS Code integrated terminal when the kitty keyboard protocol is active
2026-04-08
v2.1.97claude code
- +Added focus view toggle (
Ctrl+O) in `NO_FLICKER` mode showing prompt, one-line tool summary with edit diffstats, and final response - +Added
refreshIntervalstatus line setting to re-run the status line command every N seconds - +Added
workspace.git_worktreeto the status line JSON input, set when the current directory is inside a linked git worktree
+ 43 more− less
- +Added
● N runningindicator in `/agents` next to agent types with live subagent instances - +Added syntax highlighting for Cedar policy files (`.cedar`, `.cedarpolicy`)
- ~Updated
/claude-apiskill to cover Managed Agents alongside the Claude API
- ↑Improved Accept Edits mode to auto-approve filesystem commands prefixed with safe env vars or process wrappers (e.g. `LANG=C rm foo`, `timeout 5 mkdir out`)
- ↑Improved auto mode and bypass-permissions mode to auto-approve sandbox network access prompts
- ↑Improved sandbox: `sandbox.network.allowMachLookup` now takes effect on macOS
- ↑Improved image handling: pasted and attached images are now compressed to the same token budget as images read via the Read tool
- ↑Improved slash command and
@-mention completion to trigger after CJK sentence punctuation, so Japanese/Chinese input no longer requires a space before `/` or `@` - ↑Improved Bridge sessions to show the local git repo, branch, and working directory on the claude.ai session card
- ↑Improved footer layout: indicators (Focus, notifications) now stay on the mode-indicator row instead of wrapping below
- ↑Improved context-low warning to show as a transient footer notification instead of a persistent row
- ✓Fixed
--dangerously-skip-permissionsbeing silently downgraded to accept-edits mode after approving a write to a protected path - ✓Fixed and hardened Bash tool permissions, tightening checks around env-var prefixes and network redirects, and reducing false prompts on common commands
- ✓Fixed permission rules with names matching JavaScript prototype properties (e.g. `toString`) causing `settings.json` to be silently ignored
- ✓Fixed managed-settings allow rules remaining active after an admin removed them until process restart
- ✓Fixed
permissions.additionalDirectorieschanges in settings not applying mid-session - ✓Fixed removing a directory from `settings.permissions.additionalDirectories` revoking access to the same directory passed via `--add-dir`
- ✓Fixed MCP HTTP/SSE connections accumulating ~50 MB/hr of unreleased buffers when servers reconnect
- ✓Fixed MCP OAuth `oauth.authServerMetadataUrl` not being honored on token refresh after restart, fixing ADFS and similar IdPs
v2.1.96claude code
- ✓Fixed Bedrock requests failing with `403 "Authorization header is missing"` when using `AWS_BEARER_TOKEN_BEDROCK` or `CLAUDE_CODE_SKIP_BEDROCK_AUTH` (regression in 2.1.94)
2026-04-07
v2.1.94claude code
- +Added support for Amazon Bedrock powered by Mantle, set `CLAUDE_CODE_USE_MANTLE=1`
- +Added compact
Slacked #channelheader with a clickable channel link for Slack MCP send-message tool calls - +Added
keep-coding-instructionsfrontmatter field support for plugin output styles
+ 22 more− less
- +Added
hookSpecificOutput.sessionTitleto `UserPromptSubmit` hooks for setting the session title - +VSCodeAdded a warning banner when
settings.jsonfiles fail to parse, so users know their permission rules are not being applied
- ~Changed default effort level from medium to high for API-key, Bedrock/Vertex/Foundry, Team, and Enterprise users (control this with `/effort`)
- ~Plugin skills declared via `"skills": ["./"]` now use the skill's frontmatter `name` for the invocation name instead of the directory basename, giving a stable name across install methods
- ↑Improved
--resumeto resume sessions from other worktrees of the same repo directly instead of printing a `cd` command - ↑VSCodeReduced cold-open subprocess work on starting a session
- ✓Fixed agents appearing stuck after a 429 rate-limit response with a long Retry-After header — the error now surfaces immediately instead of silently waiting
- ✓Fixed Console login on macOS silently failing with "Not logged in" when the login keychain is locked or its password is out of sync — the error is now surfaced and `claude doctor` diagnoses the fix
- ✓Fixed plugin skill hooks defined in YAML frontmatter being silently ignored
- ✓Fixed plugin hooks failing with "No such file or directory" when `CLAUDE_PLUGIN_ROOT` was not set
- ✓Fixed
${CLAUDE_PLUGIN_ROOT}resolving to the marketplace source directory instead of the installed cache for local-marketplace plugins on startup - ✓Fixed scrollback showing the same diff repeated and blank pages in long-running sessions
- ✓Fixed multiline user prompts in the transcript indenting wrapped lines under the `❯` caret instead of under the text
- ✓Fixed Shift+Space inserting the literal word "space" instead of a space character in search inputs
2026-04-04
- +Added
forceRemoteSettingsRefreshpolicy setting: when set, the CLI blocks startup until remote managed settings are freshly fetched, and exits if the fetch fails (fail-closed) - +Added interactive Bedrock setup wizard accessible from the login screen when selecting "3rd-party platform" — guides you through AWS authentication, region configuration, credential verification, and model pinning
- +Added per-model and cache-hit breakdown to `/cost` for subscription users
+ 18 more− less
- ~
/release-notesis now an interactive version picker - ~Remote Control session names now use your hostname as the default prefix (e.g. `myhost-graceful-unicorn`), overridable with `--remote-control-session-name-prefix`
- ~Pro users now see a footer hint when returning to a session after the prompt cache has expired, showing roughly how many tokens the next turn will send uncached
- ~Linux sandbox now ships the `apply-seccomp` helper in both npm and native builds, restoring unix-socket blocking for sandboxed commands
- −Removed
/tagcommand - −Removed
/vimcommand (toggle vim mode via `/config` → Editor mode)
- ↑Improved Write tool diff computation speed for large files (60% faster on files with tabs/`&`/`$`)
- ✓Fixed subagent spawning permanently failing with "Could not determine pane count" after tmux windows are killed or renumbered during a long-running session
- ✓Fixed prompt-type Stop hooks incorrectly failing when the small fast model returns `ok:false`, and restored `preventContinuation:true` semantics for non-Stop prompt-type hooks
- ✓Fixed tool input validation failures when streaming emits array/object fields as JSON-encoded strings
- ✓Fixed an API 400 error that could occur when extended thinking produced a whitespace-only text block alongside real content
- ✓Fixed accidental feedback survey submissions from auto-pilot keypresses and consecutive-prompt digit collisions
- ✓Fixed misleading "esc to interrupt" hint appearing alongside "esc to clear" when a text selection exists in fullscreen mode during processing
- ✓Fixed Homebrew install update prompts to use the cask's release channel (`claude-code` → stable, `claude-code@latest` → latest)
- ✓Fixed
ctrl+ejumping to the end of the next line when already at end of line in multiline prompts
2026-04-02
v2.1.91claude code
- +Added MCP tool result persistence override via `_meta["anthropic/maxResultSizeChars"]` annotation (up to 500K), allowing larger results like DB schemas to pass through without truncation
- +Added
disableSkillShellExecutionsetting to disable inline shell execution in skills, custom slash commands, and plugin commands - +Added support for multi-line prompts in `claude-cli://open?q=` deep links (encoded newlines `%0A` no longer rejected)
+ 10 more− less
- ~Plugins can now ship executables under `bin/` and invoke them as bare commands from the Bash tool
- ~
/feedbacknow explains why it's unavailable instead of disappearing from the slash menu - ~Edit tool now uses shorter `old_string` anchors, reducing output tokens
- ↑Improved
/claude-apiskill guidance for agent design patterns including tool surface decisions, context management, and caching strategy - ↑Improved performance: faster `stripAnsi` on Bun by routing through `Bun.stripANSI`
- ✓Fixed transcript chain breaks on `--resume` that could lose conversation history when async transcript writes fail silently
- ✓Fixed
cmd+deletenot deleting to start of line on iTerm2, kitty, WezTerm, Ghostty, and Windows Terminal - ✓Fixed plan mode in remote sessions losing track of the plan file after a container restart, which caused permission prompts on plan edits and an empty plan-approval modal
- ✓Fixed JSON schema validation for `permissions.defaultMode: "auto"` in settings.json
- ✓Fixed Windows version cleanup not protecting the active version's rollback copy
2026-04-01
- +Added
/powerup— interactive lessons teaching Claude Code features with animated demos - +Added
CLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILUREenv var to keep the existing marketplace cache when `git pull` fails, useful in offline environments - +Added
.huskyto protected directories (acceptEdits mode)
+ 16 more− less
- ~Hardened PowerShell tool permission checks: fixed trailing `&` background job bypass, `-ErrorAction Break` debugger hang, archive-extraction TOCTOU, and parse-fail fallback deny-rule degradation
- ~Changed
--resumepicker to no longer show sessions created by `claude -p` or SDK invocations
- −Removed
Get-DnsClientCacheand `ipconfig /displaydns` from auto-allow (DNS cache privacy)
- ↑Improved performance: eliminated per-turn JSON.stringify of MCP tool schemas on cache-key lookup
- ↑Improved performance: SSE transport now handles large streamed frames in linear time (was quadratic)
- ↑Improved performance: SDK sessions with long conversations no longer slow down quadratically on transcript writes
- ↑Improved
/resumeall-projects view to load project sessions in parallel, improving load times for users with many projects
- ✓Fixed an infinite loop where the rate-limit options dialog would repeatedly auto-open after hitting your usage limit, eventually crashing the session
- ✓Fixed
--resumecausing a full prompt-cache miss on the first request for users with deferred tools, MCP servers, or custom agents (regression since v2.1.69) - ✓Fixed
Edit/`Write` failing with "File content has changed" when a PostToolUse format-on-save hook rewrites the file between consecutive edits - ✓Fixed
PreToolUsehooks that emit JSON to stdout and exit with code 2 not correctly blocking the tool call - ✓Fixed collapsed search/read summary badge appearing multiple times in fullscreen scrollback when a CLAUDE.md file auto-loads during a tool call
- ✓Fixed auto mode not respecting explicit user boundaries ("don't push", "wait for X before Y") even when the action would otherwise be allowed
- ✓Fixed click-to-expand hover text being nearly invisible on light terminal themes
- ✓Fixed UI crash when malformed tool input reached the permission dialog
2026-03-31
v2.1.89claude code
- +Added
"defer"permission decision to `PreToolUse` hooks — headless sessions can pause at a tool call and resume with `-p --resume` to have the hook re-evaluate - +Added
CLAUDE_CODE_NO_FLICKER=1environment variable to opt into flicker-free alt-screen rendering with virtualized scrollback - +Added
PermissionDeniedhook that fires after auto mode classifier denials — return `{retry: true}` to tell the model it can retry
+ 49 more− less
- +Added named subagents to
@mention typeahead suggestions - +Added
MCP_CONNECTION_NONBLOCKING=truefor `-p` mode to skip the MCP connection wait entirely, and bounded `--mcp-config` server connections at 5s instead of blocking on the slowest server
- ~Auto mode: denied commands now show a notification and appear in `/permissions` → Recent tab where you can retry with `r`
- ~Changed
Editto work on files viewed via `Bash` with `sed -n` or `cat`, without requiring a separate `Read` call first - ~Changed hook output over 10,000 characters to be saved to disk with a file path + a 2,000-character preview instead of being injected directly into context
- ~Changed
cleanupPeriodDays: 0in settings.json to be rejected with a validation error — it previously silently disabled transcript persistence - ~Changed thinking summaries to no longer be generated by default in interactive sessions — set `showThinkingSummaries: true` in settings.json to restore
- ~Documented
TaskCreatedhook event and its blocking behavior - ~Preserved task notifications when backgrounding a running command with Ctrl+B
- ~PowerShell tool on Windows: external-command arguments containing both a double-quote and whitespace now prompt instead of auto-allowing (PS 5.1 argument-splitting hardening)
- ↑Improved collapsed tool summary to show "Listed N directories" for `ls`/`tree`/`du` instead of "Read N files"
- ↑Improved Bash tool to warn when a formatter/linter command modifies files you have previously read, preventing stale-edit errors
- ↑Improved
@-mention typeahead to rank source files above MCP resources with similar names - ↑Improved PowerShell tool prompt with version-appropriate syntax guidance (5.1 vs 7+)
- ✓Fixed
Edit(//path/**)and `Read(//path/**)` allow rules to check the resolved symlink target, not just the requested path - ✓Fixed voice push-to-talk not activating for some modifier-combo bindings, and voice mode on Windows failing with "WebSocket upgrade rejected with HTTP 101"
- ✓Fixed Edit/Write tools doubling CRLF on Windows and stripping Markdown hard line breaks (two trailing spaces)
- ✓Fixed
StructuredOutputschema cache bug causing ~50% failure rate when using multiple schemas - ✓Fixed memory leak where large JSON inputs were retained as LRU cache keys in long-running sessions
- ✓Fixed a crash when removing a message from very large session files (over 50MB)
- ✓Fixed LSP server zombie state after crash — server now restarts on next request instead of failing until session restart
- ✓Fixed prompt history entries containing CJK or emoji being silently dropped when they fall on a 4KB boundary in `~/.claude/history.jsonl`
2026-03-29
v2.1.87claude code
- ✓Fixed messages in Cowork Dispatch not getting delivered
2026-03-27
v2.1.86claude code
- +Added
X-Claude-Code-Session-Idheader to API requests so proxies can aggregate requests by session without parsing the body - +Added
.jjand `.sl` to VCS directory exclusion lists so Grep and file autocomplete don't descend into Jujutsu or Sapling metadata - ~Memory filenames in the "Saved N memories" notice now highlight on hover and open on click
+ 23 more− less
- ~Skill descriptions in the `/skills` listing are now capped at 250 characters to reduce context usage
- ~Changed
/skillsmenu to sort alphabetically for easier scanning - ~Auto mode now shows "unavailable for your plan" when disabled by plan restrictions (was "temporarily unavailable")
- ~Read tool now uses compact line-number format and deduplicates unchanged re-reads, reducing token usage
- ↑Reduced startup event-loop stalls when many claude.ai MCP connectors are configured (macOS keychain cache extended from 5s to 30s)
- ↑Reduced token overhead when mentioning files with `@` — raw string content no longer JSON-escaped
- ↑Improved prompt cache hit rate for Bedrock, Vertex, and Foundry users by removing dynamic content from tool descriptions
- ✓Fixed
--resumefailing with "tool_use ids were found without tool_result blocks" on sessions created before v2.1.85 - ✓Fixed Write/Edit/Read failing on files outside the project root (e.g., `~/.claude/CLAUDE.md`) when conditional skills or rules are configured
- ✓Fixed unnecessary config disk writes on every skill invocation that could cause performance issues and config corruption on Windows
- ✓Fixed potential out-of-memory crash when using `/feedback` on very long sessions with large transcript files
- ✓Fixed
--baremode dropping MCP tools in interactive sessions and silently discarding messages enqueued mid-turn - ✓Fixed the
cshortcut copying only ~20 characters of the OAuth login URL instead of the full URL - ✓Fixed masked input (e.g., OAuth code paste) leaking the start of the token when wrapping across multiple lines on narrow terminals
- ✓Fixed official marketplace plugin scripts failing with "Permission denied" on macOS/Linux since v2.1.83
2026-03-26
v2.1.85claude code
- +Added
CLAUDE_CODE_MCP_SERVER_NAMEand `CLAUDE_CODE_MCP_SERVER_URL` environment variables to MCP `headersHelper` scripts, allowing one helper to serve multiple servers - +Added conditional
iffield for hooks using permission rule syntax (e.g., `Bash(git *)`) to filter when they run, reducing process spawning overhead - +Added timestamp markers in transcripts when scheduled tasks (`/loop`, `CronCreate`) fire
+ 27 more− less
- +Added trailing space after
[Image #N]placeholder when pasting images
- ~Deep link queries (
claude-cli://open?q=…) now support up to 5,000 characters, with a "scroll to review" warning for long pre-filled prompts - ~MCP OAuth now follows RFC 9728 Protected Resource Metadata discovery to find the authorization server
- ~Plugins blocked by organization policy (`managed-settings.json`) can no longer be installed or enabled, and are hidden from marketplace views
- ~PreToolUse hooks can now satisfy `AskUserQuestion` by returning `updatedInput` alongside `permissionDecision: "allow"`, enabling headless integrations that collect answers via their own UI
- ~
tool_parametersin OpenTelemetry tool_result events are now gated behind `OTEL_LOG_TOOL_DETAILS=1`
- ↑Improved @-mention file autocomplete performance on large repositories
- ↑Improved PowerShell dangerous command detection
- ↑Improved scroll performance with large transcripts by replacing WASM yoga-layout with a pure TypeScript implementation
- ↑Reduced UI stutter when compaction triggers on large sessions
- ✓Fixed
/compactfailing with "context exceeded" when the conversation has grown too large for the compact request itself to fit - ✓Fixed
/plugin enableand `/plugin disable` failing when a plugin's install location differs from where it's declared in settings - ✓Fixed
--worktreeexiting with an error in non-git repositories before the `WorktreeCreate` hook could run - ✓Fixed
deniedMcpServerssetting not blocking claude.ai MCP servers - ✓Fixed
switch_displayin the computer-use tool returning "not available in this session" on multi-monitor setups - ✓Fixed crash when
OTEL_LOGS_EXPORTER, `OTEL_METRICS_EXPORTER`, or `OTEL_TRACES_EXPORTER` is set to `none` - ✓Fixed diff syntax highlighting not working in non-native builds
- ✓Fixed MCP step-up authorization failing when a refresh token exists — servers requesting elevated scopes via `403 insufficient_scope` now correctly trigger the re-authorization flow
2026-03-25
v2.1.84claude code
- +Added PowerShell tool for Windows as an opt-in preview. Learn more at https://code.claude.com/docs/en/tools-reference#powershell-tool
- +Added
ANTHROPIC_DEFAULT_{OPUS,SONNET,HAIKU}_MODEL_SUPPORTSenv vars to override effort/thinking capability detection for pinned default models for 3p (Bedrock, Vertex, Foundry), and `_MODEL_NAME`/`_DESCRIPTION` to customize the `/model` picker label - +Added
CLAUDE_STREAM_IDLE_TIMEOUT_MSenv var to configure the streaming idle watchdog threshold (default 90s)
+ 37 more− less
- +Added
TaskCreatedhook that fires when a task is created via `TaskCreate` - +Added
WorktreeCreatehook support for `type: "http"` — return the created worktree path via `hookSpecificOutput.worktreePath` in the response JSON - +Added
allowedChannelPluginsmanaged setting for team/enterprise admins to define a channel plugin allowlist - +Added
x-client-request-idheader to API requests for debugging timeouts - +Added idle-return prompt that nudges users returning after 75+ minutes to `/clear`, reducing unnecessary token re-caching on stale sessions
- +VSCodeAdded rate limit warning banner with usage percentage and reset time
- ~Deep links (
claude-cli://) now open in your preferred terminal instead of whichever terminal happens to be first in the detection list - ~Rules and skills
paths:frontmatter now accepts a YAML list of globs - ~MCP tool descriptions and server instructions are now capped at 2KB to prevent OpenAPI-generated servers from bloating context
- ~MCP servers configured both locally and via claude.ai connectors are now deduplicated — the local config wins
- ~Background bash tasks that appear stuck on an interactive prompt now surface a notification after ~45 seconds
- ~Token counts ≥1M now display as "1.5m" instead of "1512.6k"
- ~Global system-prompt caching now works when `ToolSearch` is enabled, including for users with MCP tools configured
- ~Changed issue/PR references to only become clickable links when written as `owner/repo#123` — bare `#123` is no longer auto-linked
- ↑Improved detection for dangerous removals of Windows drive roots (`C:\`, `C:\Windows`, etc.)
- ↑Improved interactive startup by ~30ms by running `setup()` in parallel with slash command and agent loading
- ↑Improved startup for
claude "prompt"with MCP servers — the REPL now renders immediately instead of blocking until all servers connect - ↑Improved Remote Control to show a specific reason when blocked instead of a generic "not yet enabled" message
- ↑Improved p90 prompt cache rate
- ↑Reduced scroll-to-top resets in long sessions by making the message window immune to compaction and grouping changes
- ↑Reduced terminal flickering when animated tool progress scrolls above the viewport
- ✓Fixed voice push-to-talk: holding the voice key no longer leaks characters into the text input, and transcripts now insert at the correct position
- ✓Fixed up/down arrow keys being unresponsive when a footer item is focused
- ✓Fixed
Ctrl+U(kill-to-line-start) being a no-op at line boundaries in multiline input, so repeated `Ctrl+U` now clears across lines - ✓Fixed null-unbinding a default chord binding (e.g. `"ctrl+x ctrl+k": null`) still entering chord-wait mode instead of freeing the prefix key
- ✓Fixed mouse events inserting literal "mouse" text into transcript search input
- ✓Fixed workflow subagents failing with API 400 when the outer session uses `--json-schema` and the subagent also specifies a schema
- ✓Fixed missing background color behind certain emoji in user message bubbles on some terminals
- ✓Fixed the "allow Claude to edit its own settings for this session" permission option not sticking for users with `Edit(.claude)` allow rules
2026-03-24
- +Added
managed-settings.d/drop-in directory alongside `managed-settings.json`, letting separate teams deploy independent policy fragments that merge alphabetically - +Added
CwdChangedand `FileChanged` hook events for reactive environment management (e.g., direnv) - +Added
sandbox.failIfUnavailablesetting to exit with an error when sandbox is enabled but cannot start, instead of running unsandboxed
+ 73 more− less
- +Added
disableDeepLinkRegistrationsetting to prevent `claude-cli://` protocol handler registration - +Added
CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1to strip Anthropic and cloud provider credentials from subprocess environments (Bash tool, hooks, MCP stdio servers) - +Added transcript search — press `/` in transcript mode (`Ctrl+O`) to search, `n`/`N` to step through matches
- +Added
Ctrl+X Ctrl+Eas an alias for opening the external editor (readline-native binding; `Ctrl+G` still works) - +Added
CLAUDE_CODE_DISABLE_NONSTREAMING_FALLBACKenv var to disable the non-streaming fallback when streaming fails - +VSCodeAdded Esc-twice (or `/rewind`) to open a keyboard-navigable rewind picker
- ~Pasted images now insert an `[Image #N]` chip at the cursor so you can reference them positionally in your prompt
- ~Agents can now declare
initialPromptin frontmatter to auto-submit a first turn - ~
chat:killAgentsand `chat:fastMode` are now rebindable via `~/.claude/keybindings.json` - ~Bash ghost-text suggestions now include just-submitted commands immediately
- ~Increased non-streaming fallback token cap (21k → 64k) and timeout (120s → 300s local) so fallback requests are less likely to be truncated
- ~Interrupting a prompt before any response now automatically restores your input so you can edit and resubmit
- ~
/statusnow works while Claude is responding, instead of being queued until the turn finishes - ~Plugin MCP servers that duplicate an org-managed connector are now suppressed instead of running a second connection
- −Deprecated
TaskOutputtool in favor of using `Read` on the background task's output file path
- ↑Improved Bedrock SDK cold-start latency by overlapping profile fetch with other boot work
- ↑Improved
--resumememory usage and startup latency on large sessions - ↑Improved plugin startup — commands, skills, and agents now load from disk cache without re-fetching
- ↑Improved Remote Control session titles: AI-generated titles now appear within seconds of the first message
- ↑Improved
WebFetchto identify as `Claude-User` so site operators can recognize and allowlist Claude Code traffic via `robots.txt` - ↑Reduced
WebFetchpeak memory usage for large pages - ↑Reduced scrollback resets in long sessions from once per turn to once per ~50 messages
- ↑Faster
claude -pstartup with unauthenticated HTTP/SSE MCP servers (~600ms saved)
- ✓Fixed mouse tracking escape sequences leaking to shell prompt after exit
- ✓Fixed Claude Code hanging on exit on macOS
- ✓Fixed screen flashing blank after being idle for a few seconds
- ✓Fixed a hang when diffing very large files with few common lines — diffs now time out after 5 seconds and fall back gracefully
- ✓Fixed a 1–8 second UI freeze on startup when voice input was enabled, caused by eagerly loading the native audio module
- ✓Fixed a startup regression where Claude Code would wait ~3s for claude.ai MCP config fetch before proceeding
- ✓Fixed
--mcp-configCLI flag bypassing `allowedMcpServers`/`deniedMcpServers` managed policy enforcement - ✓Fixed claude.ai MCP connectors (Slack, Gmail, etc.) not being available in single-turn `--print` mode
2026-03-20
v2.1.81claude code
- +Added
--bareflag for scripted `-p` calls — skips hooks, LSP, plugin sync, and skill directory walks; requires `ANTHROPIC_API_KEY` or an `apiKeyHelper` via `--settings` (OAuth and keychain auth disabled); auto-memory fully disabled - +Added
--channelspermission relay — channel servers that declare the permission capability can forward tool approval prompts to your phone - ~Resuming a session that was in a worktree now switches back to that worktree
+ 24 more− less
- ~Updated MCP OAuth to support Client ID Metadata Document (CIMD / SEP-991) for servers without Dynamic Client Registration
- ~Changed plan mode to hide the "clear context" option by default (restore with `"showClearContextOnPlanAccept": true`)
- ~Disabled line-by-line response streaming on Windows (including WSL in Windows Terminal) due to rendering issues
- ↑Improved MCP read/search tool calls to collapse into a single "Queried {server}" line (expand with Ctrl+O)
- ↑Improved
!bash mode discoverability — Claude now suggests it when you need to run an interactive command - ↑Improved plugin freshness — ref-tracked plugins now re-clone on every load to pick up upstream changes
- ↑Improved Remote Control session titles to refresh after your third message
- ✓Fixed multiple concurrent Claude Code sessions requiring repeated re-authentication when one session refreshes its OAuth token
- ✓Fixed voice mode silently swallowing retry failures and showing a misleading "check your network" message instead of the actual error
- ✓Fixed voice mode audio not recovering when the server silently drops the WebSocket connection
- ✓Fixed
CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETASnot suppressing the structured-outputs beta header, causing 400 errors on proxy gateways forwarding to Vertex/Bedrock - ✓Fixed
--channelsbypass for Team/Enterprise orgs with no other managed settings configured - ✓Fixed a crash on Node.js 18
- ✓Fixed unnecessary permission prompts for Bash commands containing dashes in strings
- ✓Fixed plugin hooks blocking prompt submission when the plugin directory is deleted mid-session
2026-03-19
v2.1.80claude code
- +Added
rate_limitsfield to statusline scripts for displaying Claude.ai rate limit usage (5-hour and 7-day windows with `used_percentage` and `resets_at`) - +Added
source: 'settings'plugin marketplace source — declare plugin entries inline in settings.json - +Added CLI tool usage detection to plugin tips, in addition to file pattern matching
+ 14 more− less
- +Added
effortfrontmatter support for skills and slash commands to override the model effort level when invoked - +Added
--channels(research preview) — allow MCP servers to push messages into your session
- ~Simplified plugin install tips to use a single `/plugin install` command instead of a two-step flow
- ↑Improved responsiveness of
@file autocomplete in large git repositories - ↑Improved
/effortto show what auto currently resolves to, matching the status bar indicator - ↑Improved
/permissions— Tab and arrow keys now switch tabs from within a list - ↑Improved background tasks panel — left arrow now closes from the list view
- ↑Reduced memory usage on startup in large repositories (~80 MB saved on 250k-file repos)
- ✓Fixed
--resumedropping parallel tool results — sessions with parallel tool calls now restore all tool_use/tool_result pairs instead of showing `[Tool result missing]` placeholders - ✓Fixed voice mode WebSocket failures caused by Cloudflare bot detection on non-browser TLS fingerprints
- ✓Fixed 400 errors when using fine-grained tool streaming through API proxies, Bedrock, or Vertex
- ✓Fixed
/remote-controlappearing for gateway and third-party provider deployments where it cannot function - ✓Fixed
/sandboxtab switching not responding to Tab or arrow keys - ✓Fixed managed settings (
enabledPlugins, `permissions.defaultMode`, policy-set env vars) not being applied at startup when `remote-settings.json` was cached from a prior session
2026-03-18
v2.1.79claude code
- +Added
--consoleflag to `claude auth login` for Anthropic Console (API billing) authentication - +Added "Show turn duration" toggle to the `/config` menu
- +VSCodeAdded
/remote-control— bridge your session to claude.ai/code to continue from a browser or phone
+ 15 more− less
- ~
CLAUDE_CODE_PLUGIN_SEED_DIRnow supports multiple seed directories separated by the platform path delimiter (`:` on Unix, `;` on Windows) - ~VSCodeSession tabs now get AI-generated titles based on your first message
- ↑Improved startup memory usage by ~18MB across all scenarios
- ↑Improved non-streaming API fallback with a 2-minute per-attempt timeout, preventing sessions from hanging indefinitely
- ✓Fixed
claude -phanging when spawned as a subprocess without explicit stdin (e.g. Python `subprocess.run`) - ✓Fixed Ctrl+C not working in
-p(print) mode - ✓Fixed
/btwreturning the main agent's output instead of answering the side question when triggered during streaming - ✓Fixed voice mode not activating correctly on startup when `voiceEnabled: true` is set
- ✓Fixed left/right arrow tab navigation in `/permissions`
- ✓Fixed
CLAUDE_CODE_DISABLE_TERMINAL_TITLEnot preventing terminal title from being set on startup - ✓Fixed custom status line showing nothing when workspace trust is blocking it
- ✓Fixed enterprise users being unable to retry on rate limit (429) errors
2026-03-17
v2.1.78claude code
- +Added
StopFailurehook event that fires when the turn ends due to an API error (rate limit, auth failure, etc.) - +Added
${CLAUDE_PLUGIN_DATA}variable for plugin persistent state that survives plugin updates; `/plugin uninstall` prompts before deleting it - +Added
effort, `maxTurns`, and `disallowedTools` frontmatter support for plugin-shipped agents
+ 23 more− less
- +Added
ANTHROPIC_CUSTOM_MODEL_OPTIONenv var to add a custom entry to the `/model` picker, with optional `_NAME` and `_DESCRIPTION` suffixed vars for display
- ~Terminal notifications (iTerm2/Kitty/Ghostty popups, progress bar) now reach the outer terminal when running inside tmux with `set -g allow-passthrough on`
- ~Response text now streams line-by-line as it's generated
- ~**Security:** Fixed silent sandbox disable when `sandbox.enabled: true` is set but dependencies are missing — now shows a visible startup warning
- ↑Improved memory usage and startup time when resuming large sessions
- ✓Fixed
git log HEADfailing with "ambiguous argument" inside sandboxed Bash on Linux, and stub files polluting `git status` in the working directory - ✓Fixed
cc logand `--resume` silently truncating conversation history on large sessions (>5 MB) that used subagents - ✓Fixed infinite loop when API errors triggered stop hooks that re-fed blocking errors to the model
- ✓Fixed
deny: ["mcp__servername"]permission rules not removing MCP server tools before sending to the model, allowing it to see and attempt blocked tools - ✓Fixed
sandbox.filesystem.allowWritenot working with absolute paths (previously required `//` prefix) - ✓Fixed
/sandboxDependencies tab showing Linux prerequisites on macOS instead of macOS-specific info - ✓Fixed
.git, `.claude`, and other protected directories being writable without a prompt in `bypassPermissions` mode - ✓Fixed ctrl+u in normal mode scrolling instead of readline kill-line (ctrl+u/ctrl+d half-page scroll moved to transcript mode only)