Claude Code v2.1.288

The footer's frame item opens /artifacts, and usage-limit notices can mention a paused workflow#

Choosing the frame item in the footer now runs /artifacts, and usage-limit notices have room for a paused-workflow message

Unclear It is not clear what the paused-workflow entry says, or how the footer's handling of /artifacts differs from before.

Short pasted links can now collapse into a paste placeholder#

Pasting a link into the prompt box can now show it as a placeholder even when it is short, with a space added before your next paste

Unclear It is not clear which links qualify, for example whether only GitHub links do.

Text selections are tracked across full-screen terminal views#

Claude Code now keeps track of text you select across full-screen terminal views and notes when a selection is cleared

Unclear It is not clear what this tracking is for or whether readers will see any difference.

/login in bare mode explains why it won't sign you in#

In bare mode, /login now prints an explanation instead of a sign-in that would have no effect

Three small behaviour changes, including Ctrl+C copy#

Resent or unchecked home-file announcements now do nothing, scheduler lock release has a fallback folder, and Ctrl+C copy changed

Unclear The purpose of each change, and what the extra Ctrl+C action does, is not clear.

/teleport in a cloud session now tells you how to continue locally#

Typing /teleport or /tp in a cloud session now shows the claude --teleport command to run on your own machine

Auto-update failure message now gives a reason#

When an auto-update fails, the status line now says why and suggests running claude doctor

Unclear It is not clear which reasons Claude Code can show.

Unset plugin options can now be left as placeholders instead of causing an error#

Filling in a plugin's ${user_config.*} placeholders can now leave an unset option as written instead of always failing; failing is still the default

Unclear It is not clear which parts of Claude Code use the new mode that leaves unset options as placeholders.

Pinned plugin commits must be full commit hashes#

A plugin pinned to a commit must now give the full 40- or 64-character hash; short hashes are rejected

Installed plugins fall back to the plugin directory when their marketplace entry is missing#

If an installed plugin's marketplace entry cannot be found, Claude Code now looks the plugin up in the plugin directory instead

Unclear It is not clear exactly what the new option for loading only missed listings does.

Permission prompts can explain why auto mode is not skipping them#

New messages explain that an action is allowed but Claude still asks, because auto mode is unavailable, and say why

Unclear It is not clear when or where these messages appear.

Editing a file now also notes it for loading nearby memory files#

When Claude edits or writes a local file, Claude Code now records the file's path for loading memory files in nested folders

Unclear It is not confirmed that this causes nested CLAUDE.md files to be loaded after an edit.

Finished background agents are now cleaned up once nothing needs them#

When the last reason to keep a finished agent around is released, Claude Code now clears its stored context

Unclear It is not clear which kinds of agent tasks this affects.

Remote Control pauses after repeated credential rejections instead of giving up#

If the server keeps rejecting Remote Control's credential within an hour, Claude Code pauses reconnecting, warns you, and says why it stopped

Unclear How many rejections within an hour trigger the pause is not stated.

The review skill's limit on findings can now be set#

The review skill's cap on how many findings it reports is now a setting with defaults of 4, 10 and 15 by effort level

Unclear It is not clear whether anything passes a limit other than the defaults.

Idle notification waits until background agents have finished#

Claude Code no longer sends its idle notification while background agents are still running, and restarts the idle timer once they finish

Unclear What the idle notification shows you, and exactly which helpers count as background agents, is not known.

Claude Code says why a hook was not registered#

Hooks that are skipped now come with a reason, such as a missing script or a script in an unread dot-folder

Unclear Where in Claude Code these reasons are shown is not established.

Replies stopped while waiting for permission now end with their own reason#

A reply stopped while a tool call waited for permission now finishes with the reason aborted_tools and a count of queued turns

Unclear When this result is produced is not established.

Hooks now refuse input that is over a size limit#

Claude Code now checks the data it sends to a hook against a size limit and reports an error instead of sending an oversized payload

Unclear The size limit and the list of events that now stop with an error are not known.

Shorter reasons when a hook is not sent to a cloud session#

With claude --cloud, notices about hooks held back are shorter and give a cause, with a warning when a changed guard hook blocks tool calls

Unclear It is not known whether this applies to every user of claude --cloud.

Commands that change folder and only read files can skip the permission prompt#

A new check allows cd <dir> && read-only command without asking when the folder is a plain path, reads stay in allowed paths and output goes only to /dev/null

Unclear It is not known whether the new allow check is used yet.

Messages sent to interrupt Claude are now tracked in the transcript#

Sending a message that interrupts Claude now only stops a turn that is still running, and later transcript messages are marked as following that cut

Unclear It is not clear whether the new marking changes anything you can see in the transcript.

Login now tells you when your sign-in worked but could not be saved#

If sign-in succeeds in the browser but your credentials cannot be stored, login now shows a dedicated screen explaining what happened and what to do

Unclear It is not clear when the Escape hint to continue without logging in is shown.

Clearer error when a server sends back too much data#

The error for an oversized server response now says the server streamed more than a set number of MB, so the response was not read

Cloud session setting changes are double-checked, with a clearer Windows file name error#

When a cloud session setting change is not confirmed, Claude Code rereads and retries it, and reports not_stored if it did not stick

Bash tool instructions no longer explain timeouts for background commands#

Claude's instructions for the Bash tool no longer say how timeout limits a command running in the background, or what happens at that limit

Unclear It is not clear whether the actual timeout behaviour for background commands changed, or only the instructions.

Hooks that print badly formed JSON are recorded as a separate kind of failure#

A script hook whose JSON output is badly formed is now recorded as its own failure, and exit code 2 still blocks

Unclear It is not clear whether the message you see when a hook's output is badly formed changed.

Interrupted line is shorter when you used send now#

The Interrupted line now leaves out its extra detail when the interruption came from send now

Shell command checker can treat some plain heredocs as simple#

A new option lets the shell command checker accept unquoted heredocs that only use simple variables instead of flagging them as too complex

Unclear It is not clear whether anything in Claude Code turns this option on.

Claude is told when a website permission request times out#

If you don't answer a permission request for a URL in time, it is withdrawn and Claude is told a retry will ask you again

Unclear It is not clear which tools or situations use this message.

GitHub proxy errors now say whether to retry#

When the GitHub proxy fails, Claude Code now tells a refused connection apart from one that could not open, and suggests one retry for the second

Plugin uninstall checks the settings file more carefully before reading it#

Uninstalling a plugin now checks links and symlinks before reading the settings file, and reports why it refused to read one

Unclear It is not clear what a user sees when a settings file is refused, beyond the logged message.

Marketplace fetch errors report both the SSH and HTTPS attempts#

If fetching a plugin marketplace from GitHub fails over both SSH and HTTPS, Claude Code now shows one error that covers both attempts

Unclear It is not clear when Claude Code switches from one transport to the other.

Claude is told to upload files instead of storing them in artifact documents#

When a too-large artifact document contains encoded file data, Claude is now told to upload the file instead

Idle tool's description explains "no pending events" more precisely#

The idle tool now tells Claude that "(no pending events)" means only that nothing arrived on that call

Claude now says cross-session messages wait in the other session's inbox#

After sending a message to another session, Claude is told it sits in that session's inbox, not yet read by its Claude

No 'always allow' option on prompts for a domain that is already allowed#

Permission prompts for a domain that is already allowed no longer offer an 'always allow' choice

Unclear It is not clear where Claude Code decides that a domain is already allowed.

Plugin list explains when it is empty because a directory failed to load#

If a directory fails to load, the plugin list now says no plugins will show until it loads

Unclear It is not clear which directory the message refers to.

Clearer messages about hooks in cloud sessions#

Messages about hooks that can't run in a cloud session were reworded, and a failed plugin hook on another machine is now logged as an error

Unclear It is not clear how widely hooks in cloud sessions are available.

Clearer advice when hooks modules are turned off by a saved switch#

If hooks modules are off because of a saved remote switch, the error now suggests starting claude once with network access

Clear message when a settings change cannot be saved#

If Claude Code cannot write a change to its config file, it now says nothing changed and asks you to check the file can be written

Unclear It is not clear which actions show this message.

Brief tool rechecks attachments, and untrusted-folder agents are skipped#

The Brief tool rechecks attachments when it runs, and agent definitions from untrusted folders are now skipped entirely

Unclear Whether the skipping of untrusted-folder agent definitions is reachable in this build is not known.

Documents that need a newer Claude Code now tell you to run claude update#

A document that needs a newer Claude Code now fails with a message naming the versions and telling you to run claude update

Unclear Which kind of document this applies to, and how the message differs from before, is not known.

MCP tool calls report oversized results and closed connections as their own errors#

An MCP tool result that is too large, or a connection that closes for a recognised reason, now raises its own error instead of looking like an expired session

Unclear Which close reasons count as recognised is not stated.

The test-running skill has a shorter description#

The skill for running tests now describes itself as "Run tests on this machine (local)", with its longer text moved to when-to-use guidance

Queued commands wait for the previous turn's summary in headless mode#

Without the interactive screen, Claude Code finishes the previous turn's end summary before starting the next queued command

Unclear It is not clear whether this makes any visible difference to someone using headless mode.

Cloud sessions now say settings can only be changed on the host machine#

When a cloud session blocks a command editing Claude Code settings, Claude now says to change them on the host instead of suggesting a workaround

Unclear It is not clear whether editing those settings files with Edit or Write is also blocked elsewhere.

Message about plugin hooks being off now states the actual reason#

When hooks are turned off for installed plugins, the message now gives the actual reason instead of always blaming a rollout switch

Unclear Which reasons the message can now name is not established.

MCP tool results too large to read now warn that the tool may have run#

An MCP reply too large or unreadable to accept now gets a new error telling Claude the tool may have run, and no automatic retry

Unclear It is not clear exactly which MCP calls can raise the new error.

Cloud sessions now refuse clearly when asked to change settings files#

A cloud session asked to change its Claude Code settings files now tells Claude nothing was changed and that you must do it yourself

Unclear It is not clear which sessions or targets produce this refusal.

Edit and search results can now include warnings#

Results from some edit and search tools now pass along any warnings they contain

Unclear It is not clear which tools these are or where the warnings are shown.

Deleted files are skipped in more cases when building a diff#

Claude Code now skips deleted files in a diff in more cases, and reads a worktree's current Git commit from its HEAD file

Unclear What the new check for skipping deleted files tests is not known.

Messages about unattended cloud commands are shorter#

Messages about blocked unattended commands from cloud sessions no longer give step-by-step directions and no longer mention /config

Artifact database writes now pass server warnings back to Claude#

When Claude writes to an artifact database, the result now includes any warnings the server sent, shortened and cleaned up

Unclear It is not clear which Claude Code feature this artifact database belongs to.

Failed plugin uninstalls now explain more causes and how to fix them#

When uninstalling a plugin fails, the message now covers settings files that can't be read here or point to another machine, and when to retry

Permission answers can no longer add exception rules starting with !#

Deny or ask rules arriving in an answer to a permission request are now dropped with a warning if they start with !

Attaching a file path now explains when a tool cannot read files#

Claude Code has a new message saying a file path cannot be attached when the tool cannot read files in the session

Unclear It is not clear where in Claude Code this message appears.

Some idle background tasks no longer count as keeping a session busy#

When Claude Code checks for running background tasks, it now ignores paused tasks and agents that are waiting rather than working

Unclear It is not clear which part of Claude Code uses this check, or what it does with the answer.

Paused workflow status text, a new theme colour and one rejected host message#

The status line can show a paused-workflow message, themes get an auto-accept shimmer colour, and hosts can no longer send one task message

Comment auto-replies treat an unavailable auto mode check as a decline#

Automatic replies to artifact comments now count as declined by auto mode when its safety checker is unavailable, and can show the decline notice

Unclear It is not clear what the server-side check involved here does, or which setting controls this path.

Footer hint can say "to go back", and answered questions get a marker#

The footer's agents hint can read "to go back" instead of "for agents", and answered question tabs can show a marker

Unclear It is not clear what condition switches the hint to "to go back", or which feature it belongs to.

Accepting a plan into auto mode shows a mode notice that stays up#

Accepting a plan with auto mode or a kept-context mode now shows a lasting notice naming the mode that is on

Unclear The exact text shown for each mode is not confirmed.

Poll tool gives a clearer refusal message and records how each use ended#

The Poll tool now records how each use ended, and refusing it outside the main conversation shows "Poll refused for this agent"

Suggested permission rules for some commands must include more words#

Claude Code no longer suggests a command prefix for a permission rule when it is shorter than that command's minimum length

Unclear It is not known which commands have a minimum or what each minimum is.

Plugin browser can report that the plugin directory failed to load#

When every marketplace fails to load, the plugin browser can now report a directory failure instead of a general one

Unclear It is unclear what condition makes the plugin browser report a directory failure rather than all marketplaces failing.

MCP connections stop retrying after one more kind of error#

Claude Code now treats one more kind of error from MCP servers as not worth retrying

Unclear It is unclear which kind of error is now treated as final.

Headless runs wait for model settings before the first request#

Headless and SDK runs now wait for model configuration to load before building Claude's instructions, unless no request will be sent

Unclear It is not clear what configuration is fetched or how long Claude Code will wait for it.

A first cloud message that may not have arrived now says why#

The warning for a first cloud-session message that may not have arrived now gives a plain reason, such as the service being busy

Cloud sessions explain why auto mode is asking you to approve an action#

When auto mode in a cloud session asks you instead of approving on its own, the prompt now explains why

Unclear It is not clear what turns on auto mode's handling for cloud sessions.

MCP sign-in retries once after some failed fetches#

Some MCP sign-in fetch failures now trigger one retry instead of failing at once, and saved tokens record where they were stored

Unclear It is not clear what is being fetched or what the extra step before the retry does.

GitHub clones switch to HTTPS when SSH is clearly not set up#

Claude Code now clones a [email protected] address over HTTPS when SSH is clearly not configured, and retries with SSH if HTTPS fails

Unclear It is not confirmed which clone paths actually use the new fallback.

The error for a plugin's unhandled failed task may appear in more situations#

Claude Code's error for a failed plugin task the plugin never waited on is now shared and can be reported from more places

Unclear It is not clear whether the additional places that produce this message are actually reached.

Reworded messages when a shell command cannot be checked, plus smaller internal changes#

Messages about shell commands that cannot be checked before running were reworded, alongside several small internal changes

Unclear It is not clear what the device channel setting or the other internal changes control.

Shorter refusal message for awk, and plugin catalog cases removed#

The awk permission refusal now reads "awk is given text that can't be checked before it runs", and two plugin catalog cases were removed

Unclear It is not clear what changes for plugins now that the data-residency and essential-traffic-only cases are gone.

Shorter message when a command's effect can't be checked in advance#

When Claude Code can't check in advance what a command will run, the reason now reads "What '<command>' starts can't be checked before it runs"

Unclear It is not clear what extra information is added when a guard that could not run blocks a command.

Review effort labels no longer mention a limit on findings#

The medium and high review effort labels dropped their "≤8 findings" and "≤10 findings" endings

Unclear Only the label text changed visibly, so it is unclear whether the limit on findings was removed as well.

Local settings file is now described as this folder's, not this checkout's#

Messages about the local settings file now say "this folder's settings.local.json" instead of "this checkout's settings.local.json"

Remote option conflict messages lose their Error: prefix#

Messages about combining two options that both pick a remote backend no longer start with "Error: " in their text

Unclear It is not clear whether "Error: " is now added elsewhere, so the message you see may look the same.

A usage credit settings error no longer tells you to contact your admin#

One usage credit settings error now reads "Couldn't send your request. Try again later." instead of telling you to contact your admin

Unclear Which situation leads to this error is not known.

Shorter reason shown when an awk command cannot be checked in advance#

The reason Claude Code gives for not treating an awk command as safe is shorter and no longer mentions an option hiding its program

Unclear What Claude Code does with the new record of whether a command contains a loop is not known.

Shorter message when a PreToolUse hook cannot run#

When a PreToolUse hook cannot run and blocks a tool call, the message now says plainly that the call was not run

Unclear The situations in which this message appears are not known.

Hook error message now says the hook "gave no verdict"#

When a hook errors without blocking, Claude Code now says it "gave no verdict" instead of "could not render a verdict"

The Interrupted message sometimes drops its hint#

The Interrupted message now leaves off its trailing hint when a particular internal condition holds

Unclear It is not clear what condition decides whether the hint is shown.

Resumed teammates no longer bring back agent types you have blocked#

On resume, a teammate's custom agent type is not restored if a rule or plugin now excludes it, and it gets only basic tools

Session transcripts are no longer read and rewritten at the same time#

Claude Code now makes reads and rewrites of a session transcript wait for each other, so compaction and resume can't clash

A first message that fails to reach a cloud session goes back into the input box#

If the message you gave on the command line fails to send to a cloud session, its text is now put back into the input box

Conversation history is now saved one write at a time#

Claude Code now waits for one save of the conversation history to finish before the next, so overlapping saves can't split it

Unclear What a split history looked like to someone using Claude Code is not known.

Plugins you have installed no longer vanish when the directory briefly leaves them out#

If a plugin directory refresh misses a listing that an installed plugin uses, Claude Code keeps it for a grace period instead of dropping it

Unclear It is not clear what value is sent for the extra option on catalog requests.

Login refresh lock is no longer taken from a process that is still alive#

When processes share login credentials, a refresh lock held by a live process no longer counts as stale after a fixed 60 seconds

Unclear The exact waiting time used when the holder is not proven to be running is not stated.

Read-deny rules can no longer be dodged with trailing spaces or invisible characters#

Read-deny rules now also catch paths with trailing spaces or a trailing invisible byte order mark character

Hook matching errors are now logged instead of silently ignored#

When Claude Code can't work out which hooks match an event, it now logs the failure instead of quietly running no hooks

Unclear It is not clear what the stand-in path for plugin hooks is for.

Plugin hooks are reloaded when the state they loaded under changes#

Plugin hooks are now loaded again if the state they were first read under has changed, instead of always reusing the first load

Unclear It is not clear what state the record represents.

Language servers that register features on the fly no longer cause errors#

Claude Code now politely ignores language-server requests to register or unregister features, instead of failing on them

Screen-reader announcements now stay put across screen redraws#

With CLAUDE_CODE_ACCESSIBILITY set, announcement lines are held for a while across redraws and placed after the main content

Unclear How long announcements are held is not known.

claude mcp serve now takes --strict-mcp-config into account#

Running claude mcp serve now passes the --strict-mcp-config option along before the server starts

Unclear How the recorded value is used afterwards was not checked.