Tools, all 35.

Agent ◇ Subagent launching gets a nesting-depth cap, a bypassable concurrency cap, and new teammate/model-inherit rulesv2.1.118 → v2.1.308 ◆in the build AskUserQuestion ◇ Auto-mode is stricter: text you asked Claude to review can't grant permission on your behalf.v2.1.0 → v2.1.308 ◆in the build Bash ◇ Spawning an agent with a bad command clamp list now fails immediately instead of running unclamped.v2.1.0 → v2.1.308 ◆in the build CronCreate ◇ Schema declarations across the bundle were shortened with no change to accepted values.v2.1.118 → v2.1.308 ◆in the build CronDelete ◇ Cancels a scheduled job created by CronCreate, given its id, and returns Cancelled job <id>.. An unknown id fails with No scheduled job with id '<id>', and a subagent cannot delete a job owned by another agent. Enabled unless CLAUDE_CODE_DISABLE_CRON is set to a true value (1, true, yes or on) or the tengu_kairos_cron flag (default on) is off.v2.1.118 → v2.1.308 ◆in the build CronList ◇ CronCreate and CronList now show when each job will next run, and the CronCreate description now mentions a larger per-job delayv2.1.118 → v2.1.308 ◆in the build DeferredToolPlaceholder ◇ A stub tool Claude Code adds to API requests that use deferred tool loading, so that loading stays active. It has an empty input schema, defer_loading: true and the description Reserved placeholder that keeps deferred tool loading active; never call this tool., and is inserted before the last tool when not already in the list. It is gated by tengu_deferred_stub_tool (default true), and on Microsoft Foundry it is removed for models whose tool search capability is stripped.v2.1.263 → v2.1.308 ◆in the build Edit ◇ Edit, Write and NotebookEdit approval previews withhold the diff when the change is too large or the file can't be readv2.1.0 → v2.1.308 ◆in the build EnterPlanMode ◇ Asking to enter plan mode from a subagent is now refused up front with "Only the main session can enter plan mode."v2.1.0 → v2.1.308 ◆in the build EnterWorktree ◇ A worktree.location setting tells the desktop app where to create worktrees for SSH sessions; the CLI ignores it.v2.1.118 → v2.1.308 ◆in the build ExitPlanMode ◇ Most of this release's changed code is the build system moving modules, not features changing.v2.1.0 → v2.1.308 ◆in the build ExitWorktree ◇ Leaving a worktree can no longer quietly widen what the session is allowed to touch.v2.1.118 → v2.1.308 ◆in the build Glob ◇ The built-in claude-api agent lost Read, Grep and Glob and now only has WebFetch scoped to one docs domain.v2.1.0 → v2.1.161 ○gone Grep ◇ The built-in claude-api agent lost Read, Grep and Glob and now only has WebFetch scoped to one docs domain.v2.1.0 → v2.1.161 ○gone KillShell ◇ Tools now declare a backgrounding policy; most tools opt out of running in the backgroundv2.1.0 → v2.1.12 ○gone ListAgents ◇ A failed peer listing is now reported as a failure rather than an empty roster.v2.1.248 → v2.1.308 ◆in the build NotebookEdit ◇ Notebooks over 100 MB are refused for reads and edits, with a suggestion to slice them.v2.1.0 → v2.1.308 ◆in the build Read ◇ Files covered by a Read deny rule can no longer be written, not just edited.v2.1.0 → v2.1.308 ◆in the build ReportFindings ◇ Read-only tool for reporting code-review findings as a typed list the host UI renders, shown as Code review. Input is findings (at most 32; each has file, summary, failure_scenario and optional line, short_summary up to 60 characters, category, verdict of CONFIRMED or PLAUSIBLE, and outcome) plus an optional effort level. The tool echoes the findings back and tells the model N findings reported. or No findings reported.v2.1.196 → v2.1.308 ◆in the build ScheduleWakeup ◇ After scheduling a wakeup in /loop, Claude is now told to post any owed status update and then end its turnv2.1.118 → v2.1.308 ◆in the build SendMessage ◇ Messages arriving from another session now show who sent them plus a chord to expand.v2.1.186 → v2.1.308 ◆in the build Skill ◇ The SDK now rejects malformed skill names with a clear reason instead of creating a rule that never matches.v2.1.0 → v2.1.308 ◆in the build Task ◇ Tools gain a backgrounding setting controlling whether they can keep running in the backgroundv2.1.0 → v2.1.12 ○gone TaskCreate ◇ Task tools now turn on via the tasks and todo-tools env vars instead of an organization denylist.v2.1.119 → v2.1.308 ◆in the build TaskGet ◇ Todo and task tool calls now collapse in the transcript so bookkeeping stops crowding the conversation.v2.1.119 → v2.1.308 ◆in the build TaskList ◇ Task tools now turn on via the tasks and todo-tools env vars instead of an organization denylist.v2.1.119 → v2.1.308 ◆in the build TaskOutput ◇ Temporary probes that checked whether old code paths still ran have been deleted; behaviour is unchanged.v2.1.0 → v2.1.276 ○gone TaskStop ◇ The TaskOutput tool was pulled from an internal set of tools available to a Claude Code featurev2.1.118 → v2.1.308 ◆in the build TaskUpdate ◇ Task tools now turn on via the tasks and todo-tools env vars instead of an organization denylist.v2.1.119 → v2.1.308 ◆in the build TodoWrite ◇ Before a usage limit cuts you off, your work can be committed to a hidden git ref with resume notes.v2.1.0 → v2.1.141 ○gone ToolSearch ◇ Browser automation now loads the tab-closing tool up front, so Claude can tidy tabs without another lookup.v2.1.263 → v2.1.308 ◆in the build WebFetch ◇ Live-edit would be blocked on workshop pages so changes go through the validating publish path.v2.1.0 → v2.1.308 ◆in the build WebSearch ◇ WebSearch can now be disabled or gated entirely without needing a host list.v2.1.0 → v2.1.308 ◆in the build Workflow ◇ Workflow's resumeFromRunId now actually reloads a saved run and restarts the script from itv2.1.154 → v2.1.308 ◆in the build Write ◇ Edit, Write and NotebookEdit approval previews withhold the diff when the change is too large or the file can't be readv2.1.0 → v2.1.308 ◆in the build