[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@anthropic-ai/claude-code	2.1.278 → 2.1.319				patch
astral-sh/uv	0.12.17 → 0.13.7				minor
docker/dockerfile	1.27 → 1.28			syntax	minor
edouard-claude/snip	0.25.2 → 0.26.0				minor
ghcr.io/devcontainers/features/docker-in-docker	4.1.1 → 4.1.3			feature	patch
j178/prek	0.5.3 → 0.5.10				patch
node (source)	24.21.0 → 24.22.2				minor
python (source)	3.14.7 → 3.15.2				minor

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.319

Compare Source

• Changed auto mode with telemetry or feature flags off, including behind LLM gateways: calls the server can't check are asked about or denied, with no fallback to the built-in classifier; set CLAUDE_CODE_AUTO_MODE_SERVER=0 to keep using it (Bedrock, Vertex and Foundry are unchanged)
• Changed auto mode behind an LLM gateway: CLAUDE_CODE_AUTO_MODE_SERVER=1 turns on the server-side check even with CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS set; if managed settings set the latter, they must set the 1 too
• Added support for MCP tasks in the terminal: when an MCP server runs a tool call as a task, Claude Code moves it to the background right away and tells Claude the result when it finishes
• Added the CLAUDE_CODE_DISABLE_MCP_TASK_BACKGROUND environment variable to make Claude Code wait for an MCP task inside its tool call instead of moving it to the background right away
• Added permissions.denyInsteadOfPrompting setting: a tool call that would wait on a permission prompt is denied and the turn continues, in terminal sessions, subagents and teammates
• Added /claude-api latency-optimize to find where your Claude API code makes people wait and try faster settings against your eval
• Added the CLAUDE_CODE_DISABLE_FEATURE_FLAGS environment variable, which stops feature-flag fetching without turning off telemetry; every flag then uses its built-in default
• Added spend for today, this week and this month to /usage for developers behind a Claude apps gateway who have no spend limit, when the gateway runs this version or later
• Added admin.pooled_conflict_rule and admin.pooled_priority_order to the Claude apps gateway, to set which pooled group budget pays first for a developer in several groups
• Added an optional login_notice setting to the Claude apps gateway that shows an operator-defined message on the gateway's browser verification page and on Claude Code's sign-in screen
• Added CLAUDE_GATEWAY_LOG_FORMAT=json to the Claude apps gateway: operational log lines become JSON with severity, time and message, for log collectors that read the level from a field
• Added a Claude apps gateway boot warning for a case where another policy's availableModels also allows a custom model id that one policy lists by name
• Added start-up warnings to the Claude apps gateway for policies with no desktopHome that rely on coworkTabEnabled: false or chatSessionRetentionDays, ahead of Claude Desktop's November 10 change
• Added a warning when your claude.ai login ends and Claude Code continues on the sign-in from ant auth login, which bills usage to your Claude Console organization
• Added a line at startup naming the Claude Console organization that is billed in a case where Claude Code uses the sign-in from ant auth login
• Added an "Earlier in this session" row to /tasks that lists finished subagents, so you can reopen one and message it even after it leaves the list or you restart
• Added a note to /loop confirmations in cloud sessions that a timer stops with its container, with an offer of a loop that survives
• Fixed MCP servers on the older handshake failing to connect, or returning empty results, because Claude Code declared an extension that it only uses with newer servers
• Fixed a long-running MCP tool call on a claude.ai connector sometimes never reporting its result after --resume
• Fixed a session's diff failing to load on claude.ai and the mobile apps when the folder Claude Code runs in has a file or folder named HEAD
• Fixed /diff showing "Diff unavailable" when a git repository has a file or folder named HEAD at its top level
• Fixed the /diff pane opening blank in sessions where 64 or more turns edited files
• Fixed slash commands typed after a leading space, tab or newline being sent to Claude as plain text instead of running
• Fixed a request that kept failing with a 401 refreshing your login on every retry and causing 401s in your other sessions
• Fixed /context sending its full visual grid to Claude on every later turn; Claude now reads only the table
• Fixed claude -p exiting 0 in auto mode when its actions were refused because no safety check was available: text and JSON output now exit 1
• Fixed a case where Claude Code listed every project file at start on Linux for projects on a network file system (NFS, SMB, Lustre and similar)
• Fixed a case where auto mode was wrongly refused when a client sent a model change and a request for auto mode back to back
• Fixed /status showing "Auto mode server: Enabled" when the server-side review isn't reaching the session, for example behind an LLM gateway that drops it
• Fixed Claude-drafted feedback, surveys and /feedback continuing to appear after the server refused feedback for your organization
• Fixed Claude drafting feedback on third-party gateways, where it can't be sent
• Fixed auto mode refusing actions without saying why when permission rules or autoMode settings are very large: it now explains and, unless autoMode deny rules are set, asks you in the terminal
• Fixed a case where Bash deny and ask rules missed commands written with quoted words
• Fixed subagent hand-back reports showing an internal marker and provenance note when expanded outside verbose mode
• Fixed claude -p --resume with a prompt losing a deferred tool call when its MCP server is missing: the run now exits 1, keeps the call and refuses later input
• Fixed a case where text was dropped from informational messages sent to SDK clients
• Fixed a case where Agent SDK hosts got a generic exit-code error instead of a failed run's own error message when the disk was full
• Fixed CLAUDE_CODE_RESUME_INTERRUPTED_TURN re-running a turn that was interrupted in plan mode when the session resumes in another permission mode
• Fixed edits to a settings file being ignored when made within a few seconds of Claude Code writing that file
• Fixed a config file left at the legacy name hiding your setup with no warning: Claude Code now says on stderr when a home holds two config files, and which is in use
• Fixed ~/.claude.json, settings and edited files ending up empty or cut off when the disk fills during a save in a read-only folder or to a bind-mounted file (one session saving at a time)
• Fixed Write ending the turn as a refusal when it couldn't read the file to overwrite
• Fixed background Bash commands that finish almost instantly losing their output while being reported as completed
• Fixed the Bash tool's diff of changed files missing a file that the command wrote just before it ended
• Fixed a mistyped model name, such as opus-5-5, telling you to update Claude Code instead of suggesting the model you meant
• Fixed a case where NotebookEdit changed the wrong cell when the notebook changed while a permission prompt was open
• Fixed a ~0.5s hang after pressing Enter on the /login success screen: the dialog now dismisses immediately and the post-login refresh runs in the background
• Fixed Ctrl+G not opening the external editor while typing an "Other" answer to a question in screen reader mode
• Fixed Monitor's WebSocket watch failing with "could not resolve" behind a proxy when CLAUDE_CODE_PROXY_RESOLVES_HOSTS is set and the machine has no DNS of its own
• Fixed claude plugin eval warnings suggesting max: 0 for a tool that must not be called, which could never pass
• Fixed background plugin auto-update not installing a dependency added by the updated plugin version
• Fixed Cmd+click not opening links in Ghostty over tmux in sessions opened from the agents view
• Fixed a mod's hot reload in .claude/skills missing a file that was deleted just after it appeared, and missing its return
• Fixed /rewind failing with "No files were restored" when restoring code to a checkpoint from before /branch
• Fixed the /claude-api skill saying Console web settings don't apply to Managed Agents sessions, and tightened its credential and permission examples
• Fixed needless permission prompts for read-only commands wrapped in a plain timeout DURATION, such as timeout 30 rg foo
• Fixed WebFetch describing claude.ai shared-chat links as empty pages; it now says shared chats can't be read and to paste the conversation instead
• Fixed Artifact database calls being re-sent to artifacts without a database; errors now say whether republishing helps
• Fixed a case where artifact database reads that save to a folder (out_dir) were refused
• Fixed detailed beta tracing not presenting CLAUDE_CODE_CLIENT_CERT to collectors that require a client certificate
• Fixed the OpenTelemetry claude_code.session.count metric counting Agent SDK prewarm() processes that were never claimed; a pre-started process now counts once, when it is claimed
• Fixed /clear killing running commands of background agents, teammates and workflows that keep running, and foreground subagents of background agents and teammates
• Fixed a terminal whose Claude apps gateway sign-in had expired sending telemetry and managed-settings requests that the gateway refused and logged as invalid_token
• Fixed the agents view appearing to send a reply to a background session waiting on a permission prompt; the reply now stays in the box with a hint to open the session and answer
• Fixed agent view removing a draft saved by another agent view in the same directory when exiting
• Fixed a case where agent view came back with another agent view's input text after restarting itself for an update
• Fixed the agents view preview cutting off long commands, results and status lines without an ellipsis, and dropping **, backticks and tags from commands waiting for approval
• Fixed Claude in Chrome reporting the extension as not connected when the connection dropped mid-action; Claude now checks the page before repeating an action that may have run
• Fixed Remote Control sessions still showing "Limit reached" on other devices after a usage limit was lifted outside the session
• Fixed the file card sometimes missing in the Claude iOS app when Claude sent a single file
• Fixed self-hosted runner sessions failing with no explanation when the server keeps refusing to renew model access: the runner now retries sooner and posts a warning in the session
• Fixed /permissions in cloud sessions replying only that it isn't available; it now says where the session's rules live and how to change them
• Fixed cloud sessions losing session-scoped deny and ask permission rules, such as those a PermissionRequest hook adds, when the session moves to a new worker
• Fixed mod hot-reloading turning off for the session when you typed three messages instead of answering its question in a cloud session
• Fixed background tasks that keep running after /clear disappearing from the task list in Claude Code on the web until another task started or ended
• Fixed hidden commands appearing in the slash command menu of cloud sessions on mobile and web
• Fixed a case where /rewind could restore or delete a file through a directory symlink
• Fixed a case where a sed command could skip the permission check in accept-edits and auto mode
• Fixed a case where CLAUDE_CODE_AUTO_MODE_SERVER=1 in managed settings was ignored behind an LLM gateway when the gateway's URL is set only there and server-managed settings can't be fetched
• Fixed a Bash permission bypass where a crafted environment prefix could hide part of a command from permission checks
• Fixed a case where deny and ask rules, hook matchers and disallowedTools entries written with a claude.ai connector's terminal name (mcp__claude_ai_Slack) were ignored in Claude Desktop (takes effect once Claude Desktop includes this version)
• Fixed a sandbox escape when creating a worktree
• Fixed self-hosted runners: --trust-workspace false now also stops hooks in the repository's settings files and skills from running
• Fixed a case where idle background sessions started through a shell-exported LLM gateway left the gateway after an update
• Fixed help links in /status and the auto mode billing notice opening only part of the address when they wrap
• Fixed a case where certificate errors behind a TLS-inspecting proxy persisted when CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC was set. With it set, Claude Code now makes a TLS handshake with the configured API host after a certificate failure, through your http:// proxy if one is set; it sends no API request
• Fixed claude remote-control exiting silently with status 0 when a first-run question gets no answer (scripts, services, batch jobs, Ctrl+C); it now says why and exits 1
• Fixed claude remote-control ignoring a piped y that has no newline after it at the first-run question; it now counts as a yes
• Fixed /rename reporting plain success when the new name could not be saved to the session transcript; it now warns that the new name may not last
• Fixed ${CLAUDE_PLUGIN_ROOT} not being substituted in a plugin-provided subagentStatusLine command, which can now reference the plugin's own scripts
• Fixed claude plugin update and /plugin "Update now" not installing dependencies added by the new plugin version
• Fixed subagents being told after compaction to expect a completion notice for background agents they neither started nor took over
• Fixed a case where a background agent's later report was lost silently: the notification now says it was refused and how to ask for it
• Improved config saves on Windows: Claude Code waits longer for a file another program has open, so a kill during a save is less likely to leave ~/.claude.json empty
• Improved Claude in Chrome after a brief disconnect: it waits up to 6 seconds for the session's own browser to return before picking another
• Improved Claude in Chrome: javascript_tool results of up to 60,000 characters now stay in the conversation instead of being saved to a file
• Improved claude purge and the clean-up of old sessions to retry a folder that could not be fully deleted, and to report it as an error if it remains
• Improved the refusal for a path outside the working directories on macOS and Windows: when only its letter case differs from a path inside them, the message names that spelling
• Improved the contrast of faint gray secondary text, such as hints, details in /stats, /model and /sandbox, and rejected-action messages
• Improved the artifact database error when an update targets a document that does not exist, and when the service pauses repeated refused writes
• Improved the Claude apps gateway's warnings about a failed upstream call: each now names the upstream, not only its provider
• Improved the Claude apps gateway's spend limit error: it reads "spend limit reached · resets Dec 1", then admin.blocked_message if one is set
• Improved the /model picker: older models are now grouped under a "More models" row instead of being listed after the current ones
• Improved /context at the terminal so the table Claude reads stays short: each list keeps its 10 largest rows, and MCP tools that load on demand share one row per server until they're called
• Improved /usage in cloud sessions: it now links to Settings → Usage on claude.ai in a case where plan limits can't be shown
• [VSCode] Improved the confirmation for removing a plugin marketplace: it now checks which of its plugins are installed at that moment
• Changed MCP tasks to work in the terminal without feature-flag fetching (Bedrock, Vertex, Foundry, LLM gateways, DISABLE_TELEMETRY); set CLAUDE_CODE_DISABLE_MCP_TASKS=1 to turn them off
• Changed auto mode so that a project's settings files or a plugin can no longer switch its server-side check back on once you have switched it off outside the project
• Changed Monitor's WebSocket watch to follow a rule on every Bash command: a deny refuses it, and under an ask rule an allow on Monitor, bypass mode or auto mode no longer skips the prompt
• Changed CLAUDE_CODE_PROXY_RESOLVES_HOSTS so that settings files can no longer set it where the host manages the network; set it in the process environment
• Changed a session's exact Bash or PowerShell ask rule to be refused, not asked about, when a broader deny rule covers the command
• Changed the Bash tool to ask for permission before running which with flags outside a lookup/display set
• Changed --add-dir directories to register plugin marketplaces only once that directory's own trust dialog has been accepted
• Changed nested skill loading: with the Bash sandbox on, skills in .claude/skills folders below the starting folder load only if you start Claude Code there or /cd there
• Changed self-paced /loop to end when a turn finishes without rescheduling, instead of scheduling a fallback wakeup; set CLAUDE_CODE_LOOP_KEEPALIVE=1 to keep the old behavior
• Changed PostToolUse hooks to run, with up to 10 seconds to finish, on tool calls that finish after a new message interrupts the turn
• Changed what Claude is told after safeguards stop a subagent: retry with a narrower prompt or tell you, instead of doing the work itself
• Changed cloud sessions to drop session-scoped allow rules at a move to a new worker when their deny and ask rules can't all be kept, so you may be asked again
• Changed the automatic certificate repair behind a TLS-inspecting proxy: it no longer runs when ALL_PROXY is the only proxy variable set. Set HTTPS_PROXY to the proxy's http:// URL instead
• Changed artifact database saves of rows others may have written: each file gets a hidden marker file, and existing files without one, earlier versions' exports among them, are left alone and reported
• Updated /claude-api managed-agents-onboard templates to match the Claude Console: removed Performance tuner, renamed two, and turned off web search and fetch in five whose prompts don't use them
• Removed shortcuts_list and shortcuts_execute, which listed and started shortcuts saved in the extension, from Claude Code's built-in Claude in Chrome tools
• Gateway: Added startup warnings for upstreams that mix AWS GovCloud with other upstreams, and for base URL variables in the gateway's environment
• Gateway: Added a start-up log warning when managed settings name an Amazon Bedrock guardrail in a header, which the gateway doesn't forward, and no bedrock upstream sets a guardrail
• Gateway: Fixed Claude Desktop offering a web search tool that always failed when every upstream is Amazon Bedrock
• Self-hosted runner: Fixed a runner started with --use-anthropic-git-proxy or --configure-git registering before a failed startup check made it exit; it now exits first
• Self-hosted runner: Changed CLAUDE_RUNNER_CHECKOUT_PATH so that each repository in a session gets its own folder: a folder name already taken in the session gets -2, -3, … at the end
• Self-hosted runner: Removed the end-of-session upload of a session's debug log; a failed session's log stays on the runner host unless --remove-session-state is set
• [VSCode] Fixed prompts over 50,000 characters being cut off silently: the prompt now stays in the chat box with a notice, and a paste over the limit is refused with a notice
• [VSCode] Fixed a click on the survey or "Report a problem" buttons sending the unfinished prompt
• [VSCode] Fixed cloud sessions opened from the extension's Web tab bringing back turns that /clear, or Retry or Edit of a typed prompt, had removed
• [VSCode] Fixed a deleted session's file coming back when that session was renamed in the extension
• [VSCode] Fixed Claude carrying out an unapproved plan after a window reload: a step interrupted in plan mode now stops with a notice when the session comes back in another permission mode
• [VSCode] Improved the "not signed in" message behind a Claude apps gateway: it now looks like an error and has a Sign in link
• [VSCode] Changed links in Claude's replies that point at Claude sign-in, connector or API addresses to show as text with the address, instead of opening in the browser
• [VSCode] Fixed a possible chat panel freeze when a dropped item's path contains a very long run of "/" characters
• [VSCode] Fixed the claude-vscode.toggleDictation command starting dictation in every open Claude view at once; it now acts only in the view you are using, and a second press stops it
• [VSCode] Fixed the chat panel slowing down while a reply with many unclosed $$ math fences, each shorter than the last, streams in
• [VSCode] Improved the chat panel's diagnostics tool for large workspaces: it leaves out files with no problems, returns compact JSON, and accepts an optional minimum severity
• [Cloud sessions] Fixed scheduled tasks silently dropping a connector named memory: runs now keep it, mounted under that name plus a short suffix
• [Cloud sessions] Fixed Send now on a waiting message in cloud sessions ending running background agents; they now keep running
• [Cloud sessions] Improved the stalled-setup warning on self-hosted environments: its link now prefers your organization's default or an environment with a live runner, and names it
• [Code Review] Changed unlinking a GitHub organization to also turn off its All repositories setting in Code Review; it stays off after you relink until you turn it back on
• [Claude Tag] Fixed Claude Tag setup blocking launch when the channel list couldn't fully load; admins can now launch without picking a channel
• [Claude Tag] Added a Claude Tag row to the Models admin page for Enterprise orgs with Claude Tag connected, linking to where its model defaults are managed
• [Claude Tag] Fixed saving auto mode allow rules in Claude Tag admin settings overwriting another admin's changes; the save is now refused with a message

v2.1.318

Compare Source

• Added a record of your answer when Claude Code asks to turn on the mods it writes in a session
• Added assume_role on mantle upstreams of the Claude apps gateway, for a role in another AWS account and for per-developer AWS cost attribution
• Added an effort option to a mod's $.model.fork, so a quick side job can run at low whatever effort the session uses; the result reports the effort sent
• Added the date a stored claude.ai sign-in ends to claude auth status (loginExpiresAt) and to claude -p JSON results (credential_expires_at)
• Added a one-line stderr warning to claude -p text output, starting 10 days before a stored claude.ai sign-in ends
• Fixed --continue sometimes losing the earlier conversation after a malformed tool call's retries ran out (regression in 2.1.314)
• Fixed macOS sessions with many running Bash commands stalling while memory grew
• Fixed permission prompts being answered by keys typed just after sending a message, or before a slow prompt appeared
• Fixed /logout, claude auth logout and claude mcp remove reporting success, and changes to trust, consent or MCP settings being dropped with no word, when the config file could not be updated on a shared network home directory
• Fixed jobs exiting with Not logged in when another terminal or host signs in again to the same account and organization on the same home
• Fixed claude mcp add and remove writing the config without its lock: they now wait for it or exit 1, though another job's save can still replace a saved server
• Fixed claude plugin commands exiting before a slow token refresh was saved, which could sign you out on the next run
• Fixed claude plugin validate passing a custom-named marketplace file that claude plugin marketplace add rejects
• Fixed stdio MCP servers that exit on the version probe being re-probed on every start; a server that dies in under 3s for its own reason is also pinned to the legacy handshake for 7 days
• Fixed sessions being refused at startup by an allowedProviders list that another login on the same machine had stored
• Fixed idle compaction replacing a conversation with a reply that was not a summary
• Fixed the "Now using usage credits" notice reappearing about every 30 seconds while a background subagent is running
• Fixed custom slash commands that fail, or that only Claude can invoke, printing nothing in claude -p and SDK sessions
• Fixed claude -p and Agent SDK sessions reporting success when an API error cut off a reply while a mod hooked turn.step
• Fixed a message sent right after a model change still running after Stop in headless sessions: Stop now cancels or stops it as it would a queued message
• Fixed a deleted session transcript being re-created with its last prompt when an idle non-interactive session exited
• Fixed claude remote-control hosts, the background daemon and self-hosted runners failing to start new sessions (spawn ENOENT) after an update or version cleanup removed the binary of a still-running process
• Fixed a running Claude Code process owned by another user (for example one left by sudo claude) being treated as dead by version cleanup, which could delete its binary
• Fixed /remote-control showing a session as available after a failed connection
• Fixed /design revoke reporting success when the request failed with a 404
• Fixed a shell command approved after a self-hosted runner or cloud session restart running in the session's start folder, not the folder it was asked in; if that folder can't be entered, it is not run
• Fixed Claude not being told when an approved connector tool was unavailable after a cloud session restart
• Fixed cloud sessions being stopped in the middle of a turn when the service refuses uploads for several minutes
• Fixed variables a Setup hook writes to CLAUDE_ENV_FILE not reaching the Bash tool in some cloud sessions
• Fixed the iPhone app showing a cloud session's turn as finished while it kept running, after a response was cut off at a tool call or a refused image or document was removed
• Fixed a restarted session re-sending a message that failed with an API error, ahead of the newer message waiting behind it
• Fixed a restarted session dropping its interrupted turn when the restart came right after Claude read a large image or retried a tool call
• Fixed every connection failing when the NODE_EXTRA_CA_CERTS file is empty, not PEM, or starts with a damaged certificate: readable certificates are now used, with a warning on stderr
• Fixed workflows re-running finished agents when resumed after a usage limit
• Fixed /mcp in cloud sessions counting tools the model can't use; a server's row now shows how many of its tools are available
• Fixed a duplicate notification when Claude left the status field out of a PushNotification call
• Fixed the error for a too-large image in a request with more than 20 images always saying the limit was 2000px; it now shows the API's limit
• Fixed the runtime in background shell details not updating while the dialog is open
• Fixed a mod's turn.step hook making a stopped reply finish as a success in headless runs
• Fixed retention cleanup leaving a home that only runs claude -p with no ~/.claude.json backup: it now takes a fresh backup before deleting the last good one
• Fixed the stored login being replaced by an empty file when a network home directory has no room left for data but still takes new files
• Fixed tokens from setup-token being refused at start on machines with forceLoginOrgUUID, when the token belongs to a permitted organization
• Fixed non-interactive launches replacing a ~/.claude.json that isn't valid JSON with defaults; the start now fails, says how to restore the file, and leaves it as is (#​87551)
• Fixed an empty ~/.claude.json with no backup being reported as corrupted; Claude Code now starts as it does when the file is missing
• Fixed the restore command printed for a damaged or missing ~/.claude.json naming an empty or cut-off backup, or failing on a read-only file
• Fixed the sign-in failure when a stored claude.ai login reaches its time limit: it now says so, and in claude -p names claude auth login and claude setup-token
• Improved how ~/.claude.json, settings files and the stored login survive saves on shared network home directories: they are less often deleted, briefly emptied or replaced by a near-empty or older copy
• Improved sessions on network file systems to look again when the configuration file is wrongly reported as missing, so fewer start without your MCP servers and trusted folders
• Improved MCP tool errors: a call made before the tool is loaded now returns its input schema
• Improved the reliability of git commits and pull request creation when the Bash tool runs macOS's built-in /bin/bash
• Improved "Ask your admin for more usage" in the usage limit menu to send the request in one step
• Improved how fast remote sessions reconnect after a pause or sleep
• Improved You should know toasts to say "try again" instead of "press 2", which only works in the terminal
• Improved auto-update reliability: a brief network failure while verifying a release is now retried right away instead of waiting for the next check
• Improved unattended runs (claude -p, SDK apps) to stop rewriting ~/.claude.json on every run when nothing in it changed
• Changed Claude Code to no longer install or update the IDE extension when started in an IDE terminal; use /ide from an outside terminal or your editor's extensions view
• Changed subagents to stop instead of switching models when "Switch models when a message is flagged" is set to "Ask each time"
• Changed background subagents to move a shell command to the background after 3 minutes on all providers, so the prompt cache doesn't expire while it runs
• Changed subagent progress summaries on Bedrock, Vertex, Foundry, or with telemetry off: on a cold prompt cache, one can now wait up to 5 minutes for the subagent's pending response
• Changed what a mod attaches at prompt.submit to stay in the user's turn rather than go out as a system message
• Changed deniedMcpServers URL entries to also block Anthropic-provided servers whose upstream URL matches, and connectors in cloud sessions and on self-hosted runners, where the session is given the connector's own URL; otherwise deny a connector by name
• Changed the /permissions rule details, built-in rules and delete confirmation views to use the standard dialog; pressing Ctrl+C twice there now goes back or cancels instead of quitting
• Changed /claude-api managed-agents-onboard to give a new agent's built-in tools, and a quickstart template's MCP tools, the auto permission policy ("Judge risky actions") by default, matching the Claude Console; say "run without asking" to opt out
• Removed the 2.1.288 fix that kept the model's earlier thinking when resuming a conversation started on 2.1.286 or earlier; that thinking can now be dropped
• Gateway: Added a log warning when the Google access token from a federation (external_account) credentials file is about to expire
• Gateway: Improved the log hints about listen.trusted_proxies: they now say to list only a proxy that adds the connecting address to X-Forwarded-For itself
• Gateway: Improved the warning when AWS CountTokens fails on Amazon Bedrock: it says Claude Code, not the gateway, counts after the 501, and points at IAM only when AWS denies access
• Self-hosted runner: Added CLAUDE_RUNNER_SPAWN_REASON to the orchestrator's spawn-runner hook environment: why Anthropic sent the request (e.g. runner_lost, resumed); unset when none was sent
• Self-hosted runner: Added a startup warning when --release-idle-session-min is the last argument with no value (still ignored) or has a value of only spaces (still read as 0)
• Self-hosted runner: Changed the orchestrator's log lines: ok session=… now prints at every log level on stdout (was debug only, stderr) with reason=… after jti=…, and nack session=… ends its fields with reason=… after retryable=…; update scripts that match retryable=true: or retryable=false:
• Remote Control: Fixed a misleading "spawn error: ENOENT" when a session's working folder is missing; the error now names the folder
• Remote Control: Improved the title a fork of a terminal fork is created with when the app doesn't set one: "Name (fork 2)"
• [VSCode] Fixed a window whose sign-in the organization's settings refuse starting a new Claude Code process in the background every minute
• [VSCode] Fixed a long word in the chat panel's error banner pushing its close button out of view
• [VSCode] Improved the sign-in screen to show what Claude Code printed when its sign-in status check fails
• [Cloud sessions] Added a No repository option: a cloud session on an Anthropic-hosted environment can now start without picking a repository
• [Cloud sessions] Added the usual Chrome names to cloud sessions, so tools other than Playwright can find the built-in Chromium through google-chrome and CHROME_PATH
• [Cloud sessions] Added a New session button to the card shown when a cloud session's environment was deleted, where the message box is hidden
• [Cloud sessions] Fixed reading GitHub Actions logs in cloud sessions: gh run view --log and gh api log requests now get the log in most environments, not an unreachable redirect
• [Cloud sessions] Improved most Create PR failure messages in cloud and Remote Control sessions: they now give the reason or a link to GitHub instead of saying Try again
• [Cloud sessions] Changed connector search results to tell Claude that the search covers only part of the connector directory
• [Remote Control] Fixed side-by-side checkouts of one repository looking identical in the environment menu's Remote Control rows; each now shows its own folder name
• [Claude Tag] Fixed keyboard focus and screen reader announcements in Claude Tag admin setup; pressing Escape in the connect form no longer also closes the Add dialog
• [Code Review] Improved the Code Review analytics page to retry once after a server or network failure, then show a Try again banner instead of empty cards

v2.1.317

Compare Source

• Added a warning to /schedule when a new cloud scheduled task gets connectors you did not ask for, with how to remove them
• Added a check that asks before a web or shell tool call sends your account email address to the network
• Added onFailure: "block" for Agent SDK hook callbacks, so a callback that fails blocks the action instead of letting it run
• Added a notice in Claude Desktop's Code tab when your organization's remote managed settings haven't loaded for the session, and another once they do
• Added a notice when auto mode's check has no answer for a subagent's tool call, which used to leave nothing in the main view
• Added anthropic.plan, anthropic.seat_type, anthropic.provider and anthropic.custom_base_url to OTel metrics, events and spans
• Added a cost report to the Claude apps gateway admin API, GET /v1/organizations/analytics/cost, for reading past spend over a date range in total, per developer, per day or per IdP group
• Added a daily record of each developer's IdP groups on Claude apps gateways with admin: set, kept for admin.identity_retention_days, which the cost report groups by
• Added CLAUDE_CODE_DISABLE_NESTED_SESSION_ID: set it to 1 on a self-hosted runner to have claude -p run inside a session use that session's ID and transcript, as in earlier versions
• Fixed project and local MCP servers disconnecting after the first turn in some Claude desktop sessions
• Fixed auto mode failing every turn when an LLM gateway set as the base URL answers 403 or 422 to its server-side safety check (a 403 with an apiKeyHelper is unchanged)
• Fixed claude auth status exiting before a slow token refresh was saved, which could sign you out on the next run
• Fixed a project's effortLevel setting being ignored by sessions that an app starts ahead of time and then opens in the project, such as new sessions in the desktop app's Code tab
• Fixed claude --from-pr reporting "No conversations found" in projects with many sessions when the linked session was older than the first page
• Fixed the second of two simultaneous permission prompts showing no file path or command on claude.ai and the mobile apps
• Fixed Remote Control and SDK hosts offering "don't ask again" on a mod's tool calls
• Fixed session titles being lost in cloud and SDK sessions when a new message or Stop arrived while the title was generating
• Fixed self-paced /loop wakeups sometimes not being scheduled when Claude left a field out of its request
• Fixed auto mode in cloud sessions stopping for approval when the Artifact tool uploaded, wrote to a database or saved a file through the outputs folder
• Fixed skills synced from claude.ai being lost or downloaded again every ten minutes when they can't be written to disk
• Fixed /schedule leaving a cloud scheduled task's next run time and link out of its results after creating or updating it
• Fixed screen readers speaking a running subagent's elapsed time and token count on every change in screen reader mode
• Fixed a region or network block (HTTP 403) being shown as a sign-in failure; the error now explains the block
• Fixed Claude saying a working claude.ai connector needed authorization or had failed in cloud sessions when a synced plugin included the same server
• Fixed claude -p exiting 0 when a full disk or quota lost its transcript or ~/.claude.json writes; it now prints an error and, in text and json output, exits 1. Full NFS exports may be missed
• Fixed edits to settings files made in the first second or so after launch not taking effect until a settings file changed again
• Fixed old transcripts not being cleaned up on machines where some runs skip cleanup, such as runs using --setting-sources
• Fixed deleted agent team inboxes being re-created by a teammate's late message
• Fixed a re-created agent teammate being removed from its team by an earlier shutdown approval
• Fixed stored scheduled tasks being impossible to list or delete after scheduled tasks were turned off
• Fixed Claude deleting your most recently updated /team-onboarding guide when asked to delete one without naming which
• Fixed Claude saying a /team-onboarding guide was deleted when the server refused the delete
• Fixed the Claude apps gateway hiding Amazon Bedrock's "Input is too long." error, which left sessions failing every turn with "upstream rejected the request" instead of compacting
• Fixed self-hosted runner sessions losing recent turns or the whole conversation when restarted while a plan waited for approval
• Fixed "Prompt is too long" after automatic compaction in sessions whose very large CLAUDE.md changed since it was last sent
• Fixed high memory use and slow startup in headless sessions with many plugins that register commands
• Fixed stdio MCP servers receiving an empty AWS_BEARER_TOKEN_BEDROCK when their env config sets it to empty; the variable is now unset, so the server can use the machine's own AWS credentials
• Fixed API requests failing with "unable to get local issuer certificate" behind some TLS-inspecting proxies after a root certificate renewal
• Fixed very long conversations losing their earlier summary when compaction had to shorten its own request
• Fixed a PDF's own metadata being able to make Read and @​-mentions under-count its pages
• Fixed DISABLE_PROMPT_CACHING_OPUS and DISABLE_PROMPT_CACHING_SONNET having no effect on [1m], other-region and undated spellings of the default model
• Fixed /artifacts and the Artifact tool's shared list showing no shared artifacts when you have 200 or more of your own
• Fixed Claude treating partial Grep and Glob results as complete when a search hit its time limit
• Fixed OpenTelemetry exports to an https:// endpoint through a proxy never being sent when they started while another export was still in progress
• Fixed a flood of connection attempts to a proxy that blocks (HTTP 403) OpenTelemetry exports to an http:// endpoint
• Fixed OpenTelemetry exports hanging indefinitely behind a proxy that never answers; they now time out after 10 seconds, or OTEL_EXPORTER_OTLP_TIMEOUT up to 30 seconds
• Fixed resumed sessions telling Claude again about a file change it already knew about
• Fixed Claude sometimes not using a built-in tool in a resumed session after an earlier call failed because the tool was switched off
• Fixed /remote-control answering "Unknown command" instead of saying that Remote Control is turned off by the disableRemoteControl setting
• Fixed agent team teammates in tmux or iTerm2 panes starting in auto mode when the lead session was in manual mode
• Fixed a background session sometimes losing a just-made change of permission mode when it was upgraded or retired
• Fixed Ctrl+C stopping all running background agents when pressed to clear typed text at the prompt
• Fixed /feedback showing "Enter to confirm" while a report is being sent
• Fixed child processes of a stopped shell command sometimes being sent SIGTERM twice, which could make some programs skip their cleanup
• Fixed claude -p run inside a cloud or self-hosted runner session sharing that session's ID: it wrote into the session's transcript, and a restart could resume the wrong conversation
• Fixed claude -p run inside a cloud or self-hosted runner session generating a title of its own and sending it to that session
• Improved the error shown on Microsoft Foundry when Azure credentials can't be loaded: it now says to check or refresh them, and reports as cloud_credential_error
• Improved /design-sync to say up front when your design system has moved to Claude, and stop before building instead of failing at upload
• Improved the startup error when a required Claude apps gateway can't be reached: it points to the network instead of a sign-in, and says when the gateway's TLS certificate can't be verified
• Improved the "Resume this session with" hint shown at exit to repeat the flags you launched with (for example --chrome --debug) ahead of --resume
• Improved how self-hosted runners recover from server errors: after a 5xx other than 501 or 529, a runner's next poll now opens a new connection instead of reusing the one that failed
• Improved how self-hosted runner sessions recover from server errors: after a 5xx other than 501 or 529, a session now opens new connections instead of reusing the one that failed
• Improved how self-hosted runner sessions recover when connections stop answering: after a heartbeat gets no answer, a session now opens new connections instead of trying each idle one in turn
• Changed SendMessage so a message to a running background agent arrives earlier: its running command moves to the background, without being stopped
• Changed subagents and teammates on a different model from the main conversation to use that model's saved effort level or its default, instead of the session's effort level
• Changed exit to skip the "Background work is running" prompt for plugin monitors
• Changed the built-in plugin-authoring skill to offer once, after a mod you built works, to help share the mod
• Removed the Read tool's "file unchanged since your last Read" stub: reading an unchanged file again returns its content
• Windows: Fixed every tool call being refused on some volumes where the native path lookup fails; the working-directory check now compares the folder's identity instead
• Windows: Fixed the session scratchpad and other temporary paths growing with your project's path length in sessions not started by Claude Desktop, which made repositories cloned into them hit the 260-character path limit
• Gateway: Fixed the status line and /usage showing a developer's own spend limit as 100% used after their group's pooled budget ran out
• Self-hosted runner: Fixed Claude not seeing the interrupted tool call when a session moves to a new runner and the turn is older than CLAUDE_CODE_RESUME_INTERRUPTED_TURN_MAX_AGE_MS
• Self-hosted runner: Fixed an MCP server that was switched off coming back on after the session moved to a new machine, when the session service had refused to save the switch
• Remote Control: Improved fork names when the app doesn't set one: a long name keeps its "(fork)" ending, and in sessions started with claude remote-control a fork of "Name (fork)" is "Name (fork 2)"
• [VSCode] Fixed forked conversations dropping messages: only one of the tool calls Claude ran in parallel was kept, and the last messages a compaction kept were lost, which could leave Claude's answer without the question it answered
• [VSCode] Fixed a message being lost when Claude did not finish starting in time: the extension now starts Claude once more before showing the error
• [VSCode] Fixed the sign-in screen opening when a request is blocked for its region or network
• [VSCode] Fixed the Account panel showing the plan name with a lower-cased second word
• [VSCode] Fixed file links in a Claude tab opening on top of the chat instead of in another editor group
• [VSCode] Fixed attachment chips, menus, banners and dialogs in the Claude panel staying small when chat.fontSize is raised
• [VSCode] Fixed ultrathink not raising effort for its turn or showing its rainbow when telemetry is off
• [Cloud sessions] Added a link card to cloud sessions, so you can open or decline a link an MCP server asks you to visit instead of the request going unseen
• [Cloud sessions] Changed the organization environment dialog in admin settings to the personal dialogs' short layout: each section opens from a row, and unsaved input asks before closing
• [Cloud sessions] Fixed adding a network secret for a host that already has one silently replacing it; the Add secret form now refuses and points you to the existing secret
• [Cloud sessions] Fixed new scheduled tasks ignoring your organization's default environment: the form now starts on the one an admin chose instead of the Anthropic-hosted default
• [Remote Control] Fixed the next message to an idle session going unanswered after you restart claude remote-control, when you sent it within a minute of your previous message
• [Claude Tag] Changed newly pasted artifact links in Slack to show a simpler card with an Open button that opens the artifact in C

[!IMPORTANT]
✂ PR body was truncated to here.