You can now use claude-sonnet-5 with high effort and automatic thinking switched on by default. The high effort option is now labelled Recommended instead of Default. Admins can use the new managed setting allowedProviders to limit which API providers Claude Code may run on. Setting CLAUDE_CODE_DISABLE_WEB_FETCH turns off WebFetch, the tool Claude uses to download web pages. Claude Code can now load relevant memories saved to your account before a turn. The new claude plugin configure command shows a plugin's options and can save values piped in as JSON.
Seven changes are in the build but not switched on yet. A new plugin test command runs a mod's tests and is marked as early access. Waking and retrying background MCP tasks now sits behind a remote switch that is off by default. A report-delivering tool can end the agent's turn, but only when a server switch allows it. The precomputeCompactionEnabled setting still stays hidden unless a server switch turns it on.
Directory sync for cloud sessions is now fully removed. The CLAUDE_CODE_DIR_SYNC_* variables and CLAUDE_CODE_DISABLE_DIR_SYNC no longer do anything. Launching with --cloud no longer offers to sync your folder, and bundle upload still works. On macOS and Linux, CLAUDE_CODE_LEGACY_BUNDLE is now ignored with a warning. Passing unrestrictedPaths to the agent toolset now throws an error. An @-mentioned audio file no longer gets turned into a transcript for Claude.
Written by our agent from the shipped bundle, not by Anthropic.
New ui_* messages let desktop, mobile and VS Code surfaces attach to a session and draw plugin UI, and a gated list_directory request is added
ExtensionsNew claude plugin configure, plugin install --config reaching bundled MCP server settings, and plugin list --data-size for scripts
claude --desktop opens a session in the Claude Desktop appThe new --desktop flag opens Claude Desktop instead of the terminal, and can pick a session with --continue or --resume <id>
ElsewhereThe new managed setting allowedProviders lists the API providers allowed, and Claude Code refuses to run on any other
Claude Code now handles an mcp.connect request that takes the name of an MCP server
plugin test command runs a mod's testsExtensionsWant the reasoning? Read walks the 34 entries that probably matter to you, each one opening to what changed and why.
Read this release → Every row →10 more of these are in What probably matters to you, on page 1.
Some allowed shell commands followed by a NAME=value argument no longer fail the permission check as an unsafe variable setting
Unclear Which commands this covers and which names the pattern accepts are not known.
When you view a remote session, Claude Code now takes over its background tasks and only re-arms the idle alert for your own turns
Unclear How the list of background tasks is filled in is not known.
Under some organization policies, such as HIPAA-type ones, Claude Code shows a notice in place of the usage breakdown
Unclear The screen or command that shows this breakdown is not identified.
Rewinding through the rewind_conversation request now stops background MCP tasks started at or after the rewind point
Unclear It is not clear whether MCP background tasks are available to everyone or only when switched on remotely.
Summaries now offer a quick reply when saying yes means more work in the thread's own files, but not for posting, pushing or deploying
Unclear It is not clear which feature shows these summaries or whether it is switched on for everyone.
Claude Code can now warn that project settings changed while a cloud session was attached, or between attaches, possibly by that session
Unclear It is not clear exactly when these warnings are shown.
Claude Code now starts loading memory context early in a session, checks it again after each turn, and times each stage of a turn
Unclear It is not clear whether the setting that groups task notifications changed in this release or only appears differently in the code.
Subagents are now told the call that delivers their final report ends their run, and that plain text at the end is not delivered
The skill that ships with Claude Code for writing plugins was renamed from plugin-authoring to cc-plugin-plugin-authoring
Unclear It is not clear whether every user can use this skill or only some users.
Claude Code no longer checks for the GitHub app when it is connected through a provider other than Anthropic's own service
Unclear It is not confirmed that the setting controlling this skip stays on unless the server turns it off.
When Claude Code is pointed at a custom API address, messages can now name its host or say "a custom endpoint"
Unclear It is not clear which message shows the endpoint name.
CLAUDE_CODE_HOST_PROMPT_SUPERSEDES_RECORD, CLAUDE_CODE_MCP_SERVE_SETTINGS and CLAUDE_CODE_DISABLE_WEB_FETCH are now passed along
Unclear What these variables do beyond being passed along is not settled.
A deny rule now stops a type from being listed, and an ask rule pauses the listing and asks for the exact type name
Unclear Which tool or command performs this type listing is not identified.
Claude Code can now recognize errors saying its version is below the minimum a model or your organization's policy requires
Unclear What Claude Code does after recognizing such an error is not stated.
The MCP server summary now shows (WS) after the address of WebSocket servers, as it already did for SSE and HTTP
Unclear Whether WebSocket MCP servers can actually connect, or sit behind a switch, is not stated.
A submit_feedback request without a draft now saves locally only when save_locally is true, and otherwise is submitted normally
After sending you a file, Claude is now told if the chat shows a converted copy and to refer to files by name, not as above or below
Unclear It is not clear whether this report is used everywhere or only when some condition is met.
Model access checks for AWS and Google Cloud accounts are now saved and reused at start-up, unless CLAUDE_CODE_SKIP_MODEL_ACCESS_MEMORY is set
Unclear It is not clear how long saved results are kept or exactly which providers are covered.
The sandbox can now report its configured network allowances, file permissions and Unix socket setting, and cleans up more after a command
Unclear Whether the check that blocks running outside the sandbox is actually used yet is not clear.
When you send a prompt, pasted audio is no longer handled separately, and only pasted images are filtered
Unclear Whether the audio change is a deliberate removal, a bug, or a tidy-up is not clear.
Directory sync now runs git with a cleaned environment, needs git 2.32 or newer, and gives new reasons when it cannot read git
Unclear How many setups actually run git through this cleaned, version-checked path is not clear.
In auto mode, tool calls that Claude Code generates itself now always skip the classifier, with no remote switch to turn this off
The gateway now checks provider policy at most once a minute and refuses requests, and startup, when that policy disallows it
Unclear Where the provider policy comes from and who sets it is not clear.
Claude Code now declines to start in auto mode, without a message, when the account or session is marked as covered by HIPAA
Unclear What causes an account or session to be marked as covered by HIPAA is not clear.
Tools that Claude Code now treats as web tools no longer lock the session into a single isolation mode, and that check now depends on the session
Unclear It is not clear which tools fall into the category that is now treated as web tools.
Claude Code now ignores more keys in a project's settings file, with the same warning to set them in your own or managed settings
Unclear It is not clear which keys are now ignored or under what condition.
The instructions for tidying saved memories no longer have a version that skips indexing, so the last phase is always "Prune and index"
Instructions now tell Claude to write and publish a page in one message, and a proposed skill's card is described as sitting where it appears in the reply
Unclear A check controls whether this applies and it is not clear what that check is or who it covers.
A turn limit for a cloud session must be a whole number from 1 to 2147483647, and attaching to an existing session keeps that session's own limit
Unclear It is not clear which command or interface these checks belong to.
When the server refuses an untrusted device, Claude Code now re-registers the device only if the refusal allows it
The check on allowed plugin marketplace sources now blocks more git sources and derived sources under a policy condition
Unclear Which sources are now blocked and what policy condition triggers it is not clear.
The auto-dream option can no longer be switched when auto-memory is held off for this session or the session was started by a tool call or background runner
Unclear Where the locked auto-dream option is shown is not stated.
Refusing to run when the sandbox is unavailable can now be triggered by another condition as well as sandbox.failIfUnavailable
Unclear What the added condition checks is not settled.
Under the HIPAA policy profile, a new capability called Repository visibility checks is denied
Unclear It is not clear what Claude Code uses the repository visibility check for.
Requests to background a session now refuse unsafe cases up front and wait until Claude finishes its current reply
Unclear It is not clear which parts of Claude Code ask to move a session other than the left arrow key.
Whether Claude Code uses a default fallback model now also depends on a server setting and on the fallback differing from the main model
Unclear The exact effect on which fallback model a reader ends up using is unclear.
Auto mode's safety rule now blocks posting, sending, spending, approving or merging in connected apps when you only asked to read, review or draft
Unclear It is not clear which version of the auto mode instructions uses the revised rule.
Uploads and downloads through the Files API now run an extra organization policy check and show a general policy message
Unclear It is unclear what the extra check tests.
If another process is still running a session you resume, Claude Code now passes your prompt to the screen that handles it, and --resume can take a title
Unclear It is not clear how the handoff appears on screen or what happens to the prompt afterwards.
Auto mode's server-side safety check dropped one of the conditions it needed before running
Unclear It is not clear what the removed condition checked, so the cases now covered are unknown.
In remote sandboxes, write and edit refuse read-only folders, read can view part of a large file, and glob rejects absolute patterns
Unclear Which environment runs these file tools is not stated.
compactBeforeNextTurn can't be used alongside a compaction edit#An error now stops compactBeforeNextTurn from being used while context_management has a compaction edit
Unclear This check may come from the bundled Anthropic SDK rather than from Claude Code itself.
The account memory switch is no longer hidden when IS_DEMO is set, and account memory options were regrouped
Unclear What decides whether account memory is available in the first place is not clear.
Quitting a remote session with unsent messages now says they were still waiting to be sent, and the offline folder sync dialog is gone
Unclear It is unclear whether offline folder sync is now handled somewhere else.
A reply sent to a background session can now carry a prompt that is queued for its next turn, unless it is a slash command
Unclear It is not established what sends replies that use this option.
The sandbox network prompt's "don't ask again" choice can now be saved to user settings, applying in any project
Unclear It is not clear what decides whether the choice is saved to user settings or to the project's local settings.
Under sandbox.network.strictAllowlist or an admin mandate, websites allowed in project or local settings are no longer added
Unclear It is not clear what switches on the administrator sandbox requirement.
A value you set for API_TIMEOUT_MS is now held to a maximum instead of being used however large it is
Unclear The maximum value is not stated.
Secret scrubbing now catches more forms of usernames and passwords written into URLs, including quoted and encoded ones
Installing a plugin now fails with plugin-folder-held when another installed plugin would share its folder or data directory
Unclear It is not clear exactly what counts as holding the folder.
When a plugin's bundled MCP server can't start until it is configured, Claude Code now reports it and points to /plugin → Installed → Configure
Unclear Where and when this message is shown is not known.
Sandbox setting descriptions now explain how managed, --settings, user and project settings combine, including allowUnsandboxedCommands
Unclear It is not clear whether this is only descriptive text or whether this release also enforces these rules.
Under an admin sandbox mandate, sandbox.network entries from project and local settings are ignored, and only managed settings may replace the proxy
Artifact publish retries honour retry-after with jitter and retry relay outages, and the result now warns when it merged over a newer version
Unclear What a merged version means for the artifact a reader sees is not settled.
Sandbox read and write grants from a repo's project or local settings are now ignored under an admin mandate or when they point into denied paths
Unclear Exactly when an administrator's sandbox requirement counts as active is not stated.
Git clones for plugins and marketplaces now read core.sshCommand and ssh.variant from your git config, not only SSH environment variables
A plugin's saved options and secrets are now combined from its whole dependency chain and from its older names after a rename
Unclear It is not clear which plugins count as part of the dependency chain.
Claude's Bash tool instructions now tie the 10-minute limit to foreground commands and describe background commands as running across turns
The line reporting how many memories were saved can now put a describing word before "memory" or "memories"
Unclear What the extra word says and when it appears are not clear.
Claude Code has a new message saying a value was set by your organization's configuration rather than an admin setting
Unclear Where this message is shown is not known.
claude daemon#Sandbox status accounts for another fallback case, the gateway rejects some keys, and claude daemon gains a --[no-]chrome option
Unclear It is not clear which keys the gateway rejects.
A PowerShell input check is now skipped when the command carries a wall-clock time limit
Unclear It is not clear what this check rejects when it does apply.
Failed remote session connections for untrusted devices now carry a specific reason, with unknown ones reported as remote_connect_unknown_sub_reason
Unclear It is not clear whether these reasons are shown to the user or only recorded for diagnostics.
The 'Claude in Chrome enabled by default' setting is now flagged as needing consent, and a new message says some features are limited by policy
Unclear It is not clear what the consent flag changes in the settings panel or whether it is tied to the organization policy message.
Claude Code's mockup checker now rejects an HTML element placed inside an SVG image, where browsers read the markup differently
The reminder to load the design skill before publishing an HTML artifact now has one more skip case and checks for one tool instead of two
Unclear What the new skip condition tests, and which single tool the check now looks for, is not clear.
Uninstalling from a plugin's manage view now needs an extra condition, and plugins that are neither on nor enabled now show as off
Unclear It is not clear what the extra uninstall condition is or what the account listing means for users.
With no sync engine, a remote machine set to two_way or upload_only project sync is treated as off, and the separate-copy hint is always shown
Unclear How Claude Code decides that no sync engine is available is not stated.
When a device is refused as untrusted because a signature is wanted, Claude Code now shows a separate message
Unclear The wording of the new signature_wanted message is not known.
Claude Code has a new notice that memory stays paused and cannot be resumed from a session started by a tool or running in the background
Unclear It is not clear where these messages are shown or what switches them on.
A new error says the session refused a request only its bound computer can sign, and that signing in again won't fix it
Unclear It is not clear in which situations this message is shown.
Claude is now told a scheduled trigger is the stored prompt of a routine or task on the account, not a check-in someone scheduled
Unclear It is not clear exactly where this label is shown to Claude.
After you approve an MCP tool request after the fact, a new check can stop it from being sent again and raise an error
Unclear It is not clear when this check refuses to send the request again.
When Claude reads account memory files, the short summary of its tool use now collects those paths separately
Unclear It is not clear whether anything controls this or how it changes what the summary line shows.
The helper Claude Code uses to run git gained an option to run detached from the terminal, and refuses to start while Claude Code is exiting
Unclear It is not clear which features use the option to run without a terminal.
CLAUDE_CODE_SKIP_AWS_CRED_CACHE no longer turns off one AWS credential step#Claude Code's AWS client now always uses its credential provider chain step, even when CLAUDE_CODE_SKIP_AWS_CRED_CACHE is set
Unclear The variable may still be read elsewhere, so how caching behaves with it set is unclear.
In /status, the Compliance row is now called Organization configuration, and the related notice is shorter and appears once
Unclear It is not clear what triggers the notice.
When a shell command is cancelled before running, Claude now gets a clear signal that nothing ran, with a message based on who stopped it
Unclear The new wording of the cancellation message is not known.
When /desktop cannot hand off, Claude Code now reports whether the app is missing, outdated or would not open
Bedrock sign-in now tries AWS keys from environment variables first, and ignores credentials, config and profile with a warning
Attachment downloads now retry after stalls and some server errors, and fetching attachments ahead of time can be turned off by a setting
Unclear The name of the setting that controls early fetching, and whether it is on by default, are not known.
Claude Code now removes stale git worktrees more carefully, checking each one before deleting and replacing the old prune step
Unclear It is not clear which features run this cleanup.
With no AWS profile set, Claude Code now tries AWS credentials from environment variables before the standard AWS credential lookup
A tool call stopped before its command started now reports that nothing ran, whether it hit a deadline, shutdown or cancel
The helper behind WebFetch may now follow about five same-site links, must not guess URLs, and retries a failed fetch at most once
Unclear Whether these instructions apply in every configuration is not settled.
On WSL, Claude Code reads Windows drive mounts more carefully, and sandbox read and write rules now work for paths inside them
Workflow scripts run in their isolated environment now use JavaScript strict mode
When copying unsaved work into a cloud session, Claude Code now applies Windows file-name rules on WSL and NTFS, and reports a clear error if listing stops
Unclear It is not clear whether this seeding step is available to everyone or only when switched on.
When a run stops at its turn limit, the error now reads "Error: Reached max turns (N)" with the limit in brackets
When a built-in skill is turned off, the error can now give a specific reason and say if a skillOverrides entry also turns it off
Unclear Which specific reasons the error can give is not stated.
When Claude Code shortens output and hides secrets, it now moves its cut points so it does not split a secret and leave part of it showing
Unclear Which output this applies to is not settled.
When Claude in Chrome asks for permission, it now includes a suggestion to allow it for the rest of the session
Unclear How the suggestion is shown in the permission request is not settled.
When a run ends in an error, the result message can now carry an error_code field if the error is one Claude Code recognises
Unclear Which error codes are on the known list, and so when the field appears, is not stated.
The sandbox status that Claude Code reports to host apps now describes the enforced rules and gains a field for allowing all Unix sockets
Unclear It is not clear whether the sandbox enforces anything differently or only reports it differently.
Claude Code now reports an error when allowedProviders is not a list, holds non-text entries, or names a provider it does not know
Unclear It is not clear which settings files this check covers.
Highlighted text in the terminal display now keeps background colour, bold, italic and strikethrough, not just colour, dimming and underline
Unclear It is not clear which parts of Claude Code produce these highlights.
Typing an unknown slash command now checks the name first and skips the file-path check for forms that are not local paths
Unclear What the two new checks look for is not known.
Published verbatim by Anthropic for v2.1.285. Text is unmodified from the upstream changelog. Everything else on this page came out of the bundle instead, which is why the two lists don't match.
Of these 136 bullets, 40 name something an entry on this page also names, 29 name something no entry here does, and 67 name nothing specific enough to line up either way. The pairings are made on names both sides wrote down, a flag or a setting or a slash command, so read one as probably the same thing rather than as a fact, and read the middle number as candidates rather than as a miss count.
CLAUDE_CODE_DISABLE_WEB_FETCH environment variable to turn off the WebFetch tool
Probably new-host-env-var-claude-code-host-prompt-supersedes-record-a, new-claude-code-disable-web-fetch-env-var-turns-off-the-webf claude --desktop to open the Claude desktop app on the current directory, or on a session with --continue / --resume <id>
Probably wide-ranging-desktop-option-rejects-subcommands-claude, update-refusal-message-names-the-two-directories, resume-of-a-live-session-now-hands-off-with-a-prompt, new-claude-desktop-launcher-for-claude-desktop, new-desktop-cli-option, resume-picker-now-offers-to-open-a-live-background-session, desktop-flag-rejected-when-combined-with-background-or-wor, resuming-a-live-background-session-can-now-attach-to-it-and claude plugin configure <plugin> to show a plugin's options and which are unset, or save new values read from stdin with --values-stdin
Probably new-claude-plugin-configure-cli-command-with-values-stdi <server>.<key>=<value> to claude plugin install --config, so a bundled .mcpb MCP server's own settings can be set at install time and it starts without visiting /plugin → Configure
Probably hint-for-bundled-mcp-servers-that-need-configuration, config-keyvalue-parser, mcp-server-policy-checks-extended-to-plugin-provided-and-url, plugin-install-config-reaches-bundled-mcp-server-config, new-claude-plugin-configure-cli-command-with-values-stdi, config-accepts-bundled-mcpb-server-fields allowedProviders managed setting to limit which API providers a machine may use (Anthropic API, a custom endpoint, Bedrock, Mantle, Vertex AI, Foundry, Claude Platform on AWS, or a Cloud gateway)
Probably managed-policy-read-failure-message, login-screen-honours-allowedproviders-managed-setting, wide-ranging-desktop-option-rejects-subcommands-claude, claude-authenticate-joins-an-in-flight-oauth-flow-and-enfo, managed-settings-helper-merge-doc-allowedproviders-is-a-w, settings-validation-for-allowedproviders, provider-not-allowed-startup-refusal, allowedproviders-managed-setting-restricts-which-api-provide, allowedproviders-policy-enforced-on-login-and-setup-token CLAUDE_CODE_NONSTREAMING_TIMEOUT_RETRIES environment variable to cap re-sends of a non-streaming fallback request that timed out
No entry names this claude -p with CLAUDE_CODE_FORK_SUBAGENT=1: a subagent's own Agent call now runs in the foreground, so the subagent gets the child's result
No entry names this GIT_SSH or in your git config's core.sshCommand
Probably plugin-git-clones-now-read-coresshcommand-and-sshvariant, git-ssh-handling-reworked-for-vetted-clones claude plugin disable and enable with a full name@marketplace id changing a settings entry in another letter case instead of the installed plugin's own
No entry names this set_model request (such as the Agent SDK's setModel) leaving the new model on the built-in output-token limit and auto-compact window until restart
No entry names this @, or all of it when the URL writes its @ as %40
No entry names this /teleport fetches taking over the terminal; these fetches now fail fast instead of asking
No entry names this #96858Worktree fetch leaves ssh reading keystrokes from the terminal Open
-p sessions leaving its tools available
Nothing to match on claude -p --permission-prompt-tool: a background subagent's permission request now goes to the prompt tool instead of being auto-denied
No entry names this claude mcp list and claude mcp get, and the not-found error of claude mcp remove, login and logout, printing line breaks and terminal escape sequences from MCP server names and values
Probably mcp-tool-call-stdio-check-and-secret-masking-in-mcp-get python3 -c, node -e) just because they contain =
No entry names this dontAsk mode: a fork now runs under its parent's permission mode and cannot exit plan mode
No entry names this #95155[BUG] Fork subagent performs write actions despite parent session being in plan mode Open
#95154[BUG] Fork subagent performs write actions despite parent session being in plan mode Closed
claude remote-control --help saying --[no-]chrome defaults to the machine's /chrome setting; spawned sessions keep Claude in Chrome off unless --chrome is passed
Probably sandbox-and-gateway-smaller-changes, headless-cli-argument-classification-list /remote-env reading only the newest 20 of an account's environments
No entry names this claude plugin install or /plugin putting it into an installed plugin's cache or data folder when their ids differ only in ., -, @ or (macOS, Windows) capitals; the install is now refused
Probably hint-for-bundled-mcp-servers-that-need-configuration, mcp-server-policy-checks-extended-to-plugin-provided-and-url, new-claude-plugin-configure-cli-command-with-values-stdi ANTHROPIC_AUTH_TOKEN against the Anthropic API never loading the organization's policy
Probably ssh-placeholder-credential-detection agent(), parallel() or pipeline() call that a workflow script awaits later, or not at all, being treated as an unhandled promise rejection, which could end a background session
Probably workflow-swallows-unhandled-promise-rejections some-daemon &) kept its output open; the hook now finishes shortly after its own process exits
No entry names this #92934Windows: synchronous command hooks wait for persistent descendants Closed
modelTimeoutException and serviceUnavailableException errors showing a raw JSON body instead of the error message
No entry names this /autofix-pr and /schedule saying the Claude GitHub App is not installed on a repository whose install status had not been checked yet
No entry names this /artifacts unlinking its file from the artifact, so publishing the same file again created a new artifact instead of updating it
Probably artifact-publish-tool-prompt-no-longer-lists-artifacts-hint Artifact allow rule ("don't ask again") letting the Artifact tool publish a file outside the working directories without asking; add the file's folder with --add-dir for the rule to cover it
Probably network-permission-dont-ask-again-can-persist-to-user-set /cost and SDK modelUsage reporting a turn under the wrong model when the server answered a refusal with a different fallback model than the client expected
No entry names this /ultrareview when the project folder briefly could not be read
Probably workflows-disable-setting-description-clarifies-scope /ultrareview on macOS and Linux failing to upload the working tree from a git worktree whose per-worktree config sets core.longpaths
Probably workflows-disable-setting-description-clarifies-scope /ultrareview uploads including uncommitted changes to credential files whose name has a colon before the extension, such as server:8443.key
Probably workflows-disable-setting-description-clarifies-scope /ultrareview uploads on macOS and Linux running slowly on some unusual file names, and their credential-file check missing file or folder names with many backup or editor marks
Probably workflows-disable-setting-description-clarifies-scope x or r in NORMAL mode no longer breaks a pasted-text placeholder at the end of the prompt
Nothing to match on .mcpb MCP server that still needs configuration: /plugin, the install message and claude plugin install now say so and point to Configure
Probably hint-for-bundled-mcp-servers-that-need-configuration, mcp-server-policy-checks-extended-to-plugin-provided-and-url, new-claude-plugin-configure-cli-command-with-values-stdi #95683[BUG] For marketplace installs the MCP bundle (.mcpb) user_config is never prompted for Open
/ultrareview refusing to upload a checkout on a Linux volume when a changed file's name has a colon or ends in a dot or space
Probably workflows-disable-setting-description-clarifies-scope CLAUDE_CODE_RESUME_INTERRUPTED_TURN re-running a turn that had ended at --max-turns
Probably remote-session-max-turns-is-passed-to-cloud-sessions-and-i, maxturns-validation-for-cloud-sessions-and-attach, headless-resume-of-interrupted-turn-orphaned-task-flush-is, max-turns-reported-as-lost, cloud-session-flag-table-maxturns-no-longer-unsupported-de /ultrareview uploading a linked worktree of a repository rooted at your home folder in some cases
Probably workflows-disable-setting-description-clarifies-scope claude agents to a background session waiting on a permission prompt sometimes approving the pending command
Probably resume-picker-now-offers-to-open-a-live-background-session claude attach, logs, stop, respawn and rm starting a new session with the command name as its prompt when options came before it, such as from a shell alias
Probably resume-picker-now-offers-to-open-a-live-background-session, resuming-a-session-that-is-running-in-the-background-can-ope, resuming-a-live-background-session-can-now-attach-to-it-and claude mcp list leaving out WebSocket (ws) MCP servers; each is now listed with its URL and health status
No entry names this claude mcp get showing no Type, Command, Args, or Environment for stdio servers whose config entry omits the type field
Probably mcp-tool-call-stdio-check-and-secret-masking-in-mcp-get .claude/settings.local.json allow rules being held back outside a git repository when git's trace2 output is configured
No entry names this /claude-api eval runner scaffold and report builder writing through a symlink or hard link planted at an output file
No entry names this /claude-api eval runner scaffold counting responses cut off at max_tokens in the score averages; they are now marked truncated and counted separately
No entry names this showing as literal text in the terminal when a reply uses it to indent text, such as row labels in a markdown table
Nothing to match on /clear or /compact
Probably idle-clear-hint-now-counts-from-other-sessions-turns /btw side question asked of a session hosted by an app such as Claude Desktop now sees the turn in progress, not only the last finished one
No entry names this ping stream event is now sent every 30 seconds on the Anthropic API, Claude Platform on AWS and gateways
Nothing to match on /resume and claude --resume on a session that is running in the background: they now open that session instead of refusing, and a prompt given with claude --resume <id> "prompt" is sent to it as its next turn
Probably update-refusal-message-names-the-two-directories, resume-of-a-live-session-now-hands-off-with-a-prompt, new-claude-desktop-launcher-for-claude-desktop, new-desktop-cli-option, resume-picker-now-offers-to-open-a-live-background-session, resuming-a-live-background-session-can-now-attach-to-it-and _meta['anthropic/alwaysLoad'] to false stays deferred when its --mcp-config, Agent SDK or plugin server is set to alwaysLoad
Probably claude-in-chrome-can-be-served-by-the-remote-session-host-ov, alwaysload-mcp-option-server-tools-can-opt-out-per-tool timeout with run_in_background, default 30 min, max 2 h); Claude is notified when one is stopped
Probably the-bash-tool-description-was-rewritten, the-bash-tool-description-in-the-command-security-review-pro, the-bash-tool-description-in-the-command-team-onboarding-pro, background-shell-commands-get-a-stop-deadline /ultrareview to run when disableWorkflows is on, unless the machine running the review has it set by its own administrator (MDM or the managed-settings file)
Probably workflows-disable-setting-description-clarifies-scope, workflows-kill-switch-claude-code-disable-workflows-and-dis ANTHROPIC_BASE_URL to use the 1M context window of models that have one (Opus 4.7+, Sonnet 5+, Fable); run /autocompact 200k if your gateway stops at 200K
No entry names this claude -p and Python Agent SDK sessions on third-party providers or with telemetry off to start in auto mode when no permission mode is configured, like interactive sessions; --permission-mode still overrides it
No entry names this widgets to be reserved in cloud sessions and on self-hosted runners: your own server under it, or a close spelling such as widgets_, no longer loads, so rename it
No entry names this /ultrareview on macOS and Linux to leave symbolic refs out when uploading a local checkout; a checkout whose current branch is a symbolic ref is now refused with an explanation
Probably workflows-disable-setting-description-clarifies-scope env to no longer set ALLUSERSPROFILE, SystemDrive, or the CommonProgramFiles variables; set them in user or managed settings instead
Probably windows-env-passthrough-list-extended, allusersprofile-added-to-an-env-allowlist-opus-4-max-token /tasks to fold background work Claude Code runs for itself under one "System tasks" row; press Enter on it to show those tasks
Probably background-tasks-dialog-collapses-self-managed-tasks-into-on /ultrareview on macOS and Linux to require git 2.31 or newer to upload a local repository; checkouts made with --separate-git-dir are now refused instead of being uploaded with an older method
Probably workflows-disable-setting-description-clarifies-scope /ultrareview uploads on macOS and Linux to send a partial clone as a working-tree snapshot on git 2.31 or newer, instead of falling back or refusing when git's version looked too old
Probably workflows-disable-setting-description-clarifies-scope /ultrareview uploads on macOS and Linux to refuse, instead of fetching, a partial clone missing some of its working tree's files on older git versions; a clone made without --filter uploads
Probably workflows-disable-setting-description-clarifies-scope claude mcp get to hide the command, arguments, and environment values of stdio MCP servers provided by plugins; variable names are still shown
Probably mcp-tool-call-stdio-check-and-secret-masking-in-mcp-get /claude-api so it can no longer be run from Remote Control clients
No entry names this /config chrome=true to direct you to the /config panel instead of enabling Claude in Chrome by default; /config chrome=false still turns it off when it was on
No entry names this CLAUDE_CODE_RESUME_INTERRUPTED_TURN set, even with Continue After Reload off
Probably headless-resume-of-interrupted-turn-orphaned-task-flush-is CLAUDE_CODE_SUBAGENT_MODEL_FORCE or an agent's own model)
No entry names this .claude/settings.json turns on
Probably project-settings-can-no-longer-set-some-keys MCP_DISCOVERY_CACHE=1, when set in your cloud environment's variables rather than a settings file, to reuse your connectors' tool lists after a session restart; other MCP servers are no longer cached and connect at startup
Probably mcp-discovery-cache-for-ccr-dynamic-http-servers A model matched these bullets to the GitHub issues they fix, so a link can be wrong.
1 of 27 tool descriptions changed. 1 of 25 tool schemas changed. The appended system-reminder blocks moved: 1 line added.
Claude Code, interactive mode
461 documentation changes were recorded within 24 hours either side of this release, nearest first. The closest 12 are below. They're here because they happened near this release in time. That's not a claim that this release caused the edit, or that the page documents anything in it.
The 87 literal strings found in the bundle, with the number of entries that name each one. Picking one searches for it. A name is here because this build's code mentions it, which is not the same as it working or being finished.
What's wrong with this entry?