Claude Code

What's changed

• Added a live elapsed-time counter to the collapsed tool summary line so long-running tool calls visibly tick instead of looking stuck
• Added a startup warning for Write(path), NotebookEdit(path), and Glob(path) permission rules — use Edit(path) or Read(path) instead
• Fixed isolation: 'worktree' subagents being able to run git-mutating commands against the main repo checkout instead of their own isolated worktree
• Fixed the ultracode keyword opt-in firing on non-human-originated input such as webhook payloads and relayed PR comments
• Fixed a rendered text fragment leaking into crash telemetry when a UI component returned content outside a styled text element
• Fixed paste markers leaking into external editors opened from Claude Code, which could appear as stray È/É characters around pasted text
• Fixed claude attach sometimes failing with "job not found" or "agent is still starting" errors during session transitions — attach now waits for the daemon to settle, and terminal resizes during a slow attach are applied once it completes

What's changed

• Added screen reader mode: opt-in plain-text rendering for screen reader users. Run claude --ax-screen-reader, set CLAUDE_AX_SCREEN_READER=1, or add "axScreenReader": true to settings.
• Added vimInsertModeRemaps setting: map two-key insert-mode sequences like jj to Escape in vim mode
• Added CLAUDE_CODE_PROCESS_WRAPPER: agent view and the background service now honor a corporate launcher by running every Claude Code self-spawn through a required wrapper executable
• Added mouse-click support for multi-select menus and "Other" input rows in fullscreen mode
• Fixed fast mode staying off after switching back to a model that supports it — it now restores automatically when enabled in settings
• Fixed replies typed to a background agent being lost when delivery fails — the text is now saved and delivered when the session restarts
• Fixed background-session attach failing permanently ("Couldn't start the background daemon") after an update replaced the binary a running claude agents process was launched from

What's changed

• Auto mode is now available without CLAUDE_CODE_ENABLE_AUTO_MODE opt-in on Bedrock, Vertex AI, and Foundry; disable via disableAutoMode in settings
• Fixed the terminal freezing and keystrokes lagging while streaming responses containing very long lists, tables, paragraphs, or code blocks
• Fixed remote managed settings from a non-interactive run (claude -p, the SDK) being permanently recorded as consented without ever showing the security consent dialog
• Fixed spurious prompt-injection warnings triggered by benign system-generated conversation updates
• Fixed the auto-updater overwriting a custom launcher script or symlink at ~/.local/bin/claude on every release; /doctor now reports an externally managed launcher
• Fixed compound commands with cd prompting for permission when the only output redirect was to /dev/null
• Fixed the transcript jumping above the start of the answer when a response finishes streaming
• Fixed extensions.worktreeConfig being left in the repo's .git/config (breaking go-git tools like tea) after the last worktree.sparsePaths worktree was removed

What's changed

• Added directory path suggestions to /cd, matching /add-dir behavior
• Added a /doctor check that proposes trimming checked-in CLAUDE.md files by cutting content Claude could derive from the codebase
• /commit-push-pr now auto-allows git push to the repo's configured push remote (remote.pushDefault, or the sole remote when only one is configured) in addition to origin
• Gateway: /login now supports Anthropic-operated public gateway endpoints
• EnterWorktree now asks for confirmation before entering a git worktree outside the project's .claude/worktrees/ directory
• Background agents now upgrade to a new version in the background right after a Claude Code update, instead of paying a slow stale-session upgrade when you attach
• Fixed an expired login failing every model with a misleading "There's an issue with the selected model" error instead of prompting to run /login
• Fixed claude --resume and --continue not responding to keyboard input on startup

What's changed

• Added an auto mode rule that blocks tampering with session transcript files
• Fixed --json-schema silently producing unstructured output when the schema was invalid, and schemas using the format keyword being rejected
• Fixed a message sent while Claude was working being silently lost when the turn ended at the --max-turns limit
• Fixed Windows worktree removal deleting files outside the worktree when an NTFS junction or directory symlink existed inside it
• Fixed background agents staying shown as "failed" or "completed" in the agent list after being resumed with SendMessage
• Fixed background jobs flipping from "needs input" back to "working" in the agent list when the agent's turn contained no readable text
• Fixed claude attach erroring when a background agent was mid-upgrade restart instead of waiting for it to come back
• Fixed session-to-PR linking missing a PR created in a Bash call whose output exceeded the 30K inline limit
• Fixed claude mcp add-from-claude-desktop getting stuck when a server name contains unsupported characters; invalid names are now reported and remaining servers still import

What's changed

• Added a warning when your login is about to expire, so you can re-authenticate before background sessions are interrupted
• Added a grey ⏸ badge to the footer when in manual permission mode, making the active mode always visible
• Added the session's additional working directories to MCP roots/list, with notifications/roots/list_changed sent when the set changes
• Fixed opening or switching background agent sessions on macOS stalling for 15–20 seconds due to a false low-memory detection (regression in 2.1.196)
• Fixed background sessions becoming permanently unresponsive to attach, replies, and stop when the daemon's session token went stale — the session now recovers automatically
• Fixed returning to claude agents silently stopping running subagents and re-running the prompt from scratch — their work now carries over
• Fixed a memory and per-turn CPU regression in interactive sessions: the context-usage indicator no longer re-analyzes the entire transcript after every turn
• Fixed background agents inheriting a stale PATH from the daemon instead of the dispatching shell, causing missing tools on Windows

What's changed

• Added a "Dynamic workflow size" setting in /config for controlling how large Claude generally makes dynamic workflows (small/medium/large agent counts) — an advisory guideline, not an enforced cap
• Added workflow.run_id and workflow.name OpenTelemetry attributes to telemetry emitted by workflow-spawned agents, so a workflow run's activity can be reconstructed from OTel data
• Fixed a crash in the inline Ctrl+R history search when accepting or cancelling while the search was still scanning the history file
• Fixed /rename on background sessions being reverted when the job restarts, which broke addressing the session by its new name
• Fixed transient mTLS handshake failures when settings were re-applied during an in-place client certificate rotation
• Fixed commands sent from Remote Control (mobile/web) into an interactive session failing with "Unknown command"
• Fixed images and files sent from the Remote Control mobile or web app without a caption being silently dropped
• Fixed the sign-in URL printed by claude auth login and claude mcp login --no-browser not being reliably clickable when it wraps over SSH — it is now emitted as a single hyperlink

What's changed

• Changed AskUserQuestion dialogs to no longer auto-continue by default; opt into an idle timeout via /config
• Changed the "default" permission mode to "Manual" across the CLI, --help, VS Code, and JetBrains; --permission-mode manual and "defaultMode": "manual" are accepted alongside default
• Fixed a crash at startup when disabledMcpServers or enabledMcpServers in .claude.json is set to a non-array value
• Fixed background sessions silently stopping mid-turn after sleep/wake or when reopening a stalled session
• Fixed background sessions re-running a turn cancelled with Esc after a stall respawn
• Fixed background agents never starting again after a crash left a stale daemon.lock whose PID the OS reused
• Fixed background-agent daemon handover so a reinstalled older build can no longer take over the daemon; build recency is now judged by the version's embedded build timestamp
• Fixed background-agent roster issues: transient corruption permanently disabling orphan cleanup, older binaries not preserving fields written by newer versions, and socket auth tokens being stripped during daemon restarts

What's changed

• Stacked slash-skill invocations like /skill-a /skill-b do XYZ now load all leading skills (up to 5), not just the first
• Fixed SSL certificate errors (TLS-inspecting proxies, missing NODE_EXTRA_CA_CERTS, expired certs) burning retries before showing actionable guidance — they now fail immediately with the fix hint
• Fixed streaming responses being discarded when the API emits a mid-stream overloaded/server error after partial output — the partial is now kept with an incomplete-response notice
• Fixed subagents cut off by a rate limit or server error silently failing instead of returning their partial work to the parent
• Fixed subagents reporting API errors (e.g. usage limit reached) as successful results — the error is now reported to the parent agent
• Fixed the background-agent daemon on Linux killing itself and every running agent every ~50 seconds after an unclean shutdown left a corrupted worker record
• Fixed background agents failing to cold-start over SSH on macOS with "Could not switch to audit session" (regression in 2.1.196)
• Fixed claude stop being silently undone when it raced a background-agent respawn — the respawn now honors the stop

What's changed

• Subagents now run in the background by default, so Claude keeps working while they run and is notified when they finish (previously a gradual rollout)
• Claude in Chrome is now generally available
• Added background agent notifications in claude agents — sessions that need input or finish now fire the Notification hook (agent_needs_input / agent_completed)
• Added /dataviz skill for chart and dashboard design guidance with a runnable color-palette validator
• Gateway: added Claude Platform on AWS (anthropicAws) as an upstream provider; model-not-found responses now advance the failover chain
• Background agents launched from claude agents now commit, push, and open a draft PR when they finish code work in a worktree, instead of stopping to ask
• The built-in Explore agent now inherits the main session's model (capped at opus) instead of running on haiku
• Subagents and context compaction now inherit the session's extended thinking configuration, improving output quality on delegated tasks
• Fixed brief network drops mid-response aborting the turn — transient errors like ECONNRESET now retry with backoff instead of failing

What's changed

• Added support for organization default models — admins set it in the org console; it shows as "Org default" (or "Role default") in /model when you haven't picked one yourself
• Added readable default names for sessions at start, making them easier to identify and message
• Added clickable file attachments in chat — Cmd/Ctrl-click reveals the file in Finder/Explorer
• Security: claude mcp list/get no longer spawn .mcp.json servers that a repo self-approved via a committed .claude/settings.json; untrusted workspaces show ⏸ Pending approval
• Fixed waking a background job permanently deleting its conversation and re-running the original prompt when the transcript probe misread a real transcript; the file is now set aside, never deleted
• Fixed the rate-limit warning flickering off and rate-limit telemetry being over-counted when multiple parallel requests were in flight at the moment a usage limit was hit
• Fixed duplicate recap lines after a background session's turn: a schema-rejected StructuredOutput attempt no longer renders alongside its retry