Claude Code CLI 2.1.304 changelog: New features: • Added a transcript line when a plugin that runs first skips one of your mod's hooks, naming the event and the plugin • Added decider: "person" to a mod's tool.check answer: only the permission dialog or a host's callback can approve the ask, and it is refused with the mod's reason where nobody can be asked • Added e.isReadOnly to a mod's tool.check event, set when the tool call is read-only • Added /auto-mode-setup: a guided setup that reads your project and recent sessions to teach auto mode about your environment, now also available on Bedrock, Vertex, Foundry, Claude apps gateway and telemetry-disabled sessions • Added /claude-api managed-agents-secure, which compares a Managed Agents agent's settings with Anthropic's published security guide, without changing anything • Added the names of the tools called earlier to the compaction summary in the transcript view (Ctrl+O) • Added a warning on Pro and Max plans when resuming an inactive conversation would use a noticeable share of your 5-hour usage limit: resume anyway, or start a new conversation and Claude can look up the previous one if you refer to it Fixes: • Fixed the organization policy not refreshing until the hourly check after approving an ANTHROPIC_API_KEY at startup or switching "Use custom API key" in /config • Fixed sandboxed commands failing to start on Linux when a sandbox.filesystem.denyRead glob contains brackets that are not a character class, such as a [user-id] route folder • Fixed rm -r of a mounted drive or a folder at its top level (/Volumes, /media, WSL's /mnt/c) not getting the safety prompt that rm -rf /Applications gets • Fixed CLAUDE_CODE_TRANSCRIPT_LOCAL_GC dropping messages from the saved transcript when the disk filled up while the file was being trimmed • Fixed a plugin keeping a headless run going past --max-turns, Stop, or ended input by spawning subagents or re-running a finished one • Fixed a failed mod reload removing the tools and commands of the version that stays loaded, and its messages being wrong or silent about whether the previous version is still loaded • Fixed a click on a mod's button being lost when buttons with the same label and no key were redrawn unchanged • Fixed mod sharing in the built-in plugin-authoring skill stopping at the secret scan on machines with managed settings and on Team and Enterprise plans • Fixed scheduled Cowork cloud sessions waiting five minutes again for each subagent whose WebFetch needed a URL approval that nobody was there to give • Fixed Write results and rejected edits showing a file outside the working directory as ../../…; they now show ~/… or the full path • Fixed a claude.ai Directory plugin's skills not running as commands when picked from the "/" menu in Cowork cloud sessions • Fixed Remote Control permanently withholding a desktop conversation's history when a different account was signed in to the terminal • Fixed Remote Control failing to start from Claude Desktop when DISABLE_TELEMETRY or DO_NOT_TRACK is set on a paid plan • Fixed model switches, messages and interrupts waiting behind a context usage check in SDK and desktop sessions • Fixed context_management: Extra inputs are not permitted errors behind LLM gateways; Claude Code now resends the request without that field • Fixed OpenTelemetry settings delivered through server-managed settings being ignored for the whole session after signing in during first-run setup or the first start after /logout • Fixed unsandboxed Bash commands in Claude Desktop Code tab sessions on macOS and Linux not seeing environment variables exported in shell startup files such as ~/.zshrc • Fixed the Consumer Terms notice being skipped for a day or longer after a server error • Fixed /privacy-settings offering choices that may not apply to you after a network or server error • Fixed a "Context limit reached" or "Prompt is too long" error after stopping a turn while Claude Code was compacting a conversation the API had rejected as too long • Fixed subagents sometimes forgetting their most recent work when they were messaged or resumed right after finishing • Fixed claude --help text for --tools, --resume, --debug, --json-schema, --disable-slash-commands, --system-prompt-snapshot and claude update to match actual behavior • Fixed claude --worktree removing the worktree and its branch without asking at exit when HEAD was detached or on another branch, which could lose commits • Fixed resumed and cloud sessions sending Claude the whole skill list again each time plugins reloaded at startup • Fixed an interrupt not ending a Read that waits on an idle pipe or device named like an image • Fixed /effort status, /effort ultracode and the prompt's effort indicator showing a guessed effort level when CLAUDE_CODE_EFFORT_LEVEL is auto or unset and no level is sent • Fixed a PreToolUse hook's deny reason being replaced by a timeout error when an Agent SDK callback hook on the same tool call timed out • Fixed Bash and PowerShell deleting a large command's output file when it could not be copied to the session's tool-results folder, unless the disk is full • Fixed notes typed into a multiple-choice question with previews being cut off with "…" in terminals under about 100 columns, hiding what was typed (anthropics/claude-code#82768) • Fixed self-paced /loop wakeups scheduled at the 1-hour maximum firing just after the 1-hour prompt cache expired, so those wakeups no longer re-read the conversation uncached • Fixed agent teams: approving a shutdown request from the main session no longer exits the whole CLI • Fixed a skill's once hook also removing another skill's identical hook after it ran • Fixed transcript mode's { and } landing the prompt on an inconsistent row, or off screen, instead of the transcript's first row • Fixed CLAUDE_CODE_AUTO_COMPACT_WINDOW=200k silently setting a 100K window: the variable now accepts k and M suffixes like --autocompact, and warns when a value is out of range or ignored • Fixed Ctrl+C in the agents view clearing a text selection without copying it when pressed before the mouse button was released Improvements: • Improved /usage to say when a rate limit on usage data ends instead of "try again in a moment" • Improved the lines shown when a mod written in the session loads, reloads or fails to load • Improved artifacts with several views: when you ask for links to them, Claude now writes out each view's link and explains that the address bar stays the same as you switch views • Improved cloud sessions: a new conversation's first turn no longer waits for the local (stdio) MCP servers of plugins synced from claude.ai, unless a server sets alwaysLoad: true • Improved how a remote session recovers its status when the server refuses a status update that carried other session data • Improved session file size in auto mode: the safety classifier's context is no longer stored with every request • Improved the claude -p invalid-settings warning: a file that did not load lists only what stopped it, and long lists are capped per file • Improved resume of large compacted sessions in SDK and headless mode: the first request after resuming is sent sooner • Improved responsiveness and throughput when many subagents are running at the same time • Improved memory use when sending requests in long or resumed conversations • Windows: Improved git command start-up with a standard Git for Windows install by running its git.exe directly instead of through its cmd launcher Removals: • Removed the notes from claude plugin validate that predicted where a mod's hooks would run • Removed the "(research preview)" label from the /fast dialog title on Opus 5.5 Other changes: • Self-hosted runner: Improved the error shown when the git host answers "not found" for a session's repository: it now names the repository and whom to ask • Changed mods' settings.read hooks to receive each settings layer and rewrite the merged settings, so a managed mod can make an organization's setting a ceiling, including the cleanupPeriodDays the retention sweep uses • Changed the /artifacts delete confirmation to show numbered choices: 1 or Enter keeps the artifact, 2 deletes it, and y, n and Esc still work • Changed the question that turns on the mods Claude writes in a session to plain text with no link or session id; it stays up when a new turn starts, and Claude tells you what loaded when you turn them on • Changed tool search to be on by default behind a custom ANTHROPIC_BASE_URL; a 400 or 422 from the gateway is retried without it • Changed compaction to send Claude the skill list again afterwards; /reload-skills now sends only new or changed skills • Changed skill hooks: the skills of one source (a repo, your own folder, or a plugin) can register at most 1,024 hooks and 16,384 matcher characters per session • Changed skills under a policy that allows hooks from plugins only: a skill used in the main conversation whose hooks are kept out no longer gets its allowed-tools • Updated the /claude-api skill to use the ant CLI on Claude Platform on AWS instead of falling back to the SDK or curl • [VSCode] Added mod drawing in the chat panel for sessions on Amazon Bedrock, Google Vertex AI and Microsoft Foundry, behind an LLM gateway, or with telemetry turned off • [VSCode] Fixed one cause of sessions failing to start with "Subprocess initialization did not complete within 60000ms": time a SessionStart command hook spends running no longer counts toward the limit, up to 10 minutes in total • [VSCode] Fixed a session closed while it was starting keeping its Claude Code process running until the start ended • [VSCode] Fixed a mod's drawings disappearing from a long-open panel until the next turn on machines that also run an older Claude Code • [VSCode] Fixed Past conversations hiding sessions when claudeCode.claudeProcessWrapper is set • [VSCode] Changed background sub-agents to show as one status line under their Agent card instead of streaming every step into the chat; the full transcript stays in /tasks • [Cloud sessions] Fixed folders in the composer's @ list showing no name in cloud sessions, where picking one added only a space instead of a mention • [Claude Tag] Fixed Claude going silent in a thread when its channel becomes shared across Enterprise Grid workspaces mid-task; it now posts a one-time note to @-mention it in a new thread • [Claude Tag] Fixed @Claude !fork typed outside a thread getting no visible reply; Claude now shows you a private note saying to run it from inside a thread • [Code Review] Added review levels to Code Review: Owners choose Quick, Standard (the default), or Deep for the organization, and can give individual repositories their own level • [Code Review] Added an option in Code Review admin settings to review every repository in a GitHub organization, including ones added later, without selecting them one by one • [Code Review] Fixed pull requests opened within a minute or two of an admin turning on Code Review being silently skipped; they are now retried and reviewed Source: github.com/anthropics/claude…

Claude Code CLI 2.1.303 changelog: Other change: • Bug fixes and reliability improvements Source: github.com/anthropics/claude…

Claude Code CLI 2.1.302 changelog: New features: • Added CLAUDE_CODE_AUTO_MODE_MODEL to choose the model the client-side auto mode classifier uses; it does not change the model for server-side auto mode • Added an Idle compaction row to /config for turning idle compaction off or back on; the notices shown after an idle compaction now say how to turn it off • Added a notice to /design-sync and /design-login that standalone Claude Design (claude.ai/design) closes by December 14, 2026 Fixes: • Fixed a "Prompt is too long" error when stopping a turn while the conversation was being compacted • Fixed requests failing with "diagnostics: Extra inputs are not permitted" after switching to Vertex or Bedrock mid-session • Fixed the Read tool loading an image file of any size, or a pipe or device named like an image, entirely into memory; image sources over 128 MB are now refused • Fixed /autocompact and /effort saving to the wrong model when a gateway names Opus 4 or 4.1 with a prefix, such as anthropic/claude-opus-4-1 • Fixed a prompt cache miss when a tool added mid-session was loaded again through ToolSearch or after compaction • Fixed claude plugin and other subcommands sometimes exiting before a queued settings or config write finished, which could lose the change or leave a .tmp file behind • Fixed plugin marketplaces re-cloning on every refresh, and newly installed git plugins showing version "unknown", when git defaults to the reftable ref format • Fixed the PowerShell tool not finding commands in a plugin's bin/ folder, and reporting an error when a search that finds nothing (rg, grep, findstr, git grep) is piped into Select-Object or another formatting cmdlet • Fixed Claude in the desktop app pointing you to claude.ai settings or /mcp to authorize or reconnect an MCP server where that option isn't available • Fixed artifact publishes sometimes failing when Claude sent an empty list of edits, and Claude retrying an artifact update the wrong way after a newer version of the artifact turned it away • Fixed classifier_category missing from OpenTelemetry tool_decision events for most auto mode classifier blocks, and new tool_decision attributes pushing out tool_use_id, tool_source and tool_parameters when OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT is low • Fixed rows in the agents view staying blank after moving down a long list or folding a section • Fixed claude remote-control --help not printing its usage and exiting when not signed in • Fixed /design consent and /design revoke suggesting /design-login when they fail in a cloud session, where it isn't available; the message now points to claude.ai/design/settings • Fixed MCP servers showing no tools, or every tool call failing, when the server negotiates protocol version 2026-07-28 but omits resultType, ttlMs or cacheScope • Fixed prompt suggestions spending usage credits on models your plan pays for only with credits: they are now skipped after a reply billed to credits • Fixed URLs written in backticks being clickable only on their first row when they wrap; the whole URL is now one link in terminals that support hyperlinks • Fixed claude plugin details @builtin suggesting claude plugin list, which never shows built-in plugins, when the plugin isn't found; it now points to /plugin • Fixed an emoji that a link starts inside wrapping one column too wide, which hid it in question previews and turned tables into lists • Fixed worktree isolation refusing to create or resume worktrees under git 2.56 or later when a stray .git file points at a directory that doesn't exist • Fixed a cloud session's cost and usage restarting from zero after the session resumed in a new process • Windows: Fixed every file write being refused or asked about for projects on exFAT or FAT32 drives, including in sessions started with --plugin-dir Improvements: • Improved startup time with many plugins enabled: plugin command and agent files now take far fewer file system calls to load, most of all on Windows • Improved auto mode with the server-side classifier: a conversation too long for the safety check is now compacted, instead of every checked tool call being denied • Improved the message when a background session reopened from another folder has no LLM gateway: it now says why, instead of "Not logged in" Security/safety changes: • Changed claude -p and Agent SDK sessions with no permission mode to start in default mode on third-party providers, with telemetry off or on a fresh install; --permission-mode auto keeps auto • [VSCode] Fixed MCP server sign-in from the panel opening a broken authorization page when the server URL contains a query string Other changes: • Self-hosted runner: Fixed git fetches failing with "bad object refs/heads" in sessions that reuse a checkout stored in git's reftable format • Changed fork subagents (subagent_type: "fork") to be on by default in claude -p, the Agent SDK, the desktop app and VS Code, as they already are in the terminal; CLAUDE_CODE_FORK_SUBAGENT=0 turns them off, and claude mcp serve never offers them • Changed the desktop app and VS Code to always run the main conversation's subagents in the background, as the terminal does, rather than let Claude choose; a subagent's own Agent calls in claude -p, the Agent SDK, the desktop app and VS Code now run in the foreground by default • Changed the ← for agents footer hint to hide 10 seconds after a session opens; the count of agents waiting on you still shows • Changed where the Claude in Chrome instructions sit in the system prompt so that new conversations can read them from the shared prompt cache • Changed prompt and agent hooks so that at most 12 of one event run at a time; the rest wait their turn • Changed the message shown when your organization's policy turns off /feedback: it now points to GitHub issues instead of an organization admin • [VSCode] Fixed text after an unclosed code block in a list showing as plain text while a reply streams, then turning into code • [VSCode] Fixed the @browser banner saying "Browser connected" when no browser with the Claude extension can be reached • [Cloud sessions] Added a banner on a routine's page that says why its last run didn't start, such as your organization reaching its limit on concurrent cloud sessions • [Cloud sessions] Fixed "Rewind to here" failing on every message except the newest in cloud sessions; self-hosted runners need Claude Code v2.1.246 or later • [Cloud sessions] Fixed the pull request status bar in cloud sessions flipping a pull request with merge conflicts back to ready while GitHub rechecked it • [Cloud sessions] Fixed routine runs showing as Completed after their cloud session stopped unexpectedly, and as Cancelled when archived before they started, instead of failed • [Cloud sessions] Fixed the diff view in cloud sessions missing changes or failing to load after the session's GitHub repository was renamed or moved • [Cloud sessions] Fixed a scheduled routine run that failed partway being run again from the start an hour or more later, which could repeat work such as posting the same report twice • [Cloud sessions] Fixed an open cloud session sometimes not showing messages sent from another device until you reloaded the page or clicked away and back • [Cloud sessions] Improved the error shown when a cloud session fails to start: it now says "Connection lost" or "Server error" instead of "Something went wrong" • [Remote Control] Fixed a subagent's pane spinning forever in a Remote Control session after your computer goes offline; it now says Remote Control is disconnected • [Claude Tag] Fixed "is thinking…" staying up under a mention in a Slack channel or DM after Claude answered it by editing one of its earlier messages • [Claude Tag] Fixed URLs in code blocks under a numbered or bulleted step of Claude's Slack replies being wrapped in angle brackets, which broke copied commands • [Claude Tag] Fixed HEIC, SVG, TIFF and BMP images attached in Slack never reaching Claude; they now arrive as files in its working files, like other file types • [Claude Tag] Fixed new channel managers losing access to Claude in Slack in organizations that restrict Claude Tag by role; the manager role now also grants Claude Tag in Slack • [Claude Tag] Fixed custom connectors whose MCP servers share one host showing as a single connector in Claude Tag admin settings; each server is now its own connector • [Claude Tag] Fixed Claude in Slack sometimes answering a direct message with "DMs are temporarily unavailable" and dropping it when a single Slack lookup stalled; it now retries first • [Claude Tag] Fixed direct messages with Claude on a Slack Enterprise Grid ignoring Slack's workspace dropdown; they now run under the connected workspace you last opened Claude in • [Claude Tag] Fixed Claude in Slack's notice for a channel's monthly spend limit saying a channel manager can raise it; it now names an organization owner and links the usage page • [Claude Tag] Fixed links in Claude's Slack replies absorbing the closing bold or italic marks, or full-width punctuation, right after them, which broke the link and the formatting • [Claude Tag] Improved repository search in Claude Tag admin settings to cover up to 100 connected GitHub accounts and find private repositories past the first 5,000 of a GitHub App install • [Claude Tag] Improved Add place in Claude Tag admin settings to list a channel you type or paste right away, instead of only after your organization's full channel list has loaded • [Claude Tag] Improved Add > Domain on a workspace's or channel's page in Claude Tag admin settings to be available once that page loads, not only after every channel has loaded • [Claude Tag] Changed Claude Tag admin settings to organize Claude's access into four tabs: Bundles, Connectors, Skills and plugins, and Channels • [Claude Tag] Changed the Roles page in organization settings to group the roles created for Claude Tag channel managers in a collapsed section below your organization's own roles • [Code Review] Fixed Code Review setup not resuming after you leave to connect GitHub; back in admin settings, it now reopens at the repository picker Source: github.com/anthropics/claude…

Claude Code 2.1.301 system prompt updates Notable changes: 1) Claude is now explicitly scoped to authorized security testing/defensive work/CTFs/education. It must refuse destructive techniques (incl. DoS, mass targeting, supply chain compromise, malicious detection evasion) and require clear authorization context for dual-use tooling. Links: 1) github.com/marckrenn/claude-…

Claude Code 2.1.300 system prompt updates Notable changes: 1) Claude no longer receives the explicit "AskUserQuestion" directive. In its place, the prompt now injects a "claude-mermaid-runtime-begin" marker right before the Harness block, shifting behavior away from forced question-asking and toward a runtime-wrapped/flagged instruction section (likely tied to Mermaid handling). Links: 1) github.com/marckrenn/claude-…