Claude Code

What's changed

• Added directory path suggestions to /cd, matching /add-dir behavior
• Added a /doctor check that proposes trimming checked-in CLAUDE.md files by cutting content Claude could derive from the codebase
• /commit-push-pr now auto-allows git push to the repo's configured push remote (remote.pushDefault, or the sole remote when only one is configured) in addition to origin
• Gateway: /login now supports Anthropic-operated public gateway endpoints
• EnterWorktree now asks for confirmation before entering a git worktree outside the project's .claude/worktrees/ directory
• Background agents now upgrade to a new version in the background right after a Claude Code update, instead of paying a slow stale-session upgrade when you attach
• Fixed an expired login failing every model with a misleading "There's an issue with the selected model" error instead of prompting to run /login
• Fixed claude --resume and --continue not responding to keyboard input on startup

What's changed

• Added an auto mode rule that blocks tampering with session transcript files
• Fixed --json-schema silently producing unstructured output when the schema was invalid, and schemas using the format keyword being rejected
• Fixed a message sent while Claude was working being silently lost when the turn ended at the --max-turns limit
• Fixed Windows worktree removal deleting files outside the worktree when an NTFS junction or directory symlink existed inside it
• Fixed background agents staying shown as "failed" or "completed" in the agent list after being resumed with SendMessage
• Fixed background jobs flipping from "needs input" back to "working" in the agent list when the agent's turn contained no readable text
• Fixed claude attach erroring when a background agent was mid-upgrade restart instead of waiting for it to come back
• Fixed session-to-PR linking missing a PR created in a Bash call whose output exceeded the 30K inline limit
• Fixed claude mcp add-from-claude-desktop getting stuck when a server name contains unsupported characters; invalid names are now reported and remaining servers still import

What's changed

• Added a warning when your login is about to expire, so you can re-authenticate before background sessions are interrupted
• Added a grey ⏸ badge to the footer when in manual permission mode, making the active mode always visible
• Added the session's additional working directories to MCP roots/list, with notifications/roots/list_changed sent when the set changes
• Fixed opening or switching background agent sessions on macOS stalling for 15–20 seconds due to a false low-memory detection (regression in 2.1.196)
• Fixed background sessions becoming permanently unresponsive to attach, replies, and stop when the daemon's session token went stale — the session now recovers automatically
• Fixed returning to claude agents silently stopping running subagents and re-running the prompt from scratch — their work now carries over
• Fixed a memory and per-turn CPU regression in interactive sessions: the context-usage indicator no longer re-analyzes the entire transcript after every turn
• Fixed background agents inheriting a stale PATH from the daemon instead of the dispatching shell, causing missing tools on Windows

What's changed

• Added a "Dynamic workflow size" setting in /config for controlling how large Claude generally makes dynamic workflows (small/medium/large agent counts) — an advisory guideline, not an enforced cap
• Added workflow.run_id and workflow.name OpenTelemetry attributes to telemetry emitted by workflow-spawned agents, so a workflow run's activity can be reconstructed from OTel data
• Fixed a crash in the inline Ctrl+R history search when accepting or cancelling while the search was still scanning the history file
• Fixed /rename on background sessions being reverted when the job restarts, which broke addressing the session by its new name
• Fixed transient mTLS handshake failures when settings were re-applied during an in-place client certificate rotation
• Fixed commands sent from Remote Control (mobile/web) into an interactive session failing with "Unknown command"
• Fixed images and files sent from the Remote Control mobile or web app without a caption being silently dropped
• Fixed the sign-in URL printed by claude auth login and claude mcp login --no-browser not being reliably clickable when it wraps over SSH — it is now emitted as a single hyperlink

What's changed

• Changed AskUserQuestion dialogs to no longer auto-continue by default; opt into an idle timeout via /config
• Changed the "default" permission mode to "Manual" across the CLI, --help, VS Code, and JetBrains; --permission-mode manual and "defaultMode": "manual" are accepted alongside default
• Fixed a crash at startup when disabledMcpServers or enabledMcpServers in .claude.json is set to a non-array value
• Fixed background sessions silently stopping mid-turn after sleep/wake or when reopening a stalled session
• Fixed background sessions re-running a turn cancelled with Esc after a stall respawn
• Fixed background agents never starting again after a crash left a stale daemon.lock whose PID the OS reused
• Fixed background-agent daemon handover so a reinstalled older build can no longer take over the daemon; build recency is now judged by the version's embedded build timestamp
• Fixed background-agent roster issues: transient corruption permanently disabling orphan cleanup, older binaries not preserving fields written by newer versions, and socket auth tokens being stripped during daemon restarts

What's changed

• Stacked slash-skill invocations like /skill-a /skill-b do XYZ now load all leading skills (up to 5), not just the first
• Fixed SSL certificate errors (TLS-inspecting proxies, missing NODE_EXTRA_CA_CERTS, expired certs) burning retries before showing actionable guidance — they now fail immediately with the fix hint
• Fixed streaming responses being discarded when the API emits a mid-stream overloaded/server error after partial output — the partial is now kept with an incomplete-response notice
• Fixed subagents cut off by a rate limit or server error silently failing instead of returning their partial work to the parent
• Fixed subagents reporting API errors (e.g. usage limit reached) as successful results — the error is now reported to the parent agent
• Fixed the background-agent daemon on Linux killing itself and every running agent every ~50 seconds after an unclean shutdown left a corrupted worker record
• Fixed background agents failing to cold-start over SSH on macOS with "Could not switch to audit session" (regression in 2.1.196)
• Fixed claude stop being silently undone when it raced a background-agent respawn — the respawn now honors the stop

What's changed

• Subagents now run in the background by default, so Claude keeps working while they run and is notified when they finish (previously a gradual rollout)
• Claude in Chrome is now generally available
• Added background agent notifications in claude agents — sessions that need input or finish now fire the Notification hook (agent_needs_input / agent_completed)
• Added /dataviz skill for chart and dashboard design guidance with a runnable color-palette validator
• Gateway: added Claude Platform on AWS (anthropicAws) as an upstream provider; model-not-found responses now advance the failover chain
• Background agents launched from claude agents now commit, push, and open a draft PR when they finish code work in a worktree, instead of stopping to ask
• The built-in Explore agent now inherits the main session's model (capped at opus) instead of running on haiku
• Subagents and context compaction now inherit the session's extended thinking configuration, improving output quality on delegated tasks
• Fixed brief network drops mid-response aborting the turn — transient errors like ECONNRESET now retry with backoff instead of failing

What's changed

• Added support for organization default models — admins set it in the org console; it shows as "Org default" (or "Role default") in /model when you haven't picked one yourself
• Added readable default names for sessions at start, making them easier to identify and message
• Added clickable file attachments in chat — Cmd/Ctrl-click reveals the file in Finder/Explorer
• Security: claude mcp list/get no longer spawn .mcp.json servers that a repo self-approved via a committed .claude/settings.json; untrusted workspaces show ⏸ Pending approval
• Fixed waking a background job permanently deleting its conversation and re-running the original prompt when the transcript probe misread a real transcript; the file is now set aside, never deleted
• Fixed the rate-limit warning flickering off and rate-limit telemetry being over-counted when multiple parallel requests were in flight at the moment a usage limit was hit
• Fixed duplicate recap lines after a background session's turn: a schema-rejected StructuredOutput attempt no longer renders alongside its retry

What's changed

• Added CLAUDE_CODE_DISABLE_MOUSE_CLICKS to disable mouse click/drag/hover in fullscreen mode while keeping wheel scroll
• Fixed hook matchers with hyphenated identifiers (e.g. code-reviewer, mcp__brave-search) accidentally substring-matching — they now exact-match. Use mcp__brave-search__.* to match all tools from a hyphenated MCP server.
• Fixed voice dictation on macOS capturing silence in long-running sessions after the default input device changes
• Fixed voice dictation auto-submit never firing for languages written without spaces (Japanese, Chinese, Thai)
• Fixed external plugins enabled only by project .claude/settings.json not requiring explicit install consent on every loader path
• Fixed /plugin Enable/Disable not working when a plugin's plugin.json name differs from its marketplace entry name
• Fixed background jobs disappearing from claude agents or losing data when written by a newer Claude Code version
• Fixed reopening a crashed background task showing a blank screen for up to 5 seconds instead of its restart
• Fixed background agent daemons running unreachable when the control socket fails to start, blocking restarts

What's changed

• Added autoMode.classifyAllShell setting to route all Bash/PowerShell commands through the auto-mode classifier instead of only arbitrary-code-execution patterns
• Added auto-mode denial reasons to the transcript, the denial toast, and /permissions recent denials
• Added claude_code.assistant_response OpenTelemetry log event containing the model's response text. Redacted unless OTEL_LOG_ASSISTANT_RESPONSES=1; when that var is unset it follows OTEL_LOG_USER_PROMPTS, so deployments that already log prompt content will start receiving response content on upgrade — set OTEL_LOG_ASSISTANT_RESPONSES=0 to keep prompts-only.
• Added live file path autocomplete to bash mode (!)
• Added a startup notice when MCP servers need authentication, pointing at /mcp
• Added automatic memory-pressure reaping for idle background shell commands (disable with CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP=1)
• Fixed /model and other client-data-gated UI showing stale/empty state immediately after /login
• Fixed backgrounding (←←) spuriously cancelling with "N background tasks would be abandoned" when all running tasks carry over to the new session

What's changed

• Added /rewind support for resuming a conversation from before /clear was run

• Fixed scroll position jumping to the bottom while reading earlier output during a streaming response

• Fixed background agents resurrecting after being stopped — stopping an agent from the tasks panel is now permanent

• Fixed /voice showing a generic "not available" message when disabled by an organization's policy — it now explains the restriction

• Fixed /login URL opening truncated in Windows Terminal when it wraps across lines

• Fixed Cmd+click on links in fullscreen mode for Ghostty over ssh/tmux

• Fixed claude agents sending builtin slash commands like /usage to background sessions as prompt text instead of showing a hint

• Fixed claude agents job rows showing full filesystem paths for pasted images instead of the [Image #N] placeholder

• Fixed hooks with comma-separated matchers (e.g. "Bash,PowerShell") silently never firing

• Fixed /permissions Recently-denied tab: approving a denial now persists on close instead of being silently discarded

• Fixed the agent panel jumping by one row when scrolling the roster past the overflow cap