Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All releases Home ←olderv2.1.39 v2.1.41newer→

Claude Code v2.1.40

23 entries read diff v2.1.39 → v2.1.40 Markdown

This release adds a new claude auth command group for managing authentication, introduces a snippet picker UI with Ctrl+Q for copying code snippets, and adds enterprise model restriction capabilities. The macOS sandbox gains support for TLS certificate verification in Go programs, and the /rename command can now auto-generate session names using LLM.

Find
Pick an entry · j / k steps through
14 entries

Changesopen

claude auth Command Group#

What

New CLI subcommands for managing authentication outside interactive mode.

Usage
claude auth login              # Sign in to your Anthropic account
claude auth login --email [email protected]  # Pre-populate email on login page
claude auth login --sso        # Force SSO login flow
claude auth status             # Show authentication status
claude auth status --text      # Human-readable output
claude auth logout             # Log out from your Anthropic account
Details
  • Replaces the need to use /login and /logout slash commands
  • --json flag outputs machine-readable status (default)
  • --text flag outputs human-readable status
Evidence

Auth command group (search for "Manage authentication", "Sign in to your Anthropic account")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Snippet Picker UI#

What

New interface for selecting and copying code snippets from Claude's responses.

Usage
  • Press Ctrl+Q to open the snippet picker
  • Select from multiple snippets when available
  • Status bar shows snippet count: "ctrl+q to copy · N snippets"
Details
  • Keybinding changed from Ctrl+Y (copy single) to Ctrl+Q (picker)
  • Works with SSH sessions
  • Displays "Select a snippet to copy:" when multiple snippets exist
Evidence

Snippet picker keybinding (search for "chat:snippetPicker", "ctrl+q to copy")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Enterprise Model Allowlist#

What

Administrators can restrict which models users can select.

Usage

Configure in managed settings:

{
  "availableModels": ["opus", "sonnet-4"]
}
Details
  • Accepts family aliases ("opus" allows any opus version)
  • Accepts version prefixes ("opus-4-5" allows only that version)
  • Accepts full model IDs
  • Empty array restricts to default model only
  • Clear error messages when restricted: "Model 'X' is not available. Your organization restricts model selection."
Evidence

Model allowlist setting (search for "Allowlist of models that users can select", "restricts model selection")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Nested Session Detection#

What

Prevents launching Claude Code inside another Claude Code session.

Details
  • Detects when running inside an existing Claude Code session
  • Displays clear error explaining the issue
  • Provides bypass instructions via CLAUDECODE environment variable
Evidence

Nested session check (search for "cannot be launched inside another Claude Code session")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

LLM-Generated Session Names#

What

/rename can now auto-generate kebab-case session names from conversation context.

Usage
/rename          # Auto-generates name from conversation
/rename my-name  # Still accepts manual names
Details
  • Generates 2-4 word kebab-case names (e.g., "fix-login-bug", "add-auth-feature")
  • Shows "Could not generate a name: no conversation context yet" if no messages exist
  • Falls back to manual name requirement if generation fails
Evidence

LLM name generation (search for "Generate a short kebab-case name", "no conversation context yet")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Streaming Idle Timeout#

What

Streams now abort automatically if no data is received for extended periods.

Details
  • Warning logged when stream is idle
  • Automatic abort after configurable timeout
  • Throws "Stream idle timeout - no chunks received" error
Evidence

Idle timeout handling (search for "Streaming idle timeout", "no chunks received")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

macOS Sandbox: TLS Certificate Verification#

What

New setting to allow Go programs to verify TLS certificates via trustd agent.

Usage

Configure in sandbox settings:

{
  "enableWeakerNetworkIsolation": true
}
Details
  • Required for Go programs (gh, gcloud, terraform, kubectl) using MITM proxies with custom CAs
  • Enables access to com.apple.trustd.agent mach service
  • Security trade-off: Opens potential data exfiltration vector through trustd
Evidence

Trustd agent setting (search for "Enable weaker network isolation", "com.apple.trustd.agent")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

Expanded Network Binding in Sandbox#

Network sandbox rules now allow binding to all interfaces (:) instead of just localhost.

Evidence

Network rules (search for '(allow network-bind (local ip ":"))')

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

Linux Sandbox Improvements#

  • Glob patterns are now expanded for deny paths on Linux
  • Better handling of symlink-based deny path attacks (mounts /dev/null)
  • Cleanup of bwrap mount points after sandbox teardown
  • More nuanced logging for skipped deny paths
Evidence

Linux sandbox improvements (search for "Cleaned up bwrap mount point", "Expanded glob pattern", "Mounted /dev/null")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Improved Model Error Messages#

Error messages now suggest alternative models when the selected model fails:

  • 429 errors suggest switching to a fallback model
  • 404 errors indicate model availability issues and suggest alternatives
Evidence

Model error handling (search for "to switch to", "to pick a different model")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Better File Type Detection for Read Tool#

The Read tool now properly rejects special files (devices, pipes, sockets) with clear error messages.

Evidence

File type check (search for "not a regular file (it may be a device, pipe, or socket)")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Team Plan Auto-Approval#

When running as a team member, pending plan approval requests from teammates can be auto-approved based on team context.

Evidence

Auto-approval logging (search for "Auto-approved plan from", "auto-approving")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

VS Code Connection Indicator#

New notification when only one Claude Code instance can connect to VS Code at a time.

Evidence

Connection note (search for "Only one Claude Code instance can be connected to VS Code")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

Bypass Permissions Migration#

Automatic migration from bypassPermissionsModeAccepted to skipDangerousModePermissionPrompt setting.

Evidence

Migration code (search for "tengu_migrate_bypass_permissions_accepted")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

1 entry

Bug Fixesopen

#

  • Fixed read tool to reject special file types (devices, pipes, sockets) instead of hanging (search for "not a regular file")
  • Improved memory learning prompt to be more specific about saving corrections and preferences (search for "consider saving that to memory")
1 entry

Internal Changes (Not User-Facing)open

#

The following changes are internal and do not affect user behavior:

  • Removed fine-grained-tool-streaming-2025-05-14 beta header
  • Removed cache marker fallback logging ("No stable tool found for cache marker")
  • Removed "IDE disconnected" status indicator
  • Removed proxy server reconnection logging
  • Removed "Team/Task files are allowed for writing" logging
  • Added maxVersion capping for auto-updater
  • Improved interrupt handling with stream mode logging
Verbatim
No official entry

Not individually listed upstream

v2.1.40 does not have its own entry in Anthropic’s official changelog, because prerelease builds are often folded into a neighbouring release. Browse the full changelog for the closest official notes. Everything else on this page came out of the bundle instead, which is why the two lists don't match.

Read it on GitHub →
System prompt

The system prompt was not captured for this release, so this page cannot say whether it moved.

Which releases were captured →