Claude Code Updates & Release Notes

• Sub-agents can now spawn their own sub-agents (up to 5 levels deep)
• Amazon Bedrock now reads the AWS region from ~/.aws config files when AWS_REGION isn't set, matching AWS SDK precedence; /status shows where the region came from
• Added a search bar when browsing a marketplace's plugins in /plugin
• Added model attribute to the claude_code.lines_of_code.count OTEL metric
• Fixed sessions using 1M context without usage credits getting permanently stuck — the session now automatically compacts back under the standard context limit
• Fixed a repeating "an image in the conversation could not be processed and was removed" error when the conversation contained multiple images
• Fixed the agents view keeping a session under Working with a busy spinner for up to 30 seconds after the worker replied
• Fixed background agents potentially reading another directory's project settings (.mcp.json approvals, trust) when dispatched onto a pre-warmed worker
• Fixed background-session attach failing with EAUTH for sessions started on an older version after the daemon auto-updated
• Fixed a background sub-agent staying stuck as "active" in the agent panel after a nested agent it spawned was stopped
• Fixed /model suggestions in the claude agents dispatch input rendering with a misleading slash prefix and showing models disabled for your org
• Fixed availableModels restrictions not being applied to subagent model overrides, the agent dispatch model picker, and the advisor model
• Fixed availableModels allowlists hiding the /model picker's Opus and Sonnet 1M rows when entries use version-specific IDs like claude-opus-4-8
• Fixed the /model picker on Bedrock offering models the provider doesn't serve — selecting one silently switched the session model and lit the selection marker on multiple rows
• Fixed model IDs getting a doubled 1M-context suffix (e.g. [1M][1m]) when ANTHROPIC_DEFAULT_OPUS_MODEL already includes one
• Fixed opusplan model setting not shipping with 1M context in plan mode for entitled users; the opusplan[1m] workaround now also correctly switches to Opus in plan mode
• Fixed WebFetch(domain:*.example.com) wildcard domain rules never matching subdomains in allow, deny, and ask position, and file permission rules with mid-pattern wildcards (e.g. Read(secrets-*/config.json)) being rejected at startup
• Fixed up-arrow prompt history showing the main agent's prompts while a subagent's chat tab is open
• Fixed memory recall not finding mounted team memory stores (CLAUDE_MEMORY_STORES) in remote sessions
• Fixed workflow validation rejecting scripts whose prompt strings or comments merely mention Date.now()/Math.random()
• Disable mouse tracking on Windows consoles that don't fully support it
• Fixed the /plugin marketplace list losing its cursor after backing out of a long plugin list, and Esc from the plugin browser returning to the wrong tab
• Improved performance in long conversations by removing redundant message normalization and avoiding full message-history transforms when streaming tool-use state is unchanged
• Reduced idle CPU usage: /goal status chip no longer re-renders the terminal at 5 Hz while idle, and fewer UI re-renders while subagents run in parallel
• Improved Claude in Chrome tool loading: browser tools now load in a single batched call instead of one per tool
• Improved the non-interactive Usage Policy refusal message to suggest starting a new session or changing your model
• /code-review now keeps the ultra option visible when you're not signed in to claude.ai, with an explanation that the cloud review requires a claude.ai account
• Shortened the Remote Control footer indicator to "/rc active" and hid it on narrow terminals
• Stopped promoting /loop in remote sessions, where pending loops don't keep the container alive
• [VSCode] Fixed PowerShell tool calls rendering as raw JSON instead of a proper command display and permission dialog, and stripped ANSI escape codes from displayed shell output

• Self-hosted runner: added a post-session lifecycle hook that runs after the session ends and before the workspace is deleted, so you can snapshot uncommitted work or export logs; also made the child-process SIGTERM→SIGKILL window configurable (default unchanged at 5s)

• Added --safe-mode flag (and CLAUDE_CODE_SAFE_MODE) to start Claude Code with all customizations (CLAUDE.md, plugins, skills, hooks, MCP servers) disabled for troubleshooting

• Added /cd command to move a session to a new working directory without breaking the prompt cache mid-session

• Added a disableBundledSkills setting and CLAUDE_CODE_DISABLE_BUNDLED_SKILLS environment variable to hide bundled skills, workflows, and built-in slash commands from the model

• Fixed Up/Down arrows jumping to command history past the wrapped rows of a long input line — they now move through each visual row first, and history recall enters at the near edge

• Fixed enterprise managed MCP policies (allowedMcpServers/deniedMcpServers) not being enforced on reconnect, IDE-typed configs, --mcp-config servers during the first session after install, or before remote settings loaded; also fixed slow cold starts for orgs without remote settings

• Fixed a ~30-50ms UI stall at the start of each turn for macOS users logged in with claude.ai credentials

• Fixed claude -p being slow or appearing to hang on Windows while waiting for the slash-command/skill scan (regression in 2.1.161)

• Fixed Remote Control getting stuck on "reconnecting" after resuming a session when an OAuth token refresh happened at the same time

• Fixed Git Credential Manager's "Connect to GitHub" popup appearing on Windows at startup when background git commands ran without cached credentials

• Fixed footer hints (e.g. "esc to interrupt") not showing for users with a custom statusline

• Fixed stale permission and dialog prompts reappearing every time you reattached to a remote session whose worker had died while waiting on them

• Fixed claude agents --json omitting blocked and just-dispatched background sessions; added --all to include completed sessions, plus new id and state fields

• Fixed agents view leaving a stale/garbled frame after navigating back from an agent on WSL in Windows Terminal

• Fixed background agents ignoring project-level settings env values (e.g. ANTHROPIC_MODEL) when dispatched onto a pre-warmed worker

• Fixed MCPB plugin cache being spuriously invalidated on Windows, causing unnecessary re-extraction

• Fixed plugin .in_use PID lock files accumulating without bound; stale markers from crashed sessions are now swept once per day

• Fixed untrusted project settings being able to set OTEL client-certificate paths without trust confirmation

• /workflows now opens immediately even while a turn is in progress

• Improved TaskCreate reliability: malformed inputs are repaired automatically and validation errors for unloaded tools include the schema

• Improved the error message shown when your organization has disabled API key authentication, with guidance based on where the active API key comes from

• Reduced CPU usage while responses stream and during spinner animations

• Restored a default 5-minute idle timeout on Vertex/Foundry so a stalled stream aborts instead of hanging indefinitely; set API_FORCE_IDLE_TIMEOUT=0 to opt out

• Remote-managed settings with an invalid entry now apply their remaining valid policies and surface the validation error, instead of silently dropping the whole payload

• Background sessions now preserve --ide, --chrome, --bare, --remote-control, and other flags across retire→wake, and respawn state validation was hardened

• Background sessions are now told that shared-checkout edits are blocked until they enter a worktree, avoiding a wasted rejected edit before EnterWorktree

• The "CLAUDE.md is too long" warning threshold now scales with the model's context window

• Auto-updater on Windows now stops retrying within a session once claude.exe is held by another process

• Improved color contrast for skill tags in the slash-command menu

• Promo credit claims for Apple/Google-billed subscribers without a payment method now explain where to add one

• Added a tip suggesting claude agents when running multiple concurrent sessions

• Added fallbackModel setting to configure up to three fallback models tried in order when the primary model is overloaded or unavailable; --fallback-model now also applies to interactive sessions
• Added glob pattern support in deny rule tool-name position ("*" denies all tools); allow rules reject non-MCP globs, and unknown tool names in deny rules warn at startup
• Hardened cross-session messaging: messages relayed via SendMessage from other Claude sessions no longer carry user authority 6 receivers refuse relayed permission requests, and auto mode blocks them
• MAX_THINKING_TOKENS=0, --thinking disabled, and the per-model thinking toggle now disable thinking on models that think by default via the Claude API (3P providers unchanged)
• Claude Code now retries a turn once on the fallback model when the API rejects an unexpected non-retryable error; auth, rate-limit, request-size, and transport errors still surface immediately
• claude update now announces the target version before downloading instead of going silent
• claude agents: typing a URL into the list now filters to the session whose first prompt contained it
• Fixed a recurring "image could not be processed" error and extra token usage when an unprocessable image was sent in a session
• Fixed remote sessions becoming permanently stuck when a brief backend disruption occurred during worker registration at startup
• Fixed flickering in JetBrains IDE terminals (IntelliJ, PyCharm, WebStorm, etc.) on 2026.1+ by enabling synchronized output
• Fixed Shift+non-ASCII characters (e.g. Shift+e4 16 c4) being dropped in terminals using the Kitty keyboard protocol (WezTerm, Ghostty, kitty)
• Fixed PowerShell command validation occasionally hanging far past its time budget on Windows when a killed process's children held its output pipes
• Fixed orphaned claude --bg-pty-host processes spinning at 100% CPU after the daemon dies while connected on macOS
• Fixed voice mode requiring /login to clear a stale auth check after toggling /voice
• Fixed managed settings with an invalid entry silently disabling enforcement of their remaining valid policies
• Fixed managed-settings allowedMcpServers/deniedMcpServers predicates not matching when they use ${VAR} references
• Fixed background agent sessions that entered a git worktree crash-looping with "No conversation found" when reopened from claude agents
• Fixed duplicated thinking text in the Ctrl+O transcript view while streaming
• Fixed /doctor showing a contradictory failed "Not inside a remote session" check when run inside a remote session
• Fixed the cursor sticking at the end of the first line when typing a multiline prompt in the claude agents dispatch and reply inputs
• Fixed blank lines appearing between background agent rows in the task list on terminals without Unicode support

• Added requiredMinimumVersion and requiredMaximumVersion managed settings — Claude Code refuses to start if its version is outside the allowed range and directs the user to an approved version

• Added /plugin list command to list installed plugins, with --enabled/--disabled filters

• Added a "c to copy" shortcut to /btw that copies the raw markdown answer to the clipboard, preserving formatting when pasted elsewhere

• Hooks: Stop and SubagentStop hooks can now return hookSpecificOutput.additionalContext to give Claude feedback and keep the turn going without being labeled a hook error

• Skills: added \$ escape syntax to include a literal $ before a digit in command bodies

• stdio MCP servers now receive the same CLAUDE_CODE_SESSION_ID as hooks/Bash on --resume

• Fixed claude -p hanging forever after its final result when a backgrounded command never exits — background shells are now stopped ~5s after the result once stdin closes

• Fixed claude -p failing with "ANTHROPIC_API_KEY required" on Bedrock/Vertex/Foundry when CI=true and no Anthropic API key is set

• Fixed bash commands failing under bazel and EDR-protected Go workflows: $TMPDIR was overridden to /tmp/claude-{uid} for all commands instead of only sandboxed ones (regression in 2.1.154)

• Fixed Bash commands failing on Windows with "EEXIST: file already exists" on the session-env directory when it has the read-only attribute or is inside OneDrive

• Fixed org-managed permission rules not applying for the entire session when the managed settings fetch completed during startup on a fresh config directory

• Fixed background sessions in claude agents losing their running background tasks when reattached after a Claude Code update

• Fixed terminal misalignment and a multi-second hang when exiting the agent view by pressing Esc

• Fixed clicking Stop on a background-task chip in the desktop app not clearing the chip when the underlying process was already gone

• Fixed keyboard input becoming permanently unresponsive after a paste operation whose end marker is dropped by the terminal

• Fixed hook if: "Bash(...)" conditions firing on every Bash command containing $() or $VAR; the pattern now matches against commands inside subshells and backticks too

• Fixed deny rules on home-directory paths (e.g. Read(~/Desktop/**)) not blocking Bash commands that reference the path via $HOME

• Fixed a stray "(no content)" line left in the transcript after closing panel dialogs like /mcp and /plugins

• Background agent sessions now update to a new Claude Code version in the background, so opening a session after an update no longer waits on a cold restart

• Clearer descriptions for built-in commands and skills in the / menu

• The subscription-switch suggestion now shows in the startup announcement slot instead of a toast

• claude agents dispatching from the state-grouped view now starts the session in the directory the agent view was opened from

Release notes

• claude agents --json now includes waitingFor showing what a waiting session is blocked on (e.g. permission prompt)
• --tools: explicitly listing Grep/Glob now provides the dedicated search tools on native builds with embedded search (previously these names were silently ignored)
• /effort now confirms when your chosen level will persist as the default for new sessions
• Clicking a slash command in the autocomplete menu now fills it into your prompt instead of running it immediately; press Enter to run
• Remote Control now shows as a persistent footer pill (with a link to the session) instead of a startup message
• Renamed Windsurf to Devin Desktop in the /ide menu, /terminal-setup, and /scroll-speed, following the editor's rebrand
• Fixed a silent startup hang when the config directory is read-only or unwritable — Claude Code now starts with in-memory config and surfaces startup errors instead of showing a blank screen
• Fixed WebFetch permission rules not being applied to built-in preapproved domains; explicit WebFetch(domain:...) deny/ask/allow rules now take precedence over the preapproved-host auto-allow
• Fixed Windows permission rules never matching when spelled with backslashes (~\, \\server\share) or case-variant paths, and Read deny rules not hiding files from Glob/Grep results
• Fixed an interrupt (Esc) sent at the very start of a turn being silently dropped in stream-json/SDK sessions, leaving the turn running with no "Interrupted" feedback
• Fixed API 400 no low surrogate in string errors for classifier side-queries and MCP server descriptions containing emoji near a truncation boundary
• Fixed MCP per-server timeout config values below 1000 ms being floored to a 1-second watchdog that aborted every tool call; sub-1000 ms values are now ignored (falling back to MCP_TOOL_TIMEOUT or default), and claude mcp get annotates them accordingly
• Fixed the LSP tool's workspaceSymbol operation returning no results; it now accepts a query parameter and passes it to the language server
• Fixed claude agents cutting live status text (tool args, replies, prompts, exec output) at 60–120 columns on wide terminals; the status detail now uses the full terminal width
• Fixed claude agents truncating long session names at 40 columns; the name column now grows with terminal width
• Fixed claude agents attach occasionally bouncing straight back to the session list on the first try after a background-service restart
• Fixed claude agents Ctrl+V image paste doing nothing in the dispatch input and the session reply box; pasting with no image now shows a hint
• Fixed backgrounding a session with
  silently losing the conversation when the background service cannot start; the session stays in the list as a failed row you can wake with Enter
• Fixed replies from the agents view that fail to send being lost; they are now queued for delivery on the next session start
• Fixed cross-session messaging (SendMessage) silently breaking when CLAUDE_CODE_TMPDIR or $TMPDIR points at a deep directory
• Fixed opening a running background session from claude agents stalling for 5 seconds before attaching
• Quieter startup: notices group by severity, and session info and announcements share a single line per launch
• Startup warnings rewritten to be shorter and clearer, each with a concrete fix
• Launch-prompt warnings (deep link/pre-filled prompt) now stay pinned below the input until you act instead of scrolling away
• Failed turns now show a compact warning line instead of a multi-line red error block
• Improved background service startup and claude update verification to wait out endpoint-security scanning of new binaries instead of failing after 5 seconds
• Background dispatch spawn failures now report the error class name when no errno is available
• Removed the "Claude in Chrome enabled" and "marketplace installed" startup messages; model auto-updates and the team-onboarding tip now show as quiet notices under the logo

• OTEL_RESOURCE_ATTRIBUTES values are now included as labels on metric datapoints, so you can slice usage metrics by custom dimensions like team or repo
• claude agents rows now show done/total before the detail when work is fanned out; peek shows the longest-running item
• /mcp now collapses claude.ai connectors you've never signed in to behind a "Show unused connectors" row
• Parallel tool calls: a failed Bash command no longer cancels other calls in the same batch 94 each tool returns its own result independently
• Fullscreen mode: clipboard now uses wl-copy/xclip/xsel on Linux when available, copies to both the clipboard and PRIMARY selection for middle-click paste, and the "hold {key} for native selection" hint now shows the correct key per terminal
• Fixed the /effort dialog, workflow animations, and prompt keyword shimmer not honoring the "Reduce motion" setting
• Fixed forceLoginOrgUUID/forceLoginMethod managed-settings policies blocking third-party provider sessions (Bedrock, Vertex, Foundry, Mantle) alongside the org pin (regression in 2.1.146)
• Fixed background subagent output corrupting claude -p stdout when using --output-format text or json
• Fixed /usage-credits starting a re-login for Team and Enterprise admins instead of pointing to the organization's usage settings page
• Fixed /autofix-pr reporting "cannot run on the default branch" when the session is inside a git worktree or another repository
• Fixed --resume picker not showing sessions from the current directory when it isn't a git worktree (e.g., jj workspaces)
• Fixed Windows hooks that invoke bash explicitly (e.g., /usr/bin/bash script.sh) failing with "command not found" or "cannot execute binary file"
• Fixed OpenTelemetry log events (user_prompt, api_request, tool_result, tool_decision) being silently dropped when emitted before telemetry initialization completed
• Fixed claude mcp list/get/add printing secrets to the terminal: ${VAR} references are no longer expanded, and credential headers and URL secrets are redacted
• Fixed Workflow agents spawned with isolation: "worktree" in background sessions being blocked from editing files inside their own worktree
• Fixed background sessions dispatched from claude agents booting on a stale model from the daemon's environment instead of the model in settings.json
• Fixed a potential crash when rendering Write tool results after resuming a session
• Fixed completed subagents getting stuck showing as running when an error occurs while finalizing their result
• Fixed EADDRINUSE errors from tools that bind Unix sockets under $TMPDIR when CLAUDE_CODE_TMPDIR is set to a deep path
• Improved terminal rendering performance by stabilizing the layout engine's JIT compilation profile
• Improved rendering performance for large file writes
• [VSCode] Added a tip suggesting disabling terminal GPU acceleration (or running /terminal-setup) to fix garbled glyphs

• Added a prompt before writing to shell startup files (.zshenv, .zlogin, .bash_login) and ~/.config/git/, which could otherwise lead to unintended command execution
• acceptEdits mode now prompts before writing build-tool config files that grant code execution (.npmrc, .yarnrc*, bunfig.toml, .bazelrc, .pre-commit-config.yaml, .devcontainer/, etc.)
• Edit no longer requires a separate Read after viewing a file with grep: single-file grep/egrep/fgrep commands now satisfy the read-before-edit check
• Fixed copy-on-select not writing to the Windows clipboard on WSL 94 now uses PowerShell interop instead of OSC 52, which terminals like MobaXterm don't support
• Fixed restoring a completed session from claude agents dropping chat history and re-running the original prompt
• Fixed background sessions re-attached after overnight retire losing their conversation and re-running the original prompt
• Fixed claude --bg occasionally failing with "socket missing" when the background daemon was cold-starting on a loaded machine
• Fixed an issue on Windows where the directory a background session was started in could not be deleted after claude rm until the background daemon exited
• Fixed background agents that resumed work being shown under Completed in the agents list
• Fixed claude agents freezing for several seconds when returning to the session list due to the auto-updater re-checking on every exit
• Fixed Esc, arrow keys, and typing becoming unresponsive on Windows when attached to a background session or in the agent view while the host is under heavy CPU load
• Fixed background agents emitting terminal sync-output markers to terminals that don't support them (Apple Terminal, tmux), causing render artifacts when entering a running agent
• Fixed mouse wheel scrolling prompt history instead of the transcript right after opening a session from the agents list
• Fixed CJK IME composition appearing at the bottom-left of the screen instead of at the input caret in the claude agents view
• Fixed valid file:///C:/... links being rewritten to a broken path on Windows terminals with hyperlink support
• Fixed voice mode failing to connect when the project directory or branch name contains non-ASCII or special characters
• Fixed the auto mode unavailability message on third-party providers (Bedrock/Vertex/Foundry) to point to the CLAUDE_CODE_ENABLE_AUTO_MODE opt-in instead of incorrectly blaming the model
• Fixed /effort ultracode incorrectly blaming the dynamic workflows setting when the model cannot run xhigh; ultracode is no longer offered on models that do not support it
• Fixed model-not-found errors suggesting --model when running via the SDK or other hosts where the CLI flag doesn't apply
• Fixed Claude's past replies disappearing from scrollback when resuming a brief mode session with brief mode turned off
• Fixed vim mode p pasting on the line below instead of at the cursor when the register was yanked with v$
• Improved performance of opening recently-inactive background agent sessions in claude agents
• Improved auto mode classifier latency by reducing reasoning on routine actions, lowering the chance of "could not evaluate this action" blocks
• Improved background-session teardown (claude rm/stop, idle reap) to send SIGTERM to running shell subprocesses before SIGKILL, so cleanup handlers run
• Removed CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE; the environment variable is now a no-op
• Removed the JetBrains plugin install suggestion from startup
• Renamed the dynamic-workflow trigger keyword from workflow to ultracode. The word "workflow" no longer triggers a run; asking for one in your own words still works. The trigger keyword is highlighted in violet in the prompt input

• OTEL_RESOURCE_ATTRIBUTES values are now included as labels on metric datapoints, so you can slice usage metrics by custom dimensions like team or repo
• claude agents rows now show done/total before the detail when work is fanned out; peek shows the longest-running item
• /mcp now collapses claude.ai connectors you've never signed in to behind a "Show unused connectors" row
• Parallel tool calls: a failed Bash command no longer cancels other calls in the same batch; each tool returns its own result independently
• Fullscreen mode: clipboard now uses wl-copy/xclip/xsel on Linux when available, copies to both the clipboard and PRIMARY selection for middle-click paste, and the "hold {key} for native selection" hint now shows the correct key per terminal
• Fixed the /effort dialog, workflow animations, and prompt keyword shimmer not honoring the "Reduce motion" setting
• Fixed forceLoginOrgUUID/forceLoginMethod managed-settings policies blocking third-party provider sessions (Bedrock, Vertex, Foundry, Mantle) alongside the org pin (regression in 2.1.146)
• Fixed background subagent output corrupting claude -p stdout when using --output-format text or json
• Fixed /usage-credits starting a re-login for Team and Enterprise admins instead of pointing to the organization's usage settings page
• Fixed /autofix-pr reporting "cannot run on the default branch" when the session is inside a git worktree or another repository
• Fixed --resume picker not showing sessions from the current directory when it isn't a git worktree (e.g., jj workspaces)
• Fixed Windows hooks that invoke bash explicitly (e.g., /usr/bin/bash script.sh) failing with "command not found" or "cannot execute binary file"
• Fixed OpenTelemetry log events (user_prompt, api_request, tool_result, tool_decision) being silently dropped when emitted before telemetry initialization completed
• Fixed claude mcp list/get/add printing secrets to the terminal: ${VAR} references are no longer expanded, and credential headers and URL secrets are redacted
• Fixed Workflow agents spawned with isolation: "worktree" in background sessions being blocked from editing files inside their own worktree
• Fixed background sessions dispatched from claude agents booting on a stale model from the daemon's environment instead of the model in settings.json
• Fixed a potential crash when rendering Write tool results after resuming a session
• Fixed completed subagents getting stuck showing as running when an error occurs while finalizing their result
• Fixed EADDRINUSE errors from tools that bind Unix sockets under $TMPDIR when CLAUDE_CODE_TMPDIR is set to a deep path
• Improved terminal rendering performance by stabilizing the layout engine's JIT compilation profile
• Improved rendering performance for large file writes
• [VSCode] Added a tip suggesting disabling terminal GPU acceleration (or running /terminal-setup) to fix garbled glyphs

• Added a prompt before writing to shell startup files (.zshenv, .zlogin, .bash_login) and ~/.config/git/, which could otherwise lead to unintended command execution
• acceptEdits mode now prompts before writing build-tool config files that grant code execution (.npmrc, .yarnrc*, bunfig.toml, .bazelrc, .pre-commit-config.yaml, .devcontainer/, etc.)
• Edit no longer requires a separate Read after viewing a file with grep: single-file grep/egrep/fgrep commands now satisfy the read-before-edit check
• Fixed copy-on-select not writing to the Windows clipboard on WSL — now uses PowerShell interop instead of OSC 52, which terminals like MobaXterm don't support
• Fixed restoring a completed session from claude agents dropping chat history and re-running the original prompt
• Fixed background sessions re-attached after overnight retire losing their conversation and re-running the original prompt
• Fixed claude --bg occasionally failing with "socket missing" when the background daemon was cold-starting on a loaded machine
• Fixed an issue on Windows where the directory a background session was started in could not be deleted after claude rm until the background daemon exited
• Fixed background agents that resumed work being shown under Completed in the agents list
• Fixed claude agents freezing for several seconds when returning to the session list due to the auto-updater re-checking on every exit
• Fixed Esc, arrow keys, and typing becoming unresponsive on Windows when attached to a background session or in the agent view while the host is under heavy CPU load
• Fixed background agents emitting terminal sync-output markers to terminals that don't support them (Apple Terminal, tmux), causing render artifacts when entering a running agent
• Fixed mouse wheel scrolling prompt history instead of the transcript right after opening a session from the agents list
• Fixed CJK IME composition appearing at the bottom-left of the screen instead of at the input caret in the claude agents view
• Fixed valid file:///C:/... links being rewritten to a broken path on Windows terminals with hyperlink support
• Fixed voice mode failing to connect when the project directory or branch name contains non-ASCII or special characters
• Fixed the auto mode unavailability message on third-party providers (Bedrock/Vertex/Foundry) to point to the CLAUDE_CODE_ENABLE_AUTO_MODE opt-in instead of incorrectly blaming the model
• Fixed /effort ultracode incorrectly blaming the dynamic workflows setting when the model cannot run xhigh; ultracode is no longer offered on models that do not support it
• Fixed model-not-found errors suggesting --model when running via the SDK or other hosts where the CLI flag doesn't apply
• Fixed Claude's past replies disappearing from scrollback when resuming a brief mode session with brief mode turned off
• Fixed vim mode p pasting on the line below instead of at the cursor when the register was yanked with v$
• Improved performance of opening recently-inactive background agent sessions in claude agents
• Improved auto mode classifier latency by reducing reasoning on routine actions, lowering the chance of "could not evaluate this action" blocks
• Improved background-session teardown (claude rm/stop, idle reap) to send SIGTERM to running shell subprocesses before SIGKILL, so cleanup handlers run
• Removed CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE; the environment variable is now a no-op
• Removed the JetBrains plugin install suggestion from startup
• Renamed the dynamic-workflow trigger keyword from workflow to ultracode. The word "workflow" no longer triggers a run; asking for one in your own words still works. The trigger keyword is highlighted in violet in the prompt input

• Plugins in .claude/skills directories are now automatically loaded, no marketplace required
• Added claude plugin init <name> to scaffold a new plugin in .claude/skills
• Added autocomplete for /plugin arguments: subcommands, installed plugin names, and plugins from known marketplaces
• claude agents: the agent field in settings.json is now honored for dispatched sessions, with --agent <name> to override it
• EnterWorktree can now switch between Claude-managed worktrees mid-session
• tool_decision telemetry events now include tool_parameters (bash commands, MCP/skill names) when OTEL_LOG_TOOL_DETAILS=1
• Worktrees managed by Claude are now left unlocked when the agent finishes, so git worktree remove/prune can clean them up
• Fixed unprocessable images (zero-byte, corrupt) attached via paste, MCP, or dialog crashing the request instead of becoming a text placeholder
• Fixed sandbox network permission prompts appearing in auto and bypass-permissions mode when using the desktop app, IDE extensions, or SDK
• Fixed claude agents completed sessions not retiring when an idle subagent was still parked or had leaked a backgrounded shell
• Fixed claude agents pressing Esc not cancelling a slow "opening…", leaving the list unresponsive
• Fixed background agent worktrees under .claude/worktrees/ being orphaned after the 30-day job retention sweep
• Fixed background sessions re-attached after a sleep/wake not telling the model the correct date
• Fixed copy-on-select in claude agents not reaching the system clipboard inside tmux with set-clipboard on (regression in 2.1.153)
• Fixed --resume not reporting background subagents that were running when the previous Claude Code process exited
• Fixed the --resume session picker leaving its contents on the terminal after exiting in fullscreen mode
• Fixed --worktree and --worktree --tmux returning to the canonical repo root instead of the current linked worktree
• Fixed the /model picker showing an incorrect "Newer version available" hint when the selected model is already the newest in its family; the pinned-model row now shows the model's description instead of its raw ID
• Fixed literal markdown markers (backticks, asterisks) appearing in the in-progress message text in fullscreen mode
• Fixed the terminal freezing after approving the managed-settings security dialog at startup
• Fixed a rare duplicate line appearing in scrollback after the terminal UI redraws
• Fixed right-click paste duplicating the clipboard in the VS Code, Cursor, and Windsurf integrated terminals
• WSL: fixed image paste (alt+v keybinding), screenshot paste on Windows 11, and added support for dragging images from Windows Explorer
• Improved performance of long and resumed conversations by eliminating redundant message-rendering recomputations
• /terminal-setup now disables GPU acceleration in VS Code/Cursor/Windsurf integrated terminals to prevent garbled-text rendering
• The Feature of the Week credit-claim status now appears as a notification in the status area instead of a line above the prompt
• claude agents: slash-command autocomplete in the dispatch input now matches substrings
• Removed the "bash commands will be sandboxed" startup banner — sandbox status still shows in /status and when a command is blocked
• Removed the "/ide for …" startup hint toast
• [IDE] Fixed clicking Stop while a background subagent is running not actually stopping it
• [VSCode] Fixed the fast mode indicator not appearing on Opus 4.8
• Pressing backspace right after a workflow trigger keyword now dismisses the workflow request (same as alt+w) instead of deleting a character
• Added a "Workflow keyword trigger" setting in /config to stop the word "workflow" in a prompt from triggering a dynamic workflow

Run Claude Code on Claude Opus 4.8, orchestrate large tasks with dynamic workflows, catch security issues with the security-guidance plugin, and use fast mode on Opus 4.8 at a lower price.

Claude Opus 4.8

new model

Opus 4.8 is now the default on Max, Team Premium, Enterprise pay-as-you-go, and the Anthropic API. It defaults to high effort; use /effort xhigh for harder tasks. Requires v2.1.154 or later.

Switch to Opus 4.8 by name, or pick it from the model picker:

/model claude-opus-4-8

Dynamic workflows

research preview

A workflow is an orchestration script Claude writes for your task and runs across many subagents in the background. Use one when a task is too large for one conversation to coordinate: a codebase-wide audit, a large migration, a research question that needs cross-checking. Manage runs with /workflows.

Describe the task and include the word workflow:

create a workflow that migrates every internal fetch() call to the new HttpClient wrapper

Security guidance plugin

plugin

The security-guidance plugin reviews Claude’s code changes for vulnerabilities and fixes them in the same session. It runs a fast pattern check on each edit, a model review at the end of each turn, and a deeper agentic review on commit or push. Add project rules in .claude/claude-security-guidance.md.

Install it from the official Anthropic marketplace:

/plugin install security-guidance@claude-plugins-official

Then activate it in the current session:

/reload-plugins

Fast mode on Opus 4.8

research preview

Fast mode now defaults to Opus 4.8 at $10/$50 per MTok: 2x the standard rate for about 2.5x the speed. Opus 4.7 and 4.6 stay at $30/$150. Opus 4.6 fast mode is deprecated.

Toggle fast mode, now on Opus 4.8:

/fast

Other wins

In claude agents, prefix a shell command with ! to run it as a background job you can attach to and detach from; also available as claude —bg —exec ‘pytest -x’.

Plugins in .claude/skills directories are now loaded automatically, no marketplace required, and claude plugin init scaffolds a new plugin.

New /reload-skills command re-scans skill directories without restarting, and SessionStart hooks can return reloadSkills: true to make skills they install available in the same session.

Skills and commands can set disallowed-tools in frontmatter to remove tools from the model while the skill is active.

New MessageDisplay hook event lets hooks transform or hide assistant message text as it is displayed.

Claude Code now switches to your configured —fallback-model for the rest of the session when the primary model is not found, instead of failing every request.

Plugins can declare defaultEnabled: false in plugin.json or a marketplace entry, so they install without turning on until you enable them.

Vim mode: / in NORMAL mode opens reverse history search, matching Bash and Zsh vi-mode.

Streaming tool execution is now always enabled, including with telemetry disabled and on Bedrock, Vertex, and Foundry.

←← to open the agents view now works on Bedrock, Vertex, Foundry, and with telemetry disabled.

Claude in Chrome: pick which connected browser to use via /chrome → “Select browser…”, or in-chat when a browser action runs with multiple connected.

claude mcp list and claude mcp get now show unapproved .mcp.json servers as pending approval instead of auto-approving and connecting when output is piped.