Claude Code

What's changed

• Added sandbox.credentials setting to block sandboxed commands from reading credential files and secret environment variables
• Added org-configured model restrictions to the model picker, --model, /model, and ANTHROPIC_MODEL, with a "restricted by your organization's settings" message when a restricted model is selected
• Added mouse click support to select menus (permission prompts, /model, /config, etc.) in fullscreen mode
• Fixed --resume failing with "No conversation found" when the original -p run produced no model turns
• Fixed --json-schema and workflow agent({schema}) structured output: the model can no longer re-call StructuredOutput indefinitely after a successful call, and follow-up turns now reliably return structured output
• Fixed remote MCP tool calls that hang with no response for 5 minutes — they now abort with an error instead of blocking indefinitely (override with CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT)
• Fixed Claude Code Remote sessions taking ~2.7s longer to start after the agent proxy CA system-trust install was added

What's changed

• Added claude mcp login <name> and claude mcp logout <name> to authenticate MCP servers from the CLI without opening the interactive /mcp menu, with --no-browser stdin redirect support for completing over SSH
• Added status filtering (press f) to the /workflows agent detail view
• Added a "Skills" section to the /plugin Installed tab
• Added teammateMode: "iterm2" setting with a warning when auto mode cannot find the it2 CLI
• Added "Claude Platform on AWS - refresh credentials" option to /login when awsAuthRefresh is configured
• ! bash commands now trigger Claude to respond to the output automatically; set "respondToBashCommands": false in settings.json to keep the previous context-only behavior
• Fixed streaming requests failing with "Content block not found" or JSON parse errors after the machine wakes from sleep
• Fixed subagent transcript scroll position bleeding into the main transcript on exit
• Fixed background task previews flashing raw tool names before the agent's plan loaded
• Fixed Chrome tab-group isolation not applying when the in-product permissions gate is off for concurrent CLI sessions

• Improved auto mode safety: destructive git commands (git reset --hard, git checkout -- ., git clean -fd, git stash drop) are now blocked when you didn't ask to discard local work, git commit --amend is blocked when the commit wasn't made by the agent this session, and terraform destroy/pulumi destroy/cdk destroy are blocked unless you asked for the specific stack
• Added a warning when the requested model is deprecated or automatically updated to a newer model, shown on stderr in print mode (-p) and now also covering models set in agent frontmatter
• Added attribution.sessionUrl setting to omit the claude.ai session link from commits and PRs in web and Remote Control sessions
• Added /config --help to list all available shorthand keys for /config key=value
• Changed /config toggle behavior: Enter and Space both change the selected setting, and Esc now saves and closes instead of reverting
• Removed the startup "setup issues" line under the logo — run /doctor to see configuration issues or use --debug

• Added /config key=value syntax to set any setting from the prompt (e.g. /config thinking=false) — works in interactive, -p, and Remote Control
• Added sandbox.allowAppleEvents opt-in setting that lets sandboxed commands send Apple Events on macOS
• Added CLAUDE_CLIENT_PRESENCE_FILE environment variable: point it at a marker file to suppress mobile push notifications while you're at the machine
• Upgraded the bundled Bun runtime to 1.4
• Improved streaming of long paragraphs: text now appears line-by-line instead of waiting for the first line break
• Improved auto-retry: API connection drops mid-thinking now automatically retry instead of showing "Connection closed while thinking"
• Improved the subagent panel: idle subagents auto-hide after 30s, the list caps at 5 rows with scroll hints, and keyboard hints now show in the footer
• Improved the MCP OAuth browser page to match Claude Code's visual style and auto-close on success
• Changed fullscreen mode URL opening to require Cmd+click (macOS) / Ctrl+click, matching native terminal behavior
• Changed the Improved N memories line to no longer list individual files outside verbose mode

• Fixed mid-stream connection drops: partial responses are now preserved instead of showing a raw error, and the spinner no longer gets stuck at "running tool"
• Fixed mouse-wheel scrolling in WSL2 under Windows Terminal and VS Code (regression in 2.1.172)
• Fixed a sandbox denyRead/allowRead glob over a large directory tree making the Bash tool description enormous and the session unusable on Linux
• Fixed the feedback survey capturing a single-digit reply as a session rating immediately after a turn completes
• Fixed the welcome screen stacking multiple promotional banners — at most one promo now shows per session
• Fixed Ctrl+O not showing the subagent's transcript when viewing a subagent
• Fixed clicking the prompt input not returning focus from the subagent/footer panel
• Fixed remote session background tasks appearing stuck as "still running" between turns
• Improved plugin loading performance in remote sessions

• Agent teams: removed the TeamCreate and TeamDelete tools. With CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1 set, every session now has one implicit team — spawn teammates directly with the Agent tool's name parameter, no setup step needed. The team_name parameter on the Agent tool is still accepted but ignored.
• Added Tool(param:value) syntax for permission rules to match a tool's input parameters (with * wildcard), e.g. Agent(model:opus) to block Opus subagents
• Skills in nested .claude/skills directories now load when working on files there; on a name clash, the nested skill appears as <dir>:<name> so both stay available
• Nested .claude/ directories: the agent, workflow, and output-style closest to the working directory now wins when names collide; project-scope workflow saves now target the closest existing .claude/workflows/
• Improved auto mode: subagent spawns are now evaluated by the classifier before launch, closing a gap where a subagent could request a blocked action without review
• Improved /doctor with consistent flat tree layout across all sections, clearer section status icons, and highlighted command names

• Session titles are now generated in the language of your conversation (set the language setting to pin a specific language)
• Added footerLinksRegexes setting for regex-matched link badges in the footer row, configurable via user or managed settings
• Improved Bedrock credential caching: credentials from awsCredentialExport are now cached until their Expiration instead of a fixed 1 hour
• Fixed availableModels enforcement: alias model picks can no longer be redirected to a blocked model via ANTHROPIC_DEFAULT_*_MODEL environment variables, and /fast now refuses to toggle when it would switch to a model outside the allowlist
• Fixed auto mode failing on Fable 5 for organizations without Opus 4.8 enabled — the classifier now falls back to the best available Opus model
• Fixed hook if conditions for Read/Edit/Write tool paths: documented patterns like Edit(src/**), Read(~/.ssh/**), and Read(.env) now match correctly
• Fixed Linux sandbox failing to start when .claude/settings.json is a symlink with an absolute target

• Added wheelScrollAccelerationEnabled setting to disable mouse-wheel scroll acceleration in fullscreen mode
• Fixed the /model picker hiding the model family that Default resolves to — Opus now appears as its own row on Max/Team Premium/Enterprise plans, Sonnet on Pro/Team plans, and Opus on pay-as-you-go API accounts
• Fixed /model picker showing a hardcoded Sonnet version label when ANTHROPIC_DEFAULT_SONNET_MODEL pins a different Sonnet
• Fixed the "Fable 5 is now consuming usage credits" banner incorrectly showing for enterprise accounts with usage-based billing
• Fixed Bedrock GovCloud regions (us-gov-*) deriving the wrong inference profile prefix (global instead of us-gov), causing 400 errors on derived model IDs
• Fixed background sessions inheriting another session's ANTHROPIC_* provider env (gateway URL, custom headers, /model aliases) from the shell that started the background daemon
• Fixed a 1-2 second pause when exiting Claude Code shortly after a shell command was interrupted or killed on macOS and Linux
• Fixed git commit co-author attribution showing an incorrect model name for some models

• Sub-agents can now spawn their own sub-agents (up to 5 levels deep)
• Amazon Bedrock now reads the AWS region from ~/.aws config files when AWS_REGION isn't set, matching AWS SDK precedence; /status shows where the region came from
• Added a search bar when browsing a marketplace's plugins in /plugin
• Added model attribute to the claude_code.lines_of_code.count OTEL metric
• Fixed sessions using 1M context without usage credits getting permanently stuck — the session now automatically compacts back under the standard context limit
• Fixed a repeating "an image in the conversation could not be processed and was removed" error when the conversation contained multiple images
• Fixed the agents view keeping a session under Working with a busy spinner for up to 30 seconds after the worker replied
• Fixed background agents potentially reading another directory's project settings (.mcp.json approvals, trust) when dispatched onto a pre-warmed worker
• Fixed background-session attach failing with EAUTH for sessions started on an older version after the daemon auto-updated