Feature flags, all 2,081.

tengu_agents_md_mod ◇ A new built-in agents-md plugin can load AGENTS.md as project instructions instead of, or alongside, CLAUDE.mdnever mined ·never mined AND v2.1.281 tengu_agentview_inherit_mode_demote ◇ A hidden --inherit-permission-mode flag lets a spawned session take its permission mode from whatever launched it.v2.1.257 → v2.1.308 ◆in the build AND v2.1.257 tengu_amber_larch ◇ Before running a Bash command, Claude Code now also checks shell scripts written inline in it, such as heredocs or code passed with -cv2.1.288 → v2.1.308 ◆in the build AND v2.1.288 tengu_amber_sextant ◇ Autonomous-operation guidance now checked with a second condition that takes message state as inputv2.1.169 → v2.1.308 ◆in the build AND v2.1.275 tengu_async_goblet ◇ SDK-hosted sessions can now upload attachments, with a clearer message when files stay local.v2.1.234 → v2.1.308 ◆in the build AND v2.1.234 tengu_bg_binary_takeover ◇ The background daemon can now retire a same-version instance; build is 2.1.248.v2.1.152 → v2.1.308 ◆in the build AND v2.1.248 tengu_bg_leftarrow_inprocess ◇ Backgrounding no longer claims artifact comment monitors will stop; it says they keep auto-replying here.v2.1.138 or earlier → v2.1.308 ◆in the build AND v2.1.296 tengu_bg_worker_ctty ◇ Daemon-mode background workers now try to claim a controlling terminal at startup.v2.1.251 → v2.1.308 ◆in the build AND v2.1.251 tengu_breezy_crescent ◇ Monitor tool watches can now be capped with an auto-expiring timeout instead of running foreverv2.1.268 → v2.1.308 ◆in the build AND v2.1.287 tengu_breezy_diffie ◇ Handling of repeated 404s while polling a cloud /code-review session is now controlled by a gate, with clearer error messagesv2.1.280 → v2.1.308 ◆in the build AND v2.1.280 tengu_breezy_haven ◇ Claude Code keeps reading input during slow input hooks, and withdraws pending permission requests when you press Stop or the session endsv2.1.295 → v2.1.308 ◆in the build AND v2.1.295 tengu_bridge_apply_server_session_config ◇ Remote Control sessions now run in a git worktree whenever the server asks for one, and run in place if the folder is not a git reponever mined ·never mined AND v2.1.281 tengu_bridge_auth_revive ◇ After you log back in, Remote Control can turn itself back on without you re-running the command.v2.1.225 → v2.1.308 ◆in the build AND v2.1.225 tengu_bridge_child_auto_mode ◇ New unreleased scaffolding tags some spawned bridge sessions as 'rc-child' behind a feature gate, but the other triggers are hardcoded offv2.1.269 → v2.1.308 ◆in the build AND v2.1.281 tengu_bridge_child_auto_over_settings ◇ Bridge-spawned child sessions may be defaulted to auto permission mode, gated offv2.1.271 → v2.1.308 ◆in the build AND v2.1.281 tengu_bridge_child_file_upload ◇ SendUserFile can now deliver files into a project's shared Library folder for bridge child sessionsv2.1.274 → v2.1.308 ◆in the build AND v2.1.274 tengu_bridge_child_machine_settings ◇ Remote Control child sessions gain two new optional capabilities: artifact behavior and inherited machine settingsv2.1.273 → v2.1.308 ◆in the build AND v2.1.281 tengu_bridge_child_tool_diff ◇ New tengu_bridge_child_tool_diff setting controls whether child-session file edits are shown as diffs to a parent sessionv2.1.269 → v2.1.308 ◆in the build AND v2.1.273 tengu_bridge_host_declined_end ◇ Three new remote-bridge switches appear, covering a retry after a rejected token refresh and two unread ones.v2.1.238 → v2.1.308 ◆in the build AND v2.1.238 tengu_bridge_inbox_pointer_boundary ◇ Claude Code can re-notify itself about unread bridge attachments after going idlev2.1.274 → v2.1.308 ◆in the build AND v2.1.274 tengu_bridge_owner_check_attribution ◇ Claude Code adds two new switches the server can turn on or off, one of them on unless switched off remotelyv2.1.304 → v2.1.308 ◆in the build AND v2.1.304 tengu_bridge_owner_pinned_end ◇ A live remote session now shuts down if you sign into a different account mid-session.v2.1.234 → v2.1.308 ◆in the build AND v2.1.234 tengu_bridge_rc_child_artifact ◇ Remote Control child sessions gain two new optional capabilities: artifact behavior and inherited machine settingsv2.1.269 → v2.1.308 ◆in the build AND v2.1.281 tengu_bridge_rc_child_auto_compact ◇ Child sessions started for a project thread over Remote Control now have automatic compaction turned on unless you have set it yourselfv2.1.282 → v2.1.308 ◆in the build AND v2.1.282 tengu_bridge_rc_child_restart_resume ◇ The remote-control bridge now reconnects project-thread sessions when it restartsv2.1.271 → v2.1.308 ◆in the build AND v2.1.273 tengu_bridge_rc_projects_hint ◇ Remote Control's help text can now mention that claude.ai projects can ask Claude to work in your current directoryv2.1.280 → v2.1.308 ◆in the build AND v2.1.280 tengu_bridge_recovery_patience ◇ Remote Control gives up after 14 reconnect tries and tells you it couldn't reach the server.v2.1.232 → v2.1.308 ◆in the build AND v2.1.232 tengu_bridge_resume_respects_local_owner ◇ Resuming a session another process still controls can decline the takeover and tell you why.v2.1.232 → v2.1.308 ◆in the build AND v2.1.232 tengu_bridge_selfheal_heartbeats ◇ A remote connection with failing heartbeats now rebuilds itself instead of hanging on a half-dead socket.v2.1.222 → v2.1.308 ◆in the build AND v2.1.222 tengu_bridge_signed_out_neutral ◇ Three new remote-bridge switches appear, covering a retry after a rejected token refresh and two unread ones.v2.1.238 → v2.1.308 ◆in the build AND v2.1.238 tengu_bridge_subagent_frames ◇ A subagent bridge forwards frames by default but raw text forwarding is off.v2.1.251 → v2.1.308 ◆in the build AND v2.1.251 tengu_bright_wall ◇ While a request waits on a usage limit, Claude Code can send a test request and resend the real one at once if it gets throughv2.1.305 → v2.1.308 ◆in the build AND v2.1.305 tengu_brindle_causeway ◇ MCP SDK generation gate tengu_brindle_causeway now defaults to on, favoring MCP SDK generation v2 when not set explicitlyv2.1.218 → v2.1.308 ◆in the build AND v2.1.274 tengu_bubbly_harbor ◇ Workflow runs now label whether a person or a schedule triggered them, and quote the request.v2.1.277 → v2.1.308 ◆in the build AND v2.1.277 tengu_bubbly_meteor ◇ A log message about an unreadable file now speaks of MCP servers in general, and a new remotely controlled switch appearsv2.1.286 → v2.1.308 ◆in the build AND v2.1.286 tengu_calm_crescent ◇ If the API refuses an MCP tool's parameter description, Claude Code blanks that description and retries, so the tool stays callablev2.1.300 → v2.1.308 ◆in the build AND v2.1.300 tengu_calm_nautilus ◇ Claude Code gains a switch that counts as on unless the server turns it off while Claude Code points at a non-default hostv2.1.307 → v2.1.308 ◆in the build AND v2.1.307 tengu_calm_noodle ◇ Compaction can now carry forward a short summary of key attachments across the compaction boundaryv2.1.274 → v2.1.308 ◆in the build AND v2.1.274 tengu_calm_osprey ◇ The check for whether a remote session is limited to the owner's account is now shared, and a separate check for remote cowork sessions was addedv2.1.288 → v2.1.308 ◆in the build AND v2.1.288 tengu_calm_riddle ◇ Pressing Ctrl+C when no request is running no longer raises the stop-feedback notification, under a remotely controlled switchv2.1.295 → v2.1.308 ◆in the build AND v2.1.295 tengu_ccr_event_hold_enabled ◇ Two new remote flags control telemetry event-holding and dropping unwatched stream eventsv2.1.268 → v2.1.308 ◆in the build AND v2.1.305 tengu_ccr_orphan_restore_wake ◇ If a container restart kills background work, your session now wakes up and Claude is told what was lost.v2.1.247 → v2.1.308 ◆in the build AND v2.1.302 tengu_ccr_orphan_restore_wake_shells ◇ If a container restart kills background work, your session now wakes up and Claude is told what was lost.v2.1.247 → v2.1.308 ◆in the build AND v2.1.302 tengu_ccr_v2_send_events_cli ◇ The newer cloud event-sending path is now the default when the server has no opinion.v2.1.143 → v2.1.308 ◆in the build AND v2.1.247 tengu_cedar_lantern ◇ Three existing feature gates moved position; their defaults are unchanged.v2.1.162 → v2.1.308 ◆in the build AND v2.1.248 tengu_chrome_tab_group_close ◇ Chrome tabs a session opened are closed when you leave it, unless they hold real content.v2.1.239 → v2.1.308 ◆in the build AND v2.1.239 tengu_cobalt_harbor_notice ◇ A resume-precheck gate is now passed to the VS Code extension, on by default.v2.1.191 → v2.1.308 ◆in the build AND v2.1.284 tengu_cobalt_plinth_fern ◇ Artifact viewer drops a special-case upgrade from 'skip' to 'set' read statusv2.1.174 → v2.1.308 ◆in the build AND v2.1.281 tengu_cobalt_plinth_moss ◇ Publishing over a stale artifact now fetches the current version so Claude can merge and retry.v2.1.227 → v2.1.308 ◆in the build AND v2.1.282 tengu_cobalt_plinth_sorrel ◇ Cloud sessions may route artifact calls through a gateway relay, falling back to direct calls on failure.v2.1.234 → v2.1.308 ◆in the build AND v2.1.287 tengu_cobalt_plinth_teasel ◇ Publishing an artifact skips its re-read check when your last read matched the live version.v2.1.248 → v2.1.299 ○gone AND v2.1.248 tengu_cobalt_thicket ◇ Startup telemetry for waits on remote feature settings now records whether the fetch started early on a warm wakev2.1.154 → v2.1.308 ◆in the build AND v2.1.285 tengu_compact_cache_prefix ◇ Compaction and other side runs now pass an advisorStripPlan alongside the existing thinkingStripPlanv2.1.138 or earlier → v2.1.308 ◆in the build AND v2.1.283 tengu_composed_quail ◇ Two new server-controlled switches govern whether reset and rate-limit events get forwarded.v2.1.224 → v2.1.308 ◆in the build AND v2.1.224 tengu_compressed_river ◇ A new confirmation dialog appears when a tool tries to read a file outside the allowed listv2.1.268 → v2.1.308 ◆in the build AND v2.1.268 tengu_concurrent_shore ◇ Waiting on a backgrounded shell command now keeps a task alive, controlled by a remote setting defaulting on.v2.1.242 → v2.1.308 ◆in the build AND v2.1.242 tengu_coral_anchor ◇ A remote task stuck waiting on input now fails as blocked and tells you where to answer it.v2.1.239 → v2.1.308 ◆in the build AND v2.1.281 tengu_cozy_eagle ◇ Some Claude in Chrome tools now ask for your permission rather than running at once, even with a whole-tool allow rulev2.1.290 → v2.1.308 ◆in the build AND v2.1.290 tengu_cuddly_willow ◇ Relayed messages from a new inbound source count as a human turn by default.v2.1.233 → v2.1.308 ◆in the build AND v2.1.280 tengu_curious_lake ◇ Delete commands like rd or del run through cmd.exe are now blocked when they target a drive root, a top folder or homev2.1.304 ○gone AND v2.1.283 tengu_daemon_upgrade_defer_busy ◇ The background service waits for your turn to finish before restarting for an upgrade.v2.1.248 → v2.1.308 ◆in the build AND v2.1.300 tengu_dapper_cupcake ◇ The setting that controls artifacts beside tool results is now CLAUDE_CODE_DAPPER_CUPCAKE, and the old CLAUDE_CODE_SQUISHY_NEWT is ignoredv2.1.301 → v2.1.308 ◆in the build AND v2.1.301 tengu_dazzling_garden ◇ Three new remote-bridge switches appear, covering a retry after a rejected token refresh and two unread ones.v2.1.238 → v2.1.308 ◆in the build AND v2.1.238 tengu_deep_feather ◇ A new remote flag, on by default, reassembles split message-tool inputs when they are read back.v2.1.236 → v2.1.308 ◆in the build AND v2.1.236 tengu_deep_shore ◇ A remote switch can make Claude Code wait a short, limited time for some data before each model requestv2.1.288 → v2.1.308 ◆in the build AND v2.1.288 tengu_dreamy_sundae ◇ claude.ai MCP connectors now cache 'discover' probe results for 24 hoursv2.1.280 → v2.1.308 ◆in the build AND v2.1.280 tengu_drifting_heron ◇ In sessions started by a remote trigger, one tool is no longer always forced into the set of tools loaded at the startnever mined ·never mined AND v2.1.284 tengu_eager_rain ◇ When a response stops arriving because it was suspended, Claude Code now retries it a limited number of times before its usual retry handlingv2.1.290 → v2.1.308 ◆in the build AND v2.1.290 tengu_elegant_meadow ◇ New, off-by-default recording writes each API request's system prompt, tools and message changes into the session transcript filev2.1.282 → v2.1.308 ◆in the build AND v2.1.300 tengu_encapsulated_pebble ◇ Running plugin install --replace without a name@marketplace id now says that id is needed and that nothing was installedv2.1.287 → v2.1.308 ◆in the build AND v2.1.287 tengu_ethereal_mist ◇ A 403 injected by your corporate proxy is retried as an outage instead of a hard refusal.v2.1.238 → v2.1.308 ◆in the build AND v2.1.238 tengu_ethereal_nova ◇ A /design skill drafting multi-artboard canvases as editable Artifacts is bundled but switched off.v2.1.229 → v2.1.283 ○gone AND v2.1.238 tengu_eventual_haven ◇ After a folder on your computer is attached to a remote session, Claude Code now waits for that computer to announce itself before reporting which tools are availablev2.1.282 → v2.1.308 ◆in the build AND v2.1.282 tengu_expressive_galaxy ◇ The auto-mode fallback warning can now appear inside SDK host apps that support it, when tengu_expressive_galaxy allowsv2.1.281 → v2.1.284 ○gone AND v2.1.281 tengu_fancy_milner ◇ Claude Code has a new remote switch that counts as on when the server sends no value, and it guards behaviour that is not namedv2.1.302 → v2.1.303 ○gone AND v2.1.302 tengu_fizzy_treasure ◇ Two new switches set by Anthropic's servers are built in, one falling back to off and one to onv2.1.290 → v2.1.308 ◆in the build AND v2.1.290 tengu_fleetview_pr_batch ◇ Fleet view still keeps peer session adoption off and batched PR status on by default.v2.1.138 or earlier → v2.1.308 ◆in the build AND v2.1.305 tengu_flickering_rain ◇ Bash, PowerShell, and Monitor tools can now declare extra allowed network domains for sandboxed commandsnever mined ·never mined AND v2.1.271 tengu_fresh_heron ◇ Claude Code has a new remotely controlled switch that counts as on when the server sends no value, and nothing yet shows what it controlsv2.1.289 → v2.1.308 ◆in the build AND v2.1.289 tengu_gentle_hummingbird ◇ The control protocol gains a folder-listing request and a set of requests that let desktop, mobile and VS Code apps display and operate Claude Codev2.1.285 → v2.1.308 ◆in the build AND v2.1.293 tengu_giggly_dragonfly ◇ With input closed and no budget cap, a session with armed monitors can be held open past the background-task ceiling.v2.1.257 → v2.1.308 ◆in the build AND v2.1.295 tengu_gleaming_cupcake ◇ New gates let Claude Code report tools that exist but are switched off as "available if turned on"v2.1.275 → v2.1.308 ◆in the build AND v2.1.275 tengu_glittery_mitten ◇ Stop hooks can now act on a kind of end-of-turn request that comes from an MCP server, behind a server-controlled switchv2.1.302 → v2.1.308 ◆in the build AND v2.1.302 tengu_glowing_orbit ◇ Inline shell commands in a skill's instructions can now be handed to the model to run explicitly instead of executing silentlyv2.1.271 → v2.1.308 ◆in the build AND v2.1.271 tengu_gravel_chorus ◇ A new default-on internal flag was added with an unclear purpose.v2.1.260 → v2.1.308 ◆in the build AND v2.1.260 tengu_greedy_crane ◇ Claude Code checks a new remotely controlled switch and reads its settings from a renamed one, though what either controls is unknownv2.1.287 → v2.1.308 ◆in the build AND v2.1.287 tengu_harbor_kite ◇ Messages from another session render as an @sender header with indented body instead of raw tags.v2.1.224 → v2.1.308 ◆in the build AND v2.1.296 tengu_harbor_kite_mode_emit ◇ Messages from a session with a mismatched permission mode are held and shown with an approve/deny dialog.v2.1.224 → v2.1.308 ◆in the build AND v2.1.248 tengu_harbor_kite_win ◇ Setting CLAUDE_CODE_HARBOR_KITE forces cross-session messaging on, and Windows can now be allowed through.v2.1.229 → v2.1.308 ◆in the build AND v2.1.296 tengu_harbor_willow ◇ In VS Code sessions, unsafe default permission modes from settings are refused and fall back to normal.v2.1.152 → v2.1.308 ◆in the build AND v2.1.296 tengu_harp_pedal ◇ The whiteboard no longer picks a live or solo mode per session and instead follows a single switch controlled remotelyv2.1.304 → v2.1.308 ◆in the build AND v2.1.304 tengu_hazy_cosmos ◇ On Linux, Claude Code now refuses to write a file whose path looks like a Mac or Windows user path, and nothing is writtenv2.1.300 → v2.1.308 ◆in the build AND v2.1.300 tengu_hidden_frog ◇ A new internal boolean gate was added and defaults to false, with no stated purpose.v2.1.259 → v2.1.308 ◆in the build AND v2.1.269 tengu_hipaa_history_retention_prune ◇ HIPAA-configured organizations get an extra retention pass that prunes stale entries from local history files.v2.1.257 → v2.1.308 ◆in the build AND v2.1.295 tengu_humble_petal ◇ A feature that followed one server-side switch now follows a differently named one, still on by default when the server sends nothingv2.1.285 → v2.1.308 ◆in the build AND v2.1.285 tengu_humble_wand ◇ Auto mode now re-checks artifact facts to catch stale 'allow' verdicts from the server classifierv2.1.271 → v2.1.308 ◆in the build AND v2.1.271 tengu_humming_locket ◇ Someone connected through Remote Control can now run /effort, /model, /rename and /usage straight away while Claude is mid-replyv2.1.290 → v2.1.308 ◆in the build AND v2.1.290 tengu_humming_star ◇ A Remote Control inbox message that says it is from the owner is treated as from an unknown sender unless the server confirmed itv2.1.299 → v2.1.308 ◆in the build AND v2.1.299 tengu_hushed_kestrel ◇ When a routed agent's single clean handback goes to that same agent, Claude Code can use a short pointer notice insteadv2.1.285 → v2.1.308 ◆in the build AND v2.1.285 tengu_hushed_lantern ◇ Claude in Chrome tool calls are now denied straight away with 'no browser connected' when no browser extension is attachedv2.1.299 → v2.1.308 ◆in the build AND v2.1.299