~Changed the Improved N memories line to no longer list individual files outside verbose mode
↑Improved streaming of long paragraphs: text now appears line-by-line instead of waiting for the first line break
↑Improvedauto-retry: API connection drops mid-thinking now automatically retry instead of showing "Connection closed while thinking"
↑Improved the subagent panel: idle subagents auto-hide after 30s, the list caps at 5 rows with scroll hints, and keyboard hints now show in the footer
↑Improved the MCP OAuth browser page to match Claude Code's visual style and auto-close on success
✓Fixed prompt caching not reading on custom `ANTHROPIC_BASE_URL` and on Foundry due to a per-request attestation token changing every turn
✓Fixed Write/Edit producing 0-byte or truncated files on network drives and cloud-synced folders
✓Fixedopen, `osascript`, and browser-based auth flows failing with error -600 on macOS by adding the Apple Events entitlement
✓Fixed a startup regression (~120ms per launch in fresh environments, introduced in 2.1.169): the first prompt no longer waits for the managed-settings fetch when no MCP servers are configured
✓Fixed startup blocking with a blank terminal for up to 15 seconds when the account settings fetch is slow on a degraded network
✓Fixed startup crash (TypeError: Cannot read properties of null) when `.claude.json` contains corrupted null project entries
✓Fixed macOS TUI freezing at session start (Ctrl+C unresponsive) when Spotlight is busy reindexing
✓Fixed long-running idle sessions losing their history when another Claude Code process ran the 30-day transcript cleanup
↑Improved plugin loading performance in remote sessions
✓Fixedmid-stream connection drops: partial responses are now preserved instead of showing a raw error, and the spinner no longer gets stuck at "running tool"
✓Fixed mouse-wheel scrolling in WSL2 under Windows Terminal and VS Code (regression in 2.1.172)
+AddedTool(param:value) syntax for permission rules to match a tool's input parameters (with `*` wildcard), e.g. `Agent(model:opus)` to block Opus subagents
~Agent teams: removed the `TeamCreate` and `TeamDelete` tools. With `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1` set, every session now has one implicit team — spawn teammates directly with the Agent tool's `name` parameter, no setup step needed. The `team_name` parameter on the Agent tool is still accepted but ignored.
~Skills in nested .claude/skills directories now load when working on files there; on a name clash, the nested skill appears as `<dir>:<name>` so both stay available
~Nested .claude/ directories: the agent, workflow, and output-style closest to the working directory now wins when names collide; project-scope workflow saves now target the closest existing `.claude/workflows/`
~Changed the workflow prompt keyword to use a purple shimmer highlight and trigger only on explicit phrases like "run a workflow" or "workflow:", not on any mention of the word
~/bug now requires a description before submitting, and no longer uses model-refusal text as the GitHub issue title
↑Improvedauto mode: subagent spawns are now evaluated by the classifier before launch, closing a gap where a subagent could request a blocked action without review
↑Improved/doctor with consistent flat tree layout across all sections, clearer section status icons, and highlighted command names
↑Improved the skill listing truncation warning to show how many skill descriptions are affected
↑ImprovedRemote Control error messages: connection failures now show a persistent red "/rc failed" indicator in the footer, and the "not yet enabled" error now explains whether it's a gate, a check failure, stale entitlement, or org policy
✓Fixed a crash (out-of-memory) when the CLI inherits a stale websocket/OAuth file-descriptor environment variable from a parent process
✓Fixed Claude in Chrome silently failing to connect when the OAuth token belongs to a different account than the Claude Code login
✓Fixed nested .claude/skills skills with directory-qualified names being blocked by permission prompts in non-interactive runs
✓Fixedseveral subagent issues: viewing a subagent's transcript now shows tool results and live progress, messages sent while it finishes its turn are no longer dropped, and backgrounding a running subagent (ctrl+b) no longer restarts it from scratch
✓Fixedclaude agents workers failing with `401 Invalid bearer token` when the daemon was started from a shell with a custom API gateway via `ANTHROPIC_BASE_URL` and `ANTHROPIC_AUTH_TOKEN`
✓Fixed compaction not honoring `--fallback-model`: compaction now falls back to the configured fallback model chain on overload or model-availability errors
✓Fixed model requests continuing to fail with auth errors after credentials were refreshed outside the session, due to a stale cached request configuration
✓Fixed background sessions created with `/bg` or `←←` after a turn finished showing "Working" forever in the agents list
+AddedfooterLinksRegexes setting for regex-matched link badges in the footer row, configurable via user or managed settings
~Session titles are now generated in the language of your conversation (set the `language` setting to pin a specific language)
~Background sessions now show clearer guidance when a window left open across an auto-update can't submit a reply, and `claude daemon status` explains version-skew behavior
↑ImprovedBedrock credential caching: credentials from `awsCredentialExport` are now cached until their `Expiration` instead of a fixed 1 hour
✓FixedavailableModels enforcement: alias model picks can no longer be redirected to a blocked model via `ANTHROPIC_DEFAULT_*_MODEL` environment variables, and `/fast` now refuses to toggle when it would switch to a model outside the allowlist
✓Fixed auto mode failing on Fable 5 for organizations without Opus 4.8 enabled — the classifier now falls back to the best available Opus model
✓Fixed hook if conditions for Read/Edit/Write tool paths: documented patterns like `Edit(src/**)`, `Read(~/.ssh/**)`, and `Read(.env)` now match correctly
✓Fixed Linux sandbox failing to start when `.claude/settings.json` is a symlink with an absolute target
✓Fixed/copy and mouse-selection copy not reaching the system clipboard inside tmux over SSH, and tmux paste buffer not loading on versions older than 3.2
✓FixedRemote Control connecting from web/mobile silently switching the session's model
✓FixedRemote Control disconnect notifications showing a bare numeric code instead of a human-readable reason, and connection failures adding a duplicate line to the conversation transcript
✓FixedRemote Control sessions not disconnecting when you sign in to a different account
+AddedenforceAvailableModels managed setting — when enabled, the `availableModels` allowlist also constrains the Default model (a Default that would resolve to a disallowed model now falls back to the first allowed model), and user or project settings can no longer widen a managed `availableModels` list
+VSCodeAdded usage attribution to the Account & usage dialog (`/usage`) showing cache misses, long context, subagents, and per-skill/agent/plugin/MCP breakdowns over the last 24h or 7d
✓Fixed the /model picker hiding the model family that Default resolves to — Opus now appears as its own row on Max/Team Premium/Enterprise plans, Sonnet on Pro/Team plans, and Opus on pay-as-you-go API accounts
✓FixedBedrock GovCloud regions (`us-gov-*`) deriving the wrong inference profile prefix (`global` instead of `us-gov`), causing 400 errors on derived model IDs
✓Fixed background sessions inheriting another session's `ANTHROPIC_*` provider env (gateway URL, custom headers, `/model` aliases) from the shell that started the background daemon
✓Fixed a 1-2 second pause when exiting Claude Code shortly after a shell command was interrupted or killed on macOS and Linux
✓Fixed git commit co-author attribution showing an incorrect model name for some models
✓Fixed the /advisor dialog pre-selecting a saved advisor model that is blocked by the `availableModels` allowlist
✓Fixed skill hot-reload re-sending the entire skill listing when a single skill changed; only changed skills are now re-announced
✓FixedFable 5 model names with a `[1m]` suffix not being normalized — Fable 5 includes 1M context by default, so the suffix is now stripped automatically
✓Fixed a spurious "sandbox dependencies missing" startup warning on Windows when sandbox was enabled in settings
~Amazon Bedrock now reads the AWS region from `~/.aws` config files when `AWS_REGION` isn't set, matching AWS SDK precedence; `/status` shows where the region came from
~Disable mouse tracking on Windows consoles that don't fully support it
~/code-review now keeps the `ultra` option visible when you're not signed in to claude.ai, with an explanation that the cloud review requires a claude.ai account
~Shortened the Remote Control footer indicator to "/rc active" and hid it on narrow terminals
~Stopped promoting /loop in remote sessions, where pending loops don't keep the container alive
↑Improved performance in long conversations by removing redundant message normalization and avoiding full message-history transforms when streaming tool-use state is unchanged
↑Reduced idle CPU usage: `/goal` status chip no longer re-renders the terminal at 5 Hz while idle, and fewer UI re-renders while subagents run in parallel
↑ImprovedClaude in Chrome tool loading: browser tools now load in a single batched call instead of one per tool
↑Improved the non-interactive Usage Policy refusal message to suggest starting a new session or changing your model
✓Fixed sessions using 1M context without usage credits getting permanently stuck — the session now automatically compacts back under the standard context limit
✓Fixed a repeating "an image in the conversation could not be processed and was removed" error when the conversation contained multiple images
✓Fixed the agents view keeping a session under Working with a busy spinner for up to 30 seconds after the worker replied
✓Fixed background agents potentially reading another directory's project settings (`.mcp.json` approvals, trust) when dispatched onto a pre-warmed worker
✓Fixed background-session attach failing with EAUTH for sessions started on an older version after the daemon auto-updated
✓Fixed a background sub-agent staying stuck as "active" in the agent panel after a nested agent it spawned was stopped
✓Fixed/model suggestions in the `claude agents` dispatch input rendering with a misleading slash prefix and showing models disabled for your org
✓FixedavailableModels restrictions not being applied to subagent model overrides, the agent dispatch model picker, and the advisor model
~Introducing Claude Fable 5: a Mythos-class model that we’ve made safe for general use. Fable’s capabilities exceed those of any model we’ve ever made generally available. Update to version 2.1.170 for access. https://www.anthropic.com/news/claude-fable-5-mythos-5
✓Fixed sessions not saving transcripts (and not appearing in --resume) when launched from the VS Code integrated terminal or any shell that inherited Claude Code environment variables.
+Added--safe-mode flag (and `CLAUDE_CODE_SAFE_MODE`) to start Claude Code with all customizations (CLAUDE.md, plugins, skills, hooks, MCP servers) disabled for troubleshooting
+Added/cd command to move a session to a new working directory without breaking the prompt cache mid-session
+Added a disableBundledSkills setting and `CLAUDE_CODE_DISABLE_BUNDLED_SKILLS` environment variable to hide bundled skills, workflows, and built-in slash commands from the model
+Added a tip suggesting claude agents when running multiple concurrent sessions
~/workflows now opens immediately even while a turn is in progress
~Restored a default 5-minute idle timeout on Vertex/Foundry so a stalled stream aborts instead of hanging indefinitely; set `API_FORCE_IDLE_TIMEOUT=0` to opt out
~Remote-managed settings with an invalid entry now apply their remaining valid policies and surface the validation error, instead of silently dropping the whole payload
~Background sessions now preserve `--ide`, `--chrome`, `--bare`, `--remote-control`, and other flags across retire→wake, and respawn state validation was hardened
~Background sessions are now told that shared-checkout edits are blocked until they enter a worktree, avoiding a wasted rejected edit before `EnterWorktree`
~Auto-updater on Windows now stops retrying within a session once `claude.exe` is held by another process
~Promo credit claims for Apple/Google-billed subscribers without a payment method now explain where to add one
↑ImprovedTaskCreate reliability: malformed inputs are repaired automatically and validation errors for unloaded tools include the schema
↑Improved the error message shown when your organization has disabled API key authentication, with guidance based on where the active API key comes from
↑Reduced CPU usage while responses stream and during spinner animations
↑Improved color contrast for skill tags in the slash-command menu
✓Fixed Up/Down arrows jumping to command history past the wrapped rows of a long input line — they now move through each visual row first, and history recall enters at the near edge
✓Fixed enterprise managed MCP policies (`allowedMcpServers`/`deniedMcpServers`) not being enforced on reconnect, IDE-typed configs, `--mcp-config` servers during the first session after install, or before remote settings loaded; also fixed slow cold starts for orgs without remote settings
✓Fixed a ~30-50ms UI stall at the start of each turn for macOS users logged in with claude.ai credentials
✓Fixedclaude -p being slow or appearing to hang on Windows while waiting for the slash-command/skill scan (regression in 2.1.161)
✓FixedRemote Control getting stuck on "reconnecting" after resuming a session when an OAuth token refresh happened at the same time
✓FixedGit Credential Manager's "Connect to GitHub" popup appearing on Windows at startup when background git commands ran without cached credentials
✓Fixed footer hints (e.g. "esc to interrupt") not showing for users with a custom statusline
✓Fixed stale permission and dialog prompts reappearing every time you reattached to a remote session whose worker had died while waiting on them
+AddedfallbackModel setting to configure up to three fallback models tried in order when the primary model is overloaded or unavailable; `--fallback-model` now also applies to interactive sessions
+Added glob pattern support in deny rule tool-name position (`"*"` denies all tools); allow rules reject non-MCP globs, and unknown tool names in deny rules warn at startup
~Hardened cross-session messaging: messages relayed via `SendMessage` from other Claude sessions no longer carry user authority — receivers refuse relayed permission requests, and auto mode blocks them
~MAX_THINKING_TOKENS=0, `--thinking disabled`, and the per-model thinking toggle now disable thinking on models that think by default via the Claude API (3P providers unchanged)
~Claude Code now retries a turn once on the fallback model when the API rejects an unexpected non-retryable error; auth, rate-limit, request-size, and transport errors still surface immediately
~claude update now announces the target version before downloading instead of going silent
~claude agents: typing a URL into the list now filters to the session whose first prompt contained it
✓Fixed a recurring "image could not be processed" error and extra token usage when an unprocessable image was sent in a session
✓Fixed remote sessions becoming permanently stuck when a brief backend disruption occurred during worker registration at startup
✓Fixed flickering in JetBrains IDE terminals (IntelliJ, PyCharm, WebStorm, etc.) on 2026.1+ by enabling synchronized output
✓FixedShift+non-ASCII characters (e.g. Shift+ä → Ä) being dropped in terminals using the Kitty keyboard protocol (WezTerm, Ghostty, kitty)
✓Fixed PowerShell command validation occasionally hanging far past its time budget on Windows when a killed process's children held its output pipes
✓Fixed orphaned claude --bg-pty-host processes spinning at 100% CPU after the daemon dies while connected on macOS
✓Fixed voice mode requiring /login to clear a stale auth check after toggling `/voice`
✓Fixed managed settings with an invalid entry silently disabling enforcement of their remaining valid policies
+AddedrequiredMinimumVersion and `requiredMaximumVersion` managed settings — Claude Code refuses to start if its version is outside the allowed range and directs the user to an approved version
+Added/plugin list command to list installed plugins, with `--enabled`/`--disabled` filters
+Added a "c to copy" shortcut to `/btw` that copies the raw markdown answer to the clipboard, preserving formatting when pasted elsewhere
~Hooks: Stop and SubagentStop hooks can now return `hookSpecificOutput.additionalContext` to give Claude feedback and keep the turn going without being labeled a hook error
~Skills: added \$ escape syntax to include a literal `$` before a digit in command bodies
~Stdio MCP servers now receive the same `CLAUDE_CODE_SESSION_ID` as hooks/Bash on `--resume`
~Background agent sessions now update to a new Claude Code version in the background, so opening a session after an update no longer waits on a cold restart
~Clearer descriptions for built-in commands and skills in the / menu
~The subscription-switch suggestion now shows in the startup announcement slot instead of a toast
~claude agents dispatching from the state-grouped view now starts the session in the directory the agent view was opened from
✓Fixedclaude -p hanging forever after its final result when a backgrounded command never exits — background shells are now stopped ~5s after the result once stdin closes
✓Fixedclaude -p failing with "ANTHROPIC_API_KEY required" on Bedrock/Vertex/Foundry when `CI=true` and no Anthropic API key is set
✓Fixed bash commands failing under bazel and EDR-protected Go workflows: `$TMPDIR` was overridden to `/tmp/claude-{uid}` for all commands instead of only sandboxed ones (regression in 2.1.154)
✓Fixed Bash commands failing on Windows with "EEXIST: file already exists" on the session-env directory when it has the read-only attribute or is inside OneDrive
✓Fixed org-managed permission rules not applying for the entire session when the managed settings fetch completed during startup on a fresh config directory
✓Fixed background sessions in claude agents losing their running background tasks when reattached after a Claude Code update
✓Fixed terminal misalignment and a multi-second hang when exiting the agent view by pressing Esc
✓Fixed clicking Stop on a background-task chip in the desktop app not clearing the chip when the underlying process was already gone
~claude agents --json now includes `waitingFor` showing what a waiting session is blocked on (e.g. permission prompt)
~--tools: explicitly listing Grep/Glob now provides the dedicated search tools on native builds with embedded search (previously these names were silently ignored)
~/effort now confirms when your chosen level will persist as the default for new sessions
~Clicking a slash command in the autocomplete menu now fills it into your prompt instead of running it immediately; press Enter to run
~Remote Control now shows as a persistent footer pill (with a link to the session) instead of a startup message
~Renamed Windsurf to Devin Desktop in the `/ide` menu, `/terminal-setup`, and `/scroll-speed`, following the editor's rebrand
~Quieter startup: notices group by severity, and session info and announcements share a single line per launch
~Startup warnings rewritten to be shorter and clearer, each with a concrete fix
~Launch-prompt warnings (deep link/pre-filled prompt) now stay pinned below the input until you act instead of scrolling away
~Failed turns now show a compact warning line instead of a multi-line red error block
~Background dispatch spawn failures now report the error class name when no errno is available
−Removed the "Claude in Chrome enabled" and "marketplace installed" startup messages; model auto-updates and the team-onboarding tip now show as quiet notices under the logo
↑Improved background service startup and `claude update` verification to wait out endpoint-security scanning of new binaries instead of failing after 5 seconds
✓Fixed a silent startup hang when the config directory is read-only or unwritable — Claude Code now starts with in-memory config and surfaces startup errors instead of showing a blank screen
✓Fixed WebFetch permission rules not being applied to built-in preapproved domains; explicit `WebFetch(domain:...)` deny/ask/allow rules now take precedence over the preapproved-host auto-allow
✓Fixed Windows permission rules never matching when spelled with backslashes (`~\`, `\\server\share`) or case-variant paths, and Read deny rules not hiding files from Glob/Grep results
✓Fixed an interrupt (Esc) sent at the very start of a turn being silently dropped in stream-json/SDK sessions, leaving the turn running with no "Interrupted" feedback
✓FixedAPI 400 `no low surrogate in string` errors for classifier side-queries and MCP server descriptions containing emoji near a truncation boundary
✓Fixed MCP per-server timeout config values below 1000 ms being floored to a 1-second watchdog that aborted every tool call; sub-1000 ms values are now ignored (falling back to `MCP_TOOL_TIMEOUT` or default), and `claude mcp get` annotates them accordingly
✓Fixed the LSP tool's workspaceSymbol operation returning no results; it now accepts a `query` parameter and passes it to the language server
✓Fixedclaude agents cutting live status text (tool args, replies, prompts, exec output) at 60–120 columns on wide terminals; the status detail now uses the full terminal width
+VSCodeAdded a tip suggesting disabling terminal GPU acceleration (or running `/terminal-setup`) to fix garbled glyphs
~OTEL_RESOURCE_ATTRIBUTES values are now included as labels on metric datapoints, so you can slice usage metrics by custom dimensions like team or repo
~claude agents rows now show `done/total` before the detail when work is fanned out; peek shows the longest-running item
~/mcp now collapses claude.ai connectors you've never signed in to behind a "Show unused connectors" row
~Parallel tool calls: a failed Bash command no longer cancels other calls in the same batch — each tool returns its own result independently
~Fullscreen mode: clipboard now uses `wl-copy`/`xclip`/`xsel` on Linux when available, copies to both the clipboard and PRIMARY selection for middle-click paste, and the "hold {key} for native selection" hint now shows the correct key per terminal
↑Improved terminal rendering performance by stabilizing the layout engine's JIT compilation profile
↑Improved rendering performance for large file writes
✓Fixed the /effort dialog, workflow animations, and prompt keyword shimmer not honoring the "Reduce motion" setting
✓FixedforceLoginOrgUUID/`forceLoginMethod` managed-settings policies blocking third-party provider sessions (Bedrock, Vertex, Foundry, Mantle) alongside the org pin (regression in 2.1.146)
✓Fixed background subagent output corrupting `claude -p` stdout when using `--output-format text` or `json`
✓Fixed/usage-credits starting a re-login for Team and Enterprise admins instead of pointing to the organization's usage settings page
✓Fixed/autofix-pr reporting "cannot run on the default branch" when the session is inside a git worktree or another repository
✓Fixed--resume picker not showing sessions from the current directory when it isn't a git worktree (e.g., jj workspaces)
✓Fixed Windows hooks that invoke bash explicitly (e.g., `/usr/bin/bash script.sh`) failing with "command not found" or "cannot execute binary file"
✓FixedOpenTelemetry log events (`user_prompt`, `api_request`, `tool_result`, `tool_decision`) being silently dropped when emitted before telemetry initialization completed
+Added a prompt before writing to shell startup files (`.zshenv`, `.zlogin`, `.bash_login`) and `~/.config/git/`, which could otherwise lead to unintended command execution
~acceptEdits mode now prompts before writing build-tool config files that grant code execution (`.npmrc`, `.yarnrc*`, `bunfig.toml`, `.bazelrc`, `.pre-commit-config.yaml`, `.devcontainer/`, etc.)
~Edit no longer requires a separate Read after viewing a file with `grep`: single-file `grep`/`egrep`/`fgrep` commands now satisfy the read-before-edit check
~Renamed the dynamic-workflow trigger keyword from `workflow` to `ultracode`. The word "workflow" no longer triggers a run; asking for one in your own words still works. The trigger keyword is highlighted in violet in the prompt input
−RemovedCLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE; the environment variable is now a no-op
−Removed the JetBrains plugin install suggestion from startup
↑Improved performance of opening recently-inactive background agent sessions in `claude agents`
↑Improved auto mode classifier latency by reducing reasoning on routine actions, lowering the chance of "could not evaluate this action" blocks
↑Improved background-session teardown (`claude rm`/`stop`, idle reap) to send SIGTERM to running shell subprocesses before SIGKILL, so cleanup handlers run
✓Fixed copy-on-select not writing to the Windows clipboard on WSL — now uses PowerShell interop instead of OSC 52, which terminals like MobaXterm don't support
✓Fixed restoring a completed session from `claude agents` dropping chat history and re-running the original prompt
✓Fixed background sessions re-attached after overnight retire losing their conversation and re-running the original prompt
✓Fixedclaude --bg occasionally failing with "socket missing" when the background daemon was cold-starting on a loaded machine
✓Fixed an issue on Windows where the directory a background session was started in could not be deleted after `claude rm` until the background daemon exited
✓Fixed background agents that resumed work being shown under Completed in the agents list
✓Fixedclaude agents freezing for several seconds when returning to the session list due to the auto-updater re-checking on every exit
✓FixedEsc, arrow keys, and typing becoming unresponsive on Windows when attached to a background session or in the agent view while the host is under heavy CPU load
