-
v2.1.277CLAUDE.md/AGENTS.md loading mode options renamed and expanded
CLAUDE.md/AGENTS.md loading modes renamed and given a fourth 'managed-only' option
found in this entry's text
-
v2.1.277CLAUDE.md/AGENTS.md mode enum replaced with a differently-shaped option set
The setting controlling how CLAUDE.md and AGENTS.md are used now has four differently-named options
found in this entry's text
-
v2.1.277WebFetch tool description reworks its claude.ai-artifact exception into a general mode parameter
WebFetch's internal prompt-building switched from a simple on/off flag to a named mode string
found in this entry's text
-
v2.1.277Permission decision helper marks 'promptless' outcomes with a reason string instead of boolean
Permission-prompt skip decisions now report a specific reason instead of yes/no
found in this entry's text
-
v2.1.275Sandbox/BYOC git helper hard-disables SSH when GIT_ALLOW_PROTOCOL=none
Git subprocesses now fully block SSH when GIT_ALLOW_PROTOCOL is set to 'none', closing a bypass
found in this entry's text
-
v2.1.275'none' project-instructions mode now keeps org-managed CLAUDE.md
'none' project-instructions mode now keeps org-managed CLAUDE.md instead of dropping everything
found in this entry's text
-
v2.1.275Auth-liveness check gains explicit injected-token recovery states
Login-credential health checks now recognize two ways an injected token can recover after failing
found in this entry's text
-
v2.1.275Model catalog telemetry gains an auth_kind field distinguishing how the session is authenticated
Model catalog telemetry now records how the session authenticated, as one of ten categories
found in this entry's text
-
v2.1.275apiKeyHelper case removed from dead switch in Op
A dead code path's switch statement dropped an unused apiKeyHelper case
found in this entry's text
-
v2.1.274Git subprocess environment hardened with stricter protocol/network controls
Git subprocesses launched by Claude Code now run with stricter network and protocol restrictions
found in this entry's text
-
v2.1.274New built-in AGENTS.md plugin (off by default)
A new built-in agents-md plugin can load AGENTS.md as project instructions instead of, or alongside, CLAUDE.md
found in this entry's text
-
v2.1.269New auth-method classifier for telemetry
A new internal classifier labels how each session is authenticated, for telemetry purposes
found in this entry's text
-
v2.1.268System-prompt diff telemetry expanded with change-scope classification
System-prompt diff telemetry now classifies how the prompt changed between turns
found in this entry's text
-
v2.1.265Artifact reads gain awareness of cross-organization sharing and a type-contract paging parameter
Artifact reads now flag cross-organization sharing and add a paging parameter for type info
found in this entry's text
-
v2.1.265Auth status message adapts to Cloud gateway sessions
claude auth status now shows a Cloud-gateway-specific sign-in hint instead of the generic one
found in this entry's text
-
v2.1.259New
--permission-prompts host|none CLI/SDK option to silently auto-deny prompts
A new --permission-prompts option lets print sessions auto-deny anything that would prompt instead of asking the host.
found in this entry's text
-
v2.1.259New SDK option
permissionPrompts alongside permissionPromptToolName
The Agent SDK query builder accepts a permissionPrompts option of host or none, passed through to the CLI.
found in this entry's text
-
v2.1.259New
--permission-prompts none CLI flag for headless print sessions
In print mode you can pick who answers permission prompts: the host, or none, which auto-denies without asking.
found in this entry's text
-
v2.1.259Auto-deny message when no approval surface exists
A session with no approval surface now auto-denies with a message saying nothing ran and that further prompts will also be denied.
found in this entry's text
-
v2.1.259Turn-attribution metadata added to background/notification message sends
Background and notification sends now carry turn attribution so the system knows which turn they belong to.
found in this entry's text
-
v2.1.259Permission-prompt-tool routing gets a bypass for an explicit "none" sentinel
A permission-prompt tool named none now routes through an ask-based fallback resolver instead of the MCP prompt tool.
found in this entry's text
-
v2.1.248Background isolation read from a captured environment
Background worktree isolation now reads CLAUDE_BG_ISOLATION from a captured environment copy.
found in this entry's text
-
v2.1.248Unknown words in CLAUDE_CODE_DIR_SYNC_ENGINE are now called out in the session
An unrecognised CLAUDE_CODE_DIR_SYNC_ENGINE value is now flagged in the status line.
found in this entry's text
-
v2.1.248Git runs with a pinned environment and a blocked-flag list
Git now runs under fixed environments that block network protocols unless the operation needs them.
found in this entry's text
-
v2.1.248Fewer git calls when the working tree is already up to date
Fewer git processes run per turn when your working tree hasn't changed.
found in this entry's text
-
v2.1.247Repo git hooks are opt-in, tag pushes opt in, and
GIT_CONFIG is blocked
Repo git hooks stay suppressed by default, tag pushes excepted, and GIT_CONFIG is now cleared.
found in this entry's text
-
v2.1.246Cloud directory sync is now git-only, plus a new mode for plain folders
Cloud directory sync now only does git; the per-file and archive engines are gone.
found in this entry's text
-
v2.1.246Tool memory cgroups reworked, still off unless turned on
Memory caps on processes Claude starts were rebuilt but stay off unless you set the limit variable.
found in this entry's text
-
v2.1.242Cloud directory sync gains git and tar-archive engines beside the per-file lane
Cloud file sync gains git-bundle and tar-archive modes, but you still sync file by file.
found in this entry's text
-
v2.1.239MCP servers can be put in their own memory cgroup on Linux
On Linux you can force MCP servers into their own memory cgroup with an environment variable.
found in this entry's text
-
v2.1.235Git subprocesses hardened against graft files
Git subprocesses now block graft files as an extra hardening measure
found in this entry's text
-
v2.1.235Remote session creation reports where its permission mode came from
Remote session success telemetry now records where the permission mode came from
found in this entry's text
-
v2.1.234Every attachment-upload telemetry point now records which route was used
Attachment uploads now report which route they took on every outcome, success or failure.
found in this entry's text
-
v2.1.234SDK-hosted sessions can upload attachments, with a clearer message when they cannot
SDK-hosted sessions can now upload attachments, with a clearer message when files stay local.
found in this entry's text
-
v2.1.234Artifact auto-replies can be resumed, and their state is now visible
Watched artifacts now show whether auto-reply is armed, stopped or disarmed, and resumes report a result.
found in this entry's text
-
v2.1.234SDK reports where an API key actually came from
The SDK now reports where an API key really came from, like the env var or an apiKeyHelper.
found in this entry's text
-
v2.1.233Bash and PowerShell tools can run under a memory limit on Linux
On Linux you can cap memory for shell commands so a runaway process cannot eat your machine.
found in this entry's text
-
v2.1.229Command-sourced plugins record where their files came from
Command-built plugins record their command and output directory so moves can be detected.
found in this entry's text
-
v2.1.224Git clone errors no longer mangle URLs containing dollar signs
Clone errors no longer mangle text when the repository URL contains dollar signs.
found in this entry's text
-
v2.1.207Walnut Spire (
plugin eval General Availability) [In Development]
found in this entry's text
-
v2.1.70Session Color Reset
found in this entry's text
-
v2.1.63Git Sparse-Checkout for Marketplace Plugins
found in this entry's text
-
v1.0.58New Features
found in this entry's text