Claude Code v2.1.94

Terminal detection in tmux sessions now queries the actual terminal type via #{client_termtype} instead of relying solely on the TERM environment variable. This enables better color support and escape sequence handling when running inside tmux.

Escape sequences for the GNU Screen terminal multiplexer now correctly wrap content using DCS passthrough (\x1BP...\x1B\\) with proper double-escaping of embedded escape characters. Previously this wrapping could produce malformed sequences.

HTTP error codes are now mapped to user-friendly status messages in the retry UI:

• 429 → "Rate limited"
• 529 → "API overloaded" (new)
• 401/403 → "Authentication error"

The retry display shows the error reason, retry countdown timer, and attempt number in a structured warning frame.

The /feedback command now checks for valid Anthropic credentials before attempting to submit. If no OAuth token or API key is found, it returns: "/feedback requires Anthropic credentials (OAuth or API key)."

Team memory sync now explicitly detects HTTP 403 responses and returns "Forbidden by server policy" with skipRetry: true and errorType: "forbidden", preventing futile retry loops when server policy blocks access.

Feedback submissions now validate payload size before sending (8 MB limit). If the payload exceeds the limit or the server returns 413, the error is surfaced as payloadTooLarge rather than a generic failure.

WebSocket message handling now tracks cumulative decompressed size and enforces a maxDecompressedMessageSize limit (default 4 MB). Messages exceeding this limit are rejected with "Max decompressed message size exceeded".

The stream-json input mode now explicitly sets UTF-8 encoding on process.stdin, preventing encoding issues that could corrupt multi-byte characters.

Hyperlink support detection now uses the supports-hyperlinks library with FORCE_HYPERLINK environment variable support, replacing the previous raw stdout capability check.

Plugin bin directories are now validated against shell metacharacters before being added to PATH. Paths containing dangerous characters are dropped with a warning: "Dropping plugin bin path with shell metacharacters."

Memory files are now explicitly treated as immutable across the system. Edit and Write tools are blocked for memory paths with the message: "is not permitted — memories are immutable, so delete-and-recreate replaces in-place edits." In tiny memory mode, the restriction is phrased as: "is not permitted in tiny memory mode — memories are immutable, so delete via Bash rm and rewrite."

Memory save guidance has been significantly expanded with:

• Each memory file should contain one paragraph about a single fact
• Frontmatter format with type, scope, and created date
• Instructions to check for duplicates before writing
• Separate scope guidance for private vs team memories
• Delete-and-recreate workflow instead of in-place edits

When changing models, Claude Code now shows "Restarting Claude Code to apply the new model…" and automatically relaunches, rather than requiring a manual restart.

Hook commands now validate that environment variable references (${...}) match the correct variables available for that hook type. Invalid references produce warnings during validation.

Skill names from plugins are now sanitized by removing invalid characters and replacing them with hyphens ([^a-zA-Z0-9_-] → -), preventing registration failures from names with special characters.

The Task tool's system prompt has been condensed and reorganised. The "When NOT to use" section is now streamlined, examples are updated, and the isolation: "worktree" option and agent resumption via to field are better documented.

• Fixed UTF-8 encoding for stream-json input mode to prevent multi-byte character corruption (search for "stream-json" near "utf-8")
• Fixed escape sequence handling in GNU Screen (STY) terminal multiplexer — properly wraps DCS passthrough sequences with double-escaped embedded escapes (search for process.env.STY in tD function)
• Fixed PATH extraction on Windows to use shell-aware subprocess for correct environment resolution (search for h1Y)
• Added defensive guard in team memory watcher to check identifier existence before processing, preventing potential crashes (search for "team-memory-watcher: suppressing retry")
• Session title updates now emit events to keep the UI synchronized (search for "rA7.emit()")

Features with infrastructure added but not yet enabled. These are shipped "dark" and may become available in future versions.

The XML/DOM parsing library has been replaced. The previous xmldom-based parser (with error messages like "end tag name: X is not complete", "unclosed xml attribute", etc.) has been swapped for a new implementation with W3C-compliant DOM exceptions (DOMException types like HierarchyRequestError, InvalidCharacterError, NamespaceError, etc.) and stricter validation. This is an internal change but may surface different error messages if XML parsing is used by MCP servers or plugins.

Several Smithy/AWS SDK utility modules (FetchHttpHandler, buildQueryString, escapeUri, fromBase64, toBase64, etc.) have been removed as standalone CommonJS modules and replaced by native implementations, reducing bundle size.