AddedCLAUDE_CODE_DISABLE_WEB_FETCH environment variable to turn off the WebFetch tool
Addedclaude --desktop to open the Claude desktop app on the current directory, or on a session with `--continue` / `--resume <id>`
Addedclaude plugin configure <plugin> to show a plugin's options and which are unset, or save new values read from stdin with `--values-stdin`
Added<server>.<key>=<value> to `claude plugin install --config`, so a bundled `.mcpb` MCP server's own settings can be set at install time and it starts without visiting `/plugin` → Configure
AddedallowedProviders managed setting to limit which API providers a machine may use (Anthropic API, a custom endpoint, Bedrock, Mantle, Vertex AI, Foundry, Claude Platform on AWS, or a Cloud gateway)
AddedCLAUDE_CODE_NONSTREAMING_TIMEOUT_RETRIES environment variable to cap re-sends of a non-streaming fallback request that timed out
VSCodeAdded a note under a restored tab's last message when a window reload interrupted it and no reply will follow
VSCodeAdded a plugin options form to Manage plugins: installing a plugin that has options asks for the unset ones, and a gear on its row changes them later
VSCodeAdded an on-demand diagnostics tool so Claude in the panel can read the Problems panel's current errors and warnings at any time, not only right after it edits a file
Claude TagAdded direct messages with Claude for members on an Enterprise plan Standard or Usage-Based Chat seat who also have Cowork; a seat that includes Claude Code is no longer required
~changed 23
Changed MCP tools so a tool that sets its own `_meta['anthropic/alwaysLoad']` to false stays deferred when its `--mcp-config`, Agent SDK or plugin server is set to `alwaysLoad`
Changed background Bash and PowerShell commands to stop after a time limit (their `timeout` with `run_in_background`, default 30 min, max 2 h); Claude is notified when one is stopped
ChangedCode Review's pull request reviews and `/ultrareview` to run when `disableWorkflows` is on, unless the machine running the review has it set by its own administrator (MDM or the managed-settings file)
Changed sessions behind a custom `ANTHROPIC_BASE_URL` to use the 1M context window of models that have one (Opus 4.7+, Sonnet 5+, Fable); run `/autocompact 200k` if your gateway stops at 200K
ChangedTeam and Enterprise sessions, and sessions whose sign-in plan Claude Code can't determine, to withhold WebFetch until the organization policy loads if it couldn't be loaded at startup
Changed /memory so that Auto-memory can no longer be turned on from a background session or from a session one of Claude Code's own tools started; turning it off there still works
Changed the one-time offer to make auto mode your default permission mode to also show on third-party providers and with telemetry off, when your user settings default to another mode
Changedclaude -p and Python Agent SDK sessions on third-party providers or with telemetry off to start in auto mode when no permission mode is configured, like interactive sessions; `--permission-mode` still overrides it
ChangedBedrock, Mantle and Claude Platform on AWS requests to a base URL with a non-default port to include the port in the SigV4-signed Host header
Changed the MCP server name widgets to be reserved in cloud sessions and on self-hosted runners: your own server under it, or a close spelling such as `widgets_`, no longer loads, so rename it
Changed/ultrareview on macOS and Linux to leave symbolic refs out when uploading a local checkout; a checkout whose current branch is a symbolic ref is now refused with an explanation
WindowsChanged project and local settings `env` to no longer set `ALLUSERSPROFILE`, `SystemDrive`, or the `CommonProgramFiles` variables; set them in user or managed settings instead
Changed/tasks to fold background work Claude Code runs for itself under one "System tasks" row; press Enter on it to show those tasks
Changed/ultrareview on macOS and Linux to require git 2.31 or newer to upload a local repository; checkouts made with `--separate-git-dir` are now refused instead of being uploaded with an older method
Changed/ultrareview uploads on macOS and Linux to send a partial clone as a working-tree snapshot on git 2.31 or newer, instead of falling back or refusing when git's version looked too old
Changed/ultrareview uploads on macOS and Linux to refuse, instead of fetching, a partial clone missing some of its working tree's files on older git versions; a clone made without `--filter` uploads
ChangedBedrock, Vertex and Mantle start-up model checks to identify themselves as Claude Code, like other Claude Code requests
Changedclaude mcp get to hide the command, arguments, and environment values of stdio MCP servers provided by plugins; variable names are still shown
Changed/claude-api so it can no longer be run from Remote Control clients
Changed/config chrome=true to direct you to the /config panel instead of enabling Claude in Chrome by default; `/config chrome=false` still turns it off when it was on
Changed sandbox settings so project settings cannot widen or turn off an admin-required sandbox, replace the proxy behind a managed deny list, extend a strict allowlist, or reopen managed read-denies
VSCodeChanged the Manage plugins dialog to ask before removing a marketplace or turning off a plugin that your project's shared `.claude/settings.json` turns on
Cloud sessionsChangedMCP_DISCOVERY_CACHE=1, when set in your cloud environment's variables rather than a settings file, to reuse your connectors' tool lists after a session restart; other MCP servers are no longer cached and connect at startup
↑improved 17
ImprovedClaude in Chrome: the native host now reports your computer's name, so connected browsers can be labeled by computer instead of "Browser 1" / "Browser 2"
Improved Bedrock and Vertex AI sessions to switch to an older available model of the same tier, instead of failing, when an admin removes access to the default model; session titles and summaries now fall back with it
Improved plugin marketplace errors to name why a git address is refused instead of citing enterprise policy
Improved validation of git URLs for plugins, marketplaces and the current repository's remote
ImprovedArtifact tool results: they now suggest publishing in the same step as writing or editing the page, which can save a round trip
ImprovedRemote Control: a `/btw` side question asked of a session hosted by an app such as Claude Desktop now sees the turn in progress, not only the last finished one
Improved pictures Claude sends as BMP, HEIC, HEIF, AVIF or TIFF files: the Claude apps now show a preview where Claude Code can convert them
Improved subagents in auto mode: a subagent's run now ends as soon as it hands its report back to its caller, instead of taking extra turns that reach no one
Improved Bedrock and Vertex start-up model checks: models your account cannot use are now remembered for up to a day instead of being re-checked on every launch
Improved Artifact tool publish results to use fewer tokens: the note on updating an artifact is shorter, and where to find your artifacts is no longer repeated after every publish
Improved SDK liveness during a non-streaming fallback request: with partial messages on, a `ping` stream event is now sent every 30 seconds on the Anthropic API, Claude Platform on AWS and gateways
Improved/resume and `claude --resume` on a session that is running in the background: they now open that session instead of refusing, and a prompt given with `claude --resume <id> "prompt"` is sent to it as its next turn
Improved per-turn performance when many permission deny rules and MCP tools are configured
Improved responsiveness when leaving the ctrl+o transcript view in long sessions when fullscreen rendering is off
ImprovedBedrock, Vertex and Mantle start-up model checks to send the same User-Agent, x-app and session ID headers as regular requests
VSCodeImproved the Manage plugins dialog: a failed plugin action now opens a popup that explains it and, where there is one, offers the fix
Code ReviewImproved the Code Review check run to say when your repository's REVIEW.md wasn't applied, for example on a very large pull request or when REVIEW.md is a symbolic link
✓fixed 86
Fixedclaude -p with `CLAUDE_CODE_FORK_SUBAGENT=1`: a subagent's own Agent call now runs in the foreground, so the subagent gets the child's result
Fixed plugin and marketplace installs and updates over SSH ignoring the ssh program set in `GIT_SSH` or in your git config's `core.sshCommand`
FixedClaude Code refusing to start when the OS denies reading the managed settings file; it now warns and starts without that file's policies. Other read errors and unparseable files stop every session
Fixed cloud sessions that restarted after their conversation was compacted refusing the next update to an artifact the session had already read or published
Fixedclaude plugin disable and `enable` with a full `name@marketplace` id changing a settings entry in another letter case instead of the installed plugin's own
Fixed files attached to a message sent over Remote Control being left out after a single failed download; a network error, timeout or server error is now retried up to twice
Fixed switching models mid-session with a `set_model` request (such as the Agent SDK's `setModel`) leaving the new model on the built-in output-token limit and auto-compact window until restart
Fixed redacted logs and transcripts showing part of a URL password that contains `@`, or all of it when the URL writes its `@` as `%40`
Fixed SSH passphrase and new-host prompts from worktree and `/teleport` fetches taking over the terminal; these fetches now fail fast instead of asking
Fixed switching off an MCP server added mid-session in SDK and `-p` sessions leaving its tools available
Fixedclaude -p --permission-prompt-tool: a background subagent's permission request now goes to the prompt tool instead of being auto-denied
Fixedclaude mcp list and `claude mcp get`, and the not-found error of `claude mcp remove`, `login` and `logout`, printing line breaks and terminal escape sequences from MCP server names and values
Fixed sandbox auto-allow asking for approval on every run of many inline scripts (`python3 -c`, `node -e`) just because they contain `=`
Fixed fork subagents not keeping the session's plan mode or `dontAsk` mode: a fork now runs under its parent's permission mode and cannot exit plan mode
Fixedclaude remote-control --help saying `--[no-]chrome` defaults to the machine's `/chrome` setting; spawned sessions keep Claude in Chrome off unless `--chrome` is passed
Fixed background subagents in auto mode prompting a second, redundant reply after each report
Fixed cloud session creation and `/remote-env` reading only the newest 20 of an account's environments
FixedRemote Control marking a message as read as soon as it arrived instead of when Claude started on it, and losing a message still queued when the terminal quit (it now arrives on the next resume)
Fixed installing a plugin with `claude plugin install` or `/plugin` putting it into an installed plugin's cache or data folder when their ids differ only in `.`, `-`, `@` or (macOS, Windows) capitals; the install is now refused
Fixed hooks and SDK permission callbacks seeing a missing or outdated plan on ExitPlanMode when the plan was written in the same response
Fixed the first reply in cloud sessions arriving tens of milliseconds late, a regression in 2.1.283
Fixed sessions that authenticate with `ANTHROPIC_AUTH_TOKEN` against the Anthropic API never loading the organization's policy
Fixed a failed agent(), `parallel()` or `pipeline()` call that a workflow script awaits later, or not at all, being treated as an unhandled promise rejection, which could end a background session
Fixed synchronous hooks hanging Claude Code while a background process the hook started (for example `some-daemon &`) kept its output open; the hook now finishes shortly after its own process exits
Fixed WebFetch reporting a rate-limited domain safety check as a network or enterprise policy block
Fixed the fullscreen ctrl+o transcript freezing briefly when opened on turns with hundreds of file reads or searches; tool calls still running when the transcript opens now show their results when they finish
FixedAmazon Bedrock mid-stream `modelTimeoutException` and `serviceUnavailableException` errors showing a raw JSON body instead of the error message
Fixed/autofix-pr and `/schedule` saying the Claude GitHub App is not installed on a repository whose install status had not been checked yet
Fixed dismissing a row (x) in `/artifacts` unlinking its file from the artifact, so publishing the same file again created a new artifact instead of updating it
Fixed Artifact tool publishes after a conversation rewind (Esc Esc) overwriting a file's newer content that Claude had read only in the rewound turns; the publish is now refused until Claude re-reads the file
Fixed an Artifact allow rule ("don't ask again") letting the Artifact tool publish a file outside the working directories without asking; add the file's folder with `--add-dir` for the rule to cover it
Fixed/cost and SDK `modelUsage` reporting a turn under the wrong model when the server answered a refusal with a different fallback model than the client expected
Fixed the Artifact tool so that publishing a page no longer lets Claude overwrite its source file without re-reading it when Claude's earlier read was cut short or the file had changed since
Fixed auto mode skipping its classifier for Artifact tool asset uploads and reads of someone else's artifact when you had approved that artifact earlier in another permission mode
Fixed a misleading "core.worktree is set" error from `/ultrareview` when the project folder briefly could not be read
Fixed/ultrareview on macOS and Linux failing to upload the working tree from a git worktree whose per-worktree config sets `core.longpaths`
Fixed the Artifact tool sometimes reporting a publish as a conflict with another session after retrying a temporary server error, when the first attempt had actually succeeded
Fixed/ultrareview uploads including uncommitted changes to credential files whose name has a colon before the extension, such as `server:8443.key`
Fixed a rare auth failure when two sessions recover a login refresh lock left by a crashed process at the same time
Fixed the PowerShell tool's permission check skipping deny and ask rules, and caching that failure for later checks, when its command parser failed to start (for example when the machine was out of memory)
Fixed/ultrareview uploads on macOS and Linux running slowly on some unusual file names, and their credential-file check missing file or folder names with many backup or editor marks
Fixed a cancelled shell command or hook still starting, and running to its end, when the cancel arrived while it was being set up
Fixedvim mode: after editing in the external editor (Ctrl+G), `x` or `r` in NORMAL mode no longer breaks a pasted-text placeholder at the end of the prompt
Fixed responses blocked by the API's output content filter being re-sent and retried, sometimes for minutes, instead of showing the filter's error right away
Fixed plugins silently skipping a bundled `.mcpb` MCP server that still needs configuration: `/plugin`, the install message and `claude plugin install` now say so and point to Configure
Fixed compacting or resuming a session failing, opening without its history, or crashing when its saved transcript holds a compaction marker or loop wakeup entry with missing or malformed fields
WSLFixed/ultrareview refusing to upload a checkout on a Linux volume when a changed file's name has a colon or ends in a dot or space
FixedCLAUDE_CODE_RESUME_INTERRUPTED_TURN re-running a turn that had ended at `--max-turns`
Fixed sign-in that could wait forever after the browser showed success
WindowsFixed/ultrareview uploading a linked worktree of a repository rooted at your home folder in some cases
Fixed cloud sessions reporting the uploads folder as missing before any file had been uploaded
Fixed a reply sent from claude agents to a background session waiting on a permission prompt sometimes approving the pending command
Fixedclaude attach, `logs`, `stop`, `respawn` and `rm` starting a new session with the command name as its prompt when options came before it, such as from a shell alias
Fixedclaude mcp list leaving out WebSocket (`ws`) MCP servers; each is now listed with its URL and health status
Fixedclaude mcp get showing no Type, Command, Args, or Environment for stdio servers whose config entry omits the `type` field
Fixed.claude/settings.local.json allow rules being held back outside a git repository when git's trace2 output is configured
Fixed the /claude-api eval runner scaffold and report builder writing through a symlink or hard link planted at an output file
Fixed the /claude-api eval runner scaffold counting responses cut off at `max_tokens` in the score averages; they are now marked truncated and counted separately
Fixed showing as literal text in the terminal when a reply uses it to indent text, such as row labels in a markdown table
Fixed a brief freeze (up to a second) partway through long sessions outside fullscreen mode, which came back after `/clear` or `/compact`
Fixed an approved Edit never going through when its target is a device, such as a file symlinked to /dev/null, and the approval came from the IDE diff view or changed the edit
Fixed a failing API request being retried up to 21 times when streaming kept failing; the non-streaming fallback now shares the request's retry budget instead of getting a fresh set of retries
VSCodeFixed pressing Enter after typing a slash command running an unrelated menu item picked by fuzzy match, or doing nothing
VSCodeFixed an open agent transcript losing the agent's newer messages during a long session
VSCodeFixed a message that quotes a Claude Code or IDE tag losing the rest of its text in the chat
VSCodeFixed a message sent while Claude was working disappearing from the conversation after the session was reopened
VSCodeFixed the session list's Web tab showing the previous account's sessions after an account switch
VSCodeFixed restored tabs re-running an interrupted turn when VS Code was started with `CLAUDE_CODE_RESUME_INTERRUPTED_TURN` set, even with Continue After Reload off
VSCodeFixed Escape stopping the running turn instead of closing the command menu after clicking one of its rows
VSCodeFixed opening Past conversations replacing a live conversation with its saved copy
VSCodeFixed a Claude tab reloaded after an extension restart staying blank instead of saying how to recover
VSCodeFixed opening a conversation that is already open in another window or app starting a second copy of it without warning; it now asks first
VSCodeFixed a hook's reason for blocking or stopping a prompt disappearing after a window reload
VSCodeFixed tabs stuck on a conversation that can't be resumed: the error now says so and offers to start a new conversation
VSCodeFixed every file Read, Write and Edit stalling for ten minutes and then being skipped when the editor stops responding to the extension's automatic save before the tool runs
VSCodeFixed the agent map labeling a sub-agent with the session's model instead of the model it actually ran on (e.g. under `CLAUDE_CODE_SUBAGENT_MODEL_FORCE` or an agent's own `model`)
VSCodeFixed uninstalling a plugin from the Manage plugins dialog, which removed the wrong installation or failed for a plugin installed for the project
VSCodeFixed sign-in staying on the authorization-code step after going back and choosing the same sign-in method again
VSCodeFixed the chat panel stalling when a long session trims its oldest rows
VSCodeFixed the conversation disappearing from a session when many agents run
VSCodeFixed the editor tab keeping an old name after a session was renamed with /rename, by a SessionStart hook, or on claude.ai
VSCodeFixed the agent map's transcript view leaving out messages sent to a running agent
Cloud sessionsFixed Run now on a routine showing internal error text when the run is refused before it starts; it now shows the same explanation as the routine's failure notification
Claude TagFixed the Default model setting in admin settings and a channel's Configure page offering models your organization can't use, which made saves or new sessions fail
Claude TagFixed the note under Claude's Slack messages saying it answered on a fallback model, and why, disappearing when Claude later edited that message
Code ReviewFixed the organization menu in Code Review's "Add a repository" dialog showing only a few of your GitHub organizations; it now loads more as you scroll
