You can now set oidc.user_id_claim to choose which sign-in token field holds the user ID for the OIDC gateway. It defaults to sub. Among the other shipped changes, the prompt asking whether Claude may use a skill now shows the skill's description in a scrollable box. Usage messages now call your short-term limit the "5-hour limit". Programs that embed Claude Code can now mark a question as skipped, answered in chat or dismissed with the ask_user_question_unanswered_v1 capability. Remote control can now ask a session to start a shell command in the background, and the usual permission checks still apply.
Several features are in this build but are not switched on yet. Cloud sessions can enforce a policy on model and effort changes, but only when a worker policy is set to enforce. Auto mode gains a remote list that can turn off its extra safety checks. A tip about Claude Design shows only if a flag is switched on from Anthropic's servers. A note telling Claude that staged files are still being copied is also off by default.
Among the fixes, agent calls cut off by a container restart now resume, or Claude is told plainly why they cannot. Skills supplied by MCP servers can no longer be run through the Skill tool and now return an "Unknown skill" error. Plan mode is read-only again because its workshop and prototype offers are removed. Signed policy documents are no longer rejected for being older than one already accepted. Mantle is gone from the built-in list of model providers.
Written by our agent from the shipped bundle, not by Anthropic.
AskUserQuestion's instructions now say the user may see only the question dialog, and hosts can mark a question skipped, replied in chat or dismissed
ExtensionsWhen loading an MCP skill needs permission, Claude Code can now hold the request until a person answers it
Extensions
subA new oidc.user_id_claim setting picks which sign-in token field holds the user ID, defaulting to sub
/effort now reads 'default' and 'auto' from what you typed, its auto keyword comes from a helper, and sessions record the effort sent each turn
ElsewhereA queued message can now show a send-now hint, and in the fullscreen display you can click it to send the message straight away
Sessions & agentsWant the reasoning? Read walks the 24 entries that probably matter to you, each one opening to what changed and why.
Read this release → Every row →Anything you can use today, anything that visibly changes, and anything worth poking at. One line each, open for detail.
Sessions run by Claude in Slack or Teams now skip server-managed settings, marked by a new claude_tag reason; policy limits are decided separately
The privacy dialog and the consumer terms dialog can now lock the data-sharing (Grove) choice for Claude Science accounts, showing it as not available
Unclear It is not clear exactly which options the locked terms dialog still shows.
When loading an MCP skill needs permission, Claude Code can now hold the request until a person answers it
Unclear It is not clear whether the mcpSkillAsk setting is on by default or which kinds of session use this hold.
sub#A new oidc.user_id_claim setting picks which sign-in token field holds the user ID, defaulting to sub
Unclear Whether tokens must still include a sub claim when oidc.user_id_claim names a different one is not settled.
Cloud sessions gain handling for model and effort change requests that only takes effect when a worker policy is set to enforce
Unclear Where the policy comes from, and what a reader sees when it is enforced, is not stated.
disableAutoMode is now listed directly among the permissions settings#The permissions settings now list disableAutoMode directly, with the value "disable" and the description "Disable auto mode"
What would fix it?
Smaller changes and internals, grouped as the pipeline found them. Nothing is dropped, it is only further down.
5 more of these are in What probably matters to you, above.
One bundled model entry is now offered only on bedrock, not vertex, and mantle no longer appears among providers in the bundled lists
Unclear Which model is no longer listed for Vertex is not known.
A remote tool host can now be released after an idle time set remotely, and Claude Code reads status updates from it during a session
Unclear It is not clear what idle time is used when the server sends no value, or whether idle release happens at all in that case.
Claude Code now offers no fallback model after a refusal when one setting is off or a second, opposing setting is on
Unclear It is not clear how refusal_fallback and no_refusal_fallback are set for a given account, so who keeps the fallback is unknown.
Claude Code can now recognise permission rules ending in an @sha256 digest or ":*" and suggest one matching allow rule saved to your user settings
Unclear It is not clear where these suggestions are shown, or whether you will see them yet.
--permission-prompt-tool messages now take MCP skills into account#The message built for a --permission-prompt-tool now knows when the tool asking for permission is an MCP skill
Unclear How the message wording changes for MCP skills is not shown.
If your organization's managed settings were judged unavailable before your latest login, Claude Code now checks again once
Side requests Claude Code sends to the API now include a traceparent header when one is available
When organization-managed settings fail to load, the error no longer always says "Retrying" and instead reflects what Claude Code will do
Claude Code no longer rejects a signed settings or policy document for being older than one it has already accepted
Unclear It is not clear whether old signed documents are now rejected somewhere else or not at all.
Claude Code no longer lists a rollback or an unreadable floor as reasons to distrust configuration pinned by an organization
Unclear It is not clear whether those two situations are now accepted as trusted or are caught some other way.
Published verbatim by Anthropic for v2.1.312. Text is unmodified from the upstream changelog. Everything else on this page came out of the bundle instead, which is why the two lists don't match.
Of these 39 bullets, 5 name something an entry on this page also names, 8 name something no entry here does, and 26 name nothing specific enough to line up either way. The pairings are made on names both sides wrote down, a flag or a setting or a slash command, so read one as probably the same thing rather than as a fact, and read the middle number as candidates rather than as a miss count.
oidc.user_id_claim to the Claude apps gateway, to identify people by an id_token claim other than sub, such as Microsoft Entra ID's oid
Probably oidc-proxy-gains-oidcuser-id-claim paths: skills not being found after a Bash cd deeper into a git repository
Nothing to match on #105250[BUG] Skill paths: globs match against the Bash tool's current directory, so a persisted cd hides path-scoped skills (rules unaffected) Open
claude -p with no output
No entry names this effort values and transcripts naming a newly picked effort level during a task before the model applied it; they now show the level in force
Nothing to match on /model and /effort cache warning saying the re-read waits for your next message; a change made while Claude is working can trigger it sooner
Probably effort-usage-text-uses-a-function-provided-label-instead-of, effort-reset-message-names-the-effective-default-instead-of, effort-auto-keyword-now-produced-by-a-helper, effort-command-accepts-more-default-values, agent-view-model-matching-fix-scroll-speed-ui-rework ! input
Nothing to match on d, c and y with a gj or gk count larger than the lines left deleting or copying text; like Vim, they now only move the cursor
Nothing to match on /verify showing a long description meant for Claude in /help and the / command menu instead of a short one
No entry names this CLAUDE_CODE_SIMPLE_SYSTEM_PROMPT=0 to keep the full prompt
No entry names this CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK=1 to turn them off
No entry names this timeout under 1 second now counts as 1 second
Nothing to match on autoCompactWindow to lower the window set by CLAUDE_CODE_AUTO_COMPACT_WINDOW, where it had no effect before; it still never raises that window
Probably auto-compact-window-env-override-no-longer-bypasses-the-ceil mcp_server.name to report the real name of fixed-URL remote MCP servers declared by plugins from the official Anthropic marketplace, instead of custom
No entry names this claude_code.safety_event OpenTelemetry event
No entry names this A model matched these bullets to the GitHub issues they fix, so a link can be wrong.
1 of 30 tool descriptions changed.
Claude Code, interactive mode
One prompt change in this release could not be quoted from the build, so no entry on this page describes it.
473 documentation changes were recorded within 24 hours either side of this release, nearest first. The closest 12 are below. They're here because they happened near this release in time. That's not a claim that this release caused the edit, or that the page documents anything in it.
Every time above is when this site's poller recorded the change, which is up to half an hour after the edit on an ordinary read and up to a day after it on a full sweep. Upstream's own edit time is used instead wherever a capture carries one. None of these do.
The 25 literal strings found in the bundle, with the number of entries that name each one. Picking one searches for it. A name is here because this build's code mentions it, which is not the same as it working or being finished.
What's wrong with this entry?