Claude Code — The Cyber Toolchain

Claude Code v2.1.234

Mon, 17 Aug 2026 20:20:58 GMT

Claude Code v2.1.234 adds `CLAUDE_CODE_PROJECT_DIR_NAME`, `selection:clear` keybinding, GitLab MR badges, auto-resume at usage limits, and mid-turn `/permissions` edits. • Adds optional `CLAUDE_CODE_PROJECT_DIR_NAME` environment variable so hosts that give each session its own config directory can choose a short name for the per-project transcript directory. • Adds `CLAUDE_CODE_GOAL_CHECKIN_MINUTES` environment variable (set to `0` to opt out) to control how long `/goal` waits before checking in on background tasks that have been running 30+ minutes. • Adds `selection:clear` keybinding action, bindable to any key, that clears an in-app text selection in both the main view and the agents view. • Adds a GitLab merge request badge to the footer and statusline: repos with a GitLab remote and an authenticated `glab` CLI show `MR !N` with draft/pending/green states. • Adds automatic session continuation when a claude.ai usage limit resets; toggle off via `/config` ('Continue automatically at usage limit'). • `/permissions` can now be opened while Claude is actively working, and rule changes apply immediately to the rest of the current turn. • `/add-dir ` can now be invoked while Claude is working; `/add-dir`, `/autocompact`, `/theme`, `/help`, `/config`, and `/advisor` dialogs all open mid-turn in the fullscreen TUI. • `/goal` now clears itself with a notice when a turn ends on an unrecoverable error (revoked auth, exhausted credit balance, or context overflow) instead of staying armed. • `claude setup-token` now rejects unexpected extra arguments instead of silently ignoring them. • Reduces context cost of loading the built-in `claude-api` skill from ~200k+ tokens to ~25k by loading reference docs on demand. • Remote Control: effort picks made on a phone or on claude.ai/code now apply to terminal- and Desktop/VS Code-hosted sessions, and the session publishes its effort level to connected clients. • Remote Control sessions from Claude Code Desktop or VS Code now keep phones and claude.ai/code updated on the session's permission mode and model as they change. • `SendMessage` and `ListAgents` now report when your account's session list was too long to check completely, instead of treating unseen sessions as absent. • Improves auto-generated session titles to read as short, specific names (e.g. 'Login button bug') rather than sentences restating the request. • Removes the 'Default teammate model' setting from `/config`; agent-team teammates now use the leader's model unless the spawn command names one. Breaking changes: • The 'Default teammate model' setting is removed from `/config`; agent-team teammates now inherit the leader's model unless the spawn command explicitly names one. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.233

Fri, 14 Aug 2026 22:20:57 GMT

Claude Code v2.1.233 adds GitLab MR support, per-user identity forwarding, Linux memory limits for Bash tools, and a WebFetch cache TTL knob. • Adds `CLAUDE_CODE_TOOL_MEMORY_LIMIT` environment variable (Linux) to cap memory for Bash tool commands via cgroup support, preventing runaway builds from stalling a session. • Adds `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable to control the WebFetch session URL cache TTL (default: 15 minutes). • Adds opt-in `forward_user_identity` apps gateway setting on Anthropic upstreams, forwarding the signed-in user's identity as headers so a proxy can attribute spend per user. • Extends the `--worktree` flag and the `claude agents` view to accept GitLab merge request URLs, displaying MRs as `!N`. • Improves `claude plugin validate` to inspect a bare `.claude/skills` directory and report SKILL.md files with unparseable frontmatter. • Adds `[claude-code:unrecognized_model]` diagnostic line to stderr in print mode when a request is sent for an unrecognized model ID; suppress with `modelOverrides`. • Improves `claude self-hosted-runner` session start time by creating the session branch without rewriting the working tree and eliminating two blocking server round trips. • Improves apps gateway error forwarding: 400/413 responses from Vertex, Foundry, and Claude Platform on AWS upstreams now surface the upstream's own error message. • Improves screen reader mode: the `/effort` selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped. • Suppresses the GitHub app setup tip in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hosts. Breaking changes: • Todo/task-tracking tools (`TaskCreate`, `TaskGet`, `TaskUpdate`, `TaskList`, `TodoWrite`) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` to restore them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.232

Thu, 13 Aug 2026 23:29:59 GMT

Claude Code v2.1.232 adds cross-session @-mentions, subagent forking by default, GitLab secret redaction, and GitLab plugin marketplace support. • Subagent forking is now on by default: a `subagent_type: "fork"` subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default. • Type `@` in the prompt to mention another Claude session by name; Claude uses `SendMessage` to reach that session directly — and `SendMessage` now delivers to a bare name that exactly matches one live session without a confirmation step. • Adds `/config` rows for 'Dialog expiry' and 'Messages from your other sessions', enabling per-session control over cross-session inbound messaging (accept/hold/refuse). • Adds secret redaction for GitLab token families `glrt-`, `gloas-`, `glptt-`, `glagent-`, `glimt-`, `glsoat-`, `glcbt-`, `glft-`, and `glffct-`; fully redacts routable `glpat-` and `gldt-` tokens; extends the same sandbox and credential-path protection to the `glab` CLI config store. • Adds GitLab support to plugin marketplaces: bare `gitlab.com` repo URLs (including nested subgroups) now clone like `github.com` URLs. • Settings now accept `additionalMarketplaces` and `allowedMarketplaces` as friendlier aliases for `extraKnownMarketplaces` and `strictKnownMarketplaces`. • Enterprise policy: a url-typed `blockedMarketplaces` entry for a bare repo URL continues blocking that URL even when the CLI classifies it as a git clone. • Gateway: the `desktop:` overlay now accepts every released Desktop setting (previously limited to 11 hand-listed keys), validated at boot against Desktop's own schema; unknown or invalid keys now fail boot. • Gateway: empty `managed.policies[].match.groups` / `admin.admin_groups` entries and malformed `email_domain` values (empty, or containing `@`, whitespace, or commas) now fail at boot instead of silently matching no one or granting admin access. • Fable 5 is offered as an advisor in `/advisor` again for organizations with Fable access, with usage-credits consent set up through `/model fable`. • Interactive sessions on one machine now keep unique names: renaming a session to a name already in use generates a `name-word-word` variant and notifies the user. • Bash input redirections (`< file`) are now permission-checked like their argument spellings on all platforms. • Sandbox: `sandbox.ripgrep` is now honored only from user, managed, and `--settings` settings; project settings can no longer override the sandbox's ripgrep binary. • `/feedback` and `/bug` now open immediately when invoked while Claude is responding, instead of waiting for the turn to finish. • `/plugin install plugin@marketplace` now refreshes the marketplace first, so newly published plugins install without a manual marketplace update. • `/code-review` at high, xhigh, and max effort now runs in a background agent, consistent with other effort levels. • Remote Control now reconnects for approximately 30 minutes after a network blip and no longer drops after a few blips spread across an hour. • Managed settings approval dialog now shows endpoint URLs, uses clearer wording for telemetry-only changes, skips routine OpenTelemetry options, and requires explicit approval for server-managed sandbox binary overrides (`sandbox.bwrapPath`, `sandbox.socatPath`, `sandbox.ripgrep`). Breaking changes: • `sandbox.ripgrep` set in project settings is no longer honored; it must now be placed in user, managed, or `--settings` settings. • Gateway: unknown or invalid keys under the `desktop:` overlay now fail boot (previously accepted silently). • Gateway: empty `managed.policies[].match.groups` / `admin.admin_groups` entries and malformed `email_domain` values now fail at boot instead of silently matching no one or granting admin access. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.229

Wed, 12 Aug 2026 20:56:22 GMT

Claude Code v2.1.229 adds plugin `command` sources, Remote Control session status, SSE keepalives, and VSCode session groups. • Documents `claude remote-control --continue` to resume the most recent Remote Control session without specifying a session ID. • Adds plugin marketplace `command` sources: a local command (e.g. an IDE) prints the plugin directory, re-resolved each session without a restart; `mode: "link"` uses it in place. • Sets `CLAUDE_CODE_WORKFLOW_PREFIX_STAGGER_MS=0` to disable the new workflow fan-out staggering that lets same-prefix sibling agents share a cached prompt prefix. • `ListAgents` now marks disconnected Remote Control sessions as `offline` and labels cloud sessions as `cloud`, giving clearer session inventory. • Adds SSE keepalive pings to gateway streaming responses during long thinking pauses, preventing idle-timeout disconnects on Vertex and Bedrock upstreams. • Adds server-supplied Claude Code hook support for self-hosted runner sessions, matching managed-environment behavior. • Self-hosted runner Windows startup now requires an explicit `--base-dir`; there is no default checkout directory on Windows. • Removes auto-approval of git/gh commands with dangerous flags (`--force`, `--amend`, `--no-verify`, etc.) in `/commit-push-pr`. • [VSCode] Adds session groups in the sidebar — right-click to create, rename, or delete; Cmd/Ctrl- or Shift-click to move multiple sessions at once. • [VSCode] Makes the `/btw` side-question panel resizable by dragging its boundary, in both side-docked and stacked layouts. Breaking changes: • Self-hosted runner Windows startup now requires an explicit `--base-dir`; launches that previously relied on a default checkout directory will fail without it. • `/commit-push-pr` no longer auto-approves git/gh commands that include dangerous flags (`--force`, `--amend`, `--no-verify`, etc.); workflows depending on silent approval of these flags will now prompt for confirmation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.228

Tue, 11 Aug 2026 19:50:59 GMT

Claude Code v2.1.228 hardens synced skills, improves cross-session messaging display, and lets newer models overwrite unread files. • Hardens skills synced from claude.ai: they no longer shadow local commands or MCP prompts, descriptions are sanitized and labeled, and skill bodies cannot run `!` commands or expand `@` files on your machine. • Changes the Write tool so newer models can overwrite an existing file they have not read in the current session, matching the Edit tool's rules; older models still require a prior read. • Improves cross-session messages: sender and body now display inline instead of as a collapsed line, and messages to Remote Control sessions on other machines show your Remote Control session name as the sender. • Improves Vertex AI credential handling: expired or missing Google Cloud credentials now fail within seconds instead of retrying for minutes. • Improves compaction progress: the retry countdown and stall hint now appear during compaction alongside the progress bar. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.225

Sat, 08 Aug 2026 01:09:26 GMT

v2.1.225 adds gateway spend-limit warnings, workspace trust in `claude agents`, and `SendMessage` can now initiate Remote Control sessions by name. • Adds gateway spend-limit support to Claude Code's usage warning — the limit-reached message now names the cap, its reset time, and the operator's message (requires gateway on 2.1.225). • Adds a workspace trust prompt to `claude agents` for untrusted directories, matching the existing behavior of `claude`. • `SendMessage` can now initiate a conversation with Remote Control sessions on other machines by name — `ListAgents` surfaces them as `name [ref]` — instead of only being able to reply after they message you first. • `SendMessage` now locks in a Remote Control recipient you have already confirmed, preventing it from being silently swapped for a same-named session on the local machine when the remote list could not be checked. • Remote Control: photos attached from the Claude app are now passed directly to Claude rather than being read from disk via a separate tool call. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.224

Fri, 07 Aug 2026 04:00:59 GMT

Claude Code v2.1.224 adds self-hosted runners, cross-session messaging, archive plugin sources, and new sandbox credential-masking options. • New `claude self-hosted-runner` subcommand turns your own machines or containers into execution environments for Claude Code web, mobile, and desktop sessions (Team and Enterprise plans). • New `ANTHROPIC_BEDROCK_REGION_PREFIX` environment variable lets Bedrock users prefer a specific cross-region inference profile over the `AWS_REGION`-derived default. • New `crossSessionInbound` and `dialogExpiry` settings: cross-session messages sent to a bypassed-permission session are held for approval; messages to other sessions auto-deliver. • New sandbox credential-masking options — `extract` and `onExtractNoMatch` for structured env values, `decode: "jwt"` with `maskClaims` for JWT-aware masking, and `awsPairs`/`sigv4` for AWS SigV4 re-signing — honored only from user, managed, or `--settings` settings and require `network.tlsTerminate`. • New `archive` plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning. • New cross-session `SendMessage` API lets Claude Code sessions message each other across any of your machines; `ListAgents` discovers available sessions (macOS and Linux). • Removes the 200-subagent-per-session spawn cap, allowing long-running sessions to continue spawning agents without hitting a hard limit (concurrency and depth limits still apply). • Remote Control now shows a persistent failure indicator with details and a reconnect shortcut on connection failure, instead of only an 8-second toast. • Remote Control improvements: attached web and mobile clients now see compaction progress and the post-compaction boundary; `/clear` resets propagate to attached clients. • Fullscreen mode now keeps the full pre-compaction history in scrollback across repeated compactions instead of only the most recent interval. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.223

Thu, 06 Aug 2026 00:52:37 GMT

Claude Code v2.1.223 adds owner wildcard marketplace controls, `/teleport` for cloud-to-local handoff, and upgraded `/code-review` with effort levels. • Adds `"owner/*"` wildcard entries to `strictKnownMarketplaces` and `blockedMarketplaces` managed settings to allow or block all marketplace repos under a GitHub org in one entry. • Adds `claude --teleport ` flag and a `/teleport` hint in cloud sessions to continue a cloud session locally. • Adds `CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT=1` env var to opt out of the new behavior that keeps sessions on unrecognized model IDs within the assumed context window. • Expands `CLAUDE_CODE_DISABLE_1M_CONTEXT` to cap every Claude model with a native 1M context window to 200K via auto-compaction (not just a fixed model list); adds a startup warning when auto-compaction isn't holding the session to 200K. • Makes `/review` an alias of `/code-review`; `/code-review` now accepts an effort level and PR number (`/code-review `), with `/code-review ultra` triggering a deep cloud review. • Makes `/code-review` remember the last effort level used when invoked without one, so repeat reviews don't require retyping the level. • Adds a warning when a workflow agent, forked skill, slash command, or resumed background agent's requested subagent model is restricted and the parent model runs instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.222

Tue, 04 Aug 2026 22:39:55 GMT

Claude Code v2.1.222 tightens multi-agent permission enforcement and improves Remote Control scoping • Remote Control auto-start can no longer be enabled via repo-local `.claude/settings.json` or `.claude/settings.local.json`; enable it at user scope via `/config` instead (repo-local settings can still turn it off) • Improves auto mode safety: messages dispatched to other agent sessions via `SendMessage` are now evaluated by the permission classifier before delivery • Improves `disable-model-invocation` refusal behavior: Claude now prompts the user to run the skill directly rather than attempting to replicate its workflow • The `/diff` view, Remote Control workspace diff, and file-edit diffs in web sessions now use raw git blob content, ignoring workspace-configured diff drivers and `textconv` • Removes the `ultraplan` feature Breaking changes: • Remote Control auto-start can no longer be enabled from `.claude/settings.json` or `.claude/settings.local.json`; configurations relying on repo-local settings to turn it on will stop working — use `/config` at user scope instead. • The `ultraplan` feature has been removed; any configuration or workflows depending on it will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.221

Tue, 04 Aug 2026 00:14:23 GMT

Claude Code v2.1.221 adds Focus view, sandbox credential masking, prompt-audit subcommand, and smarter plugin/session management. • Adds `mode: "mask"` for sandbox credential files on Linux and WSL — sandboxed commands read a sentinel copy (whole file or spans captured by an `extract` regex) while the sandbox proxy substitutes the real value on egress; on macOS falls back to `deny`. • Adds `prompt-audit` subcommand to the `claude-api` skill for auditing prompts and tool descriptions for patterns written for older models. • Adds warnings to `claude plugin validate` when a marketplace or plugin name would be rejected by Claude Desktop's managed marketplace sync. • [VSCode] Adds Focus view: a chat-menu toggle that hides tool activity behind an expandable per-turn summary with a live running-tool indicator, toggled with `Ctrl+Alt+F` or the "Claude Code: Toggle Focus view" command. • Changes `/status` to show the session kind: `interactive`, or a background job that is `attached` or `unattended`. • Changes sessions forked with `/fork` to create a new worktree of their own instead of working in the original session's checkout. • Changes plugins to accept `"."` as a `skills` path, with the root-level `SKILL.md` validation error now suggesting using the plugin root. • Changes `/plugin install` to refresh a stale marketplace catalog and retry before reporting a plugin not found. • Changes plugins installed from `/plugin` to activate immediately when safe, instead of always requiring `/reload-plugins`. • Changes background sessions to commit and push to preserve work, open a draft PR only when the task calls for one, follow `CLAUDE.md` git instructions, and always report where the work lives. • Improves Stats panel to count cache tokens in its token totals, with a breakdown by input, output, cache read, and cache write. • Re-enables tool search on Google Vertex AI for Claude 4.5-generation and newer models. • Improves Windows startup by reading process creation times via a native `kernel32` call instead of spawning PowerShell, so endpoint security tools that gate `powershell.exe` no longer prompt. • Changes emoji autocomplete to accept common alternate shortcodes like `:thumbsup:`, `:thumbsdown:`, and `:love:`. • Changes fast mode to report on the stream when usage credits run out mid-session, instead of failing silently. • Changes Monitor: a watch that exits without producing any output now says so instead of reporting "stream ended". • Changes Gateway `model` field validation to reject non-string values with a 400 instead of forwarding them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.219

Fri, 24 Jul 2026 17:14:23 GMT

Claude Opus 5 lands as the new default Opus model, with 1M context, strict sandbox networking, and depth-3 nested subagents. • Adds Claude Opus 5 (`claude-opus-5`) as the default Opus model — 1M context window, fast mode at $10/$50 per Mtok. • Adds `sandbox.network.strictAllowlist` setting to silently deny any sandboxed-command network request to a non-allowlisted host (no prompt). • Adds `DirectoryAdded` hook that fires whenever `/add-dir` or the SDK `register_repo_root` control request registers a new working directory mid-session. • Adds `mcp_server_errors` field to the headless stream-json init event, listing `--mcp-config` entries skipped by config validation; terminal runs surface a startup warning. • Adds `workflowSizeGuideline` settings key so the Dynamic workflow size advisory can be set from any settings file (hides the `/config` row while active). • Adds nested subagent forwarding in stream-json: depth-2+ subagents now appear in the stream when `--forward-subagent-text` is set, keyed by their spawning Agent `tool_use` id. • Subagents can now spawn nested subagents up to depth 3 (was 1); set `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH=1` to revert to flat spawning. • Adds current default workflow size to the running-workflow status line with a pointer to `/config` for changes. • Removes Opus 4.7 from fast mode; `/fast` now applies to Opus 5 and Opus 4.8 only. Breaking changes: • Opus 4.7 is removed from fast mode; `/fast` now applies only to Opus 5 and Opus 4.8. • Dynamic workflows now default to a medium size guideline (fewer than 15 agents); workflows relying on the previous unrestricted default will be subject to this new cap unless overridden in `/config`. • Managed MCP allowlist/denylist `${VAR}` entries now resolve from the startup environment and managed-settings env instead of the settings-file env, which may change which values are substituted. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.218

Wed, 22 Jul 2026 21:24:56 GMT

Claude Code v2.1.218 runs /code-review as a background subagent, adds MCP error details, and expands auto-mode intelligence. • Runs `/code-review` as a background subagent so review output no longer floods the conversation and stacked slash commands stay on target. • Adds HTTP status codes and error text to `claude mcp list` and `/mcp` when a server fails to connect, plus a warning for MCP config values with hidden leading or trailing whitespace. • Adds screen-reader announcements of deleted text for word and line deletions (`Option+Delete`, `Ctrl+W`, `Cmd+Backspace`, `Ctrl+U`, `Ctrl+K`) in `--ax-screen-reader` mode. • Announces fast-mode changes when switching models via `/config model=` or Remote Control. • Changes `/deep-research` to start only on explicit invocation — Claude no longer launches it autonomously. • Auto mode now routes dangerous-rm, background-`&`, and suspicious-Windows-path checks through the auto-mode classifier instead of opening permission dialogs. • Plan mode with auto no longer prompts for Bash commands the static analyzer can't prove read-only; the auto-mode classifier judges them instead. • Skills with `context: fork` now run in the background by default; individual skills can opt out with `background: false` in frontmatter. • Expands accepted frontmatter boolean values for skills and plugins to include `yes`/`no`/`on`/`off`/`1`/`0` (case-insensitive) alongside `true`/`false`. • Agent markdown files now reject agent names containing `:`, reserving that character for plugin namespacing. • Server-managed settings changes for benign feature and cost toggles no longer trigger the settings-approval prompt. Breaking changes: • Agent markdown files with names containing `:` are now rejected; any agent whose name includes `:` must be renamed before it will load. • Skills with `context: fork` now run in the background by default; skills that must run in the foreground need `background: false` added to their frontmatter. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.217

Tue, 21 Jul 2026 21:35:10 GMT

Claude Code v2.1.217 adds emoji autocomplete, subagent concurrency controls, and AWS gateway deployment assets. • Adds emoji shortcode autocomplete in the prompt input (type `:heart:` to insert or `:hea` for suggestions); disable with the `emojiCompletionEnabled` setting. • Adds visible warnings when transcript writes are failing (e.g. disk full) or when session saving is disabled via an inherited environment variable, preventing silent transcript loss. • Adds a cap on concurrently-running subagents (default 20), overridable with `CLAUDE_CODE_MAX_CONCURRENT_SUBAGENTS`, preventing unbounded agent fan-out from a single message. • Adds `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH` to control nested subagent depth; nested spawning is now disabled by default. • Makes footer PR badge links clickable hyperlinks in environments where terminal support can't be detected (e.g. over SSH/tmux); opt out with `FORCE_HYPERLINK=0`. • Adds AWS reference deployment assets for Claude apps gateway on Bedrock under `examples/gateway/aws/`, including `setup.sh`, a distroless `Dockerfile`, `gateway.yaml.example` (Bedrock/Okta template), and a Terraform module. Breaking changes: • Subagents no longer spawn nested subagents by default; existing workflows that relied on nested subagent spawning will stop working unless `CLAUDE_CODE_MAX_SUBAGENT_SPAWN_DEPTH` is set to permit deeper nesting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.216

Mon, 20 Jul 2026 22:14:00 GMT

Claude Code v2.1.216 adds sandbox filesystem-isolation bypass, smarter /context warnings, and improved /fork, /ultrareview, and /code-review ultra feedback. • Adds `sandbox.filesystem.disabled` setting to skip filesystem isolation while keeping network egress control active. • Adds explicit context-window overflow warning to `/context` and surfaces failed `/compact` as a visible error. • Improves `/fork` confirmation to include the new session name, `claude attach` id, and whether the copy shares the checkout. • Improves `/ultrareview` diff-too-large error to display configured limits, measured diff size, and the largest contributing files. • Improves `/code-review ultra` empty-diff message to name the exact base ref and suggest passing an explicit base. • Improves spend-limit rejection prompt to show the server's stated reason. • Background sessions: `/mcp` and `/install-github-app` now park a 'needs input' request in the agent view when no client is attached. • Adds safety guardrail to `/rewind`: skips files reachable via symlinks or hard links and reports how many paths were skipped. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.215

Sun, 19 Jul 2026 02:56:01 GMT

Claude Code v2.1.215 makes /verify and /code-review user-invoked only — no more automatic runs. • The `/verify` and `/code-review` slash commands now run only on explicit user invocation, giving practitioners full control over when those checks execute. Breaking changes: • Claude no longer automatically runs the `/verify` and `/code-review` skills; any workflow that relied on Claude triggering these autonomously must now invoke `/verify` or `/code-review` explicitly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.214

Sat, 18 Jul 2026 01:20:30 GMT

Claude Code v2.1.214 adds EndConversation tool, OTel message correlation attributes, docker daemon-redirect permission prompts, and more. • Adds the EndConversation tool so Claude can autonomously terminate sessions involving highly abusive users or jailbreak attempts. • Adds a periodic progress heartbeat for long-running tool calls that previously went silent. • Adds an ISO `modified` timestamp to memory file frontmatter. • Adds `message.uuid`, `client_request_id`, and `tool_source` attributes to OpenTelemetry log events for message-level correlation and tool provenance. • Adds `CLAUDE_CODE_OTEL_CONTENT_MAX_LENGTH` environment variable to configure the 60 KB truncation limit on OpenTelemetry content attributes. • Adds reasoning effort to the `subagentStatusLine` payload so custom agent rows can render model and effort. • Adds permission prompts for `docker` commands (including the Podman `docker` shim) carrying daemon-redirect flags (`--url`, `--connection`, `--identity`, and Podman's remote mode). Breaking changes: • Single-segment `dir/**` hook `if:` conditions now match only `/dir`; write `**/dir/**` to match at any depth. • `file` commands using `-m`/`--magic-file` or `-f`/`--files-from` now require permission instead of being auto-allowed as read-only. • SessionStart hooks now report source `"fork"` when a session begins as a fork instead of `"resume"`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.212

Fri, 17 Jul 2026 00:26:27 GMT

Claude Code v2.1.212 adds background /fork, auto-mode reset, per-session WebSearch/subagent caps, and auto-backgrounding slow MCP calls. • Redesigns `/fork` to copy the current conversation into a new background session (visible in `claude agents`) rather than an in-session subagent; the old in-session subagent behavior is now `/subtask`. • Adds `claude auto-mode reset` command to restore default auto-mode configuration, with an optional `--yes` flag to skip the confirmation prompt. • Adds a per-session WebSearch call cap (default 200, tunable via `CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION`) to prevent runaway search loops. • Adds a per-session subagent spawn cap (default 200, override via `CLAUDE_CODE_MAX_SUBAGENTS_PER_SESSION`); `/clear` resets the budget. • MCP tool calls exceeding 2 minutes automatically move to the background to keep the session responsive; threshold is configurable or disableable via `CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS`. • Typing `/resume` in the agent view now opens a session picker — including previously deleted sessions — and resumes the chosen session as a background session. • Improves prompt caching: mid-conversation system block now works behind LLM gateways and custom base URLs (Bedrock, Vertex, 1P). • Reduces token usage in inter-agent messaging by no longer duplicating `SendMessage` bodies into replayed history and tool results. • Extends Enterprise `forceLoginMethod` enforcement to VS Code extension, SDK, `setup-token`, and `install-github-app` logins. • Headless/SDK sessions now apply a `set_model` control request mid-turn so the next LLM round-trip uses the new model immediately. • Agent view and `claude agents --json` now show sessions waiting on a sandbox, MCP-input, or managed-settings prompt as "Needs input" instead of "Working". • Session transcripts now record the reasoning effort level on each assistant message. • Background agent cold-attach now instantly renders the formatted transcript while the session boots, eliminating the blank-wait screen. Breaking changes: • The Task tool's `mode` parameter is now ignored; subagents inherit the parent session's permission mode by default. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.211

Wed, 15 Jul 2026 23:02:35 GMT

Claude Code v2.1.211 adds subagent stream visibility, cross-worktree permission persistence, and scientific-notation env vars. • Adds `--forward-subagent-text` flag and `CLAUDE_CODE_FORWARD_SUBAGENT_TEXT` env var to surface subagent text and thinking inside `--output-format stream-json` output. • Changes 'always allow' permission rules to save at the repository root, so approvals granted in one git worktree persist across all worktrees and sessions. • Accepts scientific notation and digit-separator spellings (e.g. `1e6`, `64_000`) for integer environment variables such as timeouts, token budgets, and retry counts. • Enables `save_to_disk` on Claude-in-Chrome screenshot actions to actually write the image to disk and return its path. • Improves background agent result reporting so Claude waits for real completion and reports still-running agents instead of fabricating results. • Adds Vim NORMAL-mode support for `s` (substitute char) and `S` (substitute line) in the editor input. • Improves the memory index over-limit warning to measure only loaded content, excluding frontmatter and HTML comments. • Changes `/usage-credits` to require confirmation before sending a request to organization admins. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.210

Tue, 14 Jul 2026 23:45:25 GMT

Claude Code v2.1.210 adds a live tool timer, memory overflow errors, screen-reader mode announcements, and agent input-waiting counts. • Adds a live elapsed-time counter to the collapsed tool summary line so long-running tool calls visibly tick instead of appearing frozen. • Adds a startup warning when permission rules use Write(path), NotebookEdit(path), or Glob(path) — directing users to Edit(path) or Read(path) instead. • Memory writes that would push a MEMORY.md index over its read limit now surface an explicit error instead of silently truncating content. • Screen reader mode now announces permission mode changes aloud when cycling through modes with Shift+Tab. • The agents footer hint now displays how many background agents are waiting on user input, with brief color emphasis when the count changes. • Hardens the Agent tool against indirect prompt injection via content read by a subagent. • Improves auto mode: the permission classifier now defaults to Sonnet 5 for external sessions, validated on the first request and pinned for the session. • Improves Bash/PowerShell timeout messaging so the model can distinguish a hung command from an intentional background request. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.208

Tue, 14 Jul 2026 01:10:42 GMT

Claude Code v2.1.208 adds screen reader mode, vim insert remaps, corporate process wrapper, and fullscreen mouse support. • Adds `--ax-screen-reader` flag (also `CLAUDE_AX_SCREEN_READER=1` env var or `"axScreenReader": true` in settings) for opt-in plain-text rendering compatible with screen readers. • Adds `vimInsertModeRemaps` setting to map two-key vim insert-mode sequences (e.g. `jj` → Escape) without leaving the editor. • Adds `CLAUDE_CODE_PROCESS_WRAPPER` env var so every Claude Code self-spawn routes through a corporate launcher executable, enabling enterprise wrapper enforcement. • Adds mouse-click support for multi-select menus and "Other" input rows in fullscreen mode. • Up to 7x faster tool rounds in print/SDK sessions with many MCP tools via cached tool-pool assembly. • Completed background agents now remain listed in `/tasks` until cleanup instead of disappearing immediately upon finishing. • Catastrophic removals (e.g. `rm -rf ~`) inside command substitutions ($(…), backticks, <(…)) now prompt for confirmation in `--dangerously-skip-permissions` and auto mode. • `/usage` now displays last-known usage bars with an "as of" timestamp when the usage endpoint is rate-limited, instead of an error screen. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.207

Sat, 11 Jul 2026 00:52:10 GMT

Auto mode goes GA on Bedrock/Vertex/Foundry, Opus 4.8 becomes the default, and plugin config scoping tightens. • Auto mode is now generally available on Bedrock, Vertex AI, and Foundry without the `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in flag; disable it via `disableAutoMode` in settings. • Bedrock, Vertex, and Claude Platform on AWS now default to Claude Opus 4.8. • Auto mode config is now read exclusively from `~/.claude/settings.json`; the repo-resident `.claude/settings.local.json` `autoMode` key is no longer honored (breaking change for teams using per-repo overrides). • Plugin option values (`pluginConfigs`) are no longer read from project-level `.claude/settings.json`; only user-level, `--settings`, and managed settings are honored (breaking change for project-scoped plugin configs). • Plugin hooks/monitors/MCP headersHelper: `${user_config.*}` interpolation in shell-form commands is now rejected; hooks must use exec form (`args` array) or `$CLAUDE_PLUGIN_OPTION_` env vars instead (breaking change). • `/doctor` now reports when the launcher at `~/.local/bin/claude` is externally managed (e.g. a custom script or symlink). • Amounts over $1,000 in `/usage-credits` now require a typed confirmation, and malformed inputs are rejected with an error rather than silently stripped. Breaking changes: • Auto mode no longer reads `autoMode` from `.claude/settings.local.json` (repo-resident); use `~/.claude/settings.json` instead • `${user_config.*}` in shell-form commands for plugin hooks/monitors/MCP headersHelper is now rejected; hooks must use exec form (`args` array) or `$CLAUDE_PLUGIN_OPTION_`; monitors and headersHelper must read the value inside the script • Plugin option values (`pluginConfigs`) are no longer read from project-level `.claude/settings.json`; only user, `--settings`, and managed settings are honored Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.206

Fri, 10 Jul 2026 01:45:26 GMT

Claude Code v2.1.206 adds smarter /cd suggestions, /doctor CLAUDE.md trimming, broader push-remote support, and faster background agent upgrades. • Adds directory path tab-completion to `/cd`, matching the existing `/add-dir` behavior. • New `/doctor` check analyzes checked-in `CLAUDE.md` files and proposes trimming content Claude can already derive from the codebase. • Extends `/commit-push-pr` to auto-allow `git push` to the repo's configured `remote.pushDefault` (or the sole remote when only one exists), not just `origin`. • Enables `/login` to authenticate against Anthropic-operated public gateway endpoints. • `EnterWorktree` now prompts for confirmation before entering a git worktree that lives outside the project's `.claude/worktrees/` directory. • Background agents now upgrade to the latest Claude Code version immediately after an update, eliminating slow upgrade delays when you attach to a stale session. • Agents view status column now uses the full terminal width instead of truncating at 64 characters. • Adds `Ctrl+X` in the agents view to permanently remove a completed session; deleted background jobs now stay deleted across renders. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.205

Wed, 08 Jul 2026 21:22:06 GMT

Claude Code v2.1.205 upgrades /doctor into a full setup checkup, hardens auto mode safety rules, and improves the agents view. • Adds auto mode rule that blocks tampering with session transcript files. • Improves auto mode to prompt for confirmation before running `rm -rf` on an unresolvable variable, reducing accidental data loss. • Upgrades `/doctor` into a full setup checkup that can both diagnose and fix issues; adds `/checkup` as an alias. • Enhances `claude agents` view: PR-linked sessions (edit, merge, comment, push) now surface the PR link directly in the list. • Enhances `claude agents` view: rows show a colored state word and classifier-written headline instead of raw tool call text; peek view shows full status and the exact ask for blocked sessions. • Background task notifications now explicitly state no human input has occurred, preventing fabricated in-transcript approvals from being acted on. • Streams auto-update binary downloads to disk instead of buffering in memory, cutting peak updater memory usage by ~400 MB. • Reserves the 'Claude Browser' MCP server name (alongside 'Claude Preview'); user-configured MCP servers can no longer register under either name. Breaking changes: • User-configured MCP servers can no longer register under the names "Claude Browser" or "Claude Preview" Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.203

Tue, 07 Jul 2026 21:06:12 GMT

Claude Code v2.1.203 adds login-expiry warnings, manual-mode visibility, MCP roots updates, and a VSCode remote-control toggle. • Adds a pre-expiry warning when your login session is about to expire, letting you re-authenticate before background sessions are interrupted. • Adds a grey ⏸ badge in the footer when manual permission mode is active, so the current permission mode is always visible. • Exposes the session's additional working directories in MCP `roots/list`, and sends `notifications/roots/list_changed` whenever that set changes — enabling MCP servers to stay in sync with multi-root workspaces. • Changes the Escape key (instead of left arrow) to close background tasks, diff, and workflow detail views — practitioners must update muscle memory. • Changes the empty `claude agents` view to always display organized sections (Needs Input / Working / Completed) with descriptions, even when no agents are running. • Moves startup 'claude command missing or broken' warnings out of the startup flow into `/doctor` and `/status` only. • [VSCode] Adds a Settings toggle for 'Enable Remote Control for all sessions'. Breaking changes: • The left arrow key no longer closes the background tasks, diff, and workflow detail views — press Esc instead Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.202

Mon, 06 Jul 2026 22:51:16 GMT

Claude Code v2.1.202 adds dynamic workflow sizing, OTel workflow attributes, and a new /code-review command for multi-agent PR review. • Adds a 'Dynamic workflow size' setting in `/config` to guide how many agents Claude spawns for dynamic workflows (small/medium/large) — advisory, not an enforced cap. • Adds `workflow.run_id` and `workflow.name` OpenTelemetry attributes to telemetry from workflow-spawned agents, enabling full reconstruction of a workflow run from OTel data. • Introduces `/code-review ` for multi-agent PR review at a chosen effort level; `/review ` reverts to a fast single-pass review. • Improves `/workflows` agent list layout with wider titles, a dedicated time column, and shorter model names. • Improves MCP error messages to suggest `"type": "http"` when a server config has `url` but no `type`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.200

Fri, 03 Jul 2026 16:52:33 GMT

Claude Code v2.1.200 makes Manual the default permission mode and adds opt-in idle timeout for user-question dialogs. • Changes `AskUserQuestion` dialogs to no longer auto-continue by default; opt into an idle timeout via `/config`. • Renames the 'default' permission mode to 'Manual' across CLI, `--help`, VS Code, and JetBrains; accepts `--permission-mode manual` and `"defaultMode": "manual"` as canonical values. Breaking changes: • The `AskUserQuestion` dialogs no longer auto-continue by default; auto-continue must be explicitly opted into via `/config` • The default permission mode is renamed from "default" to "Manual" across the CLI, `--help`, VS Code, and JetBrains (though `--permission-mode default` and `"defaultMode": "default"` remain accepted alongside `manual`) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.199

Thu, 02 Jul 2026 23:35:18 GMT

Stacked slash-skills (up to 5), auto-retry on 429s, and a raised retry ceiling via CLAUDE_CODE_MAX_RETRIES • Supports stacking up to 5 slash-skill invocations in a single prompt (e.g. `/skill-a /skill-b /skill-c do XYZ`), loading all leading skills instead of just the first. • Auto-retries transient server rate-limit errors (HTTP 429s unrelated to usage limits) with backoff for subscribers, instead of failing the turn. • New `CLAUDE_CODE_RETRY_WATCHDOG` behavior raises the default retry count for non-capacity transient errors to 300 and removes the previous hard cap of 15 on `CLAUDE_CODE_MAX_RETRIES`. • Idle surplus subagents in the agent panel now collapse into an expandable summary row instead of vanishing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.198

Wed, 01 Jul 2026 20:45:36 GMT

Claude Code v2.1.198 adds Chrome GA, automated draft PRs from background agents, /dataviz skill, and AWS gateway support. • Launches Claude in Chrome as generally available. • Adds `agent_needs_input` and `agent_completed` Notification hook events in `claude agents` so background sessions fire alerts when they need input or finish. • New `/dataviz` skill provides chart and dashboard design guidance with a runnable color-palette validator. • Adds Claude Platform on AWS (`anthropicAws`) as a gateway upstream provider; model-not-found responses now advance the failover chain instead of failing hard. • Background agents launched from `claude agents` now automatically commit, push, and open a draft PR when they finish code work in a worktree. • Built-in Explore agent now inherits the main session's model (capped at opus) instead of always running on haiku. • Subagents and context compaction now inherit the session's extended thinking configuration, improving output quality on delegated tasks. • Removes the `/agents` wizard; subagents are now created by asking Claude directly or editing `.claude/agents/`. • Subagents now treat messages from their launching agent as normal task direction (never as user approval), clarifying the trust model. Breaking changes: • The `--bg` flag combined with `--print`/`-p` is now rejected up front instead of silently creating an unattachable session. • The `/agents` wizard has been removed; subagents must now be created by asking Claude or by editing `.claude/agents/` directly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.197

Tue, 30 Jun 2026 17:56:37 GMT

Claude Code now defaults to Claude Sonnet 5 with a native 1M-token context window and promotional pricing through August 31. • Switches default model to Claude Sonnet 5, featuring a native 1M-token context window for working across very large codebases in a single session. • Introduces promotional pricing of $2/$10 per million input/output tokens for Claude Sonnet 5 through August 31. Breaking changes: • Claude Sonnet 5 is now the default model in Claude Code, replacing the previously default model Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.196

Mon, 29 Jun 2026 23:27:32 GMT

Claude Code v2.1.196 adds org-default models, clickable file attachments, MCP security hardening, and an always-on stream watchdog. • Adds organization default model support — admins configure it in the org console and users see 'Org default' or 'Role default' in `/model` when no personal selection is made. • Adds readable auto-generated names for sessions at startup, making sessions easier to identify and reference. • Adds clickable file attachments in chat — Cmd/Ctrl-click a file to reveal it in Finder/Explorer. • Security hardening: `claude mcp list`/`get` no longer auto-spawn MCP servers that a repo self-approved via a committed `.claude/settings.json`; untrusted workspaces now show a `⏸ Pending approval` indicator instead. • Enables the streaming idle watchdog by default for all providers — aborts and retries any response stream that produces no events for 5 minutes; set `CLAUDE_ENABLE_STREAM_WATCHDOG=0` to opt out. • Disables Remote Control when `ANTHROPIC_BASE_URL` points at a non-Anthropic host, consistent with existing Bedrock/Vertex/Foundry behavior. • Simplifies agents view navigation from a foreground session — now requires a single `←` press instead of two. • Improves `/code-review` workflow by consolidating five cleanup finders into one, cutting token usage by ~25%. • Improves background agent resilience — workers killed by a daemon restart auto-resume from their last state when the agents view next opens. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.195

Fri, 26 Jun 2026 21:29:42 GMT

Adds CLAUDE_CODE_DISABLE_MOUSE_CLICKS env var and remote session provisioning checklist in v2.1.195 • Adds `CLAUDE_CODE_DISABLE_MOUSE_CLICKS` environment variable to suppress mouse click, drag, and hover events in fullscreen mode while preserving wheel scroll — useful when running Claude Code inside terminal multiplexers or remote sessions where mouse events conflict with the host terminal. • Adds a provisioning checklist during Remote session startup so practitioners can track container initialization progress in real time. • Hook matchers now require exact matching for hyphenated identifiers (e.g. `mcp__brave-search`); use `mcp__brave-search__.*` glob syntax to match all tools from a hyphenated MCP server — a breaking change for any hooks relying on previous substring behavior. • Linux voice mode now distinguishes between 'no microphone detected' and 'SoX not installed' when SoX is present but no audio capture device exists, enabling clearer troubleshooting for automated or headless environments. Breaking changes: • Hook matchers now exact-match hyphenated identifiers (e.g. `code-reviewer`, `mcp__brave-search`) instead of substring-matching; existing configurations that relied on substring matching must be updated to use explicit wildcards (e.g. `mcp__brave-search__.*`) to match all tools from a hyphenated MCP server. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.193

Thu, 25 Jun 2026 21:45:57 GMT

Claude Code v2.1.193 adds shell classifier controls, OTel response logging, live path autocomplete, and memory-pressure reaping. • New `autoMode.classifyAllShell` setting routes all Bash/PowerShell commands through the auto-mode classifier, not just arbitrary-code-execution patterns. • Surfaces auto-mode denial reasons in the transcript, denial toast, and `/permissions` recent-denials view. • New `claude_code.assistant_response` OpenTelemetry log event captures model response text (redacted by default; enable with `OTEL_LOG_ASSISTANT_RESPONSES=1`). • Adds live file-path autocomplete when typing in bash mode (`!`). • Startup notice now appears when MCP servers require authentication, directing users to `/mcp`. • Automatic memory-pressure reaping terminates idle background shell commands to reclaim resources (disable with `CLAUDE_CODE_DISABLE_BG_SHELL_PRESSURE_REAP=1`). • Background agents now continue working on additional tasks after launching a sub-agent instead of being instructed to end their response. • MCP `headersHelper` auth automatically re-runs and reconnects when a tool call returns a 401/403. • Plugin auto-rename now follows marketplace `renames` maps, automatically updating settings to the new plugin name. Breaking changes: • Deployments that already log prompt content via `OTEL_LOG_USER_PROMPTS` will automatically start receiving assistant response content in `claude_code.assistant_response` OpenTelemetry log events on upgrade; set `OTEL_LOG_ASSISTANT_RESPONSES=0` to keep prompts-only logging. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.191

Wed, 24 Jun 2026 21:58:12 GMT

Claude Code v2.1.191 adds /rewind for post-clear conversation recovery and cuts streaming CPU usage by ~37%. • Adds `/rewind` command to resume a conversation from the state before `/clear` was last run, enabling recovery of cleared context. • Sandbox network permission dialog now remembers hosts approved with "Yes" for the entire session, eliminating repeated prompts for the same host. • MCP capability discovery (`tools/list`, `prompts/list`, `resources/list`) now retries on transient network errors with backoff, improving server reliability. • MCP OAuth in headless environments skips the browser popup and goes directly to a paste-the-URL prompt. • MCP HTTP 404 errors now surface the failing URL and link to the MCP config for faster troubleshooting. • Reduces streaming response CPU usage by ~37% via 100ms text-update coalescing, enabling longer uninterrupted agentic sessions. • Reduces memory growth in long sessions by optimizing the terminal output cache. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.187

Tue, 23 Jun 2026 21:03:48 GMT

Claude Code v2.1.187 adds credential sandboxing, org model restrictions, mouse support in fullscreen, and UX improvements to /btw, /plugin, and /install-github-app. • Adds `sandbox.credentials` setting to block sandboxed commands from reading credential files and secret environment variables. • Adds org-configured model restrictions enforced across the model picker, `--model`, `/model`, and `ANTHROPIC_MODEL`, with a clear 'restricted by your organization's settings' message. • Adds mouse click support for selecting menus (permission prompts, `/model`, `/config`, etc.) in fullscreen mode. • Improves `/install-github-app` so GitHub Actions workflow setup is now optional — install just the GitHub App without configuring the workflow or secrets. • Improves `/btw` with ←/→ arrow navigation to step through earlier answers. • Improves `/plugin` to surface recently unused plugins so practitioners can clean them up. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.186

Mon, 22 Jun 2026 20:37:34 GMT

Claude Code v2.1.186 adds CLI MCP auth commands, bash auto-response, AWS credential refresh, and subagent permission surfacing. • Adds `claude mcp login ` and `claude mcp logout ` commands to authenticate MCP servers directly from the CLI, with `--no-browser` stdin redirect for SSH sessions. • Enables `!` bash commands to automatically trigger Claude to respond to their output; disable with `"respondToBashCommands": false` in settings.json to restore context-only behavior. • Adds status filtering (press `f`) to the `/workflows` agent detail view for narrowing displayed agents by state. • Adds a 'Skills' section to the `/plugin` Installed tab for visibility into installed skills. • Adds `teammateMode: "iterm2"` setting for iTerm2 pane-based teammate integration, with a warning when the `it2` CLI cannot be found. • Adds a 'Claude Platform on AWS - refresh credentials' option to `/login` when `awsAuthRefresh` is configured. • Surfaces background subagent permission prompts in the main session instead of auto-denying them; the dialog identifies which agent is requesting, and Esc denies only that tool. • Changes `/review ` to use the same engine as `/code-review medium` for consistent PR review quality. • Caps `CLAUDE_CODE_MAX_RETRIES` at 15; introduces `CLAUDE_CODE_RETRY_WATCHDOG` as the recommended alternative for unattended sessions. • Supports kebab-case, snake_case, and camelCase for skill frontmatter keys (`display-name`, `default-enabled`, `fallback`, `metadata.*`). • Loads malformed `SKILL.md` YAML frontmatter with empty metadata instead of silently failing, surfacing skills even when their headers are broken. Breaking changes: • The `!` bash commands now trigger Claude to respond to the output automatically by default; set `"respondToBashCommands": false` in settings.json to keep the previous context-only behavior • `CLAUDE_CODE_MAX_RETRIES` is now capped at 15; unattended sessions relying on higher values must switch to `CLAUDE_CODE_RETRY_WATCHDOG` instead Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.183

Fri, 19 Jun 2026 01:20:50 GMT

Claude Code v2.1.183 adds auto-mode guardrails against destructive commands, attribution controls, and improved /config UX. • Adds auto-mode safety guardrails that block destructive git commands (`git reset --hard`, `git checkout -- .`, `git clean -fd`, `git stash drop`) unless you explicitly asked to discard local work, blocks `git commit --amend` on commits not made by the agent this session, and blocks `terraform destroy`/`pulumi destroy`/`cdk destroy` unless a specific stack was requested. • Adds deprecation warnings when a requested model is deprecated or auto-upgraded, surfaced on stderr in print mode (`-p`) and now also covering models set in agent frontmatter. • New `attribution.sessionUrl` setting lets you omit the claude.ai session link from commits and PRs in web and Remote Control sessions. • New `/config --help` subcommand lists all available shorthand keys for use with `/config key=value`. • Updated `/config` toggle behavior: Enter and Space both toggle the selected setting; Esc now saves and closes (previously reverted changes). • Removes the startup 'setup issues' line from under the logo — configuration issues are now surfaced on demand via `/doctor` or `--debug`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.181

Wed, 17 Jun 2026 22:07:41 GMT

Claude Code v2.1.181 adds inline /config setting, Apple Events sandbox opt-in, and presence-based push notification suppression. • Adds `/config key=value` slash command to set any Claude Code setting mid-session from the prompt (e.g. `/config thinking=false`), usable in interactive mode, `-p`, and Remote Control. • Adds `sandbox.allowAppleEvents` opt-in setting so sandboxed commands can send Apple Events on macOS — enables `osascript` and similar automation inside the sandbox. • Adds `CLAUDE_CLIENT_PRESENCE_FILE` environment variable to suppress mobile push notifications when a specified marker file is present, signaling you're already at the machine. • Upgrades bundled Bun runtime to 1.4. • Enables auto-retry on API connection drops mid-thinking, eliminating manual intervention when the connection closes during extended reasoning. • Improves subagent panel UX: idle subagents auto-hide after 30 seconds, list caps at 5 rows with scroll hints, and keyboard hints appear in the footer. • Changes fullscreen mode URL opening to require Cmd+click (macOS) / Ctrl+click, aligning with native terminal behavior. • Improves long-paragraph streaming so text appears line-by-line rather than waiting for the first line break. Breaking changes: • Fullscreen mode URL opening now requires Cmd+click (macOS) / Ctrl+click instead of a plain click, matching native terminal behavior Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code

Claude Code v2.1.178

Mon, 15 Jun 2026 21:35:55 GMT

Claude Code v2.1.178 adds parameter-scoped permission rules, nested skills/config resolution, and streamlined agent teams. • Adds Tool(param:value) syntax for permission rules to match a tool's input parameters with `*` wildcard support — e.g. Agent(model:opus) to block Opus subagents. • Supports skills in nested `.claude/skills` directories, loading them automatically when working in that subtree; name clashes surface as `:` so both remain accessible. • Nearest-wins resolution for nested `.claude/` directories: the agent, workflow, and output-style closest to the working directory take precedence on name collisions; project-scope workflow saves target the closest existing `.claude/workflows/`. • Strengthens auto mode by evaluating subagent spawns through the classifier before launch, closing a gap where a subagent could request a blocked action without review. • Removes `TeamCreate` and `TeamDelete` tools for agent teams (experimental): with `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1`, every session now has one implicit team — spawn teammates directly via the Agent tool's `name` parameter. • Enhances `/doctor` with a consistent flat tree layout, clearer section status icons, and highlighted command names. • Changes the workflow prompt keyword to use a purple shimmer highlight and trigger only on explicit phrases like "run a workflow" or "workflow:", not on any mention of the word. • Improves Remote Control error messages: connection failures show a persistent red "/rc failed" footer indicator, and the "not yet enabled" error now explains whether the cause is a gate, check failure, stale entitlement, or org policy. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/claude-code