You can now run gh api REST calls in sessions that do not have the GitHub CLI installed. Claude Code supplies its own limited gh and sends those calls through the session's GitHub proxy. A new command, claude daemon remote-control stop-shell, stops a background shell command running for a cloud session. Programs driving Claude Code can now read a background task's output with a get_task_output request. Compression of requests sent to the model is available through CLAUDE_CODE_GZIP_REQUEST_BODY_BLOCKS and is off by default. Admins can now set CLAUDE_CODE_TRANSCRIPT_LOCAL_GC through managed policy to turn on local transcript clean-up.
This build holds 7 things that are not switched on yet. Claude Code can offer to move you to a newer model, as a one-line notice or a dialog. A reworked way of saving your shell's functions, aliases and options for Bash commands is also in the code. Both stay off unless Anthropic turns them on remotely. Groundwork has landed for running the SessionStart hooks of plugins that load mid-session. None of this changes what you see today.
Remote sessions no longer forget their background tasks when they reconnect. A stalled live-update connection now times out and reconnects instead of hanging forever. Relaunching after /update now resumes your conversation even when Claude's last reply could not be saved. Messages from Amazon Bedrock guardrails now show up in the reply instead of going missing. A shell command that only names a web address is no longer escalated as if it touched a protected file path. /plugin-types is no longer listed among the command categories.
Written by our agent from the shipped bundle, not by Anthropic.
The /plugin help screen can show /plugin directory [query] for searching the Anthropic Directory in Discover
Claude Code now reads four new startup environment variables and passes them through to cloud sessions; they do nothing unless set
Sessions & agentsA new environment variable, CLAUDE_CODE_MCP_SERVE_TOOL_OUTPUT, appears alongside the other MCP server-mode variables
Claude Code can compress the requests it sends to the model in gzip blocks, controlled by CLAUDE_CODE_GZIP_REQUEST_BODY_BLOCKS and off by default
plugin install --replace explains that it needs a full plugin idRunning plugin install --replace without a name@marketplace id now says that id is needed and that nothing was installed
gh api stand-in for sessions without the GitHub CLITools & outputWant the reasoning? Read walks the 64 entries that probably matter to you, each one opening to what changed and why.
Read this release → Every row →29 more of these are in What probably matters to you, on page 1.
When you name a skill, Claude Code tries the exact name, then a version prefixed with the agent type, then any name ending in it
Unclear It is not clear whether synced skills are still left out of the ends-with match through the new filter.
If a plugin's background update fails, /plugin now explains it is still on the old version and how to retry
After a send, Remote Control now uses a watch that reconnects on timeout and shows a notice if it cannot be set up
Unclear It is not clear how the new watch differs from the old timer beyond the notice.
On Linux, the sandbox's file protection is reported unavailable when a platform check passes, and in locked mode when it is disabled
Unclear It is not clear what the Linux platform check tests.
The feedback consent list now says recent error messages are included, up to the last 100 since launch, possibly with file paths
Unclear It is not clear whether this line appears in every kind of feedback or only some of them.
Updating a plugin can now report it as up to date without downloading its repository
Unclear It is not clear under which conditions the download is skipped.
Structured data from an MCP tool is now dropped from the result Claude sees when it is over a size limit, with a marker recording this
Unclear The exact size limit is not known.
When a large JSON file is all on one line, the Read tool now explains why line ranges won't help and suggests using jq
The plugin details menu now shows a View repository option when a plugin's repository address differs from its homepage
When a plugin is gone from its marketplace directory, the error now says so and suggests a fix that fits the case
Unclear What makes Claude Code decide a plugin was removed from the directory, and whether that is behind a switch, was not stated.
Bridge settings now default to a 30-second limit for opening the server event stream, and two new turn-related names appear
Unclear What the keep-awake and prepare-turn entries do is not known, and the 30-second default may be replaced remotely.
Installing a plugin that would use the same data folder as one from another repository is refused with a message explaining the fix
Unclear The exact conditions for the refusal, and what the early stop in the marketplace check covers, are not clear.
One sign-in error now reads that your OAuth token was revoked, instead of saying your account has no access to Claude
Unclear Exactly which situation leads to this message is not shown.
A missed check-in from an attached machine no longer marks it unreachable at once; Claude Code waits and keeps checking
Unclear What starts the waiting period and how long it lasts are not shown.
Restarting a session onto a newly installed version now explains why it was refused, and confirms an upgrade, a downgrade or a plain resume
Unclear It is not clear whether this restart flow is in use in this release or is part of code that is not yet reached.
Warnings about local hooks in cloud sessions are shorter, the consent dialog is rewritten, and /hooks explains hooks that are not registered
Unclear It is not clear whether outdated hook copies are now reported differently, beyond the new wording.
Plugin-not-found errors are hidden for plugins removed from the directory, and an unreadable installed_plugins.json is now named as the cause
Unclear It is not clear which kinds of marketplace source are skipped by the auto-update sync.
If Claude Code cannot reach Chrome, asking for the list of Chrome browsers returns an empty list rather than an error
A short prefix Claude Code puts in front of some title text now reads just the text and a dot, without the leading ✦ symbol
Unclear It is not clear exactly which title or status line shows this prefix.
The helper that suggests prompts is now told to avoid topics it is not confident about, or to say it is unsure
Unclear It is not clear which feature shows these suggestions or whether it is switched on.
When Claude Code cannot check a shell command in advance, the reason now says that part of the command cannot be checked, not a technical syntax label
Unclear It is not settled where this reason is shown, though it is likely the permission prompt.
When the transcript draws every message, the hint about hidden earlier messages no longer shows their count in bold
Unclear It is not clear what happens on screen when the list moves forward.
Pasted text in the prompt box now goes through an extra check alongside the existing handling of large pastes
Unclear It is not clear what the extra check looks for or which pastes it affects.
When a settings file is missing, a plugin now shows as off only if a second check passes, otherwise as unreadable
Unclear It is not clear what the second check tests.
timeout command can't be checked#The message for a timeout command that can't be checked ahead of time now reads as a plain sentence
Some denied-permission messages can now skip the tip about adding a Bash permission rule to your settings
Unclear It is not clear which parts of Claude Code ask for the tip to be left out.
When Claude Code refuses a source, the log message is now a warning instead of a debug note, so it shows in normal logs
Unclear It is not clear which feature these refused sources belong to.
The check for installed plugins that a marketplace has removed now reads directory marketplaces and reports when it had no catalog
Unclear It is not clear whether directory marketplaces are in use for anyone yet.
Claude Code now rejects more malformed SSH-style git addresses and reads bracketed IPv6 hosts and user names differently
Unclear Which addresses are now read differently or rejected is not spelled out.
The description of a plugin's path source now says the repository is checked out sparsely over https or ssh
Unclear It is not confirmed that sparse checkout behaves differently, as opposed to only being described differently.
Installing or updating a plugin whose folder name is already taken now gives a separate error from a reserved marketplace name clash
Unclear Exactly which clash triggers the new folder-name message has not been confirmed.
When publishing an artifact, a copy to or from a .svg name must be stored as an SVG image, and an SVG file can only be copied to a .svg name
The refusal for a settings file that sets a protected environment variable now says whether to remove it or move it elsewhere
The prompt for a hook needing confirmation in a remote session now says the hook runs for this remote session
The light theme's prompt border is a little darker, and one model's advisor rank changed from 4 to 5
Unclear It is not clear which model's advisor rank changed.
The spinner shown while a session is teleporting no longer animates under two particular conditions
Unclear It is not clear what the two conditions are, though they may be a reduced-motion preference and a screen reader.
The plugin manager's hint for the d key now says turn off, turn on or remove to match the selected item
Unclear It is not clear which list in the plugin manager shows the new hint.
Claude Code now explains that plugins from a turned-off marketplace stay installed and keep updating, and how to turn it back on
Unclear One marketplace is now shown under a fixed name, and it is not clear which one or what turns a marketplace off.
alwaysLoad description now explains what setting it to false does#The alwaysLoad MCP server option now says that false keeps all its tools behind tool search and only true delays startup
Unclear Whether setting alwaysLoad to false now behaves any differently was not checked.
The spinner and the blinking tool dot now stay still under an extra accessibility check as well as reduced animation
Unclear It is not clear what the extra accessibility check looks at.
If the .gitattributes check fails during an upload, the error now says to retry, then resave the files as plain UTF-8 without a BOM
--add-dir rejection message now names the session's working directory#A directory outside the allowed area is now rejected with wording about the session's working directory instead of "cwd"
Unclear It is not clear whether the rewritten check now accepts or rejects any paths differently.
The warning about an ignored project setting now says when that key can only be set in the environment Claude Code starts in
An organization policy value for an MCP server's maximum permission that Claude Code does not recognize is now treated as blocked
Plugin marketplace details now say when the built-in marketplace is off or when your organization's policy hides all its plugins
Unclear It is not clear what turns the built-in marketplace off.
When a plugin cannot be found, the error can now say it was removed or renamed, or why it cannot be installed
Unclear It is not clear what reading a plugin in place means in practice, or which marketplace sources it applies to.
The environment details sent to Claude now skip the Shell and OS Version lines when those values are unknown
Unclear It is not clear what the other newly conditional line contains or when it is left out.
When adding a plugin marketplace fails, Claude Code now labels whether its manifest was missing or could not be read
Unclear Where these labels are used, and whether a reader ever sees them, is not shown.
Notices Claude Code inserts into a session are now deduplicated, and can be added as a stand-in tool step when no reply exists to attach them to
Unclear What these notices are for, and whether anything switches this behaviour on, is not shown.
Permission messages for awk and xargs commands now say plainly that what the command will run cannot be checked in advance
A check on images now asks whether the width or height is over a limit, instead of deciding from the image's file format
Unclear What this check leads to and what the size limit is are not shown.
In cloud sessions, the approval prompt for a Bash command that changes folder then reads a file now explains the key and sign-in file risk
Unclear What decides that a session counts as a cloud session here is not stated.
When Claude Code deletes a plugin's saved options, it now reads settings back and reports it if they are unreadable or still there
In print mode, Claude Code now checks the model active at turn start against the one at turn end when deciding whether to adopt a model override
Unclear The exact new rules for when an override is adopted are not shown.
Claude Code no longer suggests a plugin when you already have it installed under its other ID
When opening a deep link fails, Claude Code now reports a timeout or too much output, and its link-handler check is no longer limited to claude links
Unclear It is not clear which link types other than claude are now checked.
The working spinner now shows a single fixed frame instead of animating when either of two conditions applies
Unclear It is not clear what the two conditions that stop the animation are.
The artifact publishing tool's description no longer lists SVG among the file types it rules out, leaving only HTML and XML
Unclear It is not clear whether this wording is currently shown, since it may sit behind a switch.
When the hooks process closes, Claude Code now says it ended, with its exit code, instead of reporting that it died
Unclear It is not clear whether a close of the hooks process could actually happen in earlier builds.
The prefix and pointer shown beside your own messages now use the theme's inactive color instead of its subtle color
In the light theme, the border around the prompt box is now a slightly darker grey
Unclear It is not fully confirmed that this colour belongs to the light theme.
The box where you enter a login code now takes focus and shows or hides its cursor based on a display setting
Unclear It is not clear which display setting decides whether the cursor shows.
The Permissions dialog footer now leaves out the up/down and Enter hint under some conditions
Unclear It is not clear what condition hides the hint.
The message for a marketplace location that can't be checked is reworded, and actions in /plugin are now recorded as usage events
The MCP server details screen now leaves out its up/down and enter key hints in some situations
Unclear The situation in which the hints are hidden is not known.
The display of hook output drops the one-line gap that used to sit above it
Unclear A remote switch for the older way MCP servers ask you to open a URL changed its reading recently, and it is not clear what it affects in this release.
Checks of structured output against a JSON schema now compare multipleOf rules with a precision of six decimal places
extraKnownMarketplaces#A marketplace whose source does not match its settings entry now gets an error naming extraKnownMarketplaces, and the env check is reworded
The reason shown for commands that run their argument as another command now says what they will run cannot be checked in advance
The tips shown in the spinner are now loaded when first needed rather than up front, and spinnerTipsEnabled still turns them off
The permission reason for xargs passing its input to find or jq now says in plain words what xargs does
A background task that is waiting on something now keeps its blocked status on a new turn instead of being reset to active
Unclear It is not clear exactly what counts as still waiting.
When a remote session reconnects, Claude Code no longer forgets the background tasks it was tracking
Unclear What the tracking of opened and closed permission requests is used for is not known.
Remote sessions now give up on a stalled live-update connection after a time limit and reconnect, instead of waiting forever
Unclear The default length of the time limit is not known.
/update keeps the conversation when the last reply wasn't saved#If Claude's last reply could not be saved, relaunching after /update now resumes the conversation instead of starting a fresh one
Unclear It is not clear exactly when the transcript is treated as failed to save.
When an Amazon Bedrock guardrail steps in, its message text is now kept and shown in the reply instead of going missing
loadedNestedMemoryPaths is gone, so compaction and sub-contexts no longer manage it, and inner calls drop some file reading settings
Unclear Whether the reset of how memory files are chosen brings those files back into the conversation anyway is not settled.
Claude Code's list of cancellation-style errors now also includes a closed permission connection before a reply arrives
Unclear Exactly what Claude Code does with this list is not known.
When Claude Code acts as an MCP server and a client cancels a tool call, it now closes the open event stream
Unclear It is not clear whether the too-large result report can ever be triggered.
After an MCP tool call succeeds, Claude Code can clear that server's marker saying it needs you to sign in again
Unclear It is not clear under what condition the marker is cleared, since that step runs only when a check passes.
The part of WebFetch that handles redirects and HTTP errors now refers to its values consistently
Unclear It is not clear whether redirects and HTTP errors in WebFetch actually misbehaved before this change.
If sending to a remote session failed unclearly and a retry is refused, Claude Code now reports the first error, not the refusal
Artifact previews now stop when cancelled and close their browser on a timer, even when the browser has broken
A 401 error saying the OAuth access token has been revoked now counts as a revoked login, as well as the 403 form
Unclear What Claude Code does after it detects a revoked token was not stated.
When an MCP server's cached tool listing is rejected, Claude Code now waits for running tool calls to finish before closing the connection
Unclear It is not clear exactly which calls and tasks are counted as still using the connection.
The check for an unfinished git operation now also recognises a rebase in progress, not only merges, cherry-picks and reverts
The code that keeps your place while scrolling the transcript now uses the position it calculates, which it previously ignored
Unclear What visible scrolling problem, if any, this fixes is not shown.
A background session's blocked status now clears when its stored request just repeats text that was already passed along
If a background Stop hook fails because its script can't be opened, Claude Code reports it once and ignores identical repeats
In remote sessions, streamed text is now cleared only when a reply from Claude contains text, not on every reply
When the plugin directory is unavailable, the update check now says the plugin was not checked rather than calling it up to date
When a listing round comes back degraded, Claude Code no longer records it as a completed listing
Unclear What is being listed is not known.
When an organization policy supplies the auto-update setting, Claude Code no longer says it came from an --add-dir directory's settings
Unclear It is not clear exactly which conditions make Claude Code skip the added-directory answer.
The settings error for a marketplace name that doesn't match its settings source name now shows the right names
Unclear It is not clear how handling of marketplace names that look reserved or official has changed.
Remote interrupts that name a message now have that message ID lowercased, and some of them no longer fire the usual interrupt handling
Unclear It is not clear which interrupts skip the general interrupt handling.
When you paste a code during sign-in, the hidden-text box now has focus and shows a cursor
When a cloud session cannot be opened, Claude Code now exits with a message that starts with "Error:" and is never empty
Unclear It is not clear which command shows this message.
When a pinned plugin's version does not fit what other plugins require, the error now says which version, which range and who needs it
When Claude Code reads a remote's fetch settings and git fails, it now treats that as an error rather than as nothing set
Unclear It is not clear how Claude Code acts on the new unknown result.
Published verbatim by Anthropic for v2.1.287. Text is unmodified from the upstream changelog. Everything else on this page came out of the bundle instead, which is why the two lists don't match.
Of these 106 bullets, 14 name something an entry on this page also names, 40 name something no entry here does, and 52 name nothing specific enough to line up either way. The pairings are made on names both sides wrote down, a flag or a setting or a slash command, so read one as probably the same thing rather than as a fact, and read the middle number as candidates rather than as a miss count.
/plugin enable cc-plugin-you-should-know@builtin (for first-party sessions with telemetry on)
Probably plugin-types-removed-from-the-command-category-map, cloud-session-sync-and-memory-update-tweaks, plugin-background-update-failure-now-reported-for-anthropic, disabled-marketplace-notice, plugin-cloud-session-hooks-consent-display-and-project-sett, plugin-type-contract-now-laid-for-dependent-mods, plugin-types-generated-header-comments-reworded-mcp-types, plugin-screen-telemetry-and-marketplace-network-location-mes, plugin-not-found-errors-now-explain-removal-from-the-marke, plugin-marketplace-dedup-across-directories, plugin-types-removed-from-the-open-state-map-skill-folder, plugin-built-in-marketplace-can-be-turned-on-or-off, plugin-help-lists-a-new-plugin-directory-command, public-plugin-directory-search-and-marketplace-catalogue, plugin-install-replace-now-has-an-error-message-requiring, plugin-tip-advertise-enabling-the-you-should-know-side-ag, switch-installed-plugin-copy-confirmation-in-plugin, plugin-marketplace-community-managed-and-pinned-commit-deta n:<text> filter to the agents view that matches session names and tasks; a filter now shows matches in collapsed sections and Enter opens the first match
No entry names this prompt_text to the OpenTelemetry user_prompt event, a copy of prompt for backends that nest dotted keys; drop or mask it wherever you drop or mask prompt (anthropics/claude-code#70763)
Probably user-prompt-telemetry-now-built-by-a-helper-that-spreads-fie gh api (REST only) for sessions that use Anthropic-managed git on macOS and Linux machines where the GitHub CLI is not installed
Probably github-gh-stand-in-described-in-session-proxy-prompt, built-in-gh-api-stand-in-for-sessions-with-no-github-cli asyncRewake waking Claude over and over with "found issues" notifications when the hook's script file is missing; the broken hook is now reported once
Probably asyncrewake-hook-with-an-unopenable-script-reports-once #96087[BUG] Windows desktop (MSIX): plugin hook scripts invisible to externally-spawned interpreter — every hook ENOENTs and asyncRewake Stop hooks loop forever Open
#95727Desktop app: dangling plugin hook (security_reminder_hook.py missing) fires endless 'Background security review found issues' notifications Open
#96148[BUG] Failing asyncRewake Stop hook causes unbounded model re-wake loop (high token burn) Open
#94634[BUG] Security-guidance plugin hook file missing from session snapshot, causes repeated "No such file or directory" notifications Open
#92234[BUG] Broken security_reminder_hook.py plugin persists after reinstall Open
availableModels list, which could collapse /model to one Opus row
Probably managed-settings-denial-message-for-model-checks /model on a claude.ai login saving the current version's id, so your saved default now follows the newest Fable like Opus and Sonnet do
No entry names this /model, opusplan) rewriting earlier MCP tool announcements, which could drop earlier extended thinking
No entry names this rm (such as one on / or the home directory) losing its always-ask safeguard when the same command also redirected output to a ~ or wildcard path
Nothing to match on claude -p and SDK sessions repeating a model fallback on every later message after the model was switched while a reply was running
No entry names this claude agents after the agent exited and removed the worktree the session was started in
No entry names this /advisor pairing checks: Sonnet 5.5 can now advise Opus 4.7 and 4.8, and advisors the API would refuse are flagged up front instead of being silently dropped
No entry names this __proto__
Probably org-mcp-permission-maps-now-validated-and-null-prototype claude --teleport progress screen, and an MCP form field while it is being checked, to the screen reader again on every spinner frame
No entry names this CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS not removing the structured-output format from session-title and prompt-hook requests, which Bedrock-backed gateways reject
No entry names this --include-partial-messages sending a cut-short reply's message_stop late or never, so apps could show the reply as still in progress
No entry names this claude agents sometimes not showing the permission prompt a background session is waiting on
No entry names this /ultrareview giving advice about .git/info/attributes when the upload stops on a committed .gitattributes it cannot read, such as one saved as UTF-16
No entry names this claude remote-control failing to register behind an HTTP proxy with a misleading "Check your organization permissions" error (anthropics/claude-code#97352)
No entry names this #97352Remote Control cannot register behind an HTTP proxy: some requests are sent as absolute-URI instead of through CONNECT Closed
claude agents changing every second in screen reader mode; they now change at most every 10 seconds
No entry names this API Error: 401 instead of "OAuth token revoked"; in -p mode the error now starts with "Failed to authenticate"
No entry names this /ultrareview upload refusals advising you to copy a variable named by a repository's settings file into your own user settings
No entry names this --output-format stream-json and the SDK not streaming the turns of a context: fork skill run by typing /<skill> as the prompt, as they do for the Skill tool's fork
Probably strict-relay-post-added-and-skill-mention-attachment-type claude plugin marketplace add --sparse and git-subdir plugin installs failing with "transport 'http' not allowed" when the repository is served over plain http
Probably built-in-plugin-directory-marketplace-add-remove-list-and #96134[BUG] Regression since 2.1.174: plugin installation from HTTP marketplace fails with "fatal: transport 'http' not allowed" Closed
--plugin-url download corrupting the session's cached copy of the plugin archive
No entry names this /desktop quoting partial output when opening Claude Desktop timed out or printed too much output; the error now names the cause
No entry names this claude remote-control stopping mid-turn when the Mac went to idle sleep
No entry names this claude hanging or crashing with "Raw mode is not supported" when its input is piped or redirected; it now says why and exits (use -p for piped input)
No entry names this CLAUDE_CODE_SKIP_*_AUTH sending a different Authorization header than real requests when ANTHROPIC_CUSTOM_HEADERS repeats it
Probably custom-headers-parsing-moved-to-shared-helper, self-hosted-remote-environment-and-custom-header-auth-parsin /config: settings that cycle show ‹ › and step both ways with ←/→, narrow terminals stack each value under its label, and PgUp/PgDn page the list
No entry names this /memory: the left and right arrow keys now flip its on/off settings, such as Auto-memory
No entry names this /skill names typed mid-message: Claude is now told they are skills, including disable-model-invocation ones
No entry names this ~ target too
Nothing to match on [1m] suffix (CLAUDE_CODE_DISABLE_1M_CONTEXT=1 keeps 200K)
No entry names this claude agents to arrive as queued messages; slash commands other than /stop sent while a turn is running now run when it ends
Probably remote-tool-calls-background-command-ownership-and-fleet-s Bash allow rules and allowing hooks to prompt for, not run, shell writes to files Claude Code's file tools refuse outright (the Anthropic profile store, the host credentials file)
No entry names this alwaysLoad: false to defer all of that server's tools behind tool search
Probably tengu-mcp-legacy-url-elicitation-default-flipped-to-true-mc CLAUDE_AX_PREPARK_MS=50 to restore the pause
No entry names this /usage or /context command opening the extension's dialog instead of running when picked from the command menu
Probably context-in-hosted-workers-omits-message-breakdown A model matched these bullets to the GitHub issues they fix, so a link can be wrong.
No change to the system prompt since v2.1.286.
Claude Code, interactive mode
1187 documentation changes were recorded within 24 hours either side of this release, nearest first. The closest 12 are below. They're here because they happened near this release in time. That's not a claim that this release caused the edit, or that the page documents anything in it.
The 57 literal strings found in the bundle, with the number of entries that name each one. Picking one searches for it. A name is here because this build's code mentions it, which is not the same as it working or being finished.
What's wrong with this entry?