Claude Code 2.1.300

[What's changed] Removed the `--sandbox` and `--no-sandbox` flags from `claude remote-control`, which had no effect; passing either now exits with an error. Set `sandbox.enabled` in settings to sandbox sessions

[What's changed] [Claude Tag] Added a private Allow once / Deny card in Slack threads for connector actions that need your approval, so Claude asks instead of refusing; others only see that it's waiting on you

[What's changed] Added `$.ui.view({ agentId })` for mods: shows an agent's transcript in the main view when you ask, and `$.ui.view({})` goes back

[What's changed] Added support for rewriting a workflow agent's `prompt` and `model` in the `agent.spawn` mod hook, which could only refuse workflow agents before

[What's changed] Improved the note Claude 3 models get about an @-mentioned PDF, so they less often answer without reading it

[What's changed] Improved artifact updates: Claude now applies a small change and republishes the artifact in one call, and makes larger edits and republishes within a single response

[What's changed] Changed large requests to api.anthropic.com to use gzip compression even when telemetry is disabled; set `CLAUDE_CODE_GZIP_REQUEST_BODIES=0` to turn it off

[What's changed] [Claude Tag] Added support for Slack Connect channels: an Owner or Claude Tag admin can let Claude in Slack answer in channels shared with another organization; it's off by default

[What's changed] [Claude Tag] Added support for Slack voice clips in Claude in Slack: Claude reads Slack's transcript of a clip when Slack has one

[What's changed] Added `virtualText` to a mod's prompt decorations: text drawn in the prompt box that never enters the draft or the submitted prompt

[What's changed] Added a `dir` prop on a mod's `Text` for right-to-left text: on Windows and in VS Code's terminal its rows read in that direction and sit flush right

[What's changed] Added the `prompt.change` mod hook, raised when the prompt box's text changes without a typed edit: a recalled history entry, a clear, an undo, or a plugin's fill

[What's changed] Improved WebFetch in Cowork cloud sessions to tell Claude that a page failed moments ago instead of fetching it again

[What's changed] Changed the `claude-api` skill to leave Managed Agents sessions in place unless you ask to archive or delete them

[What's changed] Changed background sessions to resume a carried workflow through the Workflow tool's approval instead of running it from the handoff file

[What's changed] Changed local session transcripts to also record each API request's system prompt, tools and parameters, so a transcript you choose to share can reproduce a request exactly

[What's changed] Changed the `/sandbox` mode options to read "Sandbox commands" instead of "Sandbox BashTool"

[What's changed] [VSCode] Added the `claudeCode.attachSelection` setting to stop text selected in the editor from being added to your messages

[What's changed] Added `cache_creation_5m_tokens` and `cache_creation_1h_tokens` to the OpenTelemetry `api_request` event, splitting cache writes by lifetime

[What's changed] [Claude Tag] Fixed Claude in Slack not answering another app that tags it in a thread under a message Claude itself posted to the channel

[What's changed] [Code Review] Fixed Code Review's "paused for this repository" comment sending admins to Code Review settings; it now says who can fix it and links the Git providers page

[What's changed] Fixed subagents you had typed messages to disappearing from `/tasks` shortly after finishing, leaving no way back to the conversation

[What's changed] Fixed the agents view taking a typed word such as "up", "down" or "escape" for that key when input arrived in a burst, which could move the peek mid-reply or clear a draft

[What's changed] Fixed automatic tool search (`ENABLE_TOOL_SEARCH=auto`) turning off part-way through a conversation, for example while MCP servers reconnect after a resume

[What's changed] Fixed a login refused by `forceLoginOrgUUID` leaving the refused organization's token stored, or live after `/login`

[What's changed] Fixed the diff view in Claude Desktop and Remote Control sessions not noticing a conflicted cherry-pick or revert in reftable repositories

[What's changed] Fixed `/branch` dropping messages, and `claude purge` skipping subfolder projects, when they contain a Unicode line or paragraph separator (U+2028, U+2029)

[What's changed] Fixed `claude remote-control` servers giving up on renewing their connection after a brief sign-in error, such as a locked keychain; they now retry, and warn when you need to run `claude /login`

[What's changed] Fixed a conversation failing on every turn with a 400 error when the API rejected an MCP tool's input schema; Claude Code now sends that tool without parameters for the rest of the conversation

[What's changed] Fixed Claude polling a background command's output file or sleeping while it runs

[What's changed] Fixed feature flags and staged rollouts staying stale behind a TLS-inspecting proxy whose certificate is trusted only through the OS certificate store

[What's changed] Fixed `claude daemon stop --any` printing "stopped" while a stuck background service kept running: it now waits, force-kills the service, and says so with exit 1 if it is still there

[What's changed] Fixed Write, Edit and NotebookEdit in Cowork cloud sessions reporting success for a path on your own computer, where the file never arrived

[What's changed] Fixed Claude searching for deferred tools already loaded earlier in the conversation when a session resumes a history that never listed them

[What's changed] Fixed cloud sessions hanging 5 minutes per turn when the organization's policy can't be read; the turn now ends promptly and says why

[What's changed] Fixed a cloud session sometimes running an already answered message a second time after the session restarted during a long reply

[What's changed] Self-hosted runner: Fixed the runner and orchestrator freezing (no polls, `/healthz` or `SIGTERM` shutdown) while nobody reads their output; logs keep the latest 256 KiB and count drops (not on Windows)

[What's changed] Changed `PermissionRequest` hooks in Cowork cloud sessions: a `setMode` update in a hook's allow is now ignored; the rest of the approval still applies

[What's changed] Changed hooks: `updatedInput` from PreToolUse and PermissionRequest hooks is now validated like Claude's own input: unknown keys are dropped, and input the tool rejects denies the call

[What's changed] [VSCode] Fixed fast mode staying on after usage credits ran out, which made each request be refused and re-sent; it now turns off until you turn it back on, with an error notice

[What's changed] [VSCode] Fixed "Edit prompt" on a flagged message opening the file or command menu over the restored prompt; Enter now sends it as written

[What's changed] [VSCode] Fixed changes to VS Code's chat font size settings needing a window reload or being undone by a theme change; diffs and the plan preview now follow them too

[What's changed] [VSCode] Fixed "Resume session" and tabs restored after a reload opening an empty new conversation instead of one that had moved into a git worktree

[What's changed] [Cloud sessions] Fixed "Allow for this task" missing from Cowork's approval prompts for connector tools where an organization turns off "Always allow" (regression in 2.1.292)

[What's changed] [Remote Control] Fixed the diff view in Remote Control sessions on claude.ai and the desktop app showing deleted and renamed files as modified; requires Claude Code v2.1.296 or later on your machine

[What's changed] [Code Review] Fixed Code Review ignoring `@claude review` comments from people with write access whose GitHub organization membership is private; their comments now start a review

[What's changed] Fixed cloud sessions telling Claude that an organization policy blocked a host when the session's own network settings did

[What's changed] Fixed `/autocompact` warning about high token usage when you choose a smaller auto-compact window

[What's changed] Fixed SessionEnd hooks sometimes not running when you exit while a background command is still running

[What's changed] Fixed `claude --help` naming a removed tool in its description of `--restricted`

[What's changed] Fixed `claude agents` not refreshing any pull request's status when the data for one of them came back incomplete

[What's changed] Fixed Claude being told a background agent was lost, not resumable, after a cloud session's container was replaced, when the agent had already been resumed once

[What's changed] Fixed a completed parent agent dropping off the breadcrumb (its child shown re-rooted at top level) while you were viewing the child

[What's changed] Fixed the first transcript entry written after resuming a session being lost when a crash had cut the transcript's last line short

[What's changed] Fixed plugin `WorktreeCreate` and `WorktreeRemove` hooks not running when Claude Code starts with `--worktree` (not yet with `--tmux`)

[What's changed] Fixed OpenTelemetry `tool_result` events missing `git_commit_id` after `git commit -q` in repositories using reftable ref storage

[What's changed] Fixed a prompt that a mod's `prompt.submit` hook rewrote or dropped still being recorded as typed in the OpenTelemetry `user_prompt` event and interaction span, and in session title requests

[What's changed] Fixed a note meant for Claude about mod hot-reloading appearing in the transcript as if you had typed it

[What's changed] Fixed agent hooks ignoring their `model`: aliases like `haiku` now resolve, a subagent's model no longer overrides it, and an unavailable model falls back to the caller's instead of allowing the action

[What's changed] Fixed `--worktree` sessions sometimes starting from the wrong commit when a tag or branch was named like a commit ID, and their starting git status naming a branch other than the new worktree's

[What's changed] Fixed the branch showing as ".invalid" and `--worktree` failing to reopen a worktree in repositories using git's reftable ref storage

[What's changed] Fixed Claude naming files in the session scratchpad by a bare filename or relative path instead of their full path

[What's changed] Fixed `--worktree` failing in a worktree of a bare repository when origin's default branch can't be fetched; the fallback base is now the current checkout's HEAD, not the main repository's

[What's changed] Fixed starting Claude Code in a VS Code, Cursor or Devin Desktop integrated terminal launching the editor's command-line tool twice to check for the extension; it now launches it once

[What's changed] Fixed a mod's `prompt.edit` hook not being raised for a newline entered with the `chat:newline` keybinding (Ctrl+J, or a rebound Enter)

[What's changed] Fixed resuming a headless or Agent SDK session losing the recent messages a compaction had kept, when the compaction followed a reply cut at the output token limit (compactions from this version on)

[What's changed] Fixed Claude not being told about an MCP server's tools and instructions until its next tool call, when the server finished connecting after a compaction

[What's changed] Fixed Remote Control sessions being marked stopped while still running, on a computer serving several sessions at once

[What's changed] Fixed resuming a headless or Agent SDK session losing its compaction summary or bringing back pre-compaction history, when the compaction followed a retried or unfinished reply in the same turn

[What's changed] Fixed `claude daemon stop` exiting with no output, and leaving sessions listed as running, when telemetry is turned off

[What's changed] Fixed secondary (dim) text looking the same as normal text under the dark ANSI theme and on 16-color terminals

[What's changed] Improved mod sharing in the built-in `plugin-authoring` skill: Claude scans a mod's files for keys before opening them, and asks before scanning a folder outside the project

[What's changed] Changed `CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST` sessions to ignore CA-bundle, tool-proxy, git TLS and git config variables like `SSL_CERT_FILE` in settings; under Claude Desktop, only in project settings

[What's changed] Changed exit to force-kill background commands still running 1.5 seconds after being asked to stop; in fullscreen mode they could previously be left running

[What's changed] Changed Claude Desktop's Code tab to apply managed settings when `forceLoginGatewayUrl` names an Anthropic-operated gateway that serves the session's hostname; that gateway must be reachable at start

[What's changed] Changed `claude gateway` to stop at start, naming the key, on a `desktop:` policy key that Claude Desktop cannot use from a gateway, where it earlier started with a warning

[What's changed] [VSCode] Fixed the Thinking toggle switching to Off on models that always think; the toggle is no longer shown for those models

[What's changed] [VSCode] Fixed Shift+dragging a file onto the prompt on Windows inserting an unreadable `/c:/…` path instead of a mention relative to the working directory

[What's changed] [VSCode] Fixed ↑ then Enter on a recalled slash command running it without its arguments; the command and file menus no longer open over a recalled prompt until you edit it

[What's changed] [VSCode] Fixed Shift+dragging a file from the Explorer or an editor tab onto the prompt inserting nothing in WSL, SSH and Dev Container windows

[What's changed] [VSCode] Fixed Ctrl+Alt+F toggling Focus view instead of opening Find in the Explorer, other tree views, or the Debug Console on Windows and Linux

[What's changed] [VSCode] Windows: Fixed a conversation showing "still open somewhere else" after a crash or power loss, when Windows had since restarted and given the old process ID to another program

[What's changed] [Cloud sessions] Fixed most commands in the / menu losing their descriptions in cloud sessions once you sent a second message

[What's changed] [Claude Tag] Changed access bundles an admin attached to a Slack channel to keep applying once the channel becomes a Slack Connect channel, with no need to remove and re-attach them

[What's changed] [VSCode] Fixed the check for sessions open in other windows or terminals creating extra processes on macOS: it now starts `/bin/ps` directly instead of searching PATH for `ps` on every check