One read of Claude Code CLI

 
 Run `claude --version` to check your installed version.
 
+<Update label="2.1.234" description="August 17, 2026">
+  * Added the optional `CLAUDE_CODE_PROJECT_DIR_NAME` environment variable: hosts that give each session its own config directory can choose a short name for the per-project transcript directory
+  * Added the `selection:clear` keybinding action, so a key can be bound to clear an in-app text selection; also works in the agents view
+  * Added a GitLab merge request badge to the footer and statusline: repos with a GitLab remote and an authenticated glab CLI show MR !N with draft/pending/green states
+  * Claude Code now continues your session automatically when a claude.ai usage limit resets; turn it off in `/config` ("Continue automatically at usage limit")
+  * Claude is now told to use your account email only to identify you, and not to send it to unrelated services unless you ask
+  * Security: remote file reads, session restore, CLAUDE.md includes, workflow scripts and file uploads now reject Windows NT-namespace (`\??\`) paths, hardening the remaining pre-approval file accesses against the NTLM credential-leak vector
+  * Fixed auto mode in very long sessions repeatedly re-checking and denying sandboxed commands' network access after the conversation had been compacted
+  * Fixed session-scoped permission answers (including denies) being dropped when answering background subagent tool permission prompts
+  * Fixed a crash when an API response on the non-streaming fallback path (typically via third-party gateways) contained a thinking block missing its thinking field or a text block missing its text field
+  * Fixed markdown rendering becoming extremely slow for some messages containing unusual Unicode sequences
+  * Fixed `SendMessage` rejecting a recipient copied from `ListAgents` when the session name is at the 200-character cap or emoji-heavy
+  * Fixed repository detection mis-reading the host of git remotes with unusual userinfo, producing links and repo-specific behavior for the wrong host
+  * Fixed MCP diagnostics printing resolved secrets: scope-conflict warnings now show the configured `${VAR}` form, and connection-failure details show only the server origin
+  * Fixed `strictKnownMarketplaces` allowlists accepting SCP-style git marketplace sources whose host differs from the one git would actually connect to
+  * Fixed modal text such as the `/login` OAuth URL losing characters when copied in fullscreen
+  * Fixed a `---` horizontal rule in rendered markdown running into the line after it
+  * Fixed consecutive shell commands splitting into multiple "Ran 1 shell command" rows when todo/task updates were interleaved between them
+  * Fixed dialogs like `/permissions` opened while a `!` shell command was running being dismissed when the command finished
+  * Fixed a queued `!` shell command being sent to the model as plain text after pressing up-arrow to edit the queued input
+  * Fixed queued messages reappearing in the prompt history while still queued, Esc while selecting a queued message no longer interrupts the turn, and `!` mode no longer sticks after a mid-turn submit
+  * Fixed accepting the "Try the new fullscreen renderer?" prompt restarting the session without its permission mode (e.g. `--dangerously-skip-permissions`), tool allow/deny rules, model or effort flags
+  * Fixed `/tui` dropping launch `--allowed-tools`/`--disallowed-tools` rules when it restarts; it now declines to switch, with the reason, when the session has restrictions a restart can't carry over
+  * Fixed trust prompts omitting the repository-wide scope warning when the directory was first seen before the repository existed there
+  * Fixed a case where an IDE diff tab closing during a permission re-prompt could answer the new prompt with the previous input
+  * Fixed: files sent to the user during Remote Control sessions hosted by Claude Code Desktop or VS Code now upload, so they open on phone and web instead of showing an empty card
+  * Fixed: after `/login` while `CLAUDE_CODE_OAUTH_TOKEN` is set, the stale-token reminder no longer leaks into Claude's automatically resumed turn — it now appears only to you
+  * Fixed: permission previews now relay only to channel servers admitted by the inbound trust gate, and a server's explicit permission-capability opt-out is honored
+  * Fixed: credential masking on relayed permission previews can no longer hide commands, paths, or destinations from the approver; oversized private-key blocks now redact under full-strength redaction
+  * Fixed: provider API tokens that mask on permission previews now mask even when directly followed by shell delimiters
+  * Fixed Claude Desktop inter-session messages being silently dropped by the recipient session when cross-session messaging read as disabled, which left the sender's query "thinking" for many minutes
+  * Remote Control: signing this computer in to a different claude.ai account or organization now stops the running session within seconds and says why, instead of a misleading HTTP 404 hours later
+  * Remote Control sessions started from Claude Code Desktop or VS Code now keep phones and claude.ai/code updated on the session's permission mode (and claude.ai/code on the model) as they change
+  * Remote Control: effort picks made on a phone or on claude.ai/code now apply to terminal- and Desktop/VS Code-hosted sessions, and the session publishes its effort level to connected clients
+  * `SendMessage` and `ListAgents` now say when your account's session list was too long to check completely, instead of treating unseen sessions as absent
+  * Expired Anthropic profile credential now points you at `/login` when a claude.ai login would take precedence
+  * Improved the transcript: your own prompts now render markdown (highlighted code blocks, inline code, lists) the same way replies do
+  * Improved the "API returned an empty or malformed response" error to say what came back (content type, body kind, size, request ID) and why the original streaming request failed
+  * Improved auto-generated session titles to read as short, specific names (e.g. "Login button bug") rather than sentences restating your request (e.g. "Fix the login button on mobile")
+  * Reduced the context cost of loading the built-in `claude-api` skill from \~200k+ tokens to \~25k by loading reference docs on demand
+  * `/permissions` can now be opened while Claude is working — rule changes apply to the rest of the current turn
+  * `/add-dir <path>` can now be used while Claude is working; `/add-dir`, `/autocompact`, `/theme`, `/help`, `/config` and `/advisor` dialogs open mid-turn in the fullscreen TUI
+  * `/goal` now clears itself with a notice when a turn dies on an unrecoverable error (e.g. revoked auth, an exhausted credit balance, or a context overflow) instead of staying armed
+  * `/goal`: when background tasks keep a goal waiting for 30+ minutes, Claude now checks in on them instead of waiting indefinitely (set `CLAUDE_CODE_GOAL_CHECKIN_MINUTES=0` to opt out)
+  * `claude setup-token` now rejects unexpected extra arguments instead of silently ignoring them
+  * Changed Esc in fullscreen mode to no longer clear a mouse text selection: it interrupts or dismisses as usual and the selection stays highlighted
+  * Removed the redundant "Allowed by auto mode classifier" line that auto mode showed under every Agent tool call
+  * Removed the "Default teammate model" setting from `/config`; agent-team teammates now use the leader's model unless the spawn names one
+  * Dimmed the elapsed-time counter on the running tool header so it no longer competes with the bold counts
+  * Background task notifications delivered between turns are now sent to the model inside `<system-reminder>` tags, matching mid-turn delivery
+  * Mantle: skip the admin-pin availability probe at startup when a main-loop model is already picked
+  * Windows: startup no longer stalls on repeated rename retries when `~/.claude.json` is read-only
+</Update>
+
 <Update label="2.1.233" description="August 14, 2026">
   * Added GitLab merge request URL support to the `--worktree` flag and the `claude agents` view (where MRs display as `!N`)
   * Added an opt-in `forward_user_identity` apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user

 
 <Update label="2.1.126" description="May 1, 2026">
   * The `/model` picker now lists models from your gateway's `/v1/models` endpoint when `ANTHROPIC_BASE_URL` points at an Anthropic-compatible gateway
-  * * Added `claude project purge [path]` to delete all Claude Code state for a project (transcripts, tasks, file history, config entry) — supports `--dry-run`, `-y/--yes`, `-i/--interactive`, and `--all`
-  * `--dangerously-skip-permissions` now bypasses prompts for writes to `.claude/`, `.git/`, `.vscode/`, shell config files, and other previously-protected paths (catastrophic removal commands still prompt as a safety net)
-  * `claude auth login` now accepts the OAuth code pasted into the terminal when the browser callback can't reach localhost (WSL2, SSH, containers)
-  * `claude_code.skill_activated` OpenTelemetry event now fires for user-typed slash commands and carries a new `invocation_trigger` attribute (`"user-slash"`, `"claude-proactive"`, or `"nested-skill"`)
-  * Auto mode: the spinner now turns red when a permission check stalls, instead of looking like the tool is running
-  * Host-managed deployments (`CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST`) no longer auto-disable analytics on Bedrock/Vertex/Foundry
-  * Windows: PowerShell 7 installed via the Microsoft Store, MSI without PATH, or `.NET global tool` is now detected
-  * Windows: when the PowerShell tool is enabled, Claude now treats PowerShell as the primary shell instead of defaulting to Bash
-  * Read tool: removed the per-file malware-assessment reminder that could cause spurious refusals and "this is not malware" commentary on legacy models
-  * **Security:** Fixed `allowManagedDomainsOnly` / `allowManagedReadPathsOnly` being ignored when a higher-priority managed-settings source lacked a `sandbox` block
-  * Fixed pasting an image larger than 2000px breaking the session — images are now downscaled on paste, and oversized images in history are automatically removed and the request retried
-  * Fixed showing the login screen for "OAuth not allowed for organization" errors — now shows guidance to contact your admin
-  * Fixed OAuth login failing with timeout on slow or proxied connections, in IPv6-only devcontainers, and when the browser callback can't reach localhost
-  * Fixed a rare race where a concurrent credential write could clear a valid OAuth refresh token
-  * Fixed API retry countdown sticking at "0s" instead of counting down between attempts
-  * Fixed "Stream idle timeout" error after waking Mac from sleep mid-request
-  * Fixed background and remote sessions falsely aborting with "Stream idle timeout" during long model thinking pauses
-  * Fixed a hang where the assistant could finish thinking but show no output after a run of empty turns
-  * Fixed overly fast trackpad scrolling in Cursor and VS Code 1.92–1.104 integrated terminals
-  * Fixed claude.ai MCP connectors being suppressed by manual servers stuck in needs-auth state
-  * Fixed Japanese/Korean/Chinese text rendering as garbled characters on Windows in no-flicker mode
-  * Fixed `Ctrl+L` clearing the prompt input — it now only forces a screen redraw, matching readline behavior
-  * Fixed deferred tools (WebSearch, WebFetch, etc.) not being available to skills with `context: fork` and other subagents on their first turn
-  * Fixed plan-mode tools being unavailable in interactive sessions launched with `--channels`
-  * Fixed `/plugin` Uninstall reporting "Enabled" instead of "Uninstalled"
-  * Bounded total size of file-modified reminders when a linter touches many files at once
-  * Fixed `/remote-control` retries appearing stuck on "connecting…" — each retry now shows its result
-  * Fixed Remote Control failure notification not showing the error reason for initial connection failures
-  * Windows: clipboard writes no longer expose copied content in process command-line arguments visible to EDR/SIEM telemetry; also fixes >22KB selections not reaching the clipboard
-  * PowerShell tool: bare `--` (e.g. `git diff -- file`) is no longer mis-flagged as the `--%` stop-parsing token
-  * Fixed Agent SDK hang when the model emits a malformed tool name in a parallel tool call batch
-</Update>
-
-<Update label="2.1.123" description="April 29, 2026">
-  * Fixed OAuth authentication failing with a 401 retry loop when `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1` is set
-</Update>
-
-<Update label="2.1.122" description="April 28, 2026">
-  * Added `ANTHROPIC_BEDROCK_SERVICE_TIER` environment variable to select a Bedrock service tier (`default`, `flex`, or `priority`), sent as the `X-Amzn-Bedrock-Service-Tier` header
-  * Pasting a PR URL into the `/resume` search box now finds the session that created that PR (GitHub, GitHub Enterprise, GitLab, and Bitbucket)
-  * `/mcp` now shows claude.ai connectors hidden by a manually-added server with the same URL, with a hint to remove the duplicate
-  * Clarified the `/mcp` message shown when an MCP server is still unauthorized after the browser sign-in flow
-  * OpenTelemetry: numeric attributes on `api_request`/`api_error` log events are now emitted as numbers, not strings
-  * OpenTelemetry: added `claude_code.at_mention` log event for `@`-mention resolution
-  * Fixed `/branch` producing forks that fail with "tool\_use ids were found without tool\_result blocks" when the source session contained entries from rewound timelines
-  * Fixed `/model` not showing the Effort option for Bedrock application inference profile ARNs, and those ARNs not receiving `output_config.effort`
-  * Fixed Vertex AI / Bedrock returning `invalid_request_error: output_config: Extra inputs are not permitted` on session-title generation and other structured-output queries
-  * Fixed Vertex AI `count_tokens` endpoint returning 400 errors for users behind proxy gateways
-  * Fixed `spinnerTipsOverride.excludeDefault` not suppressing the time-based spinner tips
-  * Fixed ToolSearch missing MCP tools that connected after session start in nonblocking mode
-  * Fixed `!exit` / `!quit` in bash mode terminating the CLI instead of running as a shell command
-  * Fixed images sent to newer models being resized to 2576px per side instead of the correct 2000px maximum
-  * Fixed remote control session idle status redrawing twice per second, which could flood `tmux -CC` control pipes and pause the terminal
-  * Fixed assistant messages appearing blank in some sessions due to a stale view preference
-  * Fixed a malformed hooks entry in `settings.json` no longer invalidating the entire file
-  * Voice mode: keybindings bound to Caps Lock now show an error since terminals don't deliver Caps Lock as a key event
-</Update>
-
-<Update label="2.1.121" description="April 28, 2026">
-  * Added `alwaysLoad` option to MCP server config — when `true`, all tools from that server skip tool-search deferral and are always available
-  * Added `claude plugin prune` to remove orphaned auto-installed plugin dependencies; `plugin uninstall --prune` cascades
-  * Added a type-to-filter search box to `/skills` so you can find a skill in long lists without scrolling
-  * PostToolUse hooks can now replace tool output for all tools via `hookSpecificOutput.updatedToolOutput` (previously MCP-only)
-  * Fullscreen mode: typing into the prompt no longer jumps scroll back to the bottom after you've scrolled up to read earlier output
-  * Dialogs that overflow the terminal are now scrollable with arrow keys, PgUp/PgDn, home/end, and mouse wheel in both fullscreen and non-fullscreen modes
-  * Clicking any line of a long URL that wraps across rows in fullscreen mode now opens the full URL
-  * SDK and `claude -p`: `CLAUDE_CODE_FORK_SUBAGENT=1` now works in non-interactive sessions
-  * `--dangerously-skip-permissions` no longer prompts for writes to `.claude/skills/`, `.claude/agents/`, and `.claude/commands/`
-  * `/terminal-setup` now enables iTerm2's "Applications in terminal may access clipboard" setting so `/copy` works, including from tmux
-  * MCP servers that hit a transient error during startup now auto-retry up to 3 times instead of staying disconnected
-  * The terminal tab session title is now generated in your configured `language` setting
-  * Claude.a
+  * * Added `claude project pur