Claude Code

What's changed

• Added CLAUDE_CODE_DISABLE_MOUSE_CLICKS to disable mouse click/drag/hover in fullscreen mode while keeping wheel scroll
• Fixed hook matchers with hyphenated identifiers (e.g. code-reviewer, mcp__brave-search) accidentally substring-matching — they now exact-match. Use mcp__brave-search__.* to match all tools from a hyphenated MCP server.
• Fixed voice dictation on macOS capturing silence in long-running sessions after the default input device changes
• Fixed voice dictation auto-submit never firing for languages written without spaces (Japanese, Chinese, Thai)
• Fixed external plugins enabled only by project .claude/settings.json not requiring explicit install consent on every loader path
• Fixed /plugin Enable/Disable not working when a plugin's plugin.json name differs from its marketplace entry name
• Fixed background jobs disappearing from claude agents or losing data when written by a newer Claude Code version
• Fixed reopening a crashed background task showing a blank screen for up to 5 seconds instead of its restart
• Fixed background agent daemons running unreachable when the control socket fails to start, blocking restarts

What's changed

• Added autoMode.classifyAllShell setting to route all Bash/PowerShell commands through the auto-mode classifier instead of only arbitrary-code-execution patterns
• Added auto-mode denial reasons to the transcript, the denial toast, and /permissions recent denials
• Added claude_code.assistant_response OpenTelemetry log event containing the model's response text. Redacted unless OTEL_LOG_ASSISTANT_RESPONSES=1; when that var is unset it follows OTEL_LOG_USER_PROMPTS, so deployments that already log prompt content will start receiving response content on upgrade — set OTEL_LOG_ASSISTANT_RESPONSES=0 to keep prompts-only.
• Added live file path autocomplete to bash mode (!)
• Added a startup notice when MCP servers need authentication, pointing at /mcp
• Added automatic memory-pressure reaping for idle background shell commands (disable with CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP=1)
• Fixed /model and other client-data-gated UI showing stale/empty state immediately after /login
• Fixed backgrounding (←←) spuriously cancelling with "N background tasks would be abandoned" when all running tasks carry over to the new session

What's changed

• Added /rewind support for resuming a conversation from before /clear was run

• Fixed scroll position jumping to the bottom while reading earlier output during a streaming response

• Fixed background agents resurrecting after being stopped — stopping an agent from the tasks panel is now permanent

• Fixed /voice showing a generic "not available" message when disabled by an organization's policy — it now explains the restriction

• Fixed /login URL opening truncated in Windows Terminal when it wraps across lines

• Fixed Cmd+click on links in fullscreen mode for Ghostty over ssh/tmux

• Fixed claude agents sending builtin slash commands like /usage to background sessions as prompt text instead of showing a hint

• Fixed claude agents job rows showing full filesystem paths for pasted images instead of the [Image #N] placeholder

• Fixed hooks with comma-separated matchers (e.g. "Bash,PowerShell") silently never firing

• Fixed /permissions Recently-denied tab: approving a denial now persists on close instead of being silently discarded

• Fixed the agent panel jumping by one row when scrolling the roster past the overflow cap

What's changed

• Added sandbox.credentials setting to block sandboxed commands from reading credential files and secret environment variables
• Added org-configured model restrictions to the model picker, --model, /model, and ANTHROPIC_MODEL, with a "restricted by your organization's settings" message when a restricted model is selected
• Added mouse click support to select menus (permission prompts, /model, /config, etc.) in fullscreen mode
• Fixed --resume failing with "No conversation found" when the original -p run produced no model turns
• Fixed --json-schema and workflow agent({schema}) structured output: the model can no longer re-call StructuredOutput indefinitely after a successful call, and follow-up turns now reliably return structured output
• Fixed remote MCP tool calls that hang with no response for 5 minutes — they now abort with an error instead of blocking indefinitely (override with CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT)
• Fixed Claude Code Remote sessions taking ~2.7s longer to start after the agent proxy CA system-trust install was added

What's changed

• Added claude mcp login <name> and claude mcp logout <name> to authenticate MCP servers from the CLI without opening the interactive /mcp menu, with --no-browser stdin redirect support for completing over SSH
• Added status filtering (press f) to the /workflows agent detail view
• Added a "Skills" section to the /plugin Installed tab
• Added teammateMode: "iterm2" setting with a warning when auto mode cannot find the it2 CLI
• Added "Claude Platform on AWS - refresh credentials" option to /login when awsAuthRefresh is configured
• ! bash commands now trigger Claude to respond to the output automatically; set "respondToBashCommands": false in settings.json to keep the previous context-only behavior
• Fixed streaming requests failing with "Content block not found" or JSON parse errors after the machine wakes from sleep
• Fixed subagent transcript scroll position bleeding into the main transcript on exit
• Fixed background task previews flashing raw tool names before the agent's plan loaded
• Fixed Chrome tab-group isolation not applying when the in-product permissions gate is off for concurrent CLI sessions

• Improved auto mode safety: destructive git commands (git reset --hard, git checkout -- ., git clean -fd, git stash drop) are now blocked when you didn't ask to discard local work, git commit --amend is blocked when the commit wasn't made by the agent this session, and terraform destroy/pulumi destroy/cdk destroy are blocked unless you asked for the specific stack
• Added a warning when the requested model is deprecated or automatically updated to a newer model, shown on stderr in print mode (-p) and now also covering models set in agent frontmatter
• Added attribution.sessionUrl setting to omit the claude.ai session link from commits and PRs in web and Remote Control sessions
• Added /config --help to list all available shorthand keys for /config key=value
• Changed /config toggle behavior: Enter and Space both change the selected setting, and Esc now saves and closes instead of reverting
• Removed the startup "setup issues" line under the logo — run /doctor to see configuration issues or use --debug

• Added /config key=value syntax to set any setting from the prompt (e.g. /config thinking=false) — works in interactive, -p, and Remote Control
• Added sandbox.allowAppleEvents opt-in setting that lets sandboxed commands send Apple Events on macOS
• Added CLAUDE_CLIENT_PRESENCE_FILE environment variable: point it at a marker file to suppress mobile push notifications while you're at the machine
• Upgraded the bundled Bun runtime to 1.4
• Improved streaming of long paragraphs: text now appears line-by-line instead of waiting for the first line break
• Improved auto-retry: API connection drops mid-thinking now automatically retry instead of showing "Connection closed while thinking"
• Improved the subagent panel: idle subagents auto-hide after 30s, the list caps at 5 rows with scroll hints, and keyboard hints now show in the footer
• Improved the MCP OAuth browser page to match Claude Code's visual style and auto-close on success
• Changed fullscreen mode URL opening to require Cmd+click (macOS) / Ctrl+click, matching native terminal behavior
• Changed the Improved N memories line to no longer list individual files outside verbose mode

• Fixed mid-stream connection drops: partial responses are now preserved instead of showing a raw error, and the spinner no longer gets stuck at "running tool"
• Fixed mouse-wheel scrolling in WSL2 under Windows Terminal and VS Code (regression in 2.1.172)
• Fixed a sandbox denyRead/allowRead glob over a large directory tree making the Bash tool description enormous and the session unusable on Linux
• Fixed the feedback survey capturing a single-digit reply as a session rating immediately after a turn completes
• Fixed the welcome screen stacking multiple promotional banners — at most one promo now shows per session
• Fixed Ctrl+O not showing the subagent's transcript when viewing a subagent
• Fixed clicking the prompt input not returning focus from the subagent/footer panel
• Fixed remote session background tasks appearing stuck as "still running" between turns
• Improved plugin loading performance in remote sessions

• Agent teams: removed the TeamCreate and TeamDelete tools. With CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1 set, every session now has one implicit team — spawn teammates directly with the Agent tool's name parameter, no setup step needed. The team_name parameter on the Agent tool is still accepted but ignored.
• Added Tool(param:value) syntax for permission rules to match a tool's input parameters (with * wildcard), e.g. Agent(model:opus) to block Opus subagents
• Skills in nested .claude/skills directories now load when working on files there; on a name clash, the nested skill appears as <dir>:<name> so both stay available
• Nested .claude/ directories: the agent, workflow, and output-style closest to the working directory now wins when names collide; project-scope workflow saves now target the closest existing .claude/workflows/
• Improved auto mode: subagent spawns are now evaluated by the classifier before launch, closing a gap where a subagent could request a blocked action without review
• Improved /doctor with consistent flat tree layout across all sections, clearer section status icons, and highlighted command names

• Session titles are now generated in the language of your conversation (set the language setting to pin a specific language)
• Added footerLinksRegexes setting for regex-matched link badges in the footer row, configurable via user or managed settings
• Improved Bedrock credential caching: credentials from awsCredentialExport are now cached until their Expiration instead of a fixed 1 hour
• Fixed availableModels enforcement: alias model picks can no longer be redirected to a blocked model via ANTHROPIC_DEFAULT_*_MODEL environment variables, and /fast now refuses to toggle when it would switch to a model outside the allowlist
• Fixed auto mode failing on Fable 5 for organizations without Opus 4.8 enabled — the classifier now falls back to the best available Opus model
• Fixed hook if conditions for Read/Edit/Write tool paths: documented patterns like Edit(src/**), Read(~/.ssh/**), and Read(.env) now match correctly
• Fixed Linux sandbox failing to start when .claude/settings.json is a symlink with an absolute target

• Added wheelScrollAccelerationEnabled setting to disable mouse-wheel scroll acceleration in fullscreen mode
• Fixed the /model picker hiding the model family that Default resolves to — Opus now appears as its own row on Max/Team Premium/Enterprise plans, Sonnet on Pro/Team plans, and Opus on pay-as-you-go API accounts
• Fixed /model picker showing a hardcoded Sonnet version label when ANTHROPIC_DEFAULT_SONNET_MODEL pins a different Sonnet
• Fixed the "Fable 5 is now consuming usage credits" banner incorrectly showing for enterprise accounts with usage-based billing
• Fixed Bedrock GovCloud regions (us-gov-*) deriving the wrong inference profile prefix (global instead of us-gov), causing 400 errors on derived model IDs
• Fixed background sessions inheriting another session's ANTHROPIC_* provider env (gateway URL, custom headers, /model aliases) from the shell that started the background daemon
• Fixed a 1-2 second pause when exiting Claude Code shortly after a shell command was interrupted or killed on macOS and Linux
• Fixed git commit co-author attribution showing an incorrect model name for some models