claude-code/changelog.md

Version 2.1.89:
     · Added "defer" permission decision to PreToolUse hooks — headless sessions can pause at a tool call and resume with -p    
     --resume to have the hook re-evaluate
     · Added CLAUDE_CODE_NO_FLICKER=1 environment variable to opt into flicker-free alt-screen rendering with virtualized       
     scrollback
     · Added PermissionDenied hook that fires after auto mode classifier denials — return {retry: true} to tell the model it can
      retry
     · Added named subagents to @ mention typeahead suggestions
     · Added MCP_CONNECTION_NONBLOCKING=true for -p mode to skip the MCP connection wait entirely, and bounded --mcp-config     
     server connections at 5s instead of blocking on the slowest server
     · Auto mode: denied commands now show a notification and appear in /permissions → Recent tab where you can retry with r    
     · Fixed Edit(//path/**) and Read(//path/**) allow rules to check the resolved symlink target, not just the requested path  
     · Fixed voice push-to-talk not activating for some modifier-combo bindings, and voice mode on Windows failing with
     "WebSocket upgrade rejected with HTTP 101"
     · Fixed Edit/Write tools doubling CRLF on Windows and stripping Markdown hard line breaks (two trailing spaces)
     · Fixed StructuredOutput schema cache bug causing ~50% failure rate when using multiple schemas
     · Fixed memory leak where large JSON inputs were retained as LRU cache keys in long-running sessions
     · Fixed a crash when removing a message from very large session files (over 50MB)
     · Fixed LSP server zombie state after crash — server now restarts on next request instead of failing until session restart 
     · Fixed prompt history entries containing CJK or emoji being silently dropped when they fall on a 4KB boundary in
     ~/.claude/history.jsonl
     · Fixed /stats undercounting tokens by excluding subagent usage, and losing historical data beyond 30 days when the stats  
     cache format changes
     · Fixed -p --resume hangs when the deferred tool input exceeds 64KB or no deferred marker exists, and -p --continue not    
     resuming deferred tools
     · Fixed claude-cli:// deep links not opening on macOS
     · Fixed MCP tool errors truncating to only the first content block when the server returns multi-element error content     
     · Fixed skill reminders and other system context being dropped when sending messages with images via the SDK
     · Fixed PreToolUse/PostToolUse hooks to receive file_path as an absolute path for Write/Edit/Read tools, matching the      
     documented behavior
     · Fixed autocompact thrash loop — now detects when context refills to the limit immediately after compacting three times in
      a row and stops with an actionable error instead of burning API calls
     · Fixed prompt cache misses in long sessions caused by tool schema bytes changing mid-session
     · Fixed nested CLAUDE.md files being re-injected dozens of times in long sessions that read many files
     · Fixed --resume crash when transcript contains a tool result from an older CLI version or interrupted write
     · Fixed misleading "Rate limit reached" message when the API returned an entitlement error — now shows the actual error    
     with actionable hints
     · Fixed hooks if condition filtering not matching compound commands (ls && git push) or commands with env-var prefixes     
     (FOO=bar git push)
     · Fixed collapsed search/read group badges duplicating in terminal scrollback during heavy parallel tool use
     · Fixed notification invalidates not clearing the currently-displayed notification immediately
     · Fixed prompt briefly disappearing after submit when background messages arrived during processing
     · Fixed Devanagari and other combining-mark text being truncated in assistant output
     · Fixed rendering artifacts on main-screen terminals after layout shifts
     · Fixed voice mode failing to request microphone permission on macOS Apple Silicon
     · Fixed Shift+Enter submitting instead of inserting a newline on Windows Terminal Preview 1.25
     · Fixed periodic UI jitter during streaming in iTerm2 when running inside tmux
     · Fixed PowerShell tool incorrectly reporting failures when commands like git push wrote progress to stderr on Windows     
     PowerShell 5.1
     · Fixed a potential out-of-memory crash when the Edit tool was used on very large files (>1 GiB)
     · Improved collapsed tool summary to show "Listed N directories" for ls/tree/du instead of "Read N files"
     · Improved Bash tool to warn when a formatter/linter command modifies files you have previously read, preventing stale-edit
      errors
     · Improved @-mention typeahead to rank source files above MCP resources with similar names
     · Improved PowerShell tool prompt with version-appropriate syntax guidance (5.1 vs 7+)
     · Changed Edit to work on files viewed via Bash with sed -n or cat, without requiring a separate Read call first
     · Changed hook output over 50K characters to be saved to disk with a file path + preview instead of being injected directly
      into context
     · Changed cleanupPeriodDays: 0 in settings.json to be rejected with a validation error — it previously silently disabled   
     transcript persistence
     · Changed thinking summaries to no longer be generated by default in interactive sessions — set showThinkingSummaries: true
      in settings.json to restore
     · Documented TaskCreated hook event and its blocking behavior
     · Preserved task notifications when backgrounding a running command with Ctrl+B
     · PowerShell tool on Windows: external-command arguments containing both a double-quote and whitespace now prompt instead  
     of auto-allowing (PS 5.1 argument-splitting hardening)
     · /env now applies to PowerShell tool commands (previously only affected Bash)
     · /usage now hides redundant "Current week (Sonnet only)" bar for Pro and Enterprise plans
     · Image paste no longer inserts a trailing space
     · Pasting !command into an empty prompt now enters bash mode, matching typed ! behavior
     · /buddy is here for April 1st — hatch a small creature that watches you code

     Version 2.1.90:
     · Added /powerup — interactive lessons teaching Claude Code features with animated demos
     · Added CLAUDE_CODE_PLUGIN_KEEP_MARKETPLACE_ON_FAILURE env var to keep the existing marketplace cache when git pull fails, 
     useful in offline environments
     · Added .husky to protected directories (acceptEdits mode)
     · Fixed an infinite loop where the rate-limit options dialog would repeatedly auto-open after hitting your usage limit,    
     eventually crashing the session
     · Fixed --resume causing a full prompt-cache miss on the first request for users with deferred tools, MCP servers, or      
     custom agents (regression since v2.1.69)
     · Fixed Edit/Write failing with "File content has changed" when a PostToolUse format-on-save hook rewrites the file between
      consecutive edits
     · Fixed PreToolUse hooks that emit JSON to stdout and exit with code 2 not correctly blocking the tool call
     · Fixed collapsed search/read summary badge appearing multiple times in fullscreen scrollback when a CLAUDE.md file        
     auto-loads during a tool call
     · Fixed auto mode not respecting explicit user boundaries ("don't push", "wait for X before Y") even when the action would 
     otherwise be allowed
     · Fixed click-to-expand hover text being nearly invisible on light terminal themes
     · Fixed UI crash when malformed tool input reached the permission dialog
     · Fixed headers disappearing when scrolling /model, /config, and other selection screens
     · Hardened PowerShell tool permission checks: fixed trailing & background job bypass, -ErrorAction Break debugger hang,    
     archive-extraction TOCTOU, and parse-fail fallback deny-rule degradation
     · Improved performance: eliminated per-turn JSON.stringify of MCP tool schemas on cache-key lookup
     · Improved performance: SSE transport now handles large streamed frames in linear time (was quadratic)
     · Improved performance: SDK sessions with long conversations no longer slow down quadratically on transcript writes        
     · Improved /resume all-projects view to load project sessions in parallel, improving load times for users with many        
     projects
     · Changed --resume picker to no longer show sessions created by claude -p or SDK invocations
     · Removed Get-DnsClientCache and ipconfig /displaydns from auto-allow (DNS cache privacy)

     Version 2.1.91:
     · Added MCP tool result persistence override via _meta["anthropic/maxResultSizeChars"] annotation (up to 500K), allowing   
     larger results like DB schemas to pass through without truncation
     · Added disableSkillShellExecution setting to disable inline shell execution in skills, custom slash commands, and plugin  
     commands
     · Added support for multi-line prompts in claude-cli://open?q= deep links (encoded newlines %0A no longer rejected)        
     · Plugins can now ship executables under bin/ and invoke them as bare commands from the Bash tool
     · Fixed transcript chain breaks on --resume that could lose conversation history when async transcript writes fail silently
     · Fixed cmd+delete not deleting to start of line on iTerm2, kitty, WezTerm, Ghostty, and Windows Terminal
     · Fixed plan mode in remote sessions losing track of the plan file after a container restart, which caused permission      
     prompts on plan edits and an empty plan-approval modal
     · Fixed JSON schema validation for permissions.defaultMode: "auto" in settings.json
     · Fixed Windows version cleanup not protecting the active version's rollback copy
     · /feedback now explains why it's unavailable instead of disappearing from the slash menu
     · Improved /claude-api skill guidance for agent design patterns including tool surface decisions, context management, and  
     caching strategy
     · Improved performance: faster stripAnsi on Bun by routing through Bun.stripANSI
     · Edit tool now uses shorter old_string anchors, reducing output tokens

     Version 2.1.92:
     · Added forceRemoteSettingsRefresh policy setting: when set, the CLI blocks startup until remote managed settings are      
     freshly fetched, and exits if the fetch fails (fail-closed)
     · Added interactive Bedrock setup wizard accessible from the login screen when selecting "3rd-party platform" — guides you 
     through AWS authentication, region configuration, credential verification, and model pinning
     · Added per-model and cache-hit breakdown to /cost for subscription users
     · /release-notes is now an interactive version picker
     · Remote Control session names now use your hostname as the default prefix (e.g. myhost-graceful-unicorn), overridable with
      --remote-control-session-name-prefix
     · Pro users now see a footer hint when returning to a session after the prompt cache has expired, showing roughly how many 
     tokens the next turn will send uncached
     · Fixed subagent spawning permanently failing with "Could not determine pane count" after tmux windows are killed or       
     renumbered during a long-running session
     · Fixed prompt-type Stop hooks incorrectly failing when the small fast model returns ok:false, and restored
     preventContinuation:true semantics for non-Stop prompt-type hooks
     · Fixed tool input validation failures when streaming emits array/object fields as JSON-encoded strings
     · Fixed an API 400 error that could occur when extended thinking produced a whitespace-only text block alongside real      
     content
     · Fixed accidental feedback survey submissions from auto-pilot keypresses and consecutive-prompt digit collisions
     · Fixed misleading "esc to interrupt" hint appearing alongside "esc to clear" when a text selection exists in fullscreen   
     mode during processing
     · Fixed Homebrew install update prompts to use the cask's release channel (claude-code → stable, claude-code@latest →      
     latest)
     · Fixed ctrl+e jumping to the end of the next line when already at end of line in multiline prompts
     · Fixed an issue where the same message could appear at two positions when scrolling up in fullscreen mode (iTerm2,        
     Ghostty, and other terminals with DEC 2026 support)
     · Fixed idle-return "/clear to save X tokens" hint showing cumulative session tokens instead of current context size       
     · Fixed plugin MCP servers stuck "connecting" on session start when they duplicate a claude.ai connector that is
     unauthenticated
     · Improved Write tool diff computation speed for large files (60% faster on files with tabs/&/$)
     · Removed /tag command
     · Removed /vim command (toggle vim mode via /config → Editor mode)
     · Linux sandbox now ships the apply-seccomp helper in both npm and native builds, restoring unix-socket blocking for       
     sandboxed commands

     Version 2.1.94:
     · Added support for Amazon Bedrock powered by Mantle, set CLAUDE_CODE_USE_MANTLE=1
     · Changed default effort level from medium to high for API-key, Bedrock/Vertex/Foundry, Team, and Enterprise users (control
      this with /effort)
     · Added compact Slacked #channel header with a clickable channel link for Slack MCP send-message tool calls
     · Added keep-coding-instructions frontmatter field support for plugin output styles
     · Added hookSpecificOutput.sessionTitle to UserPromptSubmit hooks for setting the session title
     · Plugin skills declared via "skills": ["./"] now use the skill's frontmatter name for the invocation name instead of the  
     directory basename, giving a stable name across install methods
     · Fixed agents appearing stuck after a 429 rate-limit response with a long Retry-After header — the error now surfaces     
     immediately instead of silently waiting
     · Fixed Console login on macOS silently failing with "Not logged in" when the login keychain is locked or its password is  
     out of sync — the error is now surfaced and claude doctor diagnoses the fix
     · Fixed plugin skill hooks defined in YAML frontmatter being silently ignored
     · Fixed plugin hooks failing with "No such file or directory" when CLAUDE_PLUGIN_ROOT was not set
     · Fixed ${CLAUDE_PLUGIN_ROOT} resolving to the marketplace source directory instead of the installed cache for
     local-marketplace plugins on startup
     · Fixed scrollback showing the same diff repeated and blank pages in long-running sessions
     · Fixed multiline user prompts in the transcript indenting wrapped lines under the ❯ caret instead of under the text       
     · Fixed Shift+Space inserting the literal word "space" instead of a space character in search inputs
     · Fixed hyperlinks opening two browser tabs when clicked inside tmux running in an xterm.js-based terminal (VS Code, Hyper,
      Tabby)
     · Fixed an alt-screen rendering bug where content height changes mid-scroll could leave compounding ghost lines
     · Fixed FORCE_HYPERLINK environment variable being ignored when set via settings.json env
     · Fixed native terminal cursor not tracking the selected tab in dialogs, so screen readers and magnifiers can follow tab   
     navigation
     · Fixed Bedrock invocation of Sonnet 3.5 v2 by using the us. inference profile ID
     · Fixed SDK/print mode not preserving the partial assistant response in conversation history when interrupted mid-stream   
     · Improved --resume to resume sessions from other worktrees of the same repo directly instead of printing a cd command     
     · Fixed CJK and other multibyte text being corrupted with U+FFFD in stream-json input/output when chunk boundaries split a 
     UTF-8 sequence
     · [VSCode] Reduced cold-open subprocess work on starting a session
     · [VSCode] Fixed dropdown menus selecting the wrong item when the mouse was over the list while typing or using arrow keys 
     · [VSCode] Added a warning banner when settings.json files fail to parse, so users know their permission rules are not     
     being applied

     Version 2.1.96:
     · Fixed Bedrock requests failing with 403 "Authorization header is missing" when using AWS_BEARER_TOKEN_BEDROCK or
     CLAUDE_CODE_SKIP_BEDROCK_AUTH (regression in 2.1.94)

     Version 2.1.97:
     · Added focus view toggle (Ctrl+O) in NO_FLICKER mode showing prompt, one-line tool summary with edit diffstats, and final 
     response
     · Added refreshInterval status line setting to re-run the status line command every N seconds
     · Added workspace.git_worktree to the status line JSON input, set when the current directory is inside a linked git        
     worktree
     · Added ● N running indicator in /agents next to agent types with live subagent instances
     · Added syntax highlighting for Cedar policy files (.cedar, .cedarpolicy)
     · Fixed --dangerously-skip-permissions being silently downgraded to accept-edits mode after approving a write to a
     protected path
     · Fixed and hardened Bash tool permissions, tightening checks around env-var prefixes and network redirects, and reducing  
     false prompts on common commands
     · Fixed permission rules with names matching JavaScript prototype properties (e.g. toString) causing settings.json to be   
     silently ignored
     · Fixed managed-settings allow rules remaining active after an admin removed them until process restart
     · Fixed permissions.additionalDirectories changes in settings not applying mid-session
     · Fixed removing a directory from settings.permissions.additionalDirectories revoking access to the same directory passed  
     via --add-dir
     · Fixed MCP HTTP/SSE connections accumulating ~50 MB/hr of unreleased buffers when servers reconnect
     · Fixed MCP OAuth oauth.authServerMetadataUrl not being honored on token refresh after restart, fixing ADFS and similar    
     IdPs
     · Fixed 429 retries burning all attempts in ~13 seconds when the server returns a small Retry-After — exponential backoff  
     now applies as a minimum
     · Fixed rate-limit upgrade options disappearing after context compaction
     · Fixed several /resume picker issues: --resume <name> opening uneditable, Ctrl+A reload wiping search, empty list
     swallowing navigation, task-status text replacing conversation summary, and cross-project staleness
     · Fixed file-edit diffs disappearing on --resume when the edited file was larger than 10KB
     · Fixed --resume cache misses and lost mid-turn input from attachment messages not being saved to the transcript
     · Fixed messages typed while Claude is working not being persisted to the transcript
     · Fixed prompt-type Stop/SubagentStop hooks failing on long sessions, and hook evaluator API errors displaying "JSON       
     validation failed" instead of the actual message
     · Fixed subagents with worktree isolation or cwd: override leaking their working directory back to the parent session's    
     Bash tool
     · Fixed compaction writing duplicate multi-MB subagent transcript files on prompt-too-long retries
     · Fixed claude plugin update reporting "already at the latest version" for git-based marketplace plugins when the remote   
     had newer commits
     · Fixed slash command picker breaking when a plugin's frontmatter name is a YAML boolean keyword
     · Fixed copying wrapped URLs in NO_FLICKER mode inserting spaces at line breaks
     · Fixed scroll rendering artifacts in NO_FLICKER mode when running inside zellij
     · Fixed a crash in NO_FLICKER mode when hovering over MCP tool results
     · Fixed a NO_FLICKER mode memory leak where API retries left stale streaming state
     · Fixed slow mouse-wheel scrolling in NO_FLICKER mode on Windows Terminal
     · Fixed custom status line not displaying in NO_FLICKER mode on terminals shorter than 24 rows
     · Fixed Shift+Enter and Alt/Cmd+arrow shortcuts not working in Warp with NO_FLICKER mode
     · Fixed Korean/Japanese/Unicode text becoming garbled when copied in no-flicker mode on Windows
     · Fixed Bedrock SigV4 authentication failing when AWS_BEARER_TOKEN_BEDROCK or ANTHROPIC_BEDROCK_BASE_URL are set to empty  
     strings (as GitHub Actions does for unset inputs)
     · Improved Accept Edits mode to auto-approve filesystem commands prefixed with safe env vars or process wrappers (e.g.     
     LANG=C rm foo, timeout 5 mkdir out)
     · Improved auto mode and bypass-permissions mode to auto-approve sandbox network access prompts
     · Improved sandbox: sandbox.network.allowMachLookup now takes effect on macOS
     · Improved image handling: pasted and attached images are now compressed to the same token budget as images read via the   
     Read tool
     · Improved slash command and @-mention completion to trigger after CJK sentence punctuation, so Japanese/Chinese input no  
     longer requires a space before / or @
     · Improved Bridge sessions to show the local git repo, branch, and working directory on the claude.ai session card
     · Improved footer layout: indicators (Focus, notifications) now stay on the mode-indicator row instead of wrapping below   
     · Improved context-low warning to show as a transient footer notification instead of a persistent row
     · Improved markdown blockquotes to show a continuous left bar across wrapped lines
     · Improved session transcript size by skipping empty hook entries and capping stored pre-edit file copies
     · Improved transcript accuracy: per-block entries now carry the final token usage instead of the streaming placeholder     
     · Improved Bash tool OTEL tracing: subprocesses now inherit a W3C TRACEPARENT env var when tracing is enabled
     · Updated /claude-api skill to cover Managed Agents alongside the Claude API

     Version 2.1.98:
     · Added interactive Google Vertex AI setup wizard accessible from the login screen when selecting "3rd-party platform",    
     guiding you through GCP authentication, project and region configuration, credential verification, and model pinning       
     · Added CLAUDE_CODE_PERFORCE_MODE env var: when set, Edit/Write/NotebookEdit fail on read-only files with a p4 edit hint   
     instead of silently overwriting them
     · Added Monitor tool for streaming events from background scripts
     · Added subprocess sandboxing with PID namespace isolation on Linux when CLAUDE_CODE_SUBPROCESS_ENV_SCRUB is set, and      
     CLAUDE_CODE_SCRIPT_CAPS env var to limit per-session script invocations
     · Added --exclude-dynamic-system-prompt-sections flag to print mode for improved cross-user prompt caching
     · Added workspace.git_worktree to the status line JSON input, set whenever the current directory is inside a linked git    
     worktree
     · Added W3C TRACEPARENT env var to Bash tool subprocesses when OTEL tracing is enabled, so child-process spans correctly   
     parent to Claude Code's trace tree
     · LSP: Claude Code now identifies itself to language servers via clientInfo in the initialize request
     · Fixed a Bash tool permission bypass where a backslash-escaped flag could be auto-allowed as read-only and lead to        
     arbitrary code execution
     · Fixed compound Bash commands bypassing forced permission prompts for safety checks and explicit ask rules in auto and    
     bypass-permissions modes
     · Fixed read-only commands with env-var prefixes not prompting unless the var is known-safe (LANG, TZ, NO_COLOR, etc.)     
     · Fixed redirects to /dev/tcp/... or /dev/udp/... not prompting instead of auto-allowing
     · Fixed stalled streaming responses timing out instead of falling back to non-streaming mode
     · Fixed 429 retries burning all attempts in ~13s when the server returns a small Retry-After — exponential backoff now     
     applies as a minimum
     · Fixed MCP OAuth oauth.authServerMetadataUrl config override not being honored on token refresh after restart, affecting  
     ADFS and similar IdPs
     · Fixed capital letters being dropped to lowercase on xterm and VS Code integrated terminal when the kitty keyboard        
     protocol is active
     · Fixed macOS text replacements deleting the trigger word instead of inserting the substitution
     · Fixed --dangerously-skip-permissions being silently downgraded to accept-edits mode after approving a write to a
     protected path via Bash
     · Fixed managed-settings allow rules remaining active after an admin removed them, until process restart
     · Fixed permissions.additionalDirectories changes not applying mid-session — removed directories lose access immediately   
     and added ones work without restart
     · Fixed removing a directory from additionalDirectories revoking access to the same directory passed via --add-dir
     · Fixed Bash(cmd:*) and Bash(git commit *) wildcard permission rules failing to match commands with extra spaces or tabs   
     · Fixed Bash(...) deny rules being downgraded to a prompt for piped commands that mix cd with other segments
     · Fixed false Bash permission prompts for cut -d /, paste -d /, column -s /, awk '{print $1}' file, and filenames
     containing %
     · Fixed permission rules with names matching JavaScript prototype properties (e.g. toString) causing settings.json to be   
     silently ignored
     · Fixed agent team members not inheriting the leader's permission mode when using --dangerously-skip-permissions
     · Fixed a crash in fullscreen mode when hovering over MCP tool results
     · Fixed copying wrapped URLs in fullscreen mode inserting spaces at line breaks
     · Fixed file-edit diffs disappearing from the UI on --resume when the edited file was larger than 10KB
     · Fixed several /resume picker issues: --resume <name> opening uneditable, filter reload wiping search state, empty list   
     swallowing arrow keys, cross-project staleness, and transient task-status text replacing conversation summaries
     · Fixed /export not honoring absolute paths and ~, and silently rewriting user-supplied extensions to .txt
     · Fixed /effort max being denied for unknown or future model IDs
     · Fixed slash command picker breaking when a plugin's frontmatter name is a YAML boolean keyword
     · Fixed rate-limit upsell text being hidden after message remounts
     · Fixed MCP tools with _meta["anthropic/maxResultSizeChars"] not bypassing the token-based persist layer
     · Fixed voice mode leaking dozens of space characters into the input when re-holding the push-to-talk key while the        
     previous transcript is still processing
     · Fixed DISABLE_AUTOUPDATER not fully suppressing the npm registry version check and symlink modification on npm-based     
     installs
     · Fixed a memory leak where Remote Control permission handler entries were retained for the lifetime of the session        
     · Fixed background subagents that fail with an error not reporting partial progress to the parent agent
     · Fixed prompt-type Stop/SubagentStop hooks failing on long sessions, and hook evaluator API errors showing "JSON
     validation failed" instead of the real message
     · Fixed feedback survey rendering when dismissed
     · Fixed Bash grep -f FILE / rg -f FILE not prompting when reading a pattern file outside the working directory
     · Fixed stale subagent worktree cleanup removing worktrees that contain untracked files
     · Fixed sandbox.network.allowMachLookup not taking effect on macOS
     · Improved /resume filter hint labels and added project/worktree/branch names in the filter indicator
     · Improved footer indicators (Focus, notifications) to stay on the mode-indicator row instead of wrapping at narrow        
     terminal widths
     · Improved /agents with a tabbed layout: a Running tab shows live subagents, and the Library tab adds Run agent and View   
     running instance actions
     · Improved /reload-plugins to pick up plugin-provided skills without requiring a restart
     · Improved Accept Edits mode to auto-approve filesystem commands prefixed with safe env vars or process wrappers
     · Improved Vim mode: j/k in NORMAL mode now navigate history and select the footer pill at the input boundary
     · Improved hook errors in the transcript to include the first line of stderr for self-diagnosis without --debug
     · Improved OTEL tracing: interaction spans now correctly wrap full turns under concurrent SDK calls, and headless turns end
      spans per-turn
     · Improved transcript entries to carry final token usage instead of streaming placeholders
     · Updated the /claude-api skill to cover Managed Agents alongside Claude API
     · [VSCode] Fixed false-positive "requires git-bash" error on Windows when CLAUDE_CODE_GIT_BASH_PATH is set or Git is       
     installed at a default location
     · Fixed CLAUDE_CODE_MAX_CONTEXT_TOKENS to honor DISABLE_COMPACT when it is set.
     · Dropped /compact hints when DISABLE_COMPACT is set.

     Version 2.1.101:
     · Added /team-onboarding command to generate a teammate ramp-up guide from your local Claude Code usage
     · Added OS CA certificate store trust by default, so enterprise TLS proxies work without extra setup (set
     CLAUDE_CODE_CERT_STORE=bundled to use only bundled CAs)
     · /ultraplan and other remote-session features now auto-create a default cloud environment instead of requiring web setup  
     first
     · Improved brief mode to retry once when Claude responds with plain text instead of a structured message
     · Improved focus mode: Claude now writes more self-contained summaries since it knows you only see its final message       
     · Improved tool-not-available errors to explain why and how to proceed when the model calls a tool that exists but isn't   
     available in the current context
     · Improved rate-limit retry messages to show which limit was hit and when it resets instead of an opaque seconds countdown 
     · Improved refusal error messages to include the API-provided explanation when available
     · Improved claude -p --resume <name> to accept session titles set via /rename or --name
     · Improved settings resilience: an unrecognized hook event name in settings.json no longer causes the entire file to be    
     ignored
     · Improved plugin hooks from plugins force-enabled by managed settings to run when allowManagedHooksOnly is set
     · Improved /plugin and claude plugin update to show a warning when the marketplace could not be refreshed, instead of      
     silently reporting a stale version
     · Improved plan mode to hide the "Refine with Ultraplan" option when the user's org or auth setup can't reach Claude Code  
     on the web
     · Improved beta tracing to honor OTEL_LOG_USER_PROMPTS, OTEL_LOG_TOOL_DETAILS, and OTEL_LOG_TOOL_CONTENT; sensitive span   
     attributes are no longer emitted unless opted in
     · Improved SDK query() to clean up subprocess and temp files when consumers break from for await or use await using        
     · Fixed a command injection vulnerability in the POSIX which fallback used by LSP binary detection
     · Fixed a memory leak where long sessions retained dozens of historical copies of the message list in the virtual scroller 
     · Fixed --resume/--continue losing conversation context on large sessions when the loader anchored on a dead-end branch    
     instead of the live conversation
     · Fixed --resume chain recovery bridging into an unrelated subagent conversation when a subagent message landed near a     
     main-chain write gap
     · Fixed a crash on --resume when a persisted Edit/Write tool result was missing its file_path
     · Fixed a hardcoded 5-minute request timeout that aborted slow backends (local LLMs, extended thinking, slow gateways)     
     regardless of API_TIMEOUT_MS
     · Fixed permissions.deny rules not overriding a PreToolUse hook's permissionDecision: "ask" — previously the hook could    
     downgrade a deny into a prompt
     · Fixed --setting-sources without user causing background cleanup to ignore cleanupPeriodDays and delete conversation      
     history older than 30 days
     · Fixed Bedrock SigV4 authentication failing with 403 when ANTHROPIC_AUTH_TOKEN, apiKeyHelper, or ANTHROPIC_CUSTOM_HEADERS 
     set an Authorization header
     · Fixed claude -w <name> failing with "already exists" after a previous session's worktree cleanup left a stale directory  
     · Fixed subagents not inheriting MCP tools from dynamically-injected servers
     · Fixed sub-agents running in isolated worktrees being denied Read/Edit access to files inside their own worktree
     · Fixed sandboxed Bash commands failing with mktemp: No such file or directory after a fresh boot
     · Fixed claude mcp serve tool calls failing with "Tool execution failed" in MCP clients that validate outputSchema
     · Fixed RemoteTrigger tool's run action sending an empty body and being rejected by the server
     · Fixed several /resume picker issues: narrow default view hiding sessions from other projects, unreachable preview on     
     Windows Terminal, incorrect cwd in worktrees, session-not-found errors not surfacing in stderr, terminal title not being   
     set, and resume hint overlapping the prompt input
     · Fixed Grep tool ENOENT when the embedded ripgrep binary path becomes stale (VS Code extension auto-update, macOS App     
     Translocation); now falls back to system rg and self-heals mid-session
     · Fixed /btw writing a copy of the entire conversation to disk on every use
     · Fixed /context Free space and Messages breakdown disagreeing with the header percentage
     · Fixed several plugin issues: slash commands resolving to the wrong plugin with duplicate name: frontmatter, /plugin      
     update failing with ENAMETOOLONG, Discover showing already-installed plugins, directory-source plugins loading from a stale
      version cache, and skills not honoring context: fork and agent frontmatter fields
     · Fixed the /mcp menu offering OAuth-specific actions for MCP servers configured with headersHelper; Reconnect is now      
     offered instead to re-invoke the helper script
     · Fixed ctrl+], ctrl+\, and ctrl+^ keybindings not firing in terminals that send raw C0 control bytes (Terminal.app,       
     default iTerm2, xterm)
     · Fixed /login OAuth URL rendering with padding that prevented clean mouse selection
     · Fixed rendering issues: flicker in non-fullscreen mode when content above the visible area changed, terminal scrollback  
     being wiped during long sessions in non-fullscreen mode, and mouse-scroll escape sequences occasionally leaking into the   
     prompt as text
     · Fixed crash when settings.json env values are numbers instead of strings
     · Fixed in-app settings writes (e.g. /add-dir --remember, /config) not refreshing the in-memory snapshot, preventing       
     removed directories from being revoked mid-session
     · Fixed custom keybindings (~/.claude/keybindings.json) not loading on Bedrock, Vertex, and other third-party providers    
     · Fixed claude --continue -p not correctly continuing sessions created by -p or the SDK
     · Fixed several Remote Control issues: worktrees removed on session crash, connection failures not persisting in the       
     transcript, spurious "Disconnected" indicator in brief mode for local sessions, and /remote-control failing over SSH when  
     only CLAUDE_CODE_ORGANIZATION_UUID is set
     · Fixed /insights sometimes omitting the report file link from its response
     · [VSCode] Fixed the file attachment below the chat input not clearing when the last editor tab is closed

     Version 2.1.105:
     · Added path parameter to the EnterWorktree tool to switch into an existing worktree of the current repository
     · Added PreCompact hook support: hooks can now block compaction by exiting with code 2 or returning {"decision":"block"}   
     · Added background monitor support for plugins via a top-level monitors manifest key that auto-arms at session start or on 
     skill invoke
     · /proactive is now an alias for /loop
     · Improved stalled API stream handling: streams now abort after 5 minutes of no data and retry non-streaming instead of    
     hanging indefinitely
     · Improved network error messages: connection errors now show a retry message immediately instead of a silent spinner      
     · Improved file write display: long single-line writes (e.g. minified JSON) are now truncated in the UI instead of
     paginating across many screens
     · Improved /doctor layout with status icons; press f to have Claude fix reported issues
     · Improved /config labels and descriptions for clarity
     · Improved skill description handling: raised the listing cap from 250 to 1,536 characters and added a startup warning when
      descriptions are truncated
     · Improved WebFetch to strip <style> and <script> contents from fetched pages so CSS-heavy pages no longer exhaust the     
     content budget before reaching actual text
     · Improved stale agent worktree cleanup to remove worktrees whose PR was squash-merged instead of keeping them indefinitely
     · Improved MCP large-output truncation prompt to give format-specific recipes (e.g. jq for JSON, computed Read chunk sizes 
     for text)
     · Fixed images attached to queued messages (sent while Claude is working) being dropped
     · Fixed screen going blank when the prompt input wraps to a second line in long conversations
     · Fixed leading whitespace getting copied when selecting multi-line assistant responses in fullscreen mode
     · Fixed leading whitespace being trimmed from assistant messages, breaking ASCII art and indented diagrams
     · Fixed garbled bash output when commands print clickable file links (e.g. Python rich/loguru logging)
     · Fixed alt+enter not inserting a newline in terminals using ESC-prefix alt encoding, and Ctrl+J not inserting a newline   
     (regression in 2.1.100)
     · Fixed duplicate "Creating worktree" text in EnterWorktree/ExitWorktree tool display
     · Fixed queued user prompts disappearing from focus mode
     · Fixed one-shot scheduled tasks re-firing repeatedly when the file watcher missed the post-fire cleanup
     · Fixed inbound channel notifications being silently dropped after the first message for Team/Enterprise users
     · Fixed marketplace plugins with package.json and lockfile not having dependencies installed automatically after
     install/update
     · Fixed marketplace auto-update leaving the official marketplace in a broken state when a plugin process holds files open  
     during the update
     · Fixed "Resume this session with..." hint not printing on exit after /resume, --worktree, or /branch
     · Fixed feedback survey shortcut keys firing when typed at the end of a longer prompt
     · Fixed stdio MCP server emitting malformed (non-JSON) output hanging the session instead of failing fast with "Connection 
     closed"
     · Fixed MCP tools missing on the first turn of headless/remote-trigger sessions when MCP servers connect asynchronously    
     · Fixed /model picker on AWS Bedrock in non-US regions persisting invalid us.* model IDs to settings.json when inference   
     profile discovery is still in-flight
     · Fixed 429 rate-limit errors showing a raw JSON dump instead of a clean message for API-key, Bedrock, and Vertex users    
     · Fixed crash on resume when session contains malformed text blocks
     · Fixed /help dropping the tab bar, Shortcuts heading, and footer at short terminal heights
     · Fixed malformed keybinding entry values in keybindings.json being silently loaded instead of rejected with a clear error 
     · Fixed CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC in one project's settings permanently disabling usage metrics for all     
     projects on the machine
     · Fixed washed-out 16-color palette when using Ghostty, Kitty, Alacritty, WezTerm, foot, rio, or Contour over SSH/mosh     
     · Fixed Bash tool suggesting acceptEdits permission mode when exiting plan mode would downgrade from a higher permission   
     level

     Version 2.1.107:
     · Show thinking hints sooner during long operations

     Version 2.1.108:
     · Added ENABLE_PROMPT_CACHING_1H env var to opt into 1-hour prompt cache TTL on API key, Bedrock, Vertex, and Foundry      
     (ENABLE_PROMPT_CACHING_1H_BEDROCK is deprecated but still honored), and FORCE_PROMPT_CACHING_5M to force 5-minute TTL      
     · Added recap feature to provide context when returning to a session, configurable in /config and manually invocable with  
     /recap; force with CLAUDE_CODE_ENABLE_AWAY_SUMMARY if telemetry disabled.
     · The model can now discover and invoke built-in slash commands like /init, /review, and /security-review via the Skill    
     tool
     · /undo is now an alias for /rewind
     · Improved /model to warn before switching models mid-conversation, since the next response re-reads the full history      
     uncached
     · Improved /resume picker to default to sessions from the current directory; press Ctrl+A to show all projects
     · Improved error messages: server rate limits are now distinguished from plan usage limits; 5xx/529 errors show a link to  
     status.claude.com; unknown slash commands suggest the closest match
     · Reduced memory footprint for file reads, edits, and syntax highlighting by loading language grammars on demand
     · Added "verbose" indicator when viewing the detailed transcript (Ctrl+O)
     · Added a warning at startup when prompt caching is disabled via DISABLE_PROMPT_CACHING* environment variables
     · Fixed paste not working in the /login code prompt (regression in 2.1.105)
     · Fixed subscribers who set DISABLE_TELEMETRY falling back to 5-minute prompt cache TTL instead of 1 hour
     · Fixed Agent tool prompting for permission in auto mode when the safety classifier's transcript exceeded its context      
     window
     · Fixed Bash tool producing no output when CLAUDE_ENV_FILE (e.g. ~/.zprofile) ends with a # comment line
     · Fixed claude --resume <session-id> losing the session's custom name and color set via /rename
     · Fixed session titles showing placeholder example text when the first message is a short greeting
     · Fixed terminal escape codes appearing as garbage text in the prompt input after --teleport
     · Fixed /feedback retry: pressing Enter to resubmit after a failure now works without first editing the description        
     · Fixed --teleport and --resume <id> precondition errors (e.g. dirty git tree, session not found) exiting silently instead 
     of showing the error message
     · Fixed Remote Control session titles set in the web UI being overwritten by auto-generated titles after the third message 
     · Fixed --resume truncating sessions when the transcript contained a self-referencing message
     · Fixed transcript write failures (e.g., disk full) being silently dropped instead of being logged
     · Fixed diacritical marks (accents, umlauts, cedillas) being dropped from responses when the language setting is configured
     · Fixed policy-managed plugins never auto-updating when running from a different project than where they were first        
     installed

     Version 2.1.109:
     · Improved the extended-thinking indicator with a rotating progress hint