Claude Code Changelog

Added PreCompact hook support: hooks can now block compaction by exiting with code 2 or returning `{"decision":"block"}`

Added background monitor support for plugins via a top-level `monitors` manifest key that auto-arms at session start or on skill invoke - `/proactive` is now an alias for `/loop`

Improved stalled API stream handling: streams now abort after 5 minutes of no data and retry non-streaming instead of hanging indefinitely

Improved network error messages: connection errors now show a retry message immediately instead of a silent spinner

Improved file write display: long single-line writes (e.g. minified JSON) are now truncated in the UI instead of paginating across many screens

Improved `/doctor` layout with status icons; press `f` to have Claude fix reported issues

Improved `/config` labels and descriptions for clarity

Improved skill description handling: raised the listing cap from 250 to 1,536 characters and added a startup warning when descriptions are truncated

Improved `WebFetch` to strip `<style>` and `<script>` contents from fetched pages so CSS-heavy pages no longer exhaust the content budget before reaching actual text

Improved stale agent worktree cleanup to remove worktrees whose PR was squash-merged instead of keeping them indefinitely

Improved MCP large-output truncation prompt to give format-specific recipes (e.g. `jq` for JSON, computed Read chunk sizes for text)

Fixed images attached to queued messages (sent while Claude is working) being dropped

Fixed screen going blank when the prompt input wraps to a second line in long conversations

Fixed leading whitespace getting copied when selecting multi-line assistant responses in fullscreen mode

Fixed leading whitespace being trimmed from assistant messages, breaking ASCII art and indented diagrams

Fixed garbled bash output when commands print clickable file links (e.g. Python `rich`/`loguru` logging)

Fixed alt+enter not inserting a newline in terminals using ESC-prefix alt encoding, and Ctrl+J not inserting a newline (regression in 2.1.100)

Fixed duplicate "Creating worktree" text in EnterWorktree/ExitWorktree tool display

Fixed queued user prompts disappearing from focus mode

Fixed one-shot scheduled tasks re-firing repeatedly when the file watcher missed the post-fire cleanup

Fixed inbound channel notifications being silently dropped after the first message for Team/Enterprise users

Fixed marketplace plugins with `package.json` and lockfile not having dependencies installed automatically after install/update

Fixed marketplace auto-update leaving the official marketplace in a broken state when a plugin process holds files open during the update

Fixed "Resume this session with..." hint not printing on exit after `/resume`, `--worktree`, or `/branch`

Fixed feedback survey shortcut keys firing when typed at the end of a longer prompt

Fixed stdio MCP server emitting malformed (non-JSON) output hanging the session instead of failing fast with "Connection closed"

Fixed MCP tools missing on the first turn of headless/remote-trigger sessions when MCP servers connect asynchronously

Fixed `/model` picker on AWS Bedrock in non-US regions persisting invalid `us.*` model IDs to `settings.json` when inference profile discovery is still in-flight

Fixed 429 rate-limit errors showing a raw JSON dump instead of a clean message for API-key, Bedrock, and Vertex users

Fixed crash on resume when session contains malformed text blocks

Fixed `/help` dropping the tab bar, Shortcuts heading, and footer at short terminal heights

Fixed malformed keybinding entry values in `keybindings.json` being silently loaded instead of rejected with a clear error

Fixed `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` in one project's settings permanently disabling usage metrics for all projects on the machine

Fixed washed-out 16-color palette when using Ghostty, Kitty, Alacritty, WezTerm, foot, rio, or Contour over SSH/mosh

Fixed Bash tool suggesting `acceptEdits` permission mode when exiting plan mode would downgrade from a higher permission level

Added OS CA certificate store trust by default, so enterprise TLS proxies work without extra setup (set `CLAUDE_CODE_CERT_STORE=bundled` to use only bundled CAs) - `/ultraplan` and other remote-session features now auto-create a default cloud environment instead of requiring web setup first

Improved brief mode to retry once when Claude responds with plain text instead of a structured message

Improved focus mode: Claude now writes more self-contained summaries since it knows you only see its final message

Improved tool-not-available errors to explain why and how to proceed when the model calls a tool that exists but isn't available in the current context

Improved rate-limit retry messages to show which limit was hit and when it resets instead of an opaque seconds countdown

Improved refusal error messages to include the API-provided explanation when available

Improved `claude -p --resume <name>` to accept session titles set via `/rename` or `--name`

Improved settings resilience: an unrecognized hook event name in `settings.json` no longer causes the entire file to be ignored

Improved plugin hooks from plugins force-enabled by managed settings to run when `allowManagedHooksOnly` is set

Improved `/plugin` and `claude plugin update` to show a warning when the marketplace could not be refreshed, instead of silently reporting a stale version

Improved plan mode to hide the "Refine with Ultraplan" option when the user's org or auth setup can't reach Claude Code on the web

Improved beta tracing to honor `OTEL_LOG_USER_PROMPTS`, `OTEL_LOG_TOOL_DETAILS`, and `OTEL_LOG_TOOL_CONTENT`; sensitive span attributes are no longer emitted unless opted in

Improved SDK `query()` to clean up subprocess and temp files when consumers `break` from `for await` or use `await using`

Fixed a command injection vulnerability in the POSIX `which` fallback used by LSP binary detection

Fixed a memory leak where long sessions retained dozens of historical copies of the message list in the virtual scroller

Fixed `--resume`/`--continue` losing conversation context on large sessions when the loader anchored on a dead-end branch instead of the live conversation

Fixed `--resume` chain recovery bridging into an unrelated subagent conversation when a subagent message landed near a main-chain write gap

Fixed a crash on `--resume` when a persisted Edit/Write tool result was missing its `file_path`

Fixed a hardcoded 5-minute request timeout that aborted slow backends (local LLMs, extended thinking, slow gateways) regardless of `API_TIMEOUT_MS`

Fixed `permissions.deny` rules not overriding a PreToolUse hook's `permissionDecision: "ask"` — previously the hook could downgrade a deny into a prompt

Fixed `--setting-sources` without `user` causing background cleanup to ignore `cleanupPeriodDays` and delete conversation history older than 30 days

Fixed Bedrock SigV4 authentication failing with 403 when `ANTHROPIC_AUTH_TOKEN`, `apiKeyHelper`, or `ANTHROPIC_CUSTOM_HEADERS` set an Authorization header

Fixed `claude -w <name>` failing with "already exists" after a previous session's worktree cleanup left a stale directory

Fixed subagents not inheriting MCP tools from dynamically-injected servers

Fixed sub-agents running in isolated worktrees being denied Read/Edit access to files inside their own worktree

Fixed sandboxed Bash commands failing with `mktemp: No such file or directory` after a fresh boot

Fixed `claude mcp serve` tool calls failing with "Tool execution failed" in MCP clients that validate `outputSchema`

Fixed `RemoteTrigger` tool's `run` action sending an empty body and being rejected by the server

Fixed several `/resume` picker issues: narrow default view hiding sessions from other projects, unreachable preview on Windows Terminal, incorrect cwd in worktrees, session-not-found errors not surfacing in stderr, terminal title not being set, and resume hint overlapping the prompt input

Fixed Grep tool ENOENT when the embedded ripgrep binary path becomes stale (VS Code extension auto-update, macOS App Translocation); now falls back to system `rg` and self-heals mid-session

Fixed `/btw` writing a copy of the entire conversation to disk on every use

Fixed `/context` Free space and Messages breakdown disagreeing with the header percentage

Fixed several plugin issues: slash commands resolving to the wrong plugin with duplicate `name:` frontmatter, `/plugin update` failing with `ENAMETOOLONG`, Discover showing already-installed plugins, directory-source plugins loading from a stale version cache, and skills not honoring `context: fork` and `agent` frontmatter fields

Fixed the `/mcp` menu offering OAuth-specific actions for MCP servers configured with `headersHelper`; Reconnect is now offered instead to re-invoke the helper script

Fixed `ctrl+]`, `ctrl+\`, and `ctrl+^` keybindings not firing in terminals that send raw C0 control bytes (Terminal.app, default iTerm2, xterm)

Fixed `/login` OAuth URL rendering with padding that prevented clean mouse selection

Fixed rendering issues: flicker in non-fullscreen mode when content above the visible area changed, terminal scrollback being wiped during long sessions in non-fullscreen mode, and mouse-scroll escape sequences occasionally leaking into the prompt as text

Fixed crash when `settings.json` env values are numbers instead of strings

Fixed in-app settings writes (e.g. `/add-dir --remember`, `/config`) not refreshing the in-memory snapshot, preventing removed directories from being revoked mid-session

Fixed custom keybindings (`~/.claude/keybindings.json`) not loading on Bedrock, Vertex, and other third-party providers

Fixed `claude --continue -p` not correctly continuing sessions created by `-p` or the SDK

Fixed several Remote Control issues: worktrees removed on session crash, connection failures not persisting in the transcript, spurious "Disconnected" indicator in brief mode for local sessions, and `/remote-control` failing over SSH when only `CLAUDE_CODE_ORGANIZATION_UUID` is set

Fixed `/insights` sometimes omitting the report file link from its response

[VSCode] Fixed the file attachment below the chat input not clearing when the last editor tab is closed

Added `CLAUDE_CODE_PERFORCE_MODE` env var: when set, Edit/Write/NotebookEdit fail on read-only files with a `p4 edit` hint instead of silently overwriting them

Added Monitor tool for streaming events from background scripts

Added subprocess sandboxing with PID namespace isolation on Linux when `CLAUDE_CODE_SUBPROCESS_ENV_SCRUB` is set, and `CLAUDE_CODE_SCRIPT_CAPS` env var to limit per-session script invocations

Added `--exclude-dynamic-system-prompt-sections` flag to print mode for improved cross-user prompt caching

Added `workspace.git_worktree` to the status line JSON input, set whenever the current directory is inside a linked git worktree

Added W3C `TRACEPARENT` env var to Bash tool subprocesses when OTEL tracing is enabled, so child-process spans correctly parent to Claude Code's trace tree

LSP: Claude Code now identifies itself to language servers via `clientInfo` in the initialize request

Fixed a Bash tool permission bypass where a backslash-escaped flag could be auto-allowed as read-only and lead to arbitrary code execution

Fixed compound Bash commands bypassing forced permission prompts for safety checks and explicit ask rules in auto and bypass-permissions modes

Fixed read-only commands with env-var prefixes not prompting unless the var is known-safe (`LANG`, `TZ`, `NO_COLOR`, etc.)

Fixed redirects to `/dev/tcp/...` or `/dev/udp/...` not prompting instead of auto-allowing

Fixed stalled streaming responses timing out instead of falling back to non-streaming mode

Fixed 429 retries burning all attempts in ~13s when the server returns a small `Retry-After` — exponential backoff now applies as a minimum

Fixed MCP OAuth `oauth.authServerMetadataUrl` config override not being honored on token refresh after restart, affecting ADFS and similar IdPs

Fixed capital letters being dropped to lowercase on xterm and VS Code integrated terminal when the kitty keyboard protocol is active

Fixed macOS text replacements deleting the trigger word instead of inserting the substitution

Fixed `--dangerously-skip-permissions` being silently downgraded to accept-edits mode after approving a write to a protected path via Bash

Fixed managed-settings allow rules remaining active after an admin removed them, until process restart

Fixed `permissions.additionalDirectories` changes not applying mid-session — removed directories lose access immediately and added ones work without restart

Fixed removing a directory from `additionalDirectories` revoking access to the same directory passed via `--add-dir`

Fixed `Bash(cmd:*)` and `Bash(git commit *)` wildcard permission rules failing to match commands with extra spaces or tabs

Fixed `Bash(...)` deny rules being downgraded to a prompt for piped commands that mix `cd` with other segments

Fixed false Bash permission prompts for `cut -d /`, `paste -d /`, `column -s /`, `awk '{print $1}' file`, and filenames containing `%`

Fixed permission rules with names matching JavaScript prototype properties (e.g. `toString`) causing `settings.json` to be silently ignored

Fixed agent team members not inheriting the leader's permission mode when using `--dangerously-skip-permissions`

Fixed a crash in fullscreen mode when hovering over MCP tool results

Fixed copying wrapped URLs in fullscreen mode inserting spaces at line breaks

Fixed file-edit diffs disappearing from the UI on `--resume` when the edited file was larger than 10KB

Fixed several `/resume` picker issues: `--resume <name>` opening uneditable, filter reload wiping search state, empty list swallowing arrow keys, cross-project staleness, and transient task-status text replacing conversation summaries

Fixed `/export` not honoring absolute paths and `~`, and silently rewriting user-supplied extensions to `.txt`

Fixed `/effort max` being denied for unknown or future model IDs

Fixed slash command picker breaking when a plugin's frontmatter `name` is a YAML boolean keyword

Fixed rate-limit upsell text being hidden after message remounts

Fixed MCP tools with `_meta["anthropic/maxResultSizeChars"]` not bypassing the token-based persist layer

Fixed voice mode leaking dozens of space characters into the input when re-holding the push-to-talk key while the previous transcript is still processing

Fixed `DISABLE_AUTOUPDATER` not fully suppressing the npm registry version check and symlink modification on npm-based installs

Fixed a memory leak where Remote Control permission handler entries were retained for the lifetime of the session

Fixed background subagents that fail with an error not reporting partial progress to the parent agent

Fixed prompt-type Stop/SubagentStop hooks failing on long sessions, and hook evaluator API errors showing "JSON validation failed" instead of the real message

Fixed feedback survey rendering when dismissed

Fixed Bash `grep -f FILE` / `rg -f FILE` not prompting when reading a pattern file outside the working directory

Fixed stale subagent worktree cleanup removing worktrees that contain untracked files

Fixed `sandbox.network.allowMachLookup` not taking effect on macOS

Improved `/resume` filter hint labels and added project/worktree/branch names in the filter indicator

Improved footer indicators (Focus, notifications) to stay on the mode-indicator row instead of wrapping at narrow terminal widths

Improved `/agents` with a tabbed layout: a Running tab shows live subagents, and the Library tab adds Run agent and View running instance actions

Improved `/reload-plugins` to pick up plugin-provided skills without requiring a restart

Improved Accept Edits mode to auto-approve filesystem commands prefixed with safe env vars or process wrappers

Improved Vim mode: `j`/`k` in NORMAL mode now navigate history and select the footer pill at the input boundary

Improved hook errors in the transcript to include the first line of stderr for self-diagnosis without `--debug`

Improved OTEL tracing: interaction spans now correctly wrap full turns under concurrent SDK calls, and headless turns end spans per-turn

Improved transcript entries to carry final token usage instead of streaming placeholders

Updated the `/claude-api` skill to cover Managed Agents alongside Claude API

[VSCode] Fixed false-positive "requires git-bash" error on Windows when `CLAUDE_CODE_GIT_BASH_PATH` is set or Git is installed at a default location

Fixed `CLAUDE_CODE_MAX_CONTEXT_TOKENS` to honor `DISABLE_COMPACT` when it is set.

Dropped `/compact` hints when `DISABLE_COMPACT` is set.

Added `refreshInterval` status line setting to re-run the status line command every N seconds

Added `workspace.git_worktree` to the status line JSON input, set when the current directory is inside a linked git worktree

Added `● N running` indicator in `/agents` next to agent types with live subagent instances

Added syntax highlighting for Cedar policy files (`.cedar`, `.cedarpolicy`)

Fixed `--dangerously-skip-permissions` being silently downgraded to accept-edits mode after approving a write to a protected path

Fixed and hardened Bash tool permissions, tightening checks around env-var prefixes and network redirects, and reducing false prompts on common commands

Fixed permission rules with names matching JavaScript prototype properties (e.g. `toString`) causing `settings.json` to be silently ignored

Fixed managed-settings allow rules remaining active after an admin removed them until process restart

Fixed `permissions.additionalDirectories` changes in settings not applying mid-session

Fixed removing a directory from `settings.permissions.additionalDirectories` revoking access to the same directory passed via `--add-dir`

Fixed MCP HTTP/SSE connections accumulating ~50 MB/hr of unreleased buffers when servers reconnect

Fixed MCP OAuth `oauth.authServerMetadataUrl` not being honored on token refresh after restart, fixing ADFS and similar IdPs

Fixed 429 retries burning all attempts in ~13 seconds when the server returns a small `Retry-After` — exponential backoff now applies as a minimum

Fixed rate-limit upgrade options disappearing after context compaction

Fixed several `/resume` picker issues: `--resume <name>` opening uneditable, Ctrl+A reload wiping search, empty list swallowing navigation, task-status text replacing conversation summary, and cross-project staleness

Fixed file-edit diffs disappearing on `--resume` when the edited file was larger than 10KB

Fixed `--resume` cache misses and lost mid-turn input from attachment messages not being saved to the transcript

Fixed messages typed while Claude is working not being persisted to the transcript

Fixed prompt-type `Stop`/`SubagentStop` hooks failing on long sessions, and hook evaluator API errors displaying "JSON validation failed" instead of the actual message

Fixed subagents with worktree isolation or `cwd:` override leaking their working directory back to the parent session's Bash tool

Fixed compaction writing duplicate multi-MB subagent transcript files on prompt-too-long retries

Fixed `claude plugin update` reporting "already at the latest version" for git-based marketplace plugins when the remote had newer commits

Fixed slash command picker breaking when a plugin's frontmatter `name` is a YAML boolean keyword

Fixed copying wrapped URLs in `NO_FLICKER` mode inserting spaces at line breaks

Fixed scroll rendering artifacts in `NO_FLICKER` mode when running inside zellij

Fixed a crash in `NO_FLICKER` mode when hovering over MCP tool results

Fixed a `NO_FLICKER` mode memory leak where API retries left stale streaming state

Fixed slow mouse-wheel scrolling in `NO_FLICKER` mode on Windows Terminal

Fixed custom status line not displaying in `NO_FLICKER` mode on terminals shorter than 24 rows

Fixed Shift+Enter and Alt/Cmd+arrow shortcuts not working in Warp with `NO_FLICKER` mode

Fixed Korean/Japanese/Unicode text becoming garbled when copied in no-flicker mode on Windows

Fixed Bedrock SigV4 authentication failing when `AWS_BEARER_TOKEN_BEDROCK` or `ANTHROPIC_BEDROCK_BASE_URL` are set to empty strings (as GitHub Actions does for unset inputs)

Improved Accept Edits mode to auto-approve filesystem commands prefixed with safe env vars or process wrappers (e.g. `LANG=C rm foo`, `timeout 5 mkdir out`)

Improved auto mode and bypass-permissions mode to auto-approve sandbox network access prompts

Improved sandbox: `sandbox.network.allowMachLookup` now takes effect on macOS

Improved image handling: pasted and attached images are now compressed to the same token budget as images read via the Read tool

Improved slash command and `@`-mention completion to trigger after CJK sentence punctuation, so Japanese/Chinese input no longer requires a space before `/` or `@`

Improved Bridge sessions to show the local git repo, branch, and working directory on the claude.ai session card

Improved footer layout: indicators (Focus, notifications) now stay on the mode-indicator row instead of wrapping below

Improved context-low warning to show as a transient footer notification instead of a persistent row

Improved markdown blockquotes to show a continuous left bar across wrapped lines

Improved session transcript size by skipping empty hook entries and capping stored pre-edit file copies

Improved transcript accuracy: per-block entries now carry the final token usage instead of the streaming placeholder

Improved Bash tool OTEL tracing: subprocesses now inherit a W3C `TRACEPARENT` env var when tracing is enabled

Updated `/claude-api` skill to cover Managed Agents alongside the Claude API

Changed default effort level from medium to high for API-key, Bedrock/Vertex/Foundry, Team, and Enterprise users (control this with `/effort`)

Added compact `Slacked #channel` header with a clickable channel link for Slack MCP send-message tool calls

Added `keep-coding-instructions` frontmatter field support for plugin output styles

Added `hookSpecificOutput.sessionTitle` to `UserPromptSubmit` hooks for setting the session title

Plugin skills declared via `"skills": ["./"]` now use the skill's frontmatter `name` for the invocation name instead of the directory basename, giving a stable name across install methods

Fixed agents appearing stuck after a 429 rate-limit response with a long Retry-After header — the error now surfaces immediately instead of silently waiting

Fixed Console login on macOS silently failing with "Not logged in" when the login keychain is locked or its password is out of sync — the error is now surfaced and `claude doctor` diagnoses the fix

Fixed plugin skill hooks defined in YAML frontmatter being silently ignored

Fixed plugin hooks failing with "No such file or directory" when `CLAUDE_PLUGIN_ROOT` was not set

Fixed `${CLAUDE_PLUGIN_ROOT}` resolving to the marketplace source directory instead of the installed cache for local-marketplace plugins on startup

Fixed scrollback showing the same diff repeated and blank pages in long-running sessions

Fixed multiline user prompts in the transcript indenting wrapped lines under the `❯` caret instead of under the text

Fixed Shift+Space inserting the literal word "space" instead of a space character in search inputs

Fixed hyperlinks opening two browser tabs when clicked inside tmux running in an xterm.js-based terminal (VS Code, Hyper, Tabby)

Fixed an alt-screen rendering bug where content height changes mid-scroll could leave compounding ghost lines

Fixed `FORCE_HYPERLINK` environment variable being ignored when set via `settings.json` `env`

Fixed native terminal cursor not tracking the selected tab in dialogs, so screen readers and magnifiers can follow tab navigation

Fixed Bedrock invocation of Sonnet 3.5 v2 by using the `us.` inference profile ID

Fixed SDK/print mode not preserving the partial assistant response in conversation history when interrupted mid-stream

Improved `--resume` to resume sessions from other worktrees of the same repo directly instead of printing a `cd` command

Fixed CJK and other multibyte text being corrupted with U+FFFD in stream-json input/output when chunk boundaries split a UTF-8 sequence

[VSCode] Reduced cold-open subprocess work on starting a session

[VSCode] Fixed dropdown menus selecting the wrong item when the mouse was over the list while typing or using arrow keys

[VSCode] Added a warning banner when `settings.json` files fail to parse, so users know their permission rules are not being applied

Added interactive Bedrock setup wizard accessible from the login screen when selecting "3rd-party platform" — guides you through AWS authentication, region configuration, credential verification, and model pinning

Added per-model and cache-hit breakdown to `/cost` for subscription users - `/release-notes` is now an interactive version picker

Remote Control session names now use your hostname as the default prefix (e.g. `myhost-graceful-unicorn`), overridable with `--remote-control-session-name-prefix`

Pro users now see a footer hint when returning to a session after the prompt cache has expired, showing roughly how many tokens the next turn will send uncached

Fixed subagent spawning permanently failing with "Could not determine pane count" after tmux windows are killed or renumbered during a long-running session

Fixed prompt-type Stop hooks incorrectly failing when the small fast model returns `ok:false`, and restored `preventContinuation:true` semantics for non-Stop prompt-type hooks

Fixed tool input validation failures when streaming emits array/object fields as JSON-encoded strings

Fixed an API 400 error that could occur when extended thinking produced a whitespace-only text block alongside real content

Fixed accidental feedback survey submissions from auto-pilot keypresses and consecutive-prompt digit collisions

Fixed misleading "esc to interrupt" hint appearing alongside "esc to clear" when a text selection exists in fullscreen mode during processing

Fixed Homebrew install update prompts to use the cask's release channel (`claude-code` → stable, `claude-code@latest` → latest)

Fixed `ctrl+e` jumping to the end of the next line when already at end of line in multiline prompts

Fixed an issue where the same message could appear at two positions when scrolling up in fullscreen mode (iTerm2, Ghostty, and other terminals with DEC 2026 support)

Fixed idle-return "/clear to save X tokens" hint showing cumulative session tokens instead of current context size

Fixed plugin MCP servers stuck "connecting" on session start when they duplicate a claude.ai connector that is unauthenticated

Improved Write tool diff computation speed for large files (60% faster on files with tabs/`&`/`$`)

Removed `/tag` command

Removed `/vim` command (toggle vim mode via `/config` → Editor mode)

Linux sandbox now ships the `apply-seccomp` helper in both npm and native builds, restoring unix-socket blocking for sandboxed commands

Added `disableSkillShellExecution` setting to disable inline shell execution in skills, custom slash commands, and plugin commands

Added support for multi-line prompts in `claude-cli://open?q=` deep links (encoded newlines `%0A` no longer rejected)

Plugins can now ship executables under `bin/` and invoke them as bare commands from the Bash tool

Fixed transcript chain breaks on `--resume` that could lose conversation history when async transcript writes fail silently

Fixed `cmd+delete` not deleting to start of line on iTerm2, kitty, WezTerm, Ghostty, and Windows Terminal

Fixed plan mode in remote sessions losing track of the plan file after a container restart, which caused permission prompts on plan edits and an empty plan-approval modal

Fixed JSON schema validation for `permissions.defaultMode: "auto"` in settings.json

Fixed Windows version cleanup not protecting the active version's rollback copy - `/feedback` now explains why it's unavailable instead of disappearing from the slash menu

Improved `/claude-api` skill guidance for agent design patterns including tool surface decisions, context management, and caching strategy

Improved performance: faster `stripAnsi` on Bun by routing through `Bun.stripANSI`

Edit tool now uses shorter `old_string` anchors, reducing output tokens

Added `CLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILURE` env var to keep the existing marketplace cache when `git pull` fails, useful in offline environments

Added `.husky` to protected directories (acceptEdits mode)

Fixed an infinite loop where the rate-limit options dialog would repeatedly auto-open after hitting your usage limit, eventually crashing the session

Fixed `--resume` causing a full prompt-cache miss on the first request for users with deferred tools, MCP servers, or custom agents (regression since v2.1.69)

Fixed `Edit`/`Write` failing with "File content has changed" when a PostToolUse format-on-save hook rewrites the file between consecutive edits

Fixed `PreToolUse` hooks that emit JSON to stdout and exit with code 2 not correctly blocking the tool call

Fixed collapsed search/read summary badge appearing multiple times in fullscreen scrollback when a CLAUDE.md file auto-loads during a tool call

Fixed auto mode not respecting explicit user boundaries ("don't push", "wait for X before Y") even when the action would otherwise be allowed

Fixed click-to-expand hover text being nearly invisible on light terminal themes

Fixed UI crash when malformed tool input reached the permission dialog

Fixed headers disappearing when scrolling `/model`, `/config`, and other selection screens

Hardened PowerShell tool permission checks: fixed trailing `&` background job bypass, `-ErrorAction Break` debugger hang, archive-extraction TOCTOU, and parse-fail fallback deny-rule degradation

Improved performance: eliminated per-turn JSON.stringify of MCP tool schemas on cache-key lookup

Improved performance: SSE transport now handles large streamed frames in linear time (was quadratic)

Improved performance: SDK sessions with long conversations no longer slow down quadratically on transcript writes

Improved `/resume` all-projects view to load project sessions in parallel, improving load times for users with many projects

Changed `--resume` picker to no longer show sessions created by `claude -p` or SDK invocations

Removed `Get-DnsClientCache` and `ipconfig /displaydns` from auto-allow (DNS cache privacy)

Added `CLAUDE_CODE_NO_FLICKER=1` environment variable to opt into flicker-free alt-screen rendering with virtualized scrollback

Added `PermissionDenied` hook that fires after auto mode classifier denials — return `{retry: true}` to tell the model it can retry

Added named subagents to `@` mention typeahead suggestions

Added `MCP_CONNECTION_NONBLOCKING=true` for `-p` mode to skip the MCP connection wait entirely, and bounded `--mcp-config` server connections at 5s instead of blocking on the slowest server

Auto mode: denied commands now show a notification and appear in `/permissions` → Recent tab where you can retry with `r`

Fixed `Edit(//path/**)` and `Read(//path/**)` allow rules to check the resolved symlink target, not just the requested path

Fixed voice push-to-talk not activating for some modifier-combo bindings, and voice mode on Windows failing with "WebSocket upgrade rejected with HTTP 101"

Fixed Edit/Write tools doubling CRLF on Windows and stripping Markdown hard line breaks (two trailing spaces)

Fixed `StructuredOutput` schema cache bug causing ~50% failure rate when using multiple schemas

Fixed memory leak where large JSON inputs were retained as LRU cache keys in long-running sessions

Fixed a crash when removing a message from very large session files (over 50MB)

Fixed LSP server zombie state after crash — server now restarts on next request instead of failing until session restart

Fixed prompt history entries containing CJK or emoji being silently dropped when they fall on a 4KB boundary in `~/.claude/history.jsonl`

Fixed `/stats` undercounting tokens by excluding subagent usage, and losing historical data beyond 30 days when the stats cache format changes

Fixed `-p --resume` hangs when the deferred tool input exceeds 64KB or no deferred marker exists, and `-p --continue` not resuming deferred tools

Fixed `claude-cli://` deep links not opening on macOS

Fixed MCP tool errors truncating to only the first content block when the server returns multi-element error content

Fixed skill reminders and other system context being dropped when sending messages with images via the SDK

Fixed PreToolUse/PostToolUse hooks to receive `file_path` as an absolute path for Write/Edit/Read tools, matching the documented behavior

Fixed autocompact thrash loop — now detects when context refills to the limit immediately after compacting three times in a row and stops with an actionable error instead of burning API calls

Fixed prompt cache misses in long sessions caused by tool schema bytes changing mid-session

Fixed nested CLAUDE.md files being re-injected dozens of times in long sessions that read many files

Fixed `--resume` crash when transcript contains a tool result from an older CLI version or interrupted write

Fixed misleading "Rate limit reached" message when the API returned an entitlement error — now shows the actual error with actionable hints

Fixed hooks `if` condition filtering not matching compound commands (`ls && git push`) or commands with env-var prefixes (`FOO=bar git push`)

Fixed collapsed search/read group badges duplicating in terminal scrollback during heavy parallel tool use

Fixed notification `invalidates` not clearing the currently-displayed notification immediately

Fixed prompt briefly disappearing after submit when background messages arrived during processing

Fixed Devanagari and other combining-mark text being truncated in assistant output

Fixed rendering artifacts on main-screen terminals after layout shifts

Fixed voice mode failing to request microphone permission on macOS Apple Silicon

Fixed Shift+Enter submitting instead of inserting a newline on Windows Terminal Preview 1.25

Fixed periodic UI jitter during streaming in iTerm2 when running inside tmux

Fixed PowerShell tool incorrectly reporting failures when commands like `git push` wrote progress to stderr on Windows PowerShell 5.1

Fixed a potential out-of-memory crash when the Edit tool was used on very large files (>1 GiB)

Improved collapsed tool summary to show "Listed N directories" for `ls`/`tree`/`du` instead of "Read N files"

Improved Bash tool to warn when a formatter/linter command modifies files you have previously read, preventing stale-edit errors

Improved `@`-mention typeahead to rank source files above MCP resources with similar names

Improved PowerShell tool prompt with version-appropriate syntax guidance (5.1 vs 7+)

Changed `Edit` to work on files viewed via `Bash` with `sed -n` or `cat`, without requiring a separate `Read` call first

Changed hook output over 50K characters to be saved to disk with a file path + preview instead of being injected directly into context

Changed `cleanupPeriodDays: 0` in settings.json to be rejected with a validation error — it previously silently disabled transcript persistence

Changed thinking summaries to no longer be generated by default in interactive sessions — set `showThinkingSummaries: true` in settings.json to restore

Documented `TaskCreated` hook event and its blocking behavior

Preserved task notifications when backgrounding a running command with Ctrl+B

PowerShell tool on Windows: external-command arguments containing both a double-quote and whitespace now prompt instead of auto-allowing (PS 5.1 argument-splitting hardening) - `/env` now applies to PowerShell tool commands (previously only affected Bash) - `/usage` now hides redundant "Current week (Sonnet only)" bar for Pro and Enterprise plans

Image paste no longer inserts a trailing space

Pasting `!command` into an empty prompt now enters bash mode, matching typed `!` behavior - `/buddy` is here for April 1st — hatch a small creature that watches you code

Added `.jj` and `.sl` to VCS directory exclusion lists so Grep and file autocomplete don't descend into Jujutsu or Sapling metadata

Fixed `--resume` failing with "tool_use ids were found without tool_result blocks" on sessions created before v2.1.85

Fixed Write/Edit/Read failing on files outside the project root (e.g., `~/.claude/CLAUDE.md`) when conditional skills or rules are configured

Fixed unnecessary config disk writes on every skill invocation that could cause performance issues and config corruption on Windows

Fixed potential out-of-memory crash when using `/feedback` on very long sessions with large transcript files

Fixed `--bare` mode dropping MCP tools in interactive sessions and silently discarding messages enqueued mid-turn

Fixed the `c` shortcut copying only ~20 characters of the OAuth login URL instead of the full URL

Fixed masked input (e.g., OAuth code paste) leaking the start of the token when wrapping across multiple lines on narrow terminals

Fixed official marketplace plugin scripts failing with "Permission denied" on macOS/Linux since v2.1.83

Fixed statusline showing another session's model when running multiple Claude Code instances and using `/model` in one of them

Fixed scroll not following new messages after wheel scroll or click-to-select at the bottom of a long conversation

Fixed `/plugin` uninstall dialog: pressing `n` now correctly uninstalls the plugin while preserving its data directory

Fixed a regression where pressing Enter after clicking could leave the transcript blank until the response arrived

Fixed `ultrathink` hint lingering after deleting the keyword

Fixed memory growth in long sessions from markdown/highlight render caches retaining full content strings

Reduced startup event-loop stalls when many claude.ai MCP connectors are configured (macOS keychain cache extended from 5s to 30s)

Reduced token overhead when mentioning files with `@` — raw string content no longer JSON-escaped

Improved prompt cache hit rate for Bedrock, Vertex, and Foundry users by removing dynamic content from tool descriptions

Memory filenames in the "Saved N memories" notice now highlight on hover and open on click

Skill descriptions in the `/skills` listing are now capped at 250 characters to reduce context usage

Changed `/skills` menu to sort alphabetically for easier scanning

Auto mode now shows "unavailable for your plan" when disabled by plan restrictions (was "temporarily unavailable")

[VSCode] Fixed extension incorrectly showing "Not responding" during long-running operations

[VSCode] Fixed extension defaulting Max plan users to Sonnet after the OAuth token refreshes (8 hours after login)

Read tool now uses compact line-number format and deduplicates unchanged re-reads, reducing token usage

Added conditional `if` field for hooks using permission rule syntax (e.g., `Bash(git *)`) to filter when they run, reducing process spawning overhead

Added timestamp markers in transcripts when scheduled tasks (`/loop`, `CronCreate`) fire

Added trailing space after `[Image #N]` placeholder when pasting images

Deep link queries (`claude-cli://open?q=…`) now support up to 5,000 characters, with a "scroll to review" warning for long pre-filled prompts

MCP OAuth now follows RFC 9728 Protected Resource Metadata discovery to find the authorization server

Plugins blocked by organization policy (`managed-settings.json`) can no longer be installed or enabled, and are hidden from marketplace views

PreToolUse hooks can now satisfy `AskUserQuestion` by returning `updatedInput` alongside `permissionDecision: "allow"`, enabling headless integrations that collect answers via their own UI - `tool_parameters` in OpenTelemetry tool_result events are now gated behind `OTEL_LOG_TOOL_DETAILS=1`

Fixed `/compact` failing with "context exceeded" when the conversation has grown too large for the compact request itself to fit

Fixed `/plugin enable` and `/plugin disable` failing when a plugin's install location differs from where it's declared in settings

Fixed `--worktree` exiting with an error in non-git repositories before the `WorktreeCreate` hook could run

Fixed `deniedMcpServers` setting not blocking claude.ai MCP servers

Fixed `switch_display` in the computer-use tool returning "not available in this session" on multi-monitor setups

Fixed crash when `OTEL_LOGS_EXPORTER`, `OTEL_METRICS_EXPORTER`, or `OTEL_TRACES_EXPORTER` is set to `none`

Fixed diff syntax highlighting not working in non-native builds

Fixed MCP step-up authorization failing when a refresh token exists — servers requesting elevated scopes via `403 insufficient_scope` now correctly trigger the re-authorization flow

Fixed memory leak in remote sessions when a streaming response is interrupted

Fixed persistent ECONNRESET errors during edge connection churn by using a fresh TCP connection on retry

Fixed prompts getting stuck in the queue after running certain slash commands, with up-arrow unable to retrieve them

Fixed Python Agent SDK: `type:'sdk'` MCP servers passed via `--mcp-config` are no longer dropped during startup

Fixed raw key sequences appearing in the prompt when running over SSH or in the VS Code integrated terminal

Fixed Remote Control session status staying stuck on "Requires Action" after a permission is resolved

Fixed shift+enter and meta+enter being intercepted by typeahead suggestions instead of inserting newlines

Fixed stale content bleeding through when scrolling up during streaming

Fixed terminal left in enhanced keyboard mode after exit in Ghostty, Kitty, WezTerm, and other terminals supporting the Kitty keyboard protocol — Ctrl+C and Ctrl+D now work correctly after quitting

Improved @-mention file autocomplete performance on large repositories

Improved PowerShell dangerous command detection

Improved scroll performance with large transcripts by replacing WASM yoga-layout with a pure TypeScript implementation

Reduced UI stutter when compaction triggers on large sessions

Added `ANTHROPIC_DEFAULT_{OPUS,SONNET,HAIKU}_MODEL_SUPPORTS` env vars to override effort/thinking capability detection for pinned default models for 3p (Bedrock, Vertex, Foundry), and `_MODEL_NAME`/`_DESCRIPTION` to customize the `/model` picker label

Added `CLAUDE_STREAM_IDLE_TIMEOUT_MS` env var to configure the streaming idle watchdog threshold (default 90s)

Added `TaskCreated` hook that fires when a task is created via `TaskCreate`

Added `WorktreeCreate` hook support for `type: "http"` — return the created worktree path via `hookSpecificOutput.worktreePath` in the response JSON

Added `allowedChannelPlugins` managed setting for team/enterprise admins to define a channel plugin allowlist

Added `x-client-request-id` header to API requests for debugging timeouts

Added idle-return prompt that nudges users returning after 75+ minutes to `/clear`, reducing unnecessary token re-caching on stale sessions

Deep links (`claude-cli://`) now open in your preferred terminal instead of whichever terminal happens to be first in the detection list

Rules and skills `paths:` frontmatter now accepts a YAML list of globs

MCP tool descriptions and server instructions are now capped at 2KB to prevent OpenAPI-generated servers from bloating context

MCP servers configured both locally and via claude.ai connectors are now deduplicated — the local config wins

Background bash tasks that appear stuck on an interactive prompt now surface a notification after ~45 seconds

Token counts ≥1M now display as "1.5m" instead of "1512.6k"

Global system-prompt caching now works when `ToolSearch` is enabled, including for users with MCP tools configured

Fixed voice push-to-talk: holding the voice key no longer leaks characters into the text input, and transcripts now insert at the correct position

Fixed up/down arrow keys being unresponsive when a footer item is focused

Fixed `Ctrl+U` (kill-to-line-start) being a no-op at line boundaries in multiline input, so repeated `Ctrl+U` now clears across lines

Fixed null-unbinding a default chord binding (e.g. `"ctrl+x ctrl+k": null`) still entering chord-wait mode instead of freeing the prefix key

Fixed mouse events inserting literal "mouse" text into transcript search input

Fixed workflow subagents failing with API 400 when the outer session uses `--json-schema` and the subagent also specifies a schema

Fixed missing background color behind certain emoji in user message bubbles on some terminals

Fixed the "allow Claude to edit its own settings for this session" permission option not sticking for users with `Edit(.claude)` allow rules

Fixed a hang when generating attachment snippets for large edited files

Fixed MCP tool/resource cache leak on server reconnect

Fixed a startup performance issue where partial clone repositories (Scalar/GVFS) triggered mass blob downloads

Fixed native terminal cursor not tracking the text input caret, so IME composition (CJK input) now renders inline and screen readers can follow the input position

Fixed spurious "Not logged in" errors on macOS caused by transient keychain read failures

Fixed cold-start race where core tools could be deferred without their bypass active, causing Edit/Write to fail with InputValidationError on typed parameters

Improved detection for dangerous removals of Windows drive roots (`C:\`, `C:\Windows`, etc.)

Improved interactive startup by ~30ms by running `setup()` in parallel with slash command and agent loading

Improved startup for `claude "prompt"` with MCP servers — the REPL now renders immediately instead of blocking until all servers connect

Improved Remote Control to show a specific reason when blocked instead of a generic "not yet enabled" message

Improved p90 prompt cache rate

Reduced scroll-to-top resets in long sessions by making the message window immune to compaction and grouping changes

Reduced terminal flickering when animated tool progress scrolls above the viewport

Changed issue/PR references to only become clickable links when written as `owner/repo#123` — bare `#123` is no longer auto-linked

Slash commands unavailable for the current auth setup (`/voice`, `/mobile`, `/chrome`, `/upgrade`, etc.) are now hidden instead of shown

[VSCode] Added rate limit warning banner with usage percentage and reset time

Stats screenshot (Ctrl+S in /stats) now works in all builds and is 16× faster

Added `CwdChanged` and `FileChanged` hook events for reactive environment management (e.g., direnv)

Added `sandbox.failIfUnavailable` setting to exit with an error when sandbox is enabled but cannot start, instead of running unsandboxed

Added `disableDeepLinkRegistration` setting to prevent `claude-cli://` protocol handler registration

Added `CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1` to strip Anthropic and cloud provider credentials from subprocess environments (Bash tool, hooks, MCP stdio servers)

Added transcript search — press `/` in transcript mode (`Ctrl+O`) to search, `n`/`N` to step through matches

Added `Ctrl+X Ctrl+E` as an alias for opening the external editor (readline-native binding; `Ctrl+G` still works)

Pasted images now insert an `[Image #N]` chip at the cursor so you can reference them positionally in your prompt

Agents can now declare `initialPrompt` in frontmatter to auto-submit a first turn - `chat:killAgents` and `chat:fastMode` are now rebindable via `~/.claude/keybindings.json`

Fixed mouse tracking escape sequences leaking to shell prompt after exit

Fixed Claude Code hanging on exit on macOS

Fixed screen flashing blank after being idle for a few seconds

Fixed a hang when diffing very large files with few common lines — diffs now time out after 5 seconds and fall back gracefully

Fixed a 1–8 second UI freeze on startup when voice input was enabled, caused by eagerly loading the native audio module

Fixed a startup regression where Claude Code would wait ~3s for claude.ai MCP config fetch before proceeding

Fixed `--mcp-config` CLI flag bypassing `allowedMcpServers`/`deniedMcpServers` managed policy enforcement

Fixed claude.ai MCP connectors (Slack, Gmail, etc.) not being available in single-turn `--print` mode

Fixed `caffeinate` process not properly terminating when Claude Code exits, preventing Mac from sleeping

Fixed bash mode not activating when tab-accepting `!`-prefixed command suggestions

Fixed stale slash command selection showing wrong highlighted command after navigating suggestions

Fixed `/config` menu showing both the search cursor and list selection at the same time

Fixed background subagents becoming invisible after context compaction, which could cause duplicate agents to be spawned

Fixed background agent tasks staying stuck in "running" state when git or API calls hang during cleanup

Fixed `--channels` showing "Channels are not currently available" on first launch after upgrade

Fixed uninstalled plugin hooks continuing to fire until the next session

Fixed queued commands flickering during streaming responses

Fixed slash commands being sent to the model as text when submitted while a message is processing

Fixed scrollback jumping when collapsed read/search groups finish after scrolling offscreen

Fixed scrollback jumping to top when the model starts or stops thinking

Fixed SDK session history loss on resume caused by hook progress/attachment messages forking the parentUuid chain

Fixed copy-on-select not firing when you release the mouse outside the terminal window

Fixed ghost characters appearing in height-constrained lists when items overflow

Fixed `Ctrl+B` interfering with readline backward-char at an idle prompt — it now only fires when a foreground task can be backgrounded

Fixed tool result files never being cleaned up, ignoring the `cleanupPeriodDays` setting

Fixed space key being swallowed for up to 3 seconds after releasing voice hold-to-talk

Fixed ALSA library errors corrupting the terminal UI when using voice mode on Linux without audio hardware (Docker, headless, WSL1)

Fixed voice mode SoX detection on Termux/Android where spawning `which` is kernel-restricted

Fixed Remote Control sessions showing as Idle in the web session list while actively running

Fixed footer navigation selecting an invisible Remote Control pill in config-driven mode

Fixed memory leak in remote sessions where tool use IDs accumulate indefinitely

Improved Bedrock SDK cold-start latency by overlapping profile fetch with other boot work

Improved `--resume` memory usage and startup latency on large sessions

Improved plugin startup — commands, skills, and agents now load from disk cache without re-fetching

Improved Remote Control session titles: AI-generated titles now appear within seconds of the first message

Improved `WebFetch` to identify as `Claude-User` so site operators can recognize and allowlist Claude Code traffic via `robots.txt`

Reduced `WebFetch` peak memory usage for large pages

Reduced scrollback resets in long sessions from once per turn to once per ~50 messages

Faster `claude -p` startup with unauthenticated HTTP/SSE MCP servers (~600ms saved)

Bash ghost-text suggestions now include just-submitted commands immediately

Increased non-streaming fallback token cap (21k → 64k) and timeout (120s → 300s local) so fallback requests are less likely to be truncated

Interrupting a prompt before any response now automatically restores your input so you can edit and resubmit - `/status` now works while Claude is responding, instead of being queued until the turn finishes

Plugin MCP servers that duplicate an org-managed connector are now suppressed instead of running a second connection

Linux: respect `XDG_DATA_HOME` when registering the `claude-cli://` protocol handler

Changed "stop all background agents" keybinding from `Ctrl+F` to `Ctrl+X Ctrl+K` to stop shadowing readline forward-char

Deprecated `TaskOutput` tool in favor of using `Read` on the background task's output file path

Added `CLAUDE_CODE_DISABLE_NONSTREAMING_FALLBACK` env var to disable the non-streaming fallback when streaming fails

Plugin options (`manifest.userConfig`) now available externally — plugins can prompt for configuration at enable time, with `sensitive: true` values stored in keychain (macOS) or protected credentials file (other platforms)

Claude can now reference the on-disk path of clipboard-pasted images for file operations - `Ctrl+L` now clears the screen and forces a full redraw — use this to recover when Cmd+K leaves the UI partially blank. Use `Ctrl+U` or double-Esc to clear prompt input. - `--bare -p` (SDK pattern) is ~14% faster to the API request

Memory: `MEMORY.md` index now truncates at 25KB as well as 200 lines

Disabled `AskUserQuestion` and plan-mode tools when `--channels` is active

Fixed API 400 error when a pasted image was queued during a failing tool call

Fixed MCP tool calls hanging indefinitely when an SSE connection drops mid-call and exhausts its reconnection attempts

Fixed Remote Control session titles showing raw XML when a background agent completed before the first user message

Fixed remote sessions forgetting conversation history after a container restart due to progress-message gaps in the resumed transcript chain

Fixed remote sessions requiring re-login on transient auth errors instead of retrying automatically

Fixed `rg ... | wc -l` and similar piped commands hanging and returning `0` in sandbox mode on Linux

Fixed voice input hold-to-talk not activating when a CJK IME inserts a full-width space

Fixed `--worktree` hanging silently when the worktree name contained a forward slash

[VSCode] Spinner now turns red with "Not responding" when the backend hasn't responded for 60 seconds

[VSCode] Fixed session history not loading correctly when reopening a session via URL or after restart

[VSCode] Added Esc-twice (or `/rewind`) to open a keyboard-navigable rewind picker

[VSCode] Fixed "Fork conversation from here" and rewind actions failing silently after the session cache goes stale

Added `--channels` permission relay — channel servers that declare the permission capability can forward tool approval prompts to your phone

Fixed multiple concurrent Claude Code sessions requiring repeated re-authentication when one session refreshes its OAuth token

Fixed voice mode silently swallowing retry failures and showing a misleading "check your network" message instead of the actual error

Fixed voice mode audio not recovering when the server silently drops the WebSocket connection

Fixed `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS` not suppressing the structured-outputs beta header, causing 400 errors on proxy gateways forwarding to Vertex/Bedrock

Fixed `--channels` bypass for Team/Enterprise orgs with no other managed settings configured

Fixed a crash on Node.js 18

Fixed unnecessary permission prompts for Bash commands containing dashes in strings

Fixed plugin hooks blocking prompt submission when the plugin directory is deleted mid-session

Fixed a race condition where background agent task output could hang indefinitely when the task completed between polling intervals

Resuming a session that was in a worktree now switches back to that worktree

Fixed `/btw` not including pasted text when used during an active response

Fixed a race where fast Cmd+Tab followed by paste could beat the clipboard copy under tmux

Fixed terminal tab title not updating with an auto-generated session description

Fixed invisible hook attachments inflating the message count in transcript mode

Fixed Remote Control sessions showing a generic title instead of deriving from the first prompt

Fixed `/rename` not syncing the title for Remote Control sessions

Fixed Remote Control `/exit` not reliably archiving the session

Improved MCP read/search tool calls to collapse into a single "Queried {server}" line (expand with Ctrl+O)

Improved `!` bash mode discoverability — Claude now suggests it when you need to run an interactive command

Improved plugin freshness — ref-tracked plugins now re-clone on every load to pick up upstream changes

Improved Remote Control session titles to refresh after your third message

Updated MCP OAuth to support Client ID Metadata Document (CIMD / SEP-991) for servers without Dynamic Client Registration

Changed plan mode to hide the "clear context" option by default (restore with `"showClearContextOnPlanAccept": true`)

Disabled line-by-line response streaming on Windows (including WSL in Windows Terminal) due to rendering issues

[VSCode] Fixed Windows PATH inheritance for Bash tool when using Git Bash (regression in v2.1.78)

Added `source: 'settings'` plugin marketplace source — declare plugin entries inline in settings.json

Added CLI tool usage detection to plugin tips, in addition to file pattern matching

Added `effort` frontmatter support for skills and slash commands to override the model effort level when invoked

Added `--channels` (research preview) — allow MCP servers to push messages into your session

Fixed `--resume` dropping parallel tool results — sessions with parallel tool calls now restore all tool_use/tool_result pairs instead of showing `[Tool result missing]` placeholders

Fixed voice mode WebSocket failures caused by Cloudflare bot detection on non-browser TLS fingerprints

Fixed 400 errors when using fine-grained tool streaming through API proxies, Bedrock, or Vertex

Fixed `/remote-control` appearing for gateway and third-party provider deployments where it cannot function

Fixed `/sandbox` tab switching not responding to Tab or arrow keys

Improved responsiveness of `@` file autocomplete in large git repositories

Improved `/effort` to show what auto currently resolves to, matching the status bar indicator

Improved `/permissions` — Tab and arrow keys now switch tabs from within a list

Improved background tasks panel — left arrow now closes from the list view

Simplified plugin install tips to use a single `/plugin install` command instead of a two-step flow

Reduced memory usage on startup in large repositories (~80 MB saved on 250k-file repos)

Fixed managed settings (`enabledPlugins`, `permissions.defaultMode`, policy-set env vars) not being applied at startup when `remote-settings.json` was cached from a prior session

Added "Show turn duration" toggle to the `/config` menu

Fixed `claude -p` hanging when spawned as a subprocess without explicit stdin (e.g. Python `subprocess.run`)

Fixed Ctrl+C not working in `-p` (print) mode

Fixed `/btw` returning the main agent's output instead of answering the side question when triggered during streaming

Fixed voice mode not activating correctly on startup when `voiceEnabled: true` is set

Fixed left/right arrow tab navigation in `/permissions`

Fixed `CLAUDE_CODE_DISABLE_TERMINAL_TITLE` not preventing terminal title from being set on startup

Fixed custom status line showing nothing when workspace trust is blocking it

Fixed enterprise users being unable to retry on rate limit (429) errors

Fixed `SessionEnd` hooks not firing when using interactive `/resume` to switch sessions

Improved startup memory usage by ~18MB across all scenarios

Improved non-streaming API fallback with a 2-minute per-attempt timeout, preventing sessions from hanging indefinitely - `CLAUDE_CODE_PLUGIN_SEED_DIR` now supports multiple seed directories separated by the platform path delimiter (`:` on Unix, `;` on Windows)

[VSCode] Added `/remote-control` — bridge your session to claude.ai/code to continue from a browser or phone

[VSCode] Session tabs now get AI-generated titles based on your first message

[VSCode] Fixed the thinking pill showing "Thinking" instead of "Thought for Ns" after a response completes

[VSCode] Fixed missing session diff button when opening sessions from the left sidebar

Added `${CLAUDE_PLUGIN_DATA}` variable for plugin persistent state that survives plugin updates; `/plugin uninstall` prompts before deleting it

Added `effort`, `maxTurns`, and `disallowedTools` frontmatter support for plugin-shipped agents

Terminal notifications (iTerm2/Kitty/Ghostty popups, progress bar) now reach the outer terminal when running inside tmux with `set -g allow-passthrough on`

Response text now streams line-by-line as it's generated

Fixed `git log HEAD` failing with "ambiguous argument" inside sandboxed Bash on Linux, and stub files polluting `git status` in the working directory

Fixed `cc log` and `--resume` silently truncating conversation history on large sessions (>5 MB) that used subagents

Fixed infinite loop when API errors triggered stop hooks that re-fed blocking errors to the model

Fixed `deny: ["mcp__servername"]` permission rules not removing MCP server tools before sending to the model, allowing it to see and attempt blocked tools

Fixed `sandbox.filesystem.allowWrite` not working with absolute paths (previously required `//` prefix)

Fixed `/sandbox` Dependencies tab showing Linux prerequisites on macOS instead of macOS-specific info - **Security:** Fixed silent sandbox disable when `sandbox.enabled: true` is set but dependencies are missing — now shows a visible startup warning

Fixed `.git`, `.claude`, and other protected directories being writable without a prompt in `bypassPermissions` mode

Fixed ctrl+u in normal mode scrolling instead of readline kill-line (ctrl+u/ctrl+d half-page scroll moved to transcript mode only)

Fixed voice mode modifier-combo push-to-talk keybindings (e.g. ctrl+k) requiring a hold instead of activating immediately

Fixed voice mode not working on WSL2 with WSLg (Windows 11); WSL1/Win10 users now get a clear error

Fixed `--worktree` flag not loading skills and hooks from the worktree directory

Fixed `CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS` and `includeGitInstructions` setting not suppressing the git status section in the system prompt

Fixed Bash tool not finding Homebrew and other PATH-dependent binaries when VS Code is launched from Dock/Spotlight

Fixed washed-out Claude orange color in VS Code/Cursor/code-server terminals that don't advertise truecolor support

Added `ANTHROPIC_CUSTOM_MODEL_OPTION` env var to add a custom entry to the `/model` picker, with optional `_NAME` and `_DESCRIPTION` suffixed vars for display

Fixed `ANTHROPIC_BETAS` environment variable being silently ignored when using Haiku models

Fixed queued prompts being concatenated without a newline separator

Improved memory usage and startup time when resuming large sessions

[VSCode] Fixed a brief flash of the login screen when opening the sidebar while already authenticated

[VSCode] Fixed "API Error: Rate limit reached" when selecting Opus — model dropdown no longer offers 1M context variant to subscribers whose plan tier is unknown

Added `allowRead` sandbox filesystem setting to re-allow read access within `denyRead` regions - `/copy` now accepts an optional index: `/copy N` copies the Nth-latest assistant response

Fixed "Always Allow" on compound bash commands (e.g. `cd src && npm test`) saving a single rule for the full string instead of per-subcommand, leading to dead rules and repeated permission prompts

Fixed auto-updater starting overlapping binary downloads when the slash-command overlay repeatedly opened and closed, accumulating tens of gigabytes of memory

Fixed `--resume` silently truncating recent conversation history due to a race between memory-extraction writes and the main transcript

Fixed PreToolUse hooks returning `"allow"` bypassing `deny` permission rules, including enterprise managed settings

Fixed Write tool silently converting line endings when overwriting CRLF files or creating files in CRLF directories

Fixed memory growth in long-running sessions from progress messages surviving compaction

Fixed cost and token usage not being tracked when the API falls back to non-streaming mode

Fixed `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS` not stripping beta tool-schema fields, causing proxy gateways to reject requests

Fixed Bash tool reporting errors for successful commands when the system temp directory path contains spaces

Fixed paste being lost when typing immediately after pasting

Fixed Ctrl+D in `/feedback` text input deleting forward instead of the second press exiting the session

Fixed API error when dragging a 0-byte image file into the prompt

Fixed Claude Desktop sessions incorrectly using the terminal CLI's configured API key instead of OAuth

Fixed `git-subdir` plugins at different subdirectories of the same monorepo commit colliding in the plugin cache

Fixed ordered list numbers not rendering in terminal UI

Fixed a race condition where stale-worktree cleanup could delete an agent worktree just resumed from a previous crash

Fixed input deadlock when opening `/mcp` or similar dialogs while the agent is running

Fixed Backspace and Delete keys not working in vim NORMAL mode

Fixed status line not updating when vim mode is toggled on or off

Fixed hyperlinks opening twice on Cmd+click in VS Code, Cursor, and other xterm.js-based terminals

Fixed background colors rendering as terminal-default inside tmux with default configuration

Fixed iTerm2 session crash when selecting text inside tmux over SSH

Fixed clipboard copy silently failing in tmux sessions; copy toast now indicates whether to paste with `⌘V` or tmux `prefix+]`

Fixed `←`/`→` accidentally switching tabs in settings, permissions, and sandbox dialogs while navigating lists

Fixed IDE integration not auto-connecting when Claude Code is launched inside tmux or screen

Fixed CJK characters visually bleeding into adjacent UI elements when clipped at the right edge

Fixed teammate panes not closing when the leader exits

Fixed iTerm2 auto mode not detecting iTerm2 for native split-pane teammates

Faster startup on macOS (~60ms) by reading keychain credentials in parallel with module loading

Faster `--resume` on fork-heavy and very large sessions — up to 45% faster loading and ~100-150MB less peak memory

Improved Esc to abort in-flight non-streaming API requests

Improved `claude plugin validate` to check skill, agent, and command frontmatter plus `hooks/hooks.json`, catching YAML parse errors and schema violations

Background bash tasks are now killed if output exceeds 5GB, preventing runaway processes from filling disk

Sessions are now auto-named from plan content when you accept a plan

Improved headless mode plugin installation to compose correctly with `CLAUDE_CODE_PLUGIN_SEED_DIR`

Show a notice when `apiKeyHelper` takes longer than 10s, preventing it from blocking the main loop

The Agent tool no longer accepts a `resume` parameter — use `SendMessage({to: agentId})` to continue a previously spawned agent - `SendMessage` now auto-resumes stopped agents in the background instead of returning an error

Renamed `/fork` to `/branch` (`/fork` still works as an alias)

[VSCode] Improved plan preview tab titles to use the plan's heading instead of "Claude's Plan"

[VSCode] When option+click doesn't trigger native selection on macOS, the footer now points to the `macOptionClickForcesSelection` setting

Added new `Elicitation` and `ElicitationResult` hooks to intercept and override responses before they're sent back

Added `-n` / `--name <name>` CLI flag to set a display name for the session at startup

Added `worktree.sparsePaths` setting for `claude --worktree` in large monorepos to check out only the directories you need via git sparse-checkout

Added `PostCompact` hook that fires after compaction completes

Added `/effort` slash command to set model effort level

Added session quality survey — enterprise admins can configure the sample rate via the `feedbackSurveyRate` setting

Fixed deferred tools (loaded via `ToolSearch`) losing their input schemas after conversation compaction, causing array and number parameters to be rejected with type errors

Fixed slash commands showing "Unknown skill"

Fixed plan mode asking for re-approval after the plan was already accepted

Fixed voice mode swallowing keypresses while a permission dialog or plan editor was open

Fixed `/voice` not working on Windows when installed via npm

Fixed spurious "Context limit reached" when invoking a skill with `model:` frontmatter on a 1M-context session

Fixed "adaptive thinking is not supported on this model" error when using non-standard model strings

Fixed `Bash(cmd:*)` permission rules not matching when a quoted argument contains `#`

Fixed "don't ask again" in the Bash permission dialog showing the full raw command for pipes and compound commands

Fixed auto-compaction retrying indefinitely after consecutive failures — a circuit breaker now stops after 3 attempts

Fixed MCP reconnect spinner persisting after successful reconnection

Fixed LSP plugins not registering servers when the LSP Manager initialized before marketplaces were reconciled

Fixed clipboard copying in tmux over SSH — now attempts both direct terminal write and tmux clipboard integration

Fixed `/export` showing only the filename instead of the full file path in the success message

Fixed transcript not auto-scrolling to new messages after selecting text

Fixed Escape key not working to exit the login method selection screen

Fixed several Remote Control issues: sessions silently dying when the server reaps an idle environment, rapid messages being queued one-at-a-time instead of batched, and stale work items causing redelivery after JWT refresh

Fixed bridge sessions failing to recover after extended WebSocket disconnects

Fixed slash commands not found when typing the exact name of a soft-hidden command

Improved `--worktree` startup performance by reading git refs directly and skipping redundant `git fetch` when the remote branch is already available locally

Improved background agent behavior — killing a background agent now preserves its partial results in the conversation context

Improved model fallback notifications — now always visible instead of hidden behind verbose mode, with human-friendly model names

Improved blockquote readability on dark terminal themes — text is now italic with a left bar instead of dim

Improved stale worktree cleanup — worktrees left behind after an interrupted parallel run are now automatically cleaned up

Improved Remote Control session titles — now derived from your first prompt instead of showing "Interactive session"

Improved `/voice` to show your dictation language on enable and warn when your `language` setting isn't supported for voice input

Updated `--plugin-dir` to only accept one path to support subcommands — use repeated `--plugin-dir` for multiple directories

[VSCode] Fixed gitignore patterns containing commas silently excluding entire filetypes from the @-mention file picker

Added `/color` command for all users to set a prompt-bar color for your session

Added session name display on the prompt bar when using `/rename`

Added last-modified timestamps to memory files, helping Claude reason about which memories are fresh vs. stale

Added hook source display (settings/plugin/skill) in permission prompts when a hook requires confirmation

Fixed voice mode not activating correctly on fresh installs without toggling `/voice` twice

Fixed the Claude Code header not updating the displayed model name after switching models with `/model` or Option+P

Fixed session crash when an attachment message computation returns undefined values

Fixed Bash tool mangling `!` in piped commands (e.g., `jq 'select(.x != .y)'` now works correctly)

Fixed managed-disabled plugins showing up in the `/plugin` Installed tab — plugins force-disabled by your organization are now hidden

Fixed token estimation over-counting for thinking and `tool_use` blocks, preventing premature context compaction

Fixed corrupted marketplace config path handling

Fixed `/resume` losing session names after resuming a forked or continued session

Fixed Esc not closing the `/status` dialog after visiting the Config tab

Fixed input handling when accepting or rejecting a plan

Fixed footer hint in agent teams showing "↓ to expand" instead of the correct "shift + ↓ to expand"

Improved startup performance on macOS non-MDM machines by skipping unnecessary subprocess spawns

Suppressed async hook completion messages by default (visible with `--verbose` or transcript mode)

Breaking change: Removed deprecated Windows managed settings fallback at `C:\ProgramData\ClaudeCode\managed-settings.json` — use `C:\Program Files\ClaudeCode\managed-settings.json`

Added `autoMemoryDirectory` setting to configure a custom directory for auto-memory storage

Fixed memory leak where streaming API response buffers were not released when the generator was terminated early, causing unbounded RSS growth on the Node.js/npm code path

Fixed managed policy `ask` rules being bypassed by user `allow` rules or skill `allowed-tools`

Fixed full model IDs (e.g., `claude-opus-4-5`) being silently ignored in agent frontmatter `model:` field and `--agents` JSON config — agents now accept the same model values as `--model`

Fixed MCP OAuth authentication hanging when the callback port is already in use

Fixed MCP OAuth refresh never prompting for re-auth after the refresh token expires, for OAuth servers that return errors with HTTP 200 (e.g. Slack)

Fixed voice mode silently failing on the macOS native binary for users whose terminal had never been granted microphone permission — the binary now includes the `audio-input` entitlement so macOS prompts correctly

Fixed `SessionEnd` hooks being killed after 1.5 s on exit regardless of `hook.timeout` — now configurable via `CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS`

Fixed `/plugin install` failing inside the REPL for marketplace plugins with local sources

Fixed marketplace update not syncing git submodules — plugin sources in submodules no longer break after update

Fixed unknown slash commands with arguments silently dropping input — now shows your input as a warning

Fixed Hebrew, Arabic, and other RTL text not rendering correctly in Windows Terminal, conhost, and VS Code integrated terminal

Fixed LSP servers not working on Windows due to malformed file URIs

Changed `--plugin-dir` so local dev copies now override installed marketplace plugins with the same name (unless that plugin is force-enabled by managed settings)

[VSCode] Fixed delete button not working for Untitled sessions

[VSCode] Improved scroll wheel responsiveness in the integrated terminal with terminal-aware acceleration

Added actionable guidance when OAuth login or connectivity checks fail due to SSL certificate errors (corporate proxies, `NODE_EXTRA_CA_CERTS`)

Fixed freezes and 100% CPU loops triggered by permission prompts for complex bash commands

Fixed a deadlock that could freeze Claude Code when many skill files changed at once (e.g. during `git pull` in a repo with a large `.claude/skills/` directory)

Fixed Bash tool output being lost when running multiple Claude Code sessions in the same project directory

Fixed subagents with `model: opus`/`sonnet`/`haiku` being silently downgraded to older model versions on Bedrock, Vertex, and Microsoft Foundry

Fixed background bash processes spawned by subagents not being cleaned up when the agent exits

Fixed `/resume` showing the current session in the picker

Fixed `/ide` crashing with `onInstall is not defined` when auto-installing the extension

Fixed `/loop` not being available on Bedrock/Vertex/Foundry and when telemetry was disabled

Fixed SessionStart hooks firing twice when resuming a session via `--resume` or `--continue`

Fixed JSON-output hooks injecting no-op system-reminder messages into the model's context on every turn

Fixed voice mode session corruption when a slow connection overlaps a new recording

Fixed Linux sandbox failing to start with "ripgrep (rg) not found" on native builds

Fixed Linux native modules not loading on Amazon Linux 2 and other glibc 2.26 systems

Fixed "media_type: Field required" API error when receiving images via Remote Control

Fixed `/heapdump` failing on Windows with `EEXIST` error when the Desktop folder already exists

Improved Up arrow after interrupting Claude — now restores the interrupted prompt and rewinds the conversation in one step

Improved IDE detection speed at startup

Improved clipboard image pasting performance on macOS

Improved `/effort` to work while Claude is responding, matching `/model` behavior

Improved voice mode to automatically retry transient connection failures during rapid push-to-talk re-press

Improved the Remote Control spawn mode selection prompt with better context

Changed default Opus model on Bedrock, Vertex, and Microsoft Foundry to Opus 4.6 (was Opus 4.1)

Deprecated `/output-style` command — use `/config` instead. Output style is now fixed at session start for better prompt caching

VSCode: Fixed HTTP 400 errors for users behind proxies or on Bedrock/Vertex with Claude 4.5 models

Added `w` key in `/copy` to write the focused selection directly to a file, bypassing the clipboard (useful over SSH)

Added optional description argument to `/plan` (e.g., `/plan fix the auth bug`) that enters plan mode and immediately starts

Added `ExitWorktree` tool to leave an `EnterWorktree` session

Added `CLAUDE_CODE_DISABLE_CRON` environment variable to immediately stop scheduled cron jobs mid-session

Added `lsof`, `pgrep`, `tput`, `ss`, `fd`, and `fdfind` to the bash auto-approval allowlist, reducing permission prompts for common read-only operations

Restored the `model` parameter on the Agent tool for per-invocation model overrides

Simplified effort levels to low/medium/high (removed max) with new symbols (○ ◐ ●) and a brief notification instead of a persistent icon. Use `/effort auto` to reset to default

Improved `/config` — Escape now cancels changes, Enter saves and closes, Space toggles settings

Improved up-arrow history to show current session's messages first when running multiple concurrent sessions

Improved voice input transcription accuracy for repo names and common dev terms (regex, OAuth, JSON)

Improved bash command parsing by switching to a native module — faster initialization and no memory leak

Reduced bundle size by ~510 KB

Changed CLAUDE.md HTML comments (`<!-- ... -->`) to be hidden from Claude when auto-injected. Comments remain visible when read with the Read tool

Fixed slow exits when background tasks or hooks were slow to respond

Fixed agent task progress stuck on "Initializing…"

Fixed skill hooks firing twice per event when a hooks-enabled skill is invoked by the model

Fixed several voice mode issues: occasional input lag, false "No speech detected" errors after releasing push-to-talk, and stale transcripts re-filling the prompt after submission

Fixed `--continue` not resuming from the most recent point after `--compact`

Fixed bash security parsing edge cases

Added support for marketplace git URLs without `.git` suffix (Azure DevOps, AWS CodeCommit)

Improved marketplace clone failure messages to show diagnostic info even when git produces no stderr

Fixed several plugin issues: installation failing on Windows with `EEXIST` error in OneDrive folders, marketplace blocking user-scope installs when a project-scope install exists, `CLAUDE_CODE_PLUGIN_CACHE_DIR` creating literal `~` directories, and `plugin.json` with marketplace-only fields failing to load

Fixed feedback survey appearing too frequently in long sessions

Fixed `--effort` CLI flag being reset by unrelated settings writes on startup

Fixed backgrounded Ctrl+B queries losing their transcript or corrupting the new conversation after `/clear`

Fixed `/clear` killing background agent/bash tasks — only foreground tasks are now cleared

Fixed worktree isolation issues: Task tool resume not restoring cwd, and background task notifications missing `worktreePath` and `worktreeBranch`

Fixed `/model` not displaying results when run while Claude is working

Fixed digit keys selecting menu options instead of typing in plan mode permission prompt's text input

Fixed sandbox permission issues: certain file write operations incorrectly allowed without prompting, and output redirections to allowlisted directories (like `/tmp/claude/`) prompting unnecessarily

Improved CPU utilization in long sessions

Fixed prompt cache invalidation in SDK `query()` calls, reducing input token costs up to 12x

Fixed Escape key becoming unresponsive after cancelling a query

Fixed double Ctrl+C not exiting when background agents or tasks are running

Fixed team agents to inherit the leader's model

Fixed "Always Allow" saving permission rules that never match again

Fixed several hooks issues: `transcript_path` pointing to the wrong directory for resumed/forked sessions, agent `prompt` being silently deleted from settings.json on every settings write, PostToolUse block reason displaying twice, async hooks not receiving stdin with bash `read -r`, and validation error message showing an example that fails validation

Fixed session crashes in Desktop/SDK when Read returned files containing U+2028/U+2029 characters

Fixed terminal title being cleared on exit even when `CLAUDE_CODE_DISABLE_TERMINAL_TITLE` was set

Fixed several permission rule matching issues: wildcard rules not matching commands with heredocs, embedded newlines, or no arguments; `sandbox.excludedCommands` failing with env var prefixes; "always allow" suggesting overly broad prefixes for nested CLI tools; and deny rules not applying to all command forms

Fixed oversized and truncated images from Bash data-URL output

Fixed a crash when resuming sessions that contained Bedrock API errors

Fixed intermittent "expected boolean, received string" validation errors on Edit, Bash, and Grep tool inputs

Fixed multi-line session titles when forking from a conversation whose first message contained newlines

Fixed queued messages not showing attached images, and images being lost when pressing ↑ to edit a queued message

Fixed parallel tool calls where a failed Read/WebFetch/Glob would cancel its siblings — only Bash errors now cascade

VSCode: Fixed scroll speed in integrated terminals not matching native terminals

VSCode: Fixed Shift+Enter submitting input instead of inserting a newline for users with older keybindings

VSCode: Added effort level indicator on the input border

VSCode: Added `vscode://anthropic.claude-code/open` URI handler to open a new Claude Code tab programmatically, with optional `prompt` and `session` query parameters

Added cron scheduling tools for recurring prompts within a session

Added `voice:pushToTalk` keybinding to make the voice activation key rebindable in `keybindings.json` (default: space) — modifier+letter combos like `meta+k` have zero typing interference

Added `fmt`, `comm`, `cmp`, `numfmt`, `expr`, `test`, `printf`, `getconf`, `seq`, `tsort`, and `pr` to the bash auto-approval allowlist

Fixed stdin freeze in long-running sessions where keystrokes stop being processed but the process stays alive

Fixed a 5–8 second startup freeze for users with voice mode enabled, caused by CoreAudio initialization blocking the main thread after system wake

Fixed startup UI freeze when many claude.ai proxy connectors refresh an expired OAuth token simultaneously

Fixed forked conversations (`/fork`) sharing the same plan file, which caused plan edits in one fork to overwrite the other

Fixed the Read tool putting oversized images into context when image processing failed, breaking subsequent turns in long image-heavy sessions

Fixed false-positive permission prompts for compound bash commands containing heredoc commit messages

Fixed plugin installations being lost when running multiple Claude Code instances

Fixed claude.ai connectors failing to reconnect after OAuth token refresh

Fixed claude.ai MCP connector startup notifications appearing for every org-configured connector instead of only previously connected ones

Fixed background agent completion notifications missing the output file path, which made it difficult for parent agents to recover agent results after context compaction

Fixed duplicate output in Bash tool error messages when commands exit with non-zero status

Fixed Chrome extension auto-detection getting permanently stuck on "not installed" after running on a machine without local Chrome

Fixed `/plugin marketplace update` failing with merge conflicts when the marketplace is pinned to a branch/tag ref

Fixed `/plugin marketplace add owner/repo@ref` incorrectly parsing `@` — previously only `#` worked as a ref separator, causing undiagnosable errors with `strictKnownMarketplaces`

Fixed duplicate entries in `/permissions` Workspace tab when the same directory is added with and without a trailing slash

Fixed `--print` hanging forever when team agents are configured — the exit loop no longer waits on long-lived `in_process_teammate` tasks

Fixed "❯ Tool loaded." appearing in the REPL after every `ToolSearch` call

Fixed prompting for `cd <cwd> && git ...` on Windows when the model uses a mingw-style path

Improved startup time by deferring native image processor loading to first use

Improved bridge session reconnection to complete within seconds after laptop wake from sleep, instead of waiting up to 10 minutes

Improved `/plugin uninstall` to disable project-scoped plugins in `.claude/settings.local.json` instead of modifying `.claude/settings.json`, so changes don't affect teammates

Improved plugin-provided MCP server deduplication — servers that duplicate a manually-configured server (same command/URL) are now skipped, preventing duplicate connections and tool sets. Suppressions are shown in the `/plugin` menu.

Updated `/debug` to toggle debug logging on mid-session, since debug logs are no longer written by default

Removed startup notification noise for unauthenticated org-registered claude.ai connectors

Fixed `API Error: 400 This model does not support the effort parameter` when using custom Bedrock inference profiles or other model identifiers not matching standard Claude naming patterns

Fixed empty model responses immediately after `ToolSearch` — the server renders tool schemas with system-prompt-style tags at the prompt tail, which could confuse models into stopping early

Fixed prompt-cache bust when an MCP server with `instructions` connects after the first turn

Fixed Enter inserting a newline instead of submitting when typing over a slow SSH connection

Fixed clipboard corrupting non-ASCII text (CJK, emoji) on Windows/WSL by using PowerShell `Set-Clipboard`

Fixed extra VS Code windows opening at startup on Windows when running from the VS Code integrated terminal

Fixed voice mode failing on Windows native binary with "native audio module could not be loaded"

Fixed push-to-talk not activating on session start when `voiceEnabled: true` was set in settings

Fixed markdown links containing `#NNN` references incorrectly pointing to the current repository instead of the linked URL

Fixed repeated "Model updated to Opus 4.6" notification when a project's `.claude/settings.json` has a legacy Opus model string pinned

Fixed plugins showing as inaccurately installed in `/plugin`

Fixed plugins showing "not found in marketplace" errors on fresh startup by auto-refreshing after marketplace installation

Fixed `/security-review` command failing with `unknown option merge-base` on older git versions

Fixed `/color` command having no way to reset back to the default color — `/color default`, `/color gray`, `/color reset`, and `/color none` now restore the default

Fixed a performance regression in the `AskUserQuestion` preview dialog that re-ran markdown rendering on every keystroke in the notes input

Fixed feature flags read during early startup never refreshing their disk cache, causing stale values to persist across sessions

Fixed `permissions.defaultMode` settings values other than `acceptEdits` or `plan` being applied in Claude Code Remote environments — they are now ignored

Fixed skill listing being re-injected on every `--resume` (~600 tokens saved per resume)

Fixed teleport marker not rendering in VS Code teleported sessions

Improved error message when microphone captures silence to distinguish from "no speech detected"

Improved compaction to preserve images in the summarizer request, allowing prompt cache reuse for faster and cheaper compaction

Improved `/rename` to work while Claude is processing, instead of being silently queued

Reduced prompt input re-renders during turns by ~74%

Reduced startup memory by ~426KB for users without custom CA certificates

Reduced Remote Control `/poll` rate to once per 10 minutes while connected (was 1–2s), cutting server load ~300×. Reconnection is unaffected — transport loss immediately wakes fast polling.

[VSCode] Added spark icon in VS Code activity bar that lists all Claude Code sessions, with sessions opening as full editors

[VSCode] Added full markdown document view for plans in VS Code, with support for adding comments to provide feedback

[VSCode] Added native MCP server management dialog — use `/mcp` in the chat panel to enable/disable servers, reconnect, and manage OAuth authentication without switching to the terminal

Added Ctrl+U on an empty bash prompt (`!`) to exit bash mode, matching `escape` and `backspace`

Added numeric keypad support for selecting options in Claude's interview questions (previously only the number row above QWERTY worked)

Added optional name argument to `/remote-control` and `claude remote-control` (`/remote-control My Project` or `--name "My Project"`) to set a custom session title visible in claude.ai/code

Added Voice STT support for 10 new languages (20 total) — Russian, Polish, Turkish, Dutch, Ukrainian, Greek, Czech, Danish, Swedish, Norwegian

Added effort level display (e.g., "with low effort") to the logo and spinner, making it easier to see which effort setting is active

Added agent name display in terminal title when using `claude --agent`

Added `sandbox.enableWeakerNetworkIsolation` setting (macOS only) to allow Go programs like `gh`, `gcloud`, and `terraform` to verify TLS certificates when using a custom MITM proxy with `httpProxyPort`

Added `includeGitInstructions` setting (and `CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS` env var) to remove built-in commit and PR workflow instructions from Claude's system prompt

Added `/reload-plugins` command to activate pending plugin changes without restarting

Added a one-time startup prompt suggesting Claude Code Desktop on macOS and Windows (max 3 showings, dismissible)

Added `${CLAUDE_SKILL_DIR}` variable for skills to reference their own directory in SKILL.md content

Added `InstructionsLoaded` hook event that fires when CLAUDE.md or `.claude/rules/*.md` files are loaded into context

Added `agent_id` (for subagents) and `agent_type` (for subagents and `--agent`) to hook events

Added `worktree` field to status line hook commands with name, path, branch, and original repo directory when running in a `--worktree` session

Added `pluginTrustMessage` in managed settings to append organization-specific context to the plugin trust warning shown before installation

Added policy limit fetching (e.g., remote control restrictions) for Team plan OAuth users, not just Enterprise

Added `pathPattern` to `strictKnownMarketplaces` for regex-matching file/directory marketplace sources alongside `hostPattern` restrictions

Added plugin source type `git-subdir` to point to a subdirectory within a git repo

Added `oauth.authServerMetadataUrl` config option for MCP servers to specify a custom OAuth metadata discovery URL when standard discovery fails

Fixed a security issue where nested skill discovery could load skills from gitignored directories like `node_modules`

Fixed trust dialog silently enabling all `.mcp.json` servers on first run. You'll now see the per-server approval dialog as expected

Fixed `claude remote-control` crashing immediately on npm installs with "bad option: --sdk-url" (anthropics/claude-code#28334)

Fixed `--model claude-opus-4-0` and `--model claude-opus-4-1` resolving to deprecated Opus versions instead of current

Fixed macOS keychain corruption when using multiple OAuth MCP servers. Large OAuth metadata blobs could overflow the `security -i` stdin buffer, silently leaving stale credentials behind and causing repeated `/login` prompts.

Fixed `.credentials.json` losing `subscriptionType` (showing "Claude API" instead of "Claude Pro"/"Claude Max") when the profile endpoint transiently fails during token refresh (anthropics/claude-code#30185)

Fixed ghost dotfiles (`.bashrc`, `HEAD`, etc.) appearing as untracked files in the working directory after sandboxed Bash commands on Linux

Fixed Shift+Enter printing `[27;2;13~` instead of inserting a newline in Ghostty over SSH

Fixed stash (Ctrl+S) being cleared when submitting a message while Claude is working

Fixed ctrl+o (transcript toggle) freezing for many seconds in long sessions with lots of file edits

Fixed plan mode feedback input not supporting multi-line text entry (backslash+Enter and Shift+Enter now insert newlines)

Fixed cursor not moving down into blank lines at the top of the input box

Fixed `/stats` crash when transcript files contain entries with missing or malformed timestamps

Fixed a brief hang after a streaming error on long sessions (the transcript was being fully rewritten to drop one line; it is now truncated in place)

Fixed `--setting-sources user` not blocking dynamically discovered project skills

Fixed duplicate CLAUDE.md, slash commands, agents, and rules when running from a worktree nested inside its main repo (e.g. `claude -w`)

Fixed plugin Stop/SessionEnd/etc hooks not firing after any `/plugin` operation

Fixed plugin hooks being silently dropped when two plugins use the same `${CLAUDE_PLUGIN_ROOT}/...` command template

Fixed memory leak in long-running SDK/CCR sessions where conversation messages were retained unnecessarily

Fixed API 400 errors in forked agents (autocompact, summarization) when resuming sessions that were interrupted mid-tool-batch

Fixed "unexpected tool_use_id found in tool_result blocks" error when resuming conversations that start with an orphaned tool result

Fixed teammates accidentally spawning nested teammates via the Agent tool's `name` parameter

Fixed `CLAUDE_CODE_MAX_OUTPUT_TOKENS` being ignored during conversation compaction

Fixed `/compact` summary rendering as a user bubble in SDK consumers (Claude Code Remote web UI, VSCode extension)

Fixed voice space bar getting stuck after a failed voice activation (module loading race, cold GrowthBook)

Fixed worktree file copy on Windows

Fixed global `.claude` folder detection on Windows

Fixed symlink bypass where writing new files through a symlinked parent directory could escape the working directory in `acceptEdits` mode

Fixed sandbox prompting users to approve non-allowed domains when `allowManagedDomainsOnly` is enabled in managed settings — non-allowed domains are now blocked automatically with no bypass

Fixed interactive tools (e.g., `AskUserQuestion`) being silently auto-allowed when listed in a skill's allowed-tools, bypassing the permission prompt and running with empty answers

Fixed multi-GB memory spike when committing with large untracked binary files in the working tree

Fixed Escape not interrupting a running turn when the input box has draft text. Use Up arrow to pull queued messages back for editing, or Ctrl+U to clear the input line.

Fixed Android app crash when running local slash commands (`/voice`, `/cost`) in Remote Control sessions

Fixed a memory leak where old message array versions accumulated in React Compiler `memoCache` over long sessions

Fixed a memory leak where REPL render scopes accumulated over long sessions (~35MB over 1000 turns)

Fixed memory retention in in-process teammates where the parent's full conversation history was pinned for the teammate's lifetime, preventing GC after `/clear` or auto-compact

Fixed a memory leak in interactive mode where hook events could accumulate unboundedly during long sessions

Fixed hang when `--mcp-config` points to a corrupted file

Fixed slow startup when many skills/plugins are installed

Fixed `cd <outside-dir> && <cmd>` permission prompt to surface the chained command instead of only showing "Yes, allow reading from <dir>/"

Fixed conditional `.claude/rules/*.md` files (with `paths:` frontmatter) and nested CLAUDE.md files not loading in print mode (`claude -p`)

Fixed `/clear` not fully clearing all session caches, reducing memory retention in long sessions

Fixed terminal flicker caused by animated elements at the scrollback boundary

Fixed UI frame drops on macOS when using MCP servers with OAuth (regression from 2.1.x)

Fixed occasional frame stalls during typing caused by synchronous debug log flushes

Fixed `TeammateIdle` and `TaskCompleted` hooks to support `{"continue": false, "stopReason": "..."}` to stop the teammate, matching `Stop` hook behavior

Fixed `WorktreeCreate` and `WorktreeRemove` plugin hooks being silently ignored

Fixed skill descriptions with colons (e.g., "Triggers include: X, Y, Z") failing to load from SKILL.md frontmatter

Fixed project skills without a `description:` frontmatter field not appearing in Claude's available skills list

Fixed `/context` showing identical token counts for all MCP tools from a server

Fixed literal `nul` file creation on Windows when the model uses CMD-style `2>nul` redirection in Git Bash

Fixed extra blank lines appearing below each tool call in the expanded subagent transcript view (Ctrl+O)

Fixed Tab/arrow keys not cycling Settings tabs when `/config` search box is focused but empty

Fixed service key OAuth sessions (CCR containers) spamming `[ERROR]` logs with 403s from profile-scoped endpoints

Fixed inconsistent color for "Remote Control active" status indicator

Fixed Voice waveform cursor covering the first suffix letter when dictating mid-input

Fixed Voice input showing all 5 spaces during warmup instead of capping at ~2 (aligning with the "keep holding…" hint)

Improved spinner performance by isolating the 50ms animation loop from the surrounding shell, reducing render and CPU overhead during turns

Improved UI rendering performance in native binaries with React Compiler

Improved `--worktree` startup by eliminating a git subprocess on the startup path

Improved macOS startup by eliminating redundant settings-file reloads when managed settings resolve

Improved macOS startup for Claude.ai enterprise/team users by skipping an unnecessary keychain lookup

Improved MCP `-p` startup by pipelining claude.ai config fetch with local connections and using a concurrency pool instead of sequential batching

Improved voice startup by removing imperceptible warmup pulse animations that were causing re-render stutter

Improved MCP binary content handling: tools returning PDFs, Office documents, or audio now save decoded bytes to disk with the correct file extension instead of dumping raw base64 into the conversation context. WebFetch also saves binary responses alongside its summary.

Improved memory usage in long sessions by stabilizing `onSubmit` across message updates

Improved LSP tool rendering and memory context building to no longer read entire files

Improved session upload and memory sync to avoid reading large files into memory before size/binary checks

Improved file operation performance by avoiding reading file contents for existence checks (6 sites)

Improved documentation to clarify that `--append-system-prompt-file` and `--system-prompt-file` work in interactive mode (the docs previously said print mode only)

Reduced baseline memory by ~16MB by deferring Yoga WASM preloading

Reduced memory footprint for SDK and CCR sessions using stream-json output

Reduced memory usage when resuming large sessions (including compacted history)

Reduced token usage on multi-agent tasks with more concise subagent final reports

Changed Sonnet 4.5 users on Pro/Max/Team Premium to be automatically migrated to Sonnet 4.6

Changed the `/resume` picker to show your most recent prompt instead of the first one. This also resolves some titles appearing as `(session)`.

Changed claude.ai MCP connector failures to show a notification instead of silently disappearing from the tool list

Changed example command suggestions to be generated deterministically instead of calling Haiku

Changed resuming after compaction to no longer produce a preamble recap before continuing

[SDK] Changed task creation to no longer require the `activeForm` field — the spinner falls back to the task subject

[VSCode] Added compaction display as a collapsible "Compacted chat" card with the summary inside

[VSCode] The permission mode picker now respects `permissions.disableBypassPermissionsMode` from your effective Claude Code settings (including managed/policy settings) — when set to `disable`, bypass permissions mode is hidden from the picker

[VSCode] Fixed RTL text (Arabic, Hebrew, Persian) rendering reversed in the chat panel (regression in v2.1.63)

Re-introduced the "ultrathink" keyword to enable high effort for the next turn

Removed Opus 4 and 4.1 from Claude Code on the first-party API — users with these models pinned are automatically moved to Opus 4.6

Fixed local slash command output like /cost appearing as user-sent messages instead of system messages in the UI

Project configs & auto memory now shared across git worktrees of the same repository

Added `ENABLE_CLAUDEAI_MCP_SERVERS=false` env var to opt out from making claude.ai MCP servers available

Improved `/model` command to show the currently active model in the slash command menu

Added HTTP hooks, which can POST JSON to a URL and receive JSON instead of running a shell command

Fixed listener leak in bridge polling loop

Fixed listener leak in MCP OAuth flow cleanup

Added manual URL paste fallback during MCP OAuth authentication. If the automatic localhost redirect doesn't work, you can paste the callback URL to complete authentication.

Fixed memory leak when navigating hooks configuration menu

Fixed listener leak in interactive permission handler during auto-approvals

Fixed file count cache ignoring glob ignore patterns

Fixed memory leak in bash command prefix cache

Fixed MCP tool/resource cache leak on server reconnect

Fixed IDE host IP detection cache incorrectly sharing results across ports

Fixed WebSocket listener leak on transport reconnect

Fixed memory leak in git root detection cache that could cause unbounded growth in long-running sessions

Fixed memory leak in JSON parsing cache that grew unbounded over long sessions

VSCode: Fixed remote sessions not appearing in conversation history

Fixed a race condition in the REPL bridge where new messages could arrive at the server interleaved with historical messages during the initial connection flush, causing message ordering issues.

Fixed memory leak where long-running teammates retained all messages in AppState even after conversation compaction

Fixed a memory leak where MCP server fetch caches were not cleared on disconnect, causing growing memory usage with servers that reconnect frequently

Improved memory usage in long sessions with subagents by stripping heavy progress message payloads during context compaction

Added "Always copy full response" option to the `/copy` picker. When selected, future `/copy` commands will skip the code block picker and copy the full response directly.

VSCode: Added session rename and remove actions to the sessions list

Fixed `/clear` not resetting cached skills, which could cause stale skill content to persist in the new conversation

Added `/copy` command to show an interactive picker when code blocks are present, allowing selection of individual code blocks or the full response.

Improved "always allow" prefix suggestions for compound bash commands (e.g. `cd /tmp && git fetch && git push`) to compute smarter per-subcommand prefixes instead of treating the whole command as one

Improved ordering of short task lists

Improved memory usage in multi-agent sessions by releasing completed subagent task state

Fixed MCP OAuth token refresh race condition when running multiple Claude Code instances simultaneously

Fixed shell commands not showing a clear error message when the working directory has been deleted

Fixed config file corruption that could wipe authentication when multiple Claude Code instances ran simultaneously

Fixed bulk agent kill (ctrl+f) to send a single aggregate notification instead of one per agent, and to properly clear the command queue

Fixed graceful shutdown sometimes leaving stale sessions when using Remote Control by parallelizing teardown network calls

Fixed `--worktree` sometimes being ignored on first launch

Fixed a panic ("switch on corrupted value") on Windows

Fixed a crash that could occur when spawning many processes on Windows

Fixed a crash in the WebAssembly interpreter on Linux x64 & Windows x64

Fixed a crash that sometimes occurred after 2 minutes on Windows ARM64

Updated plugin marketplace default git timeout from 30s to 120s and added `CLAUDE_CODE_PLUGIN_GIT_TIMEOUT_MS` to configure.

Added support for custom npm registries and specific version pinning when installing plugins from npm sources

BashTool now skips login shell (`-l` flag) by default when a shell snapshot is available, improving command execution performance. Previously this required setting `CLAUDE_BASH_NO_LOGIN=true`.

Fixed a security issue where `statusLine` and `fileSuggestion` hook commands could execute without workspace trust acceptance in interactive mode.

Tool results larger than 50K characters are now persisted to disk (previously 100K). This reduces context window usage and improves conversation longevity.

Fixed a bug where duplicate `control_response` messages (e.g. from WebSocket reconnects) could cause API 400 errors by pushing duplicate assistant messages into the conversation.

Added `CLAUDE_CODE_ACCOUNT_UUID`, `CLAUDE_CODE_USER_EMAIL`, and `CLAUDE_CODE_ORGANIZATION_UUID` environment variables for SDK callers to provide account info synchronously, eliminating a race condition where early telemetry events lacked account metadata.

Fixed slash command autocomplete crashing when a plugin's SKILL.md description is a YAML array or other non-string type

The `/model` picker now shows human-readable labels (e.g., "Sonnet 4.5") instead of raw model IDs for pinned model versions, with an upgrade hint when a newer version is available.

Managed settings can now be set via macOS plist or Windows Registry. Learn more at https://code.claude.com/docs/en/settings#settings-files

Added `WorktreeCreate` and `WorktreeRemove` hook events, enabling custom VCS setup and teardown when agent worktree isolation creates or removes worktrees.

Fixed a bug where resumed sessions could be invisible when the working directory involved symlinks, because the session storage path was resolved at different times during startup. Also fixed session data loss on SSH disconnect by flushing session data before hooks and analytics in the graceful shutdown sequence.

Linux: Fixed native modules not loading on systems with glibc older than 2.30 (e.g., RHEL 8)

Fixed memory leak in agent teams where completed teammate tasks were never garbage collected from session state

Fixed `CLAUDE_CODE_SIMPLE` to fully strip down skills, session memory, custom agents, and CLAUDE.md token counting

Fixed `/mcp reconnect` freezing the CLI when given a server name that doesn't exist

Fixed memory leak where completed task state objects were never removed from AppState

Added support for `isolation: worktree` in agent definitions, allowing agents to declaratively run in isolated git worktrees. - `CLAUDE_CODE_SIMPLE` mode now also disables MCP tools, attachments, hooks, and CLAUDE.md file loading for a fully minimal experience.

Fixed bug where MCP tools were not discovered when tool search is enabled and a prompt is passed in as a launch argument

Improved memory usage during long sessions by clearing internal caches after compaction

Added `claude agents` CLI command to list all configured agents

Improved memory usage during long sessions by clearing large tool results after they have been processed

Fixed a memory leak where LSP diagnostic data was never cleaned up after delivery, causing unbounded memory growth in long sessions

Fixed a memory leak where completed task output was not freed from memory, reducing memory usage in long sessions with many tasks

Improved startup performance for headless mode (`-p` flag) by deferring Yoga WASM and UI component imports

Fixed prompt suggestion cache regression that reduced cache hit rates

Fixed unbounded memory growth in long sessions by capping file history snapshots

Added `CLAUDE_CODE_DISABLE_1M_CONTEXT` environment variable to disable 1M context window support

Opus 4.6 (fast mode) now includes the full 1M context window

VSCode: Added `/extra-usage` command support in VS Code sessions

Fixed memory leak where TaskOutput retained recent lines after cleanup

Fixed memory leak in CircularBuffer where cleared items were retained in the backing array

Fixed memory leak in shell command execution where ChildProcess and AbortController references were retained after cleanup

Added `--worktree` (`-w`) flag to start Claude in an isolated git worktree

Subagents support `isolation: "worktree"` for working in a temporary git worktree

Added Ctrl+F keybinding to kill background agents (two-press confirmation)

Agent definitions support `background: true` to always run as a background task

Plugins can ship `settings.json` for default configuration

Fixed file-not-found errors to suggest corrected paths when the model drops the repo folder

Fixed Ctrl+C and ESC being silently ignored when background agents are running and the main thread is idle. Pressing twice within 3 seconds now kills all background agents.

Fixed prompt suggestion cache regression that reduced cache hit rates.

Fixed `plugin enable` and `plugin disable` to auto-detect the correct scope when `--scope` is not specified, instead of always defaulting to user scope

Simple mode (`CLAUDE_CODE_SIMPLE`) now includes the file edit tool in addition to the Bash tool, allowing direct file editing in simple mode.

Permission suggestions are now populated when safety checks trigger an ask response, enabling SDK consumers to display permission options

Sonnet 4.5 with 1M context is being removed from the Max plan in favor of our frontier Sonnet 4.6 model, which now has 1M context. Please switch in /model.

Fixed verbose mode not updating thinking block display when toggled via `/config` — memo comparators now correctly detect verbose changes

Fixed unbounded WASM memory growth during long sessions by periodically resetting the tree-sitter parser

Fixed potential rendering issues caused by stale yoga layout references

Improved performance in non-interactive mode (`-p`) by skipping unnecessary API calls during startup

Improved performance by caching authentication failures for HTTP and SSE MCP servers, avoiding repeated connection attempts to servers requiring auth

Fixed unbounded memory growth during long-running sessions caused by Yoga WASM linear memory never shrinking

SDK model info now includes `supportsEffort`, `supportedEffortLevels`, and `supportsAdaptiveThinking` fields so consumers can discover model capabilities.

Added `ConfigChange` hook event that fires when configuration files change during a session, enabling enterprise security auditing and optional blocking of settings changes.

Improved startup performance by caching MCP auth failures to avoid redundant connection attempts

Improved startup performance by reducing HTTP calls for analytics token counting

Improved startup performance by batching MCP tool token counting into a single API call

Fixed `disableAllHooks` setting to respect managed settings hierarchy — non-managed settings can no longer disable managed hooks set by policy (#26637)

Fixed `--resume` session picker showing raw XML tags for sessions that start with commands like `/clear`. Now correctly falls through to the session ID fallback.

Improved permission prompts for path safety and working directory blocks to show the reason for the restriction instead of a bare prompt with no context

Fixed Windows terminal rendering bugs caused by `os.EOL` (`\r\n`) in display code — line counts now show correct values instead of always showing 1 on Windows.

Improved VS Code plan preview: auto-updates as Claude iterates, enables commenting only when the plan is ready for review, and keeps the preview open when rejecting so Claude can revise.

Fixed a bug where bold and colored text in markdown output could shift to the wrong characters on Windows due to `\r\n` line endings.

Fixed compaction failing when conversation contains many PDF documents by stripping document blocks alongside images before sending to the compaction API (anthropics/claude-code#26188)

Improved memory usage in long-running sessions by releasing API stream buffers, agent context, and skill state after use

Improved startup performance by deferring SessionStart hook execution, reducing time-to-interactive by ~500ms.

Fixed an issue where bash tool output was silently discarded on Windows when using MSYS2 or Cygwin shells.

Improved performance of `@` file mentions - file suggestions now appear faster by pre-warming the index on startup and using session-based caching with background refresh.

Improved memory usage by trimming agent task message history after tasks complete

Improved memory usage during long agent sessions by eliminating O(n²) message accumulation in progress updates

Fixed the bash permission classifier to validate that returned match descriptions correspond to actual input rules, preventing hallucinated descriptions from incorrectly granting permissions

Fixed user-defined agents only loading one file on NFS/FUSE filesystems that report zero inodes (anthropics/claude-code#26044)

Fixed plugin agent skills silently failing to load when referenced by bare name instead of fully-qualified plugin name (anthropics/claude-code#25834)

Search patterns in collapsed tool results are now displayed in quotes for clarity

Windows: Fixed CWD tracking temp files never being cleaned up, causing them to accumulate indefinitely (anthropics/claude-code#17600)

Use `ctrl+f` to kill all background agents instead of double-pressing ESC. Background agents now continue running when you press ESC to cancel the main thread, giving you more control over agent lifecycle.

Fixed API 400 errors ("thinking blocks cannot be modified") that occurred in sessions with concurrent agents, caused by interleaved streaming content blocks preventing proper message merging.

Simplified teammate navigation to use only Shift+Down (with wrapping) instead of both Shift+Up and Shift+Down.

Fixed an issue where a single file write/edit error would abort all other parallel file write/edit operations. Independent file mutations now complete even when a sibling fails.

Added `last_assistant_message` field to Stop and SubagentStop hook inputs, providing the final assistant response text so hooks can access it without parsing transcript files.

Fixed custom session titles set via `/rename` being lost after resuming a conversation (anthropics/claude-code#23610)

Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start.

Fixed an issue where bash commands with backslash-newline continuation lines (e.g., long commands split across multiple lines with `\`) would produce spurious empty arguments, potentially breaking command execution.

Fixed built-in slash commands (`/help`, `/model`, `/compact`, etc.) being hidden from the autocomplete dropdown when many user skills are installed (anthropics/claude-code#22020)

Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading

Fixed session name persisting in status bar after `/clear` command (anthropics/claude-code#26082)

Fixed crash when a skill's `name` or `description` in SKILL.md frontmatter is a bare number (e.g., `name: 3000`) — the value is now properly coerced to a string (anthropics/claude-code#25837)

Fixed /resume silently dropping sessions when the first message exceeds 16KB or uses array-format content (anthropics/claude-code#25721)

Added `chat:newline` keybinding action for configurable multi-line input (anthropics/claude-code#26075)

Added `added_dirs` to the statusline JSON `workspace` section, exposing directories added via `/add-dir` to external scripts (anthropics/claude-code#26096)

Fixed `claude doctor` misclassifying mise and asdf-managed installations as native installs (anthropics/claude-code#26033)

Fixed zsh heredoc failing with "read-only file system" error in sandboxed commands (anthropics/claude-code#25990)

Fixed agent progress indicator showing inflated tool use count (anthropics/claude-code#26023)

Fixed image pasting not working on WSL2 systems where Windows copies images as BMP format (anthropics/claude-code#25935)

Fixed background agent results returning raw transcript data instead of the agent's final answer (anthropics/claude-code#26012)

Fixed Warp terminal incorrectly prompting for Shift+Enter setup when it supports it natively (anthropics/claude-code#25957)

Fixed CJK wide characters causing misaligned timestamps and layout elements in the TUI (anthropics/claude-code#26084)

Fixed custom agent `model` field in `.claude/agents/*.md` being ignored when spawning team teammates (anthropics/claude-code#26064)

Fixed plan mode being lost after context compaction, causing the model to switch from planning to implementation mode (anthropics/claude-code#26061)

Fixed `alwaysThinkingEnabled: true` in settings.json not enabling thinking mode on Bedrock and Vertex providers (anthropics/claude-code#26074)

Fixed `tool_decision` OTel telemetry event not being emitted in headless/SDK mode (anthropics/claude-code#26059)

Fixed session name being lost after context compaction — renamed sessions now preserve their custom title through compaction (anthropics/claude-code#26121)

Increased initial session count in resume picker from 10 to 50 for faster session discovery (anthropics/claude-code#26123)

Windows: fixed worktree session matching when drive letter casing differs (anthropics/claude-code#26123)

Fixed `/resume <session-id>` failing to find sessions whose first message exceeds 16KB (anthropics/claude-code#25920)

Fixed "Always allow" on multiline bash commands creating invalid permission patterns that corrupt settings (anthropics/claude-code#25909)

Fixed React crash (error #31) when a skill's `argument-hint` in SKILL.md frontmatter uses YAML sequence syntax (e.g., `[topic: foo | bar]`) — the value is now properly coerced to a string (anthropics/claude-code#25826)

Fixed crash when using `/fork` on sessions that used web search — null entries in search results from transcript deserialization are now handled gracefully (anthropics/claude-code#25811)

Fixed read-only git commands triggering FSEvents file watcher loops on macOS by adding --no-optional-locks flag (anthropics/claude-code#25750)

Fixed custom agents and skills not being discovered when running from a git worktree — project-level `.claude/agents/` and `.claude/skills/` from the main repository are now included (anthropics/claude-code#25816)

Fixed non-interactive subcommands like `claude doctor` and `claude plugin validate` being blocked inside nested Claude sessions (anthropics/claude-code#25803)

Windows: Fixed the same CLAUDE.md file being loaded twice when drive letter casing differs between paths (anthropics/claude-code#25756)

Fixed inline code spans in markdown being incorrectly parsed as bash commands (anthropics/claude-code#25792)

Fixed teammate spinners not respecting custom spinnerVerbs from settings (anthropics/claude-code#25748)

Fixed shell commands permanently failing after a command deletes its own working directory (anthropics/claude-code#26136)

Fixed hooks (PreToolUse, PostToolUse) silently failing to execute on Windows by using Git Bash instead of cmd.exe (anthropics/claude-code#25981)

Fixed LSP `findReferences` and other location-based operations returning results from gitignored files (e.g., `node_modules/`, `venv/`) (anthropics/claude-code#26051)

Moved config backup files from home directory root to `~/.claude/backups/` to reduce home directory clutter (anthropics/claude-code#26130)

Fixed sessions with large first prompts (>16KB) disappearing from the /resume list (anthropics/claude-code#26140)

Fixed shell functions with double-underscore prefixes (e.g., `__git_ps1`) not being preserved across shell sessions (anthropics/claude-code#25824)

Fixed spinner showing "0 tokens" counter before any tokens have been received (anthropics/claude-code#26105)

VSCode: Fixed conversation messages appearing dimmed while the AskUserQuestion dialog is open (anthropics/claude-code#26078)

Fixed background tasks failing in git worktrees due to remote URL resolution reading from worktree-specific gitdir instead of the main repository config (anthropics/claude-code#26065)

Fixed Right Alt key leaving visible `[25~` escape sequence residue in the input field on Windows/Git Bash terminals (anthropics/claude-code#25943)

The `/rename` command now updates the terminal tab title by default (anthropics/claude-code#25789)

Fixed Edit tool silently corrupting Unicode curly quotes (\u201c\u201d \u2018\u2019) by replacing them with straight quotes when making edits (anthropics/claude-code#26141)

Fixed OSC 8 hyperlinks only being clickable on the first line when link text wraps across multiple terminal lines.

Added support for using claude.ai MCP connectors in Claude Code

Added support for reading `enabledPlugins` and `extraKnownMarketplaces` from `--add-dir` directories

Added `spinnerTipsOverride` setting to customize spinner tips — configure `tips` with an array of custom tip strings, and optionally set `excludeDefault: true` to show only your custom tips instead of the built-in ones

Added `SDKRateLimitInfo` and `SDKRateLimitEvent` types to the SDK, enabling consumers to receive rate limit status updates including utilization, reset times, and overage information

Fixed Agent Teams teammates failing on Bedrock, Vertex, and Foundry by propagating API provider environment variables to tmux-spawned processes (anthropics/claude-code#23561)

Fixed sandbox "operation not permitted" errors when writing temporary files on macOS by using the correct per-user temp directory (anthropics/claude-code#21654)

Fixed Task tool (backgrounded agents) crashing with a `ReferenceError` on completion (anthropics/claude-code#22087)

Fixed autocomplete suggestions not being accepted on Enter when images are pasted in the input

Fixed skills invoked by subagents incorrectly appearing in main session context after compaction

Fixed excessive `.claude.json.backup` files accumulating on every startup

Fixed plugin-provided commands, agents, and hooks not being available immediately after installation without requiring a restart

Improved startup performance by removing eager loading of session history for stats caching

Improved memory usage for shell commands that produce large output — RSS no longer grows unboundedly with command output size

Improved collapsed read/search groups to show the current file or search pattern being processed beneath the summary line while active

[VSCode] Improved permission destination choice (project/user/session) to persist across sessions

Fixed auth refresh errors

Fixed spurious warnings for non-agent markdown files in `.claude/agents/` directory

Fixed structured-outputs beta header being sent unconditionally on Vertex/Bedrock

Improved prompt cache hit rates by moving date out of system prompt

Added one-time Opus 4.6 effort callout for eligible users

Fixed /resume showing interrupt messages as session titles

Fixed image dimension limit errors to suggest /compact

Fixed Agent Teams using wrong model identifier for Bedrock, Vertex, and Foundry customers

Fixed a crash when MCP tools return image content during streaming

Fixed /resume session previews showing raw XML tags instead of readable command names

Improved model error messages for Bedrock/Vertex/Foundry users with fallback suggestions

Fixed plugin browse showing misleading "Space to Toggle" hint for already-installed plugins

Fixed hook blocking errors (exit code 2) not showing stderr to the user

Added `speed` attribute to OTel events and trace spans for fast mode visibility

Added `claude auth login`, `claude auth status`, and `claude auth logout` CLI subcommands

Added Windows ARM64 (win32-arm64) native binary support

Improved `/rename` to auto-generate session name from conversation context when called without arguments

Improved narrow terminal layout for prompt footer

Fixed file resolution failing for @-mentions with anchor fragments (e.g., `@README.md#installation`)

Fixed FileReadTool blocking the process on FIFOs, `/dev/stdin`, and large files

Fixed background task notifications not being delivered in streaming Agent SDK mode

Fixed cursor jumping to end on each keystroke in classifier rule input

Fixed markdown link display text being dropped for raw URL

Fixed auto-compact failure error notifications being shown to users

Fixed permission wait time being included in subagent elapsed time display

Fixed proactive ticks firing while in plan mode

Fixed clear stale permission rules when settings change on disk

Fixed hook blocking errors showing stderr content in UI

Fixed fatal errors being swallowed instead of displayed

Fixed process hanging after session close

Fixed character loss at terminal screen boundary

Fixed blank lines in verbose transcript view

Fixed Tab key queueing slash commands instead of autocompleting

Fixed bash permission matching for commands using environment variable wrappers

Fixed text between tool uses disappearing when not using streaming

Fixed duplicate sessions when resuming in VS Code extension

Improved heredoc delimiter parsing to prevent command smuggling

Blocked writes to `.claude/skills` directory in sandbox mode

Fixed a bug where commands excluded from sandboxing (via `sandbox.excludedCommands` or `dangerouslyDisableSandbox`) could bypass the Bash ask permission rule when `autoAllowBashIfSandboxed` was enabled

Fixed warnings about agent teams not being available on your current plan

Added `TeammateIdle` and `TaskCompleted` hook events for multi-agent workflows

Added support for restricting which sub-agents can be spawned via `Task(agent_type)` syntax in agent "tools" frontmatter

Added `memory` frontmatter field support for agents, enabling persistent memory with `user`, `project`, or `local` scope

Added plugin name to skill descriptions and `/skills` menu for better discoverability

Fixed an issue where submitting a new message while the model was in extended thinking would interrupt the thinking phase

Fixed an API error that could occur when aborting mid-stream, where whitespace text combined with a thinking block would bypass normalization and produce an invalid request

Fixed API proxy compatibility issue where 404 errors on streaming endpoints no longer triggered non-streaming fallback

Fixed an issue where proxy settings configured via `settings.json` environment variables were not applied to WebFetch and other HTTP requests on the Node.js build

Fixed `/resume` session picker showing raw XML markup instead of clean titles for sessions started with slash commands

Improved error messages for API connection failures — now shows specific cause (e.g., ECONNREFUSED, SSL errors) instead of generic "Connection error"

Errors from invalid managed settings are now surfaced

VSCode: Added support for remote sessions, allowing OAuth users to browse and resume sessions from claude.ai

VSCode: Added git branch and message count to the session picker, with support for searching by branch name

VSCode: Fixed scroll-to-bottom under-scrolling on initial session load and session switch

Added research preview agent teams feature for multi-agent collaboration (token-intensive feature, requires setting CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1)

Claude now automatically records and recalls memories as it works

Added "Summarize from here" to the message selector, allowing partial conversation summarization.

Skills defined in `.claude/skills/` within additional directories (`--add-dir`) are now loaded automatically.

Fixed `@` file completion showing incorrect relative paths when running from a subdirectory

Updated --resume to re-use --agent value specified in previous conversation by default.

Fixed: Bash tool no longer throws "Bad substitution" errors when heredocs contain JavaScript template literals like `${index + 1}`, which previously interrupted tool execution

Skill character budget now scales with context window (2% of context), so users with larger context windows can see more skill descriptions without truncation

Fixed Thai/Lao spacing vowels (สระ า, ำ) not rendering correctly in the input field

VSCode: Fixed slash commands incorrectly being executed when pressing Enter with preceding text in the input field

VSCode: Added spinner when loading past conversations list

Added support for full-width (zenkaku) space input from Japanese IME in checkbox selection

Fixed PDF too large errors permanently locking up sessions, requiring users to start a new conversation

Fixed bash commands incorrectly reporting failure with "Read-only file system" errors when sandbox mode was enabled

Fixed a crash that made sessions unusable after entering plan mode when project config in `~/.claude.json` was missing default fields

Fixed `temperatureOverride` being silently ignored in the streaming API path, causing all streaming requests to use the default temperature (1) regardless of the configured override

Fixed LSP shutdown/exit compatibility with strict language servers that reject null params

Improved system prompts to more clearly guide the model toward using dedicated tools (Read, Edit, Glob, Grep) instead of bash equivalents (`cat`, `sed`, `grep`, `find`), reducing unnecessary bash command usage

Improved PDF and request size error messages to show actual limits (100 pages, 20MB)

Reduced layout jitter in the terminal when the spinner appears and disappears during streaming

Removed misleading Anthropic API pricing from model selector for third-party provider (Bedrock, Vertex, Foundry) users

Added pre-configured OAuth client credentials for MCP servers that don't support Dynamic Client Registration (e.g., Slack). Use `--client-id` and `--client-secret` with `claude mcp add`.

Added `/debug` for Claude to help troubleshoot the current session

Added support for additional `git log` and `git show` flags in read-only mode (e.g., `--topo-order`, `--cherry-pick`, `--format`, `--raw`)

Added token count, tool uses, and duration metrics to Task tool results

Added reduced motion mode to the config

Fixed phantom "(no content)" text blocks appearing in API conversation history, reducing token waste and potential model confusion

Fixed prompt cache not correctly invalidating when tool descriptions or input schemas changed, only when tool names changed

Fixed 400 errors that could occur after running `/login` when the conversation contained thinking blocks

Fixed a hang when resuming sessions with corrupted transcript files containing `parentUuid` cycles

Fixed rate limit message showing incorrect "/upgrade" suggestion for Max 20x users when extra-usage is unavailable

Fixed permission dialogs stealing focus while actively typing

Fixed subagents not being able to access SDK-provided MCP tools because they were not synced to the shared application state

Fixed a regression where Windows users with a `.bashrc` file could not run bash commands

Improved memory usage for `--resume` (68% reduction for users with many sessions) by replacing the session index with lightweight stat-based loading and progressive enrichment

Improved `TaskStop` tool to display the stopped command/task description in the result line instead of a generic "Task stopped" message

Changed `/model` to execute immediately instead of being queued

[VSCode] Added multiline input support to the "Other" text input in question dialogs (use Shift+Enter for new lines)

[VSCode] Fixed duplicate sessions appearing in the session list when starting a new conversation

Fixed context management validation error for gateway users, ensuring `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1` avoids the error

Added `--from-pr` flag to resume sessions linked to a specific GitHub PR number or URL

Sessions are now automatically linked to PRs when created via `gh pr create`

Fixed /context command not displaying colored output

Fixed status bar duplicating background task indicator when PR status was shown

Windows: Fixed bash command execution failing for users with `.bashrc` files

Windows: Fixed console windows flashing when spawning child processes

VSCode: Fixed OAuth token expiration causing 401 errors after extended sessions

Fixed mTLS and proxy connectivity for users behind corporate proxies or using client certificates

Fixed per-user temp directory isolation to prevent permission conflicts on shared systems

Fixed a race condition that could cause 400 errors when prompt caching scope was enabled

Fixed pending async hooks not being cancelled when headless streaming sessions ended

Fixed tab completion not updating the input field when accepting a suggestion

Fixed ripgrep search timeouts silently returning empty results instead of reporting errors

Improved terminal rendering performance with optimized screen data layout

Changed Bash commands to show timeout duration alongside elapsed time

Changed merged pull requests to show a purple status indicator in the prompt footer

[IDE] Fixed model options displaying incorrect region strings for Bedrock users in headless mode

Fixed shell completion cache files being truncated on exit

Fixed API errors when resuming sessions that were interrupted during tool execution

Fixed auto-compact triggering too early on models with large output token limits

Fixed task IDs potentially being reused after deletion

Fixed file search not working in VS Code extension on Windows

Improved read/search progress indicators to show "Reading…" while in progress and "Read" when complete

Improved Claude to prefer file operation tools (Read, Edit, Write) over bash equivalents (cat, sed, awk)

[VSCode] Added automatic Python virtual environment activation, ensuring `python` and `pip` commands use the correct interpreter (configurable via `claudeCode.usePythonEnvironment` setting)

[VSCode] Fixed message action buttons having incorrect background colors

Added external editor shortcut (Ctrl+G) to the help menu for better discoverability

Added PR review status indicator to the prompt footer, showing the current branch's PR state (approved, changes requested, pending, or draft) as a colored dot with a clickable link

Added support for loading `CLAUDE.md` files from additional directories specified via `--add-dir` flag (requires setting `CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1`)

Added ability to delete tasks via the `TaskUpdate` tool

Fixed session compaction issues that could cause resume to load full history instead of the compact summary

Fixed agents sometimes ignoring user messages sent while actively working on a task

Fixed wide character (emoji, CJK) rendering artifacts where trailing columns were not cleared when replaced by narrower characters

Fixed JSON parsing errors when MCP tool responses contain special Unicode characters

Fixed up/down arrow keys in multi-line and wrapped text input to prioritize cursor movement over history navigation

Fixed draft prompt being lost when pressing UP arrow to navigate command history

Fixed ghost text flickering when typing slash commands mid-input

Fixed marketplace source removal not properly deleting settings

Fixed duplicate output in some commands like `/context`

Fixed task list sometimes showing outside the main conversation view

Fixed syntax highlighting for diffs occurring within multiline constructs like Python docstrings

Fixed crashes when cancelling tool use

Improved `/sandbox` command UI to show dependency status with installation instructions when dependencies are missing

Improved thinking status text with a subtle shimmer animation

Improved task list to dynamically adjust visible items based on terminal height

Improved fork conversation hint to show how to resume the original session

Changed collapsed read/search groups to show present tense ("Reading", "Searching for") while in progress, and past tense ("Read", "Searched for") when complete

Changed `ToolSearch` results to appear as a brief notification instead of inline in the conversation

Changed the `/commit-push-pr` skill to automatically post PR URLs to Slack channels when configured via MCP tools

Changed the `/copy` command to be available to all users

Changed background agents to prompt for tool permissions before launching

Changed permission rules like `Bash(*)` to be accepted and treated as equivalent to `Bash`

Changed config backups to be timestamped and rotated (keeping 5 most recent) to prevent data loss

Added shorthand `$0`, `$1`, etc. for accessing individual arguments in custom commands

Fixed crashes on processors without AVX instruction support

Fixed dangling Claude Code processes when terminal is closed by catching EIO errors from `process.exit()` and using SIGKILL as fallback

Fixed `/rename` and `/tag` not updating the correct session when resuming from a different directory (e.g., git worktrees)

Fixed resuming sessions by custom title not working when run from a different directory

Fixed pasted text content being lost when using prompt stash (Ctrl+S) and restore

Fixed agent list displaying "Sonnet (default)" instead of "Inherit (default)" for agents without an explicit model setting

Fixed backgrounded hook commands not returning early, potentially causing the session to wait on a process that was intentionally backgrounded

Fixed file write preview omitting empty lines

Changed skills without additional permissions or hooks to be allowed without requiring approval

Changed indexed argument syntax from `$ARGUMENTS.0` to `$ARGUMENTS[0]` (bracket syntax)

[SDK] Added replay of `queued_command` attachment messages as `SDKUserMessageReplay` events when `replayUserMessages` is enabled

[VSCode] Enabled session forking and rewind functionality for all users

[VSCode] Added native plugin management support

[VSCode] Added ability for OAuth users to browse and resume remote Claude sessions from the Sessions dialog

Fixed out-of-memory crashes when resuming sessions with heavy subagent usage

Fixed an issue where the "context remaining" warning was not hidden after running `/compact`

Fixed session titles on the resume screen not respecting the user's language setting

[IDE] Fixed a race condition on Windows where the Claude Code sidebar view container would not appear on start

Improved UI rendering performance with React Compiler

Fixed the "Context left until auto-compact" warning not disappearing after running `/compact`

Fixed MCP stdio server timeout not killing child process, which could cause UI freezes

Added search to installed plugins list - type to filter by name or description

Added support for pinning plugins to specific git commit SHAs, allowing marketplace entries to install exact versions

Fixed a regression where the context window blocking limit was calculated too aggressively, blocking users at ~65% context usage instead of the intended ~98%

Fixed memory issues that could cause crashes when running parallel subagents

Fixed memory leak in long-running sessions where stream resources were not cleaned up after shell commands completed

Fixed `@` symbol incorrectly triggering file autocomplete suggestions in bash mode

Fixed `@`-mention menu folder click behavior to navigate into directories instead of selecting them

Fixed `/feedback` command generating invalid GitHub issue URLs when description is very long

Fixed `/context` command to show the same token count and percentage as the status line in verbose mode

Fixed an issue where `/config`, `/context`, `/model`, and `/todos` command overlays could close unexpectedly

Fixed slash command autocomplete selecting wrong command when typing similar commands (e.g., `/context` vs `/compact`)

Fixed inconsistent back navigation in plugin marketplace when only one marketplace is configured

Fixed iTerm2 progress bar not clearing properly on exit, preventing lingering indicators and bell sounds

Improved backspace to delete pasted text as a single token instead of one character at a time

[VSCode] Added `/usage` command to display current plan usage

Added keyboard shortcut 'c' to copy OAuth URL when browser doesn't open automatically during login

Fixed a crash when running bash commands containing heredocs with JavaScript template literals like `${index + 1}`

Improved startup to capture keystrokes typed before the REPL is fully ready

Improved file suggestions to show as removable attachments instead of inserting text when accepted

[VSCode] Added install count display to plugin listings

[VSCode] Added trust warning when installing plugins

Added `plansDirectory` setting to customize where plan files are stored

Added external editor support (Ctrl+G) in AskUserQuestion "Other" input field

Added session URL attribution to commits and PRs created from web sessions

Added support for `PreToolUse` hooks to return `additionalContext` to the model

Added `${CLAUDE_SESSION_ID}` string substitution for skills to access the current session ID

Fixed long sessions with parallel tool calls failing with an API error about orphan tool_result blocks

Fixed MCP server reconnection hanging when cached connection promise never resolves

Fixed Ctrl+Z suspend not working in terminals using Kitty keyboard protocol (Ghostty, iTerm2, kitty, WezTerm)

Added ability to provide feedback when accepting permission prompts

Added inline display of agent's final response in task notifications, making it easier to see results without reading the full transcript file

Fixed security vulnerability where wildcard permission rules could match compound commands containing shell operators

Fixed false "file modified" errors on Windows when cloud sync tools, antivirus scanners, or Git touch file timestamps without changing content

Fixed orphaned tool_result errors when sibling tools fail during streaming execution

Fixed context window blocking limit being calculated using the full context window instead of the effective context window (which reserves space for max output tokens)

Fixed spinner briefly flashing when running local slash commands like `/model` or `/theme`

Fixed terminal title animation jitter by using fixed-width braille characters

Fixed plugins with git submodules not being fully initialized when installed

Fixed bash commands failing on Windows when temp directory paths contained characters like `t` or `n` that were misinterpreted as escape sequences

Improved typing responsiveness by reducing memory allocation overhead in terminal rendering

Enabled MCP tool search auto mode by default for all users. When MCP tool descriptions exceed 10% of the context window, they are automatically deferred and discovered via the MCPSearch tool instead of being loaded upfront. This reduces context usage for users with many MCP tools configured. Users can disable this by adding `MCPSearch` to `disallowedTools` in their settings.

Changed OAuth and API Console URLs from console.anthropic.com to platform.claude.com

[VSCode] Fixed `claudeProcessWrapper` setting passing the wrapper path instead of the Claude binary path

Added Updates section to `/doctor` showing auto-update channel and available npm versions (stable/latest)

Added date range filtering to `/stats` command - press `r` to cycle between Last 7 days, Last 30 days, and All time

Added automatic discovery of skills from nested `.claude/skills` directories when working with files in subdirectories

Added `context_window.used_percentage` and `context_window.remaining_percentage` fields to status line input for easier context window display

Added an error display when the editor fails during Ctrl+G

Fixed permission bypass via shell line continuation that could allow blocked commands to execute

Fixed false "File has been unexpectedly modified" errors when file watchers touch files without changing content

Fixed text styling (bold, colors) getting progressively misaligned in multi-line responses

Fixed the feedback panel closing unexpectedly when typing 'n' in the description field

Fixed rate limit warning appearing at low usage after weekly reset (now requires 70% usage)

Fixed rate limit options menu incorrectly auto-opening when resuming a previous session

Fixed numpad keys outputting escape sequences instead of characters in Kitty keyboard protocol terminals

Fixed Option+Return not inserting newlines in Kitty keyboard protocol terminals

Fixed corrupted config backup files accumulating in the home directory (now only one backup is created per config file)

Fixed `mcp list` and `mcp get` commands leaving orphaned MCP server processes

Fixed visual artifacts in ink2 mode when nodes become hidden via `display:none`

Improved the external CLAUDE.md imports approval dialog to show which files are being imported and from where

Improved the `/tasks` dialog to go directly to task details when there's only one background task running

Improved @ autocomplete with icons for different suggestion types and single-line formatting

Updated "Help improve Claude" setting fetch to refresh OAuth and retry when it fails due to a stale OAuth token

Changed task notification display to cap at 3 lines with overflow summary when multiple background tasks complete simultaneously

Changed terminal title to "Claude Code" on startup for better window identification

Removed ability to @-mention MCP servers to enable/disable - use `/mcp enable <name>` instead

[VSCode] Fixed usage indicator not updating after manual compact

Fixed "Help improve Claude" setting fetch to refresh OAuth and retry when it fails due to a stale OAuth token

Added release channel (`stable` or `latest`) toggle to `/config`

Added detection and warnings for unreachable permission rules, with warnings in `/doctor` and after saving rules that include the source of each rule and actionable fix guidance

Fixed plan files persisting across `/clear` commands, now ensuring a fresh plan file is used after clearing a conversation

Fixed false skill duplicate detection on filesystems with large inodes (e.g., ExFAT) by using 64-bit precision for inode values

Fixed mismatch between background task count in status bar and items shown in tasks dialog

Fixed sub-agents using the wrong model during conversation compaction

Fixed web search in sub-agents using incorrect model

Fixed trust dialog acceptance when running from the home directory not enabling trust-requiring features like hooks during the session

Improved terminal rendering stability by preventing uncontrolled writes from corrupting cursor state

Improved slash command suggestion readability by truncating long descriptions to 2 lines

Changed tool hook execution timeout from 60 seconds to 10 minutes

[VSCode] Added clickable destination selector for permission requests, allowing you to choose where settings are saved (this project, all projects, shared with team, or session only)

Added clickable hyperlinks for file paths in tool output in terminals that support OSC 8 (like iTerm)

Added support for Windows Package Manager (winget) installations with automatic detection and update instructions

Added Shift+Tab keyboard shortcut in plan mode to quickly select "auto-accept edits" option

Added `FORCE_AUTOUPDATE_PLUGINS` environment variable to allow plugin autoupdate even when the main auto-updater is disabled

Added `agent_type` to SessionStart hook input, populated if `--agent` is specified

Fixed a command injection vulnerability in bash command processing where malformed input could execute arbitrary commands

Fixed a memory leak where tree-sitter parse trees were not being freed, causing WASM memory to grow unbounded over long sessions

Fixed binary files (images, PDFs, etc.) being accidentally included in memory when using `@include` directives in CLAUDE.md files

Fixed updates incorrectly claiming another installation is in progress

Fixed crash when socket files exist in watched directories (defense-in-depth for EOPNOTSUPP errors)

Fixed remote session URL and teleport being broken when using `/tasks` command

Fixed MCP tool names being exposed in analytics events by sanitizing user-specific server configurations

Improved Option-as-Meta hint on macOS to show terminal-specific instructions for native CSIu terminals like iTerm2, Kitty, and WezTerm

Improved error message when pasting images over SSH to suggest using `scp` instead of the unhelpful clipboard shortcut hint

Improved permission explainer to not flag routine dev workflows (git fetch/rebase, npm install, tests, PRs) as medium risk

Changed large bash command outputs to be saved to disk instead of truncated, allowing Claude to read the full content

Changed large tool outputs to be persisted to disk instead of truncated, providing full output access via file references

Changed `/plugins` installed tab to unify plugins and MCPs with scope-based grouping

Deprecated Windows managed settings path `C:\ProgramData\ClaudeCode\managed-settings.json` - administrators should migrate to `C:\Program Files\ClaudeCode\managed-settings.json`

[SDK] Changed minimum zod peer dependency to ^4.0.0

[VSCode] Fixed usage display not updating after manual compact

Added support for running skills and slash commands in a forked sub-agent context using `context: fork` in skill frontmatter

Added support for `agent` field in skills to specify agent type for execution

Added `language` setting to configure Claude's response language (e.g., language: "japanese")

Changed Shift+Enter to work out of the box in iTerm2, WezTerm, Ghostty, and Kitty without modifying terminal configs

Added `respectGitignore` support in `settings.json` for per-project control over @-mention file picker behavior

Added `IS_DEMO` environment variable to hide email and organization from the UI, useful for streaming or recording sessions

Fixed security issue where sensitive data (OAuth tokens, API keys, passwords) could be exposed in debug logs

Fixed files and skills not being properly discovered when resuming sessions with `-c` or `--resume`

Fixed pasted content being lost when replaying prompts from history using up arrow or Ctrl+R search

Fixed Esc key with queued prompts to only move them to input without canceling the running task

Reduced permission prompts for complex bash commands

Fixed command search to prioritize exact and prefix matches on command names over fuzzy matches in descriptions

Fixed PreToolUse hooks to allow `updatedInput` when returning `ask` permission decision, enabling hooks to act as middleware while still requesting user consent

Fixed plugin path resolution for file-based marketplace sources

Fixed LSP tool being incorrectly enabled when no LSP servers were configured

Fixed background tasks failing with "git repository not found" error for repositories with dots in their names

Fixed Claude in Chrome support for WSL environments

Fixed Windows native installer silently failing when executable creation fails

Improved CLI help output to display options and subcommands in alphabetical order for easier navigation

Added wildcard pattern matching for Bash tool permissions using `*` at any position in rules (e.g., `Bash(npm *)`, `Bash(* install)`, `Bash(git * main)`)

Added unified Ctrl+B backgrounding for both bash commands and agents - pressing Ctrl+B now backgrounds all running foreground tasks simultaneously

Added support for MCP `list_changed` notifications, allowing MCP servers to dynamically update their available tools, prompts, and resources without requiring reconnection

Added `/teleport` and `/remote-env` slash commands for claude.ai subscribers, allowing them to resume and configure remote sessions

Added support for disabling specific agents using `Task(AgentName)` syntax in settings.json permissions or the `--disallowedTools` CLI flag

Added hooks support to agent frontmatter, allowing agents to define PreToolUse, PostToolUse, and Stop hooks scoped to the agent's lifecycle

Added hooks support for skill and slash command frontmatter

Added new Vim motions: `;` and `,` to repeat f/F/t/T motions, `y` operator for yank with `yy`/`Y`, `p`/`P` for paste, text objects (`iw`, `aw`, `iW`, `aW`, `i"`, `a"`, `i'`, `a'`, `i(`, `a(`, `i[`, `a[`, `i{`, `a{`), `>>` and `<<` for indent/dedent, and `J` to join lines

Added `/plan` command shortcut to enable plan mode directly from the prompt

Added slash command autocomplete support when `/` appears anywhere in input, not just at the beginning

Added `--tools` flag support in interactive mode to restrict which built-in tools Claude can use during interactive sessions

Added `CLAUDE_CODE_FILE_READ_MAX_OUTPUT_TOKENS` environment variable to override the default file read token limit

Added support for `once: true` config for hooks

Added support for YAML-style lists in frontmatter `allowed-tools` field for cleaner skill declarations

Added support for prompt and agent hook types from plugins (previously only command hooks were supported)

Added Cmd+V support for image paste in iTerm2 (maps to Ctrl+V)

Added left/right arrow key navigation for cycling through tabs in dialogs

Added real-time thinking block display in Ctrl+O transcript mode

Added filepath to full output in background bash task details dialog

Added Skills as a separate category in the context visualization

Fixed OAuth token refresh not triggering when server reports token expired but local expiration check disagrees

Fixed session persistence getting stuck after transient server errors by recovering from 409 conflicts when the entry was actually stored

Fixed session resume failures caused by orphaned tool results during concurrent tool execution

Fixed a race condition where stale OAuth tokens could be read from the keychain cache during concurrent token refresh attempts

Fixed AWS Bedrock subagents not inheriting EU/APAC cross-region inference model configuration, causing 403 errors when IAM permissions are scoped to specific regions

Fixed API context overflow when background tasks produce large output by truncating to 30K chars with file path reference

Fixed a hang when reading FIFO files by skipping symlink resolution for special file types

Fixed terminal keyboard mode not being reset on exit in Ghostty, iTerm2, Kitty, and WezTerm

Fixed Alt+B and Alt+F (word navigation) not working in iTerm2, Ghostty, Kitty, and WezTerm

Fixed `${CLAUDE_PLUGIN_ROOT}` not being substituted in plugin `allowed-tools` frontmatter, which caused tools to incorrectly require approval

Fixed files created by the Write tool using hardcoded 0o600 permissions instead of respecting the system umask

Fixed commands with `$()` command substitution failing with parse errors

Fixed multi-line bash commands with backslash continuations being incorrectly split and flagged for permissions

Fixed bash command prefix extraction to correctly identify subcommands after global options (e.g., `git -C /path log` now correctly matches `Bash(git log:*)` rules)

Fixed slash commands passed as CLI arguments (e.g., `claude /context`) not being executed properly

Fixed pressing Enter after Tab-completing a slash command selecting a different command instead of submitting the completed one

Fixed slash command argument hint flickering and inconsistent display when typing commands with arguments

Fixed Claude sometimes redundantly invoking the Skill tool when running slash commands directly

Fixed skill token estimates in `/context` to accurately reflect frontmatter-only loading

Fixed subagents sometimes not inheriting the parent's model by default

Fixed model picker showing incorrect selection for Bedrock/Vertex users using `--model haiku`

Fixed duplicate Bash commands appearing in permission request option labels

Fixed noisy output when background tasks complete - now shows clean completion message instead of raw output

Fixed background task completion notifications to appear proactively with bullet point

Fixed forked slash commands showing "AbortError" instead of "Interrupted" message when cancelled

Fixed cursor disappearing after dismissing permission dialogs

Fixed `/hooks` menu selecting wrong hook type when scrolling to a different option

Fixed images in queued prompts showing as "[object Object]" when pressing Esc to cancel

Fixed images being silently dropped when queueing messages while backgrounding a task

Fixed large pasted images failing with "Image was too large" error

Fixed extra blank lines in multiline prompts containing CJK characters (Japanese, Chinese, Korean)

Fixed ultrathink keyword highlighting being applied to wrong characters when user prompt text wraps to multiple lines

Fixed collapsed "Reading X files…" indicator incorrectly switching to past tense when thinking blocks appear mid-stream

Fixed Bash read commands (like `ls` and `cat`) not being counted in collapsed read/search groups, causing groups to incorrectly show "Read 0 files"

Fixed spinner token counter to properly accumulate tokens from subagents during execution

Fixed memory leak in git diff parsing where sliced strings retained large parent strings

Fixed race condition where LSP tool could return "no server available" during startup

Fixed feedback submission hanging indefinitely when network requests timeout

Fixed search mode in plugin discovery and log selector views exiting when pressing up arrow

Fixed hook success message showing trailing colon when hook has no output

Multiple optimizations to improve startup performance

Improved terminal rendering performance when using native installer or Bun, especially for text with emoji, ANSI codes, and Unicode characters

Improved performance when reading Jupyter notebooks with many cells

Improved reliability for piped input like `cat refactor.md | claude`

Improved reliability for AskQuestion tool

Improved sed in-place edit commands to render as file edits with diff preview

Improved Claude to automatically continue when response is cut off due to output token limit, instead of showing an error message

Improved compaction reliability

Improved subagents (Task tool) to continue working after permission denial, allowing them to try alternative approaches

Improved skills to show progress while executing, displaying tool uses as they happen

Improved skills from `/skills/` directories to be visible in the slash command menu by default (opt-out with `user-invocable: false` in frontmatter)

Improved skill suggestions to prioritize recently and frequently used skills

Improved spinner feedback when waiting for the first response token

Improved token count display in spinner to include tokens from background agents

Improved incremental output for async agents to give the main thread more control and visibility

Improved permission prompt UX with Tab hint moved to footer, cleaner Yes/No input labels with contextual placeholders

Improved the Claude in Chrome notification with shortened help text and persistent display until dismissed

Improved macOS screenshot paste reliability with TIFF format support

Improved `/stats` output

Updated Atlassian MCP integration to use a more reliable default configuration (streamable HTTP)

Changed "Interrupted" message color from red to grey for a less alarming appearance

Removed permission prompt when entering plan mode - users can now enter plan mode without approval

Removed underline styling from image reference links

[SDK] Changed minimum zod peer dependency to ^4.0.0

[VSCode] Added currently selected model name to the context menu

[VSCode] Added descriptive labels on auto-accept permission button (e.g., "Yes, allow npm for this project" instead of "Yes, and don't ask again")

[VSCode] Fixed paragraph breaks not rendering in markdown content

[VSCode] Fixed scrolling in the extension inadvertently scrolling the parent iframe

[Windows] Fixed issue with improper rendering

Added `/terminal-setup` support for Kitty, Alacritty, Zed, and Warp terminals

Added ctrl+t shortcut in `/theme` to toggle syntax highlighting on/off

Added syntax highlighting info to theme picker

Added guidance for macOS users when Alt shortcuts fail due to terminal configuration

Fixed skill `allowed-tools` not being applied to tools invoked by the skill

Fixed Opus 4.5 tip incorrectly showing when user was already using Opus

Fixed a potential crash when syntax highlighting isn't initialized correctly

Fixed visual bug in `/plugins discover` where list selection indicator showed while search box was focused

Fixed macOS keyboard shortcuts to display 'opt' instead of 'alt'

Improved `/context` command visualization with grouped skills and agents by source, slash commands, and sorted token count

[Windows] Fixed issue with improper rendering

[VSCode] Added gift tag pictogram for year-end promotion message

Added alt-y yank-pop to cycle through kill ring history after ctrl-y yank

Added search filtering to the plugin discover screen (type to filter by name, description, or marketplace)

Added support for custom session IDs when forking sessions with `--session-id` combined with `--resume` or `--continue` and `--fork-session`

Fixed slow input history cycling and race condition that could overwrite text after message submission

Improved `/theme` command to open theme picker directly

Improved theme picker UI

Improved search UX across resume session, permissions, and plugins screens with a unified SearchBox component

[VSCode] Added tab icon badges showing pending permissions (blue) and unread completions (orange)

Reduced terminal flickering

Added scannable QR code to mobile app tip for quick app downloads

Added loading indicator when resuming conversations for better feedback

Fixed `/context` command not respecting custom system prompts in non-interactive mode

Fixed order of consecutive Ctrl+K lines when pasting with Ctrl+Y

Improved @ mention file suggestion speed (~3× faster in git repositories)

Improved file suggestion performance in repos with `.ignore` or `.rgignore` files

Improved settings validation errors to be more prominent

Changed thinking toggle from Tab to Alt+T to avoid accidental triggers

Added `/settings` as an alias for the `/config` command

Fixed @ file reference suggestions incorrectly triggering when cursor is in the middle of a path

Fixed MCP servers from `.mcp.json` not loading when using `--dangerously-skip-permissions`

Fixed permission rules incorrectly rejecting valid bash commands containing shell glob patterns (e.g., `ls *.txt`, `for f in *.png`)

Bedrock: Environment variable `ANTHROPIC_BEDROCK_BASE_URL` is now respected for token counting and inference profile listing

New syntax highlighting engine for native build

Added wildcard syntax `mcp__server__*` for MCP tool permissions to allow or deny all tools from a server

Added auto-update toggle for plugin marketplaces, allowing per-marketplace control over automatic updates

Added `current_usage` field to status line input, enabling accurate context window percentage calculations

Fixed input being cleared when processing queued commands while the user was typing

Fixed prompt suggestions replacing typed input when pressing Tab

Fixed diff view not updating when terminal is resized

Improved memory usage by 3x for large conversations

Improved resolution of stats screenshots copied to clipboard (Ctrl+S) for crisper images

Removed # shortcut for quick memory entry (tell Claude to edit your CLAUDE.md instead)

Fix thinking mode toggle in /config not persisting correctly

Improve UI for file creation permission dialog

Fixed a bug where disallowed MCP tools were visible to the model

Fixed an issue where steering messages could be lost while a subagent is working

Fixed Option+Arrow word navigation treating entire CJK (Chinese, Japanese, Korean) text sequences as a single word instead of navigating by word boundaries

Improved plan mode exit UX: show simplified yes/no dialog when exiting with empty or missing plan instead of throwing an error

Add support for enterprise managed settings. Contact your Anthropic account team to enable this feature.

Thinking mode configuration has moved to /config

Added search functionality to `/permissions` command with `/` keyboard shortcut for filtering rules by tool name

Show reason why autoupdater is disabled in `/doctor`

Fixed false "Another process is currently updating Claude" error when running `claude update` while another instance is already on the latest version

Fixed MCP servers from `.mcp.json` being stuck in pending state when running in non-interactive mode (`-p` flag or piped input)

Fixed scroll position resetting after deleting a permission rule in `/permissions`

Fixed word deletion (opt+delete) and word navigation (opt+arrow) not working correctly with non-Latin text such as Cyrillic, Greek, Arabic, Hebrew, Thai, and Chinese

Fixed `claude install --force` not bypassing stale lock files

Fixed consecutive @~/ file references in CLAUDE.md being incorrectly parsed due to markdown strikethrough interference

Windows: Fixed plugin MCP servers failing due to colons in log directory paths

Added context window information to status line input

Added `fileSuggestion` setting for custom `@` file search commands

Added `CLAUDE_CODE_SHELL` environment variable to override automatic shell detection (useful when login shell differs from actual working shell)

Fixed prompt not being saved to history when aborting a query with Escape

Fixed Read tool image handling to identify format from bytes instead of file extension

Agents and bash commands can run asynchronously and send messages to wake up the main agent - /stats now provides users with interesting CC stats, such as favorite model, usage graph, usage streak

Added named session support: use `/rename` to name sessions, `/resume <name>` in REPL or `claude --resume <name>` from the terminal to resume them

Added support for .claude/rules/`. See https://code.claude.com/docs/en/memory for details.

Added image dimension metadata when images are resized, enabling accurate coordinate mappings for large images

Fixed auto-loading .env when using native installer

Fixed `--system-prompt` being ignored when using `--continue` or `--resume` flags

Improved `/resume` screen with grouped forked sessions and keyboard shortcuts for preview (P) and rename (R)

VSCode: Added copy-to-clipboard button on code blocks and bash tool inputs

VSCode: Fixed extension not working on Windows ARM64 by falling back to x64 binary via emulation

Bedrock: Improve efficiency of token counting

Bedrock: Add support for `aws login` AWS Management Console credentials

Unshipped AgentOutputTool and BashOutputTool, in favor of a new unified TaskOutputTool

Added `attribution` setting to customize commit and PR bylines (deprecates `includeCoAuthoredBy`)

Fixed duplicate slash commands appearing when ~/.claude is symlinked to a project directory

Fixed slash command selection not working when multiple commands share the same name

Fixed an issue where skill files inside symlinked skill directories could become circular symlinks

Fixed running versions getting removed because lock file incorrectly going stale

Fixed IDE diff tab not closing when rejecting file changes

Added --disable-slash-commands CLI flag to disable all slash commands

Added model name to "Co-Authored-By" commit messages

Enabled "/mcp enable [server-name]" or "/mcp disable [server-name]" to quickly toggle all servers

Updated Fetch to skip summarization for pre-approved websites

VSCode: Added support for multiple terminal clients connecting to the IDE server simultaneously

Added `agent` setting to configure main thread with a specific agent's system prompt, tool restrictions, and model

VS Code: Fixed .claude.json config file being read from incorrect location

Fixed timer duration showing "11m 60s" instead of "12m 0s"

Windows: Managed settings now prefer `C:\Program Files\ClaudeCode` if it exists. Support for `C:\ProgramData\ClaudeCode` will be removed in a future version.

VSCode: Added streaming message support for real-time response display

VSCode Extension: Added support for VS Code's secondary sidebar (VS Code 1.97+), allowing Claude Code to be displayed in the right sidebar while keeping the file explorer on the left. Requires setting sidebar as Preferred Location in the config.

Fixed keyboard navigation becoming unresponsive when holding down arrow keys in memory location selector

Improved AskUserQuestion tool to auto-submit single-select questions on the last question, eliminating the extra review screen for simple question flows

Improved fuzzy matching for `@` file suggestions with faster, more accurate results

Fix issue with excessive iTerm notifications

Fixed `/usage` command progress bars to fill up as usage increases (instead of showing remaining percentage)

Fixed image pasting not working on Linux systems running Wayland (now falls back to wl-paste when xclip is unavailable)

Permit some uses of `$!` in bash commands

Introducing Claude Code for Desktop: https://claude.com/download

To give you room to try out our new model, we've updated usage limits for Claude Code users. See the Claude Opus 4.5 blog for full details

Pro users can now purchase extra usage for access to Opus 4.5 in Claude Code

Plan Mode now builds more precise plans and executes more thoroughly

Usage limit notifications now easier to understand

Switched `/usage` back to "% used"

Fixed handling of thinking errors

Fixed performance regression

Silenced a noisy but harmless error during upgrades

Improved ultrathink text display

Improved clarity of 5-hour session limit warning message

Improved clarity of usage limit warning message

Fixed handling of subagent permissions

Improved error handling in `/usage`

Fixed race condition with history entry not getting logged at exit

Fixed Vertex AI configuration not being applied from `settings.json`

Added `PermissionRequest` hook to automatically approve or deny tool permission requests with custom logic

Send background tasks to Claude Code on the web by starting a message with `&`

Added `tool_use_id` field to `PreToolUseHookInput` and `PostToolUseHookInput` types

Added skills frontmatter field to declare skills to auto-load for subagents

Added the `SubagentStart` hook event

Fixed nested `CLAUDE.md` files not loading when @-mentioning files

Fixed duplicate rendering of some messages in the UI

Fixed some visual flickers

Fixed NotebookEdit tool inserting cells at incorrect positions when cell IDs matched the pattern `cell-N`

Fixed slash commands from user settings being loaded twice, which could cause rendering issues

Fixed incorrect labeling of user settings vs project settings in command descriptions

Fixed crash when plugin command hooks timeout during execution

Fixed: Bedrock users no longer see duplicate Opus entries in the /model picker when using `--model haiku`

Fixed broken security documentation links in trust dialogs and onboarding

Fixed issue where pressing ESC to close the diff modal would also interrupt the model - ctrl-r history search landing on a slash command no longer cancels the search

SDK: Support custom timeouts for hooks

Allow more safe git commands to run without approval

Plugins: Added support for sharing and installing output styles

Teleporting a session from web will automatically set the upstream branch

Hooks: Added matcher values for Notification hook events

Output Styles: Added `keep-coding-instructions` option to frontmatter

Fixed queued messages being incorrectly executed as bash commands

Fixed input being lost when typing while a queued message is processed

Improved VS Code extension to respect `chat.fontSize` and `chat.fontFamily` settings throughout the entire UI, and apply font changes immediately without requiring reload

Added `CLAUDE_CODE_EXIT_AFTER_STOP_DELAY` environment variable to automatically exit SDK mode after a specified idle duration, useful for automated workflows and scripts

Migrated `ignorePatterns` from project config to deny permissions in the localSettings.

Fixed menu navigation getting stuck on items with empty string or other falsy values (e.g., in the `/hooks` menu)

Improved file path suggestion performance with native Rust-based fuzzy finder

Fixed infinite token refresh loop that caused MCP servers with OAuth (e.g., Slack) to hang during connection

Fixed memory crash when reading or writing large files (especially base64-encoded images)

Fixed `claude doctor` incorrectly detecting Homebrew vs npm-global installations by properly resolving symlinks

Fixed `claude mcp serve` exposing tools with incompatible outputSchemas

Added `companyAnnouncements` setting for displaying announcements on startup

Fixed hook progress messages not updating correctly during PostToolUse hook execution

Vertex: add support for Web Search on supported models

VSCode: Adding the respectGitIgnore configuration to include .gitignored files in file searches (defaults to true)

Fixed a bug with subagents and MCP servers related to "Tool names must be unique" error

Fixed issue causing `/compact` to fail with `prompt_too_long` by making it respect existing compact boundaries

Fixed plugin uninstall not removing plugins

Added `allowUnsandboxedCommands` sandbox setting to disable the dangerouslyDisableSandbox escape hatch at policy level

Added `disallowedTools` field to custom agent definitions for explicit tool blocking

Added prompt-based stop hooks

VSCode: Added respectGitIgnore configuration to include .gitignored files in file searches (defaults to true)

Enabled SSE MCP servers on native build

Deprecated output styles. Review options in `/output-style` and use --system-prompt-file, --system-prompt, --append-system-prompt, CLAUDE.md, or plugins instead

Removed support for custom ripgrep configuration, resolving an issue where Search returns no results and config discovery fails

Fixed Explore agent creating unwanted .md investigation files during codebase exploration

Fixed a bug where `/context` would sometimes fail with "max_tokens must be greater than thinking.budget_tokens" error message

Fixed `--mcp-config` flag to correctly override file-based MCP configurations

Fixed bug that saved session permissions to local settings

Fixed MCP tools not being available to sub-agents

Fixed hooks and plugins not executing when using --dangerously-skip-permissions flag

Fixed delay when navigating through typeahead suggestions with arrow keys

VSCode: Restored selection indicator in input footer showing current file or code selection status

Subagents: claude can now choose to resume subagents

Subagents: claude can dynamically choose the model used by its subagents

SDK: added --max-budget-usd flag

Discovery of custom slash commands, subagents, and output styles no longer respects .gitignore

Stop `/terminal-setup` from adding backslash to `Shift + Enter` in VS Code

Add branch and tag support for git-based plugins and marketplaces using fragment syntax (e.g., `owner/repo#branch`)

Fixed a bug where macOS permission prompts would show up upon initial launch when launching from home directory

Various other bug fixes

Added current branch filtering and search to session resume screen for easier navigation

Fixed directory @-mention causing "No assistant message found" error

VSCode Extension: Add config setting to include .gitignored files in file searches

VSCode Extension: Bug fixes for unrelated 'Warmup' conversations, and configuration/settings occasionally being reset to defaults

Claude Code Web: Support for Web -> CLI teleport

Sandbox: Releasing a sandbox mode for the BashTool on Linux & Mac

Bedrock: Display awsAuthRefresh output when auth is required

IDE: Add toggle to enable/disable thinking.

Fix bug causing duplicate permission prompts with parallel tool calls

Add support for enterprise managed MCP allowlist and denylist

Added an interactive question tool

Claude will now ask you questions more often in plan mode

Added Haiku 4.5 as a model option for Pro users

Fixed an issue where queued commands don't have access to previous messages' output

Fixed a bug where Haiku was unnecessarily called in print mode

Haiku 4.5 automatically uses Sonnet in plan mode, and Haiku for execution (i.e. SonnetPlan by default) - 3P (Bedrock and Vertex) are not automatically upgraded yet. Manual upgrading can be done through setting `ANTHROPIC_DEFAULT_HAIKU_MODEL`

Introducing the Explore subagent. Powered by Haiku it'll search through your codebase efficiently to save context!

OTEL: support HTTP_PROXY and HTTPS_PROXY - `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` now disables release notes fetching

Fixed bug with `-p` mode where @-mentioned files needed to be read again before writing

Improve permission checks for bash with inline env vars

Fix ultrathink + thinking toggle

Reduce unnecessary logins

Document --system-prompt

Several improvements to rendering

Plugins UI polish

`/plugin install`, `/plugin enable/disable`, `/plugin marketplace` commands for plugin management

Repository-level plugin configuration via `extraKnownMarketplaces` for team collaboration - `/plugin validate` command for validating plugin structure and configuration

Plugin announcement blog post at https://www.anthropic.com/news/claude-code-plugins

Plugin documentation available at https://code.claude.com/docs/en/plugins

Comprehensive error messages and diagnostics via `/doctor` command

Avoid flickering in `/model` selector

Improvements to `/help`

Avoid mentioning hooks in `/resume` summaries

Changes to the "verbose" setting in `/config` now persist across sessions

IDE: Fixed keyboard shortcuts and focus issues for smoother interaction

Fixed Opus fallback rate limit errors appearing incorrectly

Fixed /add-dir command selecting wrong default tab

Enable/disable MCP servers by @mentioning, or in /mcp

Added tab completion for shell commands in bash mode

PreToolUse hooks can now modify tool inputs

Press Ctrl-G to edit your prompt in your system's configured text editor

Fixes for bash permission checks with environment variables in the command

IDE: Add drag-and-drop support for files and folders in chat - /context: Fix counting for thinking blocks

Improve message rendering for users with light themes on dark terminals

Remove deprecated .claude.json allowedTools, ignorePatterns, env, and todoFeatureEnabled config options (instead, configure these in your settings.json)

IDE: Add "Open in Terminal" link in login screen

Fix unhandled OAuth expiration 401 API errors

SDK: Added SDKUserMessageReplay.isReplay to prevent duplicate messages

Various bug fixes and presentation improvements

Fresh coat of paint throughout the whole app - /rewind a conversation to undo code changes - /usage command to see plan limits

Tab to toggle thinking (sticky across sessions)

Ctrl-R to search history

Unshipped claude config command

Hooks: Reduced PostToolUse 'tool_use' ids were found without 'tool_result' blocks errors

SDK: The Claude Code SDK is now the Claude Agent SDK

Add subagents dynamically with `--agents` flag

Add mTLS support for HTTP-based OpenTelemetry exporters

Fix Bedrock and Vertex environment variables evaluating all strings as truthy

No longer inform Claude of the list of allowed tools when permission is denied

Fixed security vulnerability in Bash tool permission checks

Improved VSCode extension performance for large files

Fixed thinking mode triggering on negation phrases like "don't think"

Fixed rendering performance degradation during token streaming

Added SlashCommand tool, which enables Claude to invoke your slash commands. https://code.claude.com/docs/en/slash-commands#SlashCommand-tool

Enhanced BashTool environment snapshot logging

Fixed a bug where resuming a conversation in headless mode would sometimes enable thinking unnecessarily

Migrated --debug logging to a file, to enable easy tailing & filtering

Improved VSCode extension command registry and sessions dialog user experience

Enhanced sessions dialog responsiveness and visual feedback

Fixed IDE compatibility issue by removing worktree support check

Fixed security vulnerability where Bash tool permission checks could be bypassed using prefix matching

Support dynamic headers for MCP servers via headersHelper configuration

Fix thinking mode not working in headless sessions

Fix slash commands now properly update allowed tools instead of replacing them

Fix input lag while typing, especially on Windows

Add sed command to auto-allowed commands in acceptEdits mode

Fix Windows PATH comparison to be case-insensitive for drive letters

Add permissions management hint to /add-dir output

Type /t to temporarily disable thinking mode in your prompt

Improve path validation for glob and grep tools

Show condensed output for post-tool hooks to reduce visual clutter

Fix visual feedback when loading state completes

Improve UI consistency for permission request dialogs

Move Ctrl+R keybinding for toggling transcript to Ctrl+O

Addressed issue where some Claude Max users were incorrectly recognized as Claude Pro users

Hooks: Added systemMessage support for SessionEnd hooks

Added `spinnerTipsEnabled` setting to disable spinner tips

IDE: Various improvements and bug fixes

Fixed Bash tool crashes caused by malformed shell syntax parsing

MCP: OAuth tokens now proactively refresh before expiration

Fixed reliability issues with background Bash processes

/memory command now allows direct editing of all imported memory files

SDK: Add custom tools as callbacks

Added /todos command to list current todo items

Support NO_PROXY environment variable to bypass proxy for specified hostnames and IPs

Status line input now includes `exceeds_200k_tokens`

Fixed incorrect usage tracking in /cost.

Introduced `ANTHROPIC_DEFAULT_SONNET_MODEL` and `ANTHROPIC_DEFAULT_OPUS_MODEL` for controlling model aliases opusplan, opus, and sonnet.

Bedrock: Updated default Sonnet model to Sonnet 4

SDK: Added UUID support for all SDK messages

SDK: Added `--replay-user-messages` to replay user messages back to stdout

Hooks: Introduced SessionEnd hook

Fix Claude sometimes ignoring real-time steering when wrapping up a task - @-mention: Add ~/.claude/\* files to suggestions for easier agent, output style, and slash command editing

Use built-in ripgrep by default; to opt out of this behavior, set USE_BUILTIN_RIPGREP=0

New shimmering spinner

SDK: New additionalDirectories option to search custom paths, improved slash command processing

Settings: Validation prevents invalid fields in .claude/settings.json files

MCP: Improve tool name consistency

Bash: Fix crash when Claude tries to automatically read large files

Agents: Fix custom agent loading when agent files are unparsable

SDK: Add session support and permission denial tracking

Fix token limit errors in conversation summarization

Opus Plan Mode: New setting in `/model` to run Opus only in plan mode, Sonnet otherwise

MCP: Press Esc to cancel OAuth authentication flows

Bash: Improved command validation and reduced false security warnings

UI: Enhanced spinner animations and status line visual hierarchy

Linux: Added support for Alpine and musl-based distributions (requires separate ripgrep installation)

Customizable status line: add your terminal prompt to Claude Code with /statusline

Windows: Fixed native file search, ripgrep, and subagent functionality

Added support for @-mentions in slash command arguments

Windows: improve permissions checks for allow / deny tools and project trust. This may create a new project entry in `.claude.json` - manually merge the history field if desired.

Windows: improve sub-process spawning to eliminate "No such file or directory" when running commands like pnpm

Enhanced /doctor command with CLAUDE.md and MCP tool context for self-serve debugging

SDK: Added canUseTool callback support for tool confirmation

Added `disableAllHooks` setting

Improved file suggestions performance in large repos

Windows: Fixed shell environment setup for users without .bashrc files

Agents: Fixed unintended access to the recursive agent tool

Hooks: Added systemMessage field to hook JSON output for displaying warnings and context

SDK: Fixed user input tracking across multi-turn conversations

Added hidden files to file search and @-mention suggestions

Hooks: Added SessionStart hook for new session initialization - /add-dir command now supports typeahead for directory paths

Improved network connectivity check reliability

Settings: Added `--settings` flag to load settings from a JSON file

Settings: Fixed resolution of settings files paths that are symlinks

OTEL: Fixed reporting of wrong organization after authentication changes

Slash commands: Fixed permissions checking for allowed-tools with Bash

IDE: Added support for pasting images in VSCode MacOS using ⌘+V

IDE: Added `CLAUDE_CODE_AUTO_CONNECT_IDE=false` for disabling IDE auto-connection

Added `CLAUDE_CODE_SHELL_PREFIX` for wrapping Claude and user-provided shell commands run by Claude Code

SDK: Allow specifying env for spawned process

Hooks: Exposed PermissionDecision to hooks (including "ask")

Hooks: UserPromptSubmit now supports additionalContext in advanced JSON output

Fixed issue where some Max users that specified Opus would still see fallback to Sonnet

MCP: Improved server health status display in 'claude mcp list'

Hooks: Added CLAUDE_PROJECT_DIR env var for hook commands

Improved permission messages to help Claude understand allowed tools

Fix: Remove trailing newlines from bash output in terminal wrapping

Fixes for WSL IDE detection

Fix an issue causing awsRefreshHelper changes to .aws directory not to be picked up

Windows: fixed Ctrl+Z crash

SDK: Added ability to capture error logging

Add --system-prompt-file option to override system prompt in print mode

Custom slash commands: Added argument-hint to frontmatter

Windows: OAuth uses port 45454 and properly constructs browser URL

Windows: mode switching now uses alt + m, and plan mode renders properly

Shell: Switch to in-memory shell snapshot to fix file-related errors

Add helper script settings for AWS token refresh: awsAuthRefresh (for foreground operations like aws sso login) and awsCredentialExport (for background operation with STS-like response).

Added support for Bedrock API keys through environment variable AWS_BEARER_TOKEN_BEDROCK

Settings: /doctor can now help you identify and fix invalid setting files - `--append-system-prompt` can now be used in interactive mode, not just --print/-p.

Increased auto-compact warning threshold from 60% to 80%

Fixed an issue with handling user directories with spaces for shell snapshots

OTEL resource now includes os.type, os.version, host.arch, and wsl.version (if running on Windows Subsystem for Linux)

Custom slash commands: Fixed user-level commands in subdirectories

Plan mode: Fixed issue where rejected plan from sub-task would get discarded

Added progress messages to Bash tool based on the last 5 lines of command output

Added expanding variables support for MCP server configuration

Moved shell snapshots from /tmp to ~/.claude for more reliable Bash tool calls

Improved IDE extension path handling when Claude Code runs in WSL

Hooks: Added a PreCompact hook

Vim mode: Added c, f/F, t/T

Disabled IDE diffs for notebook files, fixing "Timeout waiting after 1000ms" error

Fixed config file corruption issue by enforcing atomic writes

Updated prompt input undo to Ctrl+\_ to avoid breaking existing Ctrl+U behavior, matching zsh's undo shortcut

Stop Hooks: Fixed transcript path after /clear and fixed triggering when loop ends with tool call

Custom slash commands: Restored namespacing in command names based on subdirectories. For example, .claude/commands/frontend/component.md is now /frontend:component, not /component.

MCP: resource_link tool results are now supported

MCP: tool annotations and tool titles now display in /mcp view

Changed Ctrl+Z to suspend Claude Code. Resume by running `fg`. Prompt input undo is now Ctrl+U.

Hooks: Added EPIPE system error handling

Hooks: Enabled optional timeout configuration for each command

Hooks: Added "hook_event_name" to hook input

Fixed a bug where MCP tools would display twice in tool list

New tool parameters JSON for Bash tool in `tool_decision` event

Fixed a bug where stdio MCP servers were not terminating properly on exit

Added prompt input undo functionality (Ctrl+Z and vim 'u' command)

Improvements to plan mode

Added forceLoginMethod setting to bypass login selection screen

Improved file path autocomplete with filename matching

Added timestamps in Ctrl-r mode and fixed Ctrl-c handling

Enhanced jq regex support for complex filters with pipes and select

Resizes images before upload to prevent API size limit errors

Added XDG_CONFIG_HOME support to configuration directory

Performance optimizations for memory usage

New attributes (terminal.type, language) in OpenTelemetry logging

Remote MCP servers (SSE and HTTP) now support OAuth

MCP resources can now be @-mentioned - /resume slash command to switch conversations within Claude Code

Slash commands: improved reliability for command discovery

Improved support for Ghostty

Improved web search reliability

Fixed a bug where settings arrays got overwritten instead of merged

Released Python SDK: pip install claude-code-sdk to get started

Fix for tool_use without matching tool_result errors

Fixed a bug where stdio MCP server processes would linger after quitting Claude Code

Added streaming input support without require -p flag

Improved startup performance and session storage performance

Added CLAUDE_BASH_MAINTAIN_PROJECT_WORKING_DIR environment variable to freeze working directory for bash commands

Added detailed MCP server tools display (/mcp)

MCP authentication and permission improvements

Added auto-reconnection for MCP SSE connections on disconnect

Fixed issue where pasted content was lost when dialogs appeared

Fixed crashes when the VS Code diff tool is invoked multiple times quickly

MCP server list UI improvements

Update Claude Code process title to display "claude" instead of "node"

Added /upgrade for smoother switching to Claude Max plans

Improved UI for authentication from API keys and Bedrock/Vertex/external auth tokens

Improved shell configuration error handling

Improved todo list handling during compaction

Improved streaming performance

Increased default otel interval from 1s -> 5s

Fixed edge cases where MCP_TIMEOUT and MCP_TOOL_TIMEOUT weren't being respected

Fixed a regression where search tools unnecessarily asked for permissions

Added support for triggering thinking non-English languages

Improved compacting UI

Migrated allowedTools and ignorePatterns from .claude.json -> settings.json

Deprecated claude config commands in favor of editing settings.json

Fixed a bug where --dangerously-skip-permissions sometimes didn't work in --print mode

Improved error handling for /install-github-app

Bugfixes, UI polish, and tool reliability improvements

Respect CLAUDE_CONFIG_DIR everywhere

Reduced unnecessary tool permission prompts

Added support for symlinks in @file typeahead

Bugfixes, UI polish, and tool reliability improvements

Improved model references to show provider-specific names (Sonnet 3.7 for Bedrock, Sonnet 4 for Console)

Updated documentation links and OAuth process descriptions

Introducing Sonnet 4 and Opus 4 models

Removed `DEBUG=true` in favor of `ANTHROPIC_LOG=debug`, to log all requests

Introduced settings.cleanupPeriodDays

Introduced CLAUDE_CODE_API_KEY_HELPER_TTL_MS env var

Introduced --debug mode

Introduced BASH_DEFAULT_TIMEOUT_MS and BASH_MAX_TIMEOUT_MS env vars

Fixed a bug where thinking was not working in -p mode

Fixed a regression in /cost reporting

Deprecated MCP wizard interface in favor of other MCP commands

Lots of other bugfixes and improvements

Fixed a bug where MCP permission prompt didn't always show correctly

Moved system & account status to /status

Added word movement keybindings for Vim

Improved latency for startup, todo tool, and file edits

Improved @mention reliability for images and folders

You can now paste multiple large chunks into one prompt

Made db storage optional; missing db support disables --continue and --resume

Claude now has access to a Todo list that helps it stay on track and be more organized

Renamed tools for consistency: LSTool -> LS, View -> Read, etc.

Drag in or copy/paste image files directly into the prompt - @-mention files to directly add them to context

Run one-off MCP servers with `claude --mcp-config <path-to-file>`

Improved performance for filename auto-complete

Task tool can now perform writes and run bash commands

Claude can now run multiple web queries in parallel

Pressing ESC once immediately interrupts Claude in Auto-accept mode

Enhanced terminal output display with better text truncation logic

Fixed issue where pasting could trigger memory or bash mode unexpectedly

Enhanced image detection for more reliable clipboard paste functionality

Fixed an issue where ESC key could crash the conversation history selector

Improved progress indicators for bash and fetch tools

Bugfixes for non-interactive mode (-p)

Press ctrl+r to see full output for long tool results

Added support for MCP SSE transport

Fixed a bug with JPEG detection

Press Shift + Tab to toggle auto-accept for file edits

Automatic conversation compaction for infinite conversation length (toggle with /config)

MCP server startup no longer blocks the app from starting up

`claude config add/remove` commands now accept multiple values separated by commas or spaces

Add MCP servers as JSON strings with `claude mcp add-json <n> <json>`