Claude Code 2.1.295

[What's changed] Changed claude.ai connectors to negotiate MCP protocol version 2026-07-28 by default on installs that fetch no flags; `MCP_PROTOCOL_NEGOTIATION=legacy` opts out

[What's changed] Self-hosted runner: Changed the runner to stop passing `CCR_AUTO_MODE_ALLOW`, `CCR_AUTO_MODE_ENVIRONMENT` and `CCR_AUTO_MODE_SOFT_DENY` into a session's environment

[What's changed] Added an optional `models` list to every Claude apps gateway upstream: only the listed models are sent there, on failover too, and one `*` in an entry is a wildcard

[What's changed] Added `onFailure: "block"` for command and HTTP hooks: a hook that can't start, times out, or exits with an unexpected code blocks the action instead of letting it through

[What's changed] Added Program Status Protocol (OSC 7501) support: terminals that implement it can show whether Claude Code is working, waiting on you, or done

[What's changed] Added support for `timeouts.upstream_ttfb_ms` on the Claude apps gateway's Bedrock, Vertex, Foundry and other cloud upstreams: a value you set now limits how long a stream may take to start there, after which it fails over or gets a 502

[What's changed] Added a "Backgrounding cancelled" message when you stop the turn while `←` is waiting for the current tool to finish

[What's changed] Added support for `forceLoginMethod: "gateway"` and `forceLoginGatewayUrl` in your own user settings on machines with no managed settings, so `/login` opens on that Claude apps gateway

[What's changed] Added `upstream_request_id` to the Claude apps gateway's `inference` audit event: the request ID from Amazon Bedrock, the Anthropic API or another upstream, for support cases

[What's changed] Added `$.ui.notify` for mods: raises a native notification through your own notification setting and says which channel sent it

[What's changed] Added children to a mod's `Button`: strings and `Text`, so a row of a list is one pressable with a chip or a dim detail inside

[What's changed] Added `CLAUDE_CODE_RETRY_WATCHDOG_MAX_WAIT_MS` to limit how long unattended retry mode (`CLAUDE_CODE_RETRY_WATCHDOG`) waits out 429 and 529 errors

[What's changed] Added a `request-id` header to the Claude apps gateway's successful inference responses, so `request_id` in Claude Code telemetry matches the gateway's audit log

[What's changed] Improved token counts behind a Claude apps gateway on Amazon Bedrock, which `/context` and large file reads use: the gateway now gets them from AWS's CountTokens API instead of a one-token model request. Grant `bedrock:CountTokens` to use it

[What's changed] Improved background requests behind a Claude apps gateway to use Haiku 4.5 instead of the session's model, falling back to the session's model where the gateway does not serve Haiku 4.5

[What's changed] Improved how the Claude apps gateway handles models not listed under `models:` in Amazon Bedrock regions outside AWS's US geography. AWS always refused those requests; the gateway now tries the model in your own region, and a refusal names the model to add

[What's changed] Improved what Claude is told when a large file it sends fails to upload with no reason given, so it reports the failure instead of shrinking the file

[What's changed] Changed MCP tool descriptions the model loads through tool search to be cut at 16,384 characters instead of 2,048

[What's changed] Changed subagents to preload at most 32 skills from the `skills` field, each once; a subagent with the Skill tool can still invoke the rest

[What's changed] Changed what Claude and you read when a mod denies a tool call after the tool ran: it now says the tool ran and a plugin withheld its result

[What's changed] [Claude Tag] Changed Claude's notice that a channel shared across Enterprise Grid workspaces uses organization defaults to post only when someone mentions Claude, at most once a month

[What's changed] [Claude Tag] Added a confirmation in Claude Tag admin settings before adding a channel manager moves that member to Custom roles, which can remove their other access

[What's changed] Added quoted text to the `/copy` picker, so a drafted message copies without its `>` markers

[What's changed] Added a warning to `claude plugin install`, `enable`, `disable` and `marketplace add` when the settings file they write to does not load

[What's changed] Added a line on stderr, when it is a terminal, that says what a `claude -p` run is waiting for when it stays open after its last turn

[What's changed] Added advice to `claude plugin validate` when a plugin's README has no install line: it prints the line to paste and never changes the exit code, even with `--strict`

[What's changed] Improved the Claude apps gateway to log a warning every 30 seconds while its PostgreSQL database is read-only, saying what fails and how to recover

[What's changed] Improved headless `rate_limit_event` usage-limit warnings to say whether the account has extra usage turned on

[What's changed] Improved the built-in `plugin-authoring` skill: it no longer tells a session with no terminal to run terminal commands, and explains sharing a mod only when asked

[What's changed] Improved Grep input handling: a search sent with grep's `-l`, `-c` or `-r` flag now runs instead of failing the call

[What's changed] Improved the Workflow tool's `scriptPath` refusal: it now says to pass the script inline via `script`, the route that works in sessions without a Read tool

[What's changed] Changed Artifact pages with no background of their own to show on white instead of off-white

[What's changed] [VSCode] Added a chat row for files Claude sends you: click a file's name to open it in the editor; Claude's caption shows underneath, and the row stays visible in Focus view

[What's changed] [Cloud sessions] Improved the setup script box in the cloud environment form: it starts taller, grows with your script, and can be resized by dragging

[What's changed] [Claude Tag] Changed the settings confirmation cards Claude posts in a Slack channel to stay open for 30 minutes instead of 10

[What's changed] Fixed `--tools` and `--restricted` not applying to built-in tools that register after launch, and deprecated tool names reaching tools outside the caller's tool set

[What's changed] Fixed the notification for an MCP tool call that moved to the background showing a shortened task id

[What's changed] Fixed a skill's `allowed-tools` and `effort` being dropped when the Skill tool finished before the response stream ended, which denied the skill's Bash commands in `-p` runs

[What's changed] Fixed Edit treating a file as fully read when its contents changed without its modification time advancing

[What's changed] Fixed every request failing on a `[1m]` model when a gateway, Bedrock, Vertex or Foundry refuses the context-1m beta; Claude Code now resends without it

[What's changed] Fixed `claude -p` text output dropping earlier responses when background work started another turn; each turn's response now prints when the turn ends

[What's changed] Fixed remote MCP servers in headless and SDK sessions staying disconnected after an outage longer than 15 seconds, or reconnecting in a tight loop to a server that drops each connection right after it connects; repeated drops now back off, up to 30s

[What's changed] Fixed remote MCP connections being dropped when a server's error reply happened to contain a network error name

[What's changed] Fixed MCP servers that repeat a pagination cursor being asked for the same page up to 20 times at every connect

[What's changed] Fixed CSS, JavaScript and XML files returned by MCP tools being saved as .bin, which the Read tool refuses; font and icon files now get their own extension too

[What's changed] Fixed Bash tool calls failing when the model passes `command_description` instead of `description`

[What's changed] Fixed Claude in Chrome not applying a site deny rule written with port 80 (`host:80`) to plain `http://` pages on that host

[What's changed] Fixed `/plugin`'s Errors tab removing a marketplace that failed to load, and uninstalling its plugins, on Enter without asking first

[What's changed] Fixed `claude plugin marketplace add` reporting success for a marketplace whose name no plugin can be installed under; such an add is now refused

[What's changed] Fixed `CLAUDE_AUTO_BACKGROUND_TASKS` moving a subagent to the background while an edit or shell command waited behind it, which started that call before the subagent finished

[What's changed] Fixed PushNotification saying a push was not sent in `claude remote-control` sessions right after a phone message, without the `/config` toggle, or when started from inside Claude Code

[What's changed] Fixed files sent from remote sessions being refused as "could not be vouched for" when more than 256 were sent at once

[What's changed] Fixed Fable models listed in `availableModels` not appearing in the `/model` picker for sessions signed in to a Claude apps gateway; such a model now shows its built-in row in place of a `modelPicker` row added for the same model

[What's changed] Fixed the Claude apps gateway's admin spend view showing a developer's old groups and group cap after their session stopped carrying groups

[What's changed] Fixed `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` hiding the Claude apps gateway spend limit in `/usage` and the status line. The spend limit request goes to the gateway the session is signed in to

[What's changed] Fixed subagents in their own linked worktree being shown the parent session's git branch, status and recent commits

[What's changed] Fixed a mod's hook being handed a deeply nested tool input cut short with no error, so a guard could pass content it never saw

[What's changed] Fixed commands and hooks in background sessions inheriting `FORCE_COLOR=3`, which put color escape codes into the output Claude reads

[What's changed] Fixed `claude agents` starting a new background service as it exited when both were stopped with a session open (for example at a reboot), which could delay shutdown and restart an interrupted session

[What's changed] Fixed Claude not being told when you stop a long-running MCP tool call from the tasks panel or a connected client

[What's changed] Fixed a background session's `/loop` stopping without notice when its next wakeup came due while the session's process was down; the session now says so and Claude is told

[What's changed] Fixed the terminal freezing, with ctrl+c ignored, when a response ran to tens of thousands of lines

[What's changed] Fixed Claude not being told it can resume background subagents with SendMessage after a session was killed and resumed a second time

[What's changed] Fixed `/model`, `/fast` and `/output-style` saving their setting without asking a plugin's `config.set` hook

[What's changed] Fixed replies whose quotes nest deeper every few lines freezing the terminal for seconds and using gigabytes of memory

[What's changed] Fixed `claude mcp serve` background Bash results not naming the output file, and its tool description promising a notification that never arrives

[What's changed] Fixed variables a SessionStart hook writes to `CLAUDE_ENV_FILE` not reaching the Bash tool after an in-app `/resume` or `/branch`

[What's changed] Fixed a tampered cache of server-managed settings making a person's own plugin count as organization-managed on machines whose managed settings list or enable plugins

[What's changed] Fixed Claude 3 Opus and Claude 3.x Sonnet sessions being offered tool search, which those models reject, where feature flags are unavailable

[What's changed] Fixed mod hot-reloading turning off for the whole session when an SDK host closed its enable question before anyone answered; the question is now asked up to three times

[What's changed] Fixed short command output with Windows line endings (CRLF) being drawn on a single line

[What's changed] Fixed a stopped scheduled task coming back on resume after a rewind, and a scheduled task being lost on resume after Esc or a rewind following a compaction

[What's changed] Fixed the terminal freezing for seconds or minutes while syntax highlighting code with very long lines, long runs of blank lines, or unclosed strings and heredocs

[What's changed] Fixed Desktop and SDK sessions refusing to switch back to auto mode until restart after `disableAutoMode` was removed from settings

[What's changed] Fixed the prompt sent after a `/rewind` being lost, and the removed turns coming back, when the session was moved to the background or resumed after being killed

[What's changed] Fixed cloud sessions hanging when a mod's `session.receive` hook asked for permission before passing a message on

[What's changed] Fixed an MCP sign-in or reconnect that finishes late in headless and SDK sessions relisting a server set with `setMcpServers()` as your own

[What's changed] macOS: Fixed a file count at session start that could reach other apps' data and raise the "access data from other apps" prompt when a session starts in the home folder or above it

[What's changed] Changed the Artifact tool's permission prompts with telemetry disabled to the same five questions other installs get, instead of asking before each read of someone else's artifact and each data edit

[What's changed] Changed scheduled and Run now routine runs in installs with telemetry disabled to publish new private artifacts, and update your own, without asking, as in other installs

[What's changed] Changed WebSocket (`ws`) MCP servers: a message over 16 MiB is no longer parsed and closes the connection, the limit the other transports already have

[What's changed] [VSCode] Fixed keyboard focus bouncing between two Claude views visible at once, which could send typed text to the wrong conversation

[What's changed] Self-hosted runner: Fixed git fetches being cut off while the git server was still reporting progress on a large repository; `CLAUDE_RUNNER_FETCH_SERVER_PROGRESS_CAP_MS` tunes or turns off the wait

[What's changed] [Cloud sessions] Fixed a message sent right after unarchiving a cloud session sometimes getting no reply because no container could start for it

[What's changed] [Cloud sessions] Fixed some older routines starting their runs without ever giving Claude their saved prompt; those routines now run their prompt again

[What's changed] [Claude Tag] Fixed another app's or bot's @Claude going unanswered in a busy channel where Claude had stopped reading untagged messages

[What's changed] [Code Review] Fixed Code Review re-reviews saying no issues were found while earlier findings were still open; the comment now says how many remain open

[What's changed] [Code Review] Fixed Code Review still skipping a large CLAUDE.md's rules when the pull request edits that file

[What's changed] Fixed web searches and `agent` hook evaluations taking much longer at `xhigh` and `max` effort

[What's changed] Fixed a rare failure to load managed settings at startup right after a login refresh

[What's changed] Fixed `/tui` exiting without a message, or with a raw system error, when Claude Code could not be started again

[What's changed] Fixed a link address shown as text being hidden by a colour or conceal style a reply left on, including where it wraps in a table or a question preview

[What's changed] Fixed Claude stopping at the end of the current tool when text typed in the prompt cancelled backgrounding with `←`; Claude now keeps working in the foreground

[What's changed] Fixed an interrupt not ending the turn until a timeout while Claude waited for an MCP server's resource list

[What's changed] Fixed Esc not stopping a self-paced `/loop` that was moved to the background with `←`; cancelling a pending wakeup now shows a notice

[What's changed] Fixed a custom agent named `worker` being shown as "Agent" in auto-mode denial notices and in the activity lists of task detail views

[What's changed] Fixed Bash permission checks for for-loops over glob patterns, improving permission-check accuracy

[What's changed] Fixed forked skills invoked from Workflow subagents delivering their results to the main conversation instead of the invoking agent

[What's changed] Fixed in-process agent teammates failing their first SendMessage call until they loaded the tool through tool search

[What's changed] Fixed Claude being told on resume that an unfinished background workflow may have been stopped by `TaskStop`, which can never be the cause

[What's changed] Fixed raw terminal hyperlink bytes in a reply or a teammate's message being drawn as a clickable link with a hidden address

[What's changed] Fixed plugin marketplaces whose repository has large git submodules failing to add or refresh: only the submodules that hold plugin files are now fetched

[What's changed] Fixed the `/advisor` dialog showing a checkmark on a saved advisor model that is no longer available; it now opens on "No advisor"

[What's changed] Fixed vim mode's `~` moving the cursor past the last character of a line, so `x` after it did nothing, and `3~` running on into the next line

[What's changed] Fixed the cursor landing one character too far after pasting accented text copied from macOS (such as a file name) into the middle of the prompt

[What's changed] Fixed calls a mod makes while it reloads during a plugin hooks worker restart getting past another mod's guard hook that has a `.catch`; such calls are now refused

[What's changed] Fixed plugins whose hooks module nests code thousands of levels deep failing to load or validate with a bare stack-overflow message

[What's changed] Fixed `claude plugin test` passing a `session.append` hook that removes tool call, tool result or thinking blocks that a real session keeps

[What's changed] Fixed a file being treated as already read after a Bash command such as `cat` ran without printing it

[What's changed] Fixed plugin options named `constructor` or `prototype` always reading as their default and never reloading the plugin when edited

[What's changed] Fixed a mod's hot reload missing a save made while `/reload-plugins` or session start was reading the mod's files

[What's changed] Fixed the mod hot-reloading question being asked again every turn for the whole session when it is approved without picking an answer

[What's changed] Fixed bold text being drawn faint in piped output when it directly follows dim text

[What's changed] Fixed a mod's hot reload missing a save made within a few milliseconds of its last reload, which left the mod on its old version until the next save

[What's changed] Fixed an async SessionStart hook's unchanged context being added to the conversation again on every resume

[What's changed] Fixed generated type files being written into a `--plugin-dir` plugin's folder in `-p` and SDK sessions; they are now written only where a mod is being developed

[What's changed] Fixed text with tabs or bidirectional control characters losing its end at the edge of the screen or drawing over nearby rows

[What's changed] Fixed `/model` saying a Max effort pick was saved as your default for new sessions; Max applies to the current session only

[What's changed] Fixed an async hook's JSON output being ignored when it is printed over several lines

[What's changed] Fixed the Read tool rejecting calls with an empty `pages` parameter instead of treating it as omitted

[What's changed] Fixed project-scope plugins not loading in VS Code on Windows due to drive-letter casing (anthropics/claude-code#74612)

[What's changed] Fixed `plugin install` and `uninstall` at project or local scope on Windows missing the install record, or adding a second one, when only the drive letter's case differs

[What's changed] Fixed a queued message being lost when pulled back into the prompt with `↑` or `Esc` just after `←`: prompt history now keeps it

[What's changed] Fixed a prompt that a mod's `prompt.submit` hook rewrote or dropped still being saved as typed to prompt history and to the transcript's queued-prompt records

[What's changed] Fixed non-interactive sessions telling you about MCP servers that need authentication when your request doesn't use them

[What's changed] Fixed the `claude_code.auth` OpenTelemetry login event not being emitted on Claude apps gateway sign-in. The event is exported when OpenTelemetry is configured on the machine or the session is already signed in to the gateway

[What's changed] Fixed a plugin that adds very large interfaces getting another plugin unloaded when the plugin hooks worker stalls

[What's changed] Fixed temporary files left under `~/.claude/seed-admin` by an interrupted `/ultrareview` upload never being removed by the retention cleanup

[What's changed] Fixed claude.ai-synced plugin hooks failing with "Plugin directory does not exist" in long-running sessions after another session synced a plugin update

[What's changed] Fixed macOS background sessions that restart together after an update sometimes running outside the stable app wrapper, so folder-access prompts could reappear

[What's changed] Fixed changing the auto-update channel in `/config` saving before a plugin's `config.set` hook was asked

[What's changed] Improved the status shown in Remote Control, claude.ai and the desktop app for a session waiting on a permission prompt to name an MCP tool by its server and readable name instead of its `mcp__server__tool` identifier

[What's changed] Improved `claude plugin validate` and plugin loading: when a hooks module is refused over a rebound top-level `var`, the error now names the line that rebinds it, the cause, and a fix

[What's changed] Changed Ctrl+C at the idle prompt of an attached background session to leave a pending `/loop` wakeup alone, so pressing it twice detaches and the loop keeps running; press Esc to stop it

[What's changed] Changed `claude agents` stopped with its background service (macOS, or Linux without the service installed): running sessions now stop in about a minute unless it is run again, and a notice says so

[What's changed] Changed tab stops to count from where a text starts instead of from the screen's left edge: an answer indented by 2 has its first stop 8 cells in, where it was 6

[What's changed] Changed toasts from your organization's mods to show ahead of other mods' toasts instead of waiting behind them

[What's changed] Changed the Claude apps gateway to start with a warning and serve a `desktop` policy key its bundled Claude Desktop schema doesn't know, so new Desktop settings need no gateway upgrade

[What's changed] [VSCode] Fixed Ctrl+Shift+Tab, Cmd+Shift+Tab and Alt+Shift+Tab in the chat input also switching the permission mode, and Ctrl+Tab accepting the suggested prompt

[What's changed] [Cloud sessions] Improved how quickly a cloud session catches up after its connection drops: activity you missed now appears all at once instead of row by row

[What's changed] [Claude Tag] Fixed channel links and @-mentions in a forked thread's "Continued from" card showing as raw Slack codes

[What's changed] [Claude Tag] Fixed Slack's Working status spinning on under a thread after `@Claude !restart` had already confirmed the restart