You can now let plugins read the text you have selected in a connected app, in sessions without a terminal. The first non-empty answer that arrives within 5 seconds is used. Plugin agent-launch hooks now also apply when you start a named teammate. Such a hook can block, rewrite or retype the teammate. Running claude plugin eval on a plugin from a folder marketplace now runs it from that folder. When a plugin's view drawn by the desktop app fails, the plugin is told and can draw another view.
A plugin interface that crashes no longer breaks the screen. Claude Code shows its own interface instead and keeps your session running. Plugins now get a teammate's real id and model when they launch agents. The claude auth status command now exits right away with code 0 or 1 after printing your login status. Stale or overdrawn content in scrolled boxes is fixed. A plugin view that crashed while drawing is no longer applied again.
Written by our agent from the shipped bundle, not by Anthropic.
find commands are allowed without askingPermissions & safetyPermission decisions gain an optional hook field, which plugin tool.check hooks can set, and rules inside nested commands are now found
claude plugin eval tests folder marketplace plugins from where sessions load themEvaluating an installed plugin from a folder marketplace now runs it from that folder, or stops with an error if the folder no longer lists it
ExtensionsWant the reasoning? Read walks the 8 entries that probably matter to you, each one opening to what changed and why.
Read this release → Every row →Smaller changes and internals, grouped as the pipeline found them. Nothing is dropped, it is only further down.
3 more of these are in What probably matters to you, above.
Spawned teammates record how they were started, carry a teammateId, and keep their original background and cwd even when a tool call asks otherwise
Unclear It is not clear which tools' inputs these resets apply to.
Starting a named teammate now goes through a plugin's agent-launch hook, which can block, rewrite or retype it
@-mentioned files are now re-checked before being read; ones that can't be safely opened are passed as references and the model is told why
Unclear It is not clear what makes Claude Code mark mentions as ones that could not be examined.
Plugin UI boxes with an unknown borderStyle now get a diagnostic and no border, and diff highlighting stops retrying after an error
find commands are allowed without asking#Claude Code now asks before running some find, test, jobs and set commands that it used to treat as safe to run automatically
Unclear Exactly which find options are treated as read differently by different versions is not stated.
Claude Code now treats find ... -rm like find ... -delete: it is not auto-allowed as read-only and is flagged as destructive
Unclear It is not clear whether the server-side setting affects the read-only pattern itself, which has -rm built in, or only the separate list of blocked options.
Claude Code now checks a shell command part by part when it splits into several commands, or when its one parsed command differs from what was written
Unclear It is not clear which commands end up as a single command with different text.
A link in a plugin's UI with a bad address, or on a screen that does not support links, is drawn as plain text with a diagnostic
Unclear The exact length limit and which display surfaces lack link support are not stated.
Plugin hook values leaving the plugin's sandbox are now copied, frozen and checked as plain data, unless isLeavingUncopied is set
Unclear It is not clear what sets the option that lets values leave the sandbox uncopied.
Published verbatim by Anthropic for v2.1.289. Text is unmodified from the upstream changelog. Everything else on this page came out of the bundle instead, which is why the two lists don't match.
Of these 27 bullets, 5 name something an entry on this page also names, 6 name something no entry here does, and 16 name nothing specific enough to line up either way. The pairings are made on names both sides wrote down, a flag or a setting or a slash command, so read one as probably the same thing rather than as a fact, and read the middle number as candidates rather than as a miss count.
<script> tags or deeply nested ${ substitutions
Nothing to match on Read deny rules not applying to files @-mentioned, changed, or selected in the IDE through a symlink
Probably plugin-list-shows-where-each-plugin-was-read-from-and-its-fo claude auth status that may have made sign-outs more frequent
Probably auth-status-cli-exits-directly plugin list, plugin eval and plugin update showing a stale copy of a plugin installed from a local folder marketplace, and hot reload for a symlinked --plugin-dir
Probably plugin-list-shows-where-each-plugin-was-read-from-and-its-fo, claude-plugin-eval-resolves-installed-plugins-from-marketpla @ in its path, an uppercase host or a file: path
Nothing to match on TZ="$HOME" rm -rf build) when the sandbox auto-allows commands
No entry names this claude plugin validate skipping the plugin when the folder also holds a marketplace manifest
No entry names this agent.spawn for teammates, one agent id across plugin hook events, and idle and waiting states in $.agent.list()
Probably teammate-spawn-records-spawnedwith-agentspawn-hook-gains, agent-teammate-spawn-now-runs-through-the-agentspawn-plugin ui.render hook wrote made a row throw while drawn; the engine now draws its own row instead
No entry names this [-], which now also keep one column in from the terminal's edge
No entry names this #98987[FEATURE] Mods: keep the Pane close mark (×) and the band's [-] off the terminal's last column Open
Client that fails while drawn taking down everything the mod drew around it; it now fails alone and raises ui.fault
Probably client-error-text-is-stripped-of-prefixes-and-falls-back-whe, plugin-client-faults-are-now-reported-and-surfaced-the-clie, new-ui-client-fault-control-request-lets-the-desktop-report, new-plugin-function-hooks-feature-slot-plugin-function-hook claude plugin validate failing an Anthropic marketplace's own plugin and listing a clean plugin.json in --json
No entry names this Error or nothing as its reason when the failure carried no message
No entry names this <script> tags
Nothing to match on A model matched these bullets to the GitHub issues they fix, so a link can be wrong.
No change to the system prompt since v2.1.288.
Claude Code, interactive mode
182 documentation changes were recorded within 24 hours either side of this release, nearest first. The closest 12 are below. They're here because they happened near this release in time. That's not a claim that this release caused the edit, or that the page documents anything in it.
The 11 literal strings found in the bundle, with the number of entries that name each one. Picking one searches for it. A name is here because this build's code mentions it, which is not the same as it working or being finished.
What's wrong with this entry?