Claude Code 2.1.309

[What's changed] Changed `sed -i` to get the standard Bash prompt and run as written, not a simulated file-edit preview; like other Bash edits, it is no longer restored by `/rewind`

[What's changed] Changed `claude ultrareview` to require workspace trust: it asks on a terminal, else refuses; scripts pass `--trust-workspace`, which takes no value (put a PR number or base branch before it), or set `CLAUDE_CODE_DISABLE_ULTRAREVIEW_TRUST_CHECK=1`

[What's changed] Self-hosted runner: Improved sessions that move to a new runner: Claude now sees the tool call that was interrupted, marked as outcome unknown

[What's changed] Updated the /claude-api skill: service account keys and Workload Identity Federation tokens can now manage OpenTelemetry destinations

[What's changed] Changed the dangerous `rm` and `rmdir` prompt in bypass permissions mode in the Desktop app and VS Code to deny the command at once with a rewrite hint, so unattended sessions keep going

[What's changed] Changed commands the settings exclude from the sandbox to ask before writing to its write-list paths while the sandbox is enabled but cannot run; the unsandboxed fallback is refused there

[What's changed] Changed the `/claude-api` skill to build Managed Agents subagent teams on `multiagent_20261001` with dynamic workflows on by default, instead of `coordinator`

[What's changed] [VSCode] Improved Edit and Write speed in the chat panel: the wait for new problems after each edit is now 0.75 seconds in most cases, down from 1 to 1.5 seconds

[What's changed] Improved the speed of many git commands Claude Code runs for itself on Windows; on every platform, errors from those commands now show in English even when git is set to another language

[What's changed] Improved the error when a hooks module is nested too deep to load: it now names the file instead of showing a bare stack-overflow message

[What's changed] Improved disk-full handling: a Bash command cut off by a full disk now says so and names the folder to free up, and starting on a full temp volume prints a clear message, not a raw ENOSPC error

[What's changed] Improved the /claude-api skill to offer API tracing alongside SDK tracing when asked to add OpenTelemetry

[What's changed] Improved the /claude-api skill to check the live docs before saying a feature is unsupported

[What's changed] Updated the bundled dataviz skill to accept APCA as a text-contrast measure (keeping WCAG 2 ratios where AA conformance is required), add an `apca(text, background)` function to its palette validator scripts, and say whether a label inside a colored chart fill should be white or near-black

[What's changed] [VSCode] Added a log warning that says what to do when dictation or the extension's own requests fail certificate verification, such as behind a TLS-inspecting proxy

[What's changed] [Cloud sessions] Improved a cloud session's Changes pane, which now says when it lists only pushed commits or only Claude's edits

[What's changed] Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command

[What's changed] Fixed sandboxed commands and auto-accepted edits being able to modify the MCP config file passed with `--mcp-config`

[What's changed] Fixed the Bash permission check trusting a variable set by a command whose redirect can fail to open

[What's changed] Fixed an `Edit(path)` deny rule not blocking a Bash redirect to that path in some commands that also held a subshell

[What's changed] Fixed sessions compacting repeatedly after reading files under a very large nested CLAUDE.md; a nested CLAUDE.md over the size limit now loads only its start

[What's changed] Fixed messages from a Claude Desktop-hosted session sometimes being lost when its connection refreshed

[What's changed] Fixed features missing from Claude Code sessions in the Claude desktop app when the terminal on the same computer was signed in to a different account or organization

[What's changed] Fixed hooks that run in PowerShell not blocking when the hook's program exits with code 2, and on Windows `PreToolUse` and `PermissionRequest` hooks with `"shell": "powershell"` failing open when Git for Windows isn't installed

[What's changed] Fixed a mod's `turn.step` hook that names a model by alias, such as `haiku`, failing every request with a model error: the alias now resolves to its model

[What's changed] Fixed plugins and skills synced from claude.ai being removed, sometimes mid-session, after a disk read error

[What's changed] Linux: Fixed sandbox write denies lifting when a background command outlived the session

[What's changed] Windows: Fixed PowerShell permission checks auto-approving some `Set-Location` or `cd` commands that target the current directory and carry extra arguments; these now prompt for approval

[What's changed] Self-hosted runner: Fixed `--startup-timeout-min` stopping a session whose first prompt, such as `/code-review`, was still working in a subagent; a frozen process is still stopped

[What's changed] Changed worktree creation and reuse so git no longer fetches objects on demand, in ordinary clones and in partial clones with a Bash sandbox configured; such a partial clone fetches them first

[What's changed] [VSCode] Fixed the Claude panel staying blank after the editor cached an incomplete copy of its files; it now recovers by itself, or says what went wrong and how to fix it

[What's changed] [Claude Tag] Fixed Claude in Slack posting a draft you approved for a channel into your DM by mistake; a post with no channel is now refused so it can go to the approved channel

[What's changed] [Claude Tag] Fixed Claude ignoring untagged messages in a Slack channel after its workspace moved to a different Claude organization, including unshared channels on Enterprise Grid

[What's changed] [Claude Tag] Fixed Claude in a Slack channel posting a threaded reply before reading a newer message someone had just added to that thread

[What's changed] [Code Review] Fixed a finished review showing no check on the pull request when earlier tries to create it failed; a final try now adds a completed check

[What's changed] [Code Review] Fixed a push queued behind a running review still starting a review after `@claude review stop`; its check now closes and says why

[What's changed] Fixed macOS sandbox `denyWrite` glob patterns not applying at a path's real location when the pattern's folder is reached through a symlink

[What's changed] Fixed a disabled MCP server being reconnected by a later permission prompt in print and SDK sessions

[What's changed] Fixed Bash permission checks not prompting for some compound commands that change directory before running git when the `cd` is wrapped or prefixed, as they do for a plain `cd`

[What's changed] Fixed worktree-isolated sessions accepting some locale-prefixed commands the isolation guard should refuse

[What's changed] Fixed worktree-isolated sessions on zsh accepting some arithmetic commands that the isolation guard should refuse

[What's changed] Fixed worktrees and branch checkouts that Claude Code creates so they ignore git replace refs, as its other git operations already do

[What's changed] Fixed profile store write protection not applying when the config directory is reached through a symlink

[What's changed] Fixed ctrl+enter (send now) only queuing a message when pressed before the response had started, and restarting a prompt's hooks while leaving the message queued when pressed while those hooks were running

[What's changed] Fixed key-bound slash commands running in the shell from `!` mode

[What's changed] Fixed ctrl+o not showing messages from other agents and sessions that are still waiting to be delivered; they now appear in full under the transcript, marked as waiting

[What's changed] Fixed long tool output previews being cut through an emoji, leaving session transcripts that `jq` could not parse

[What's changed] Fixed Read reporting "File does not exist" for PDF page ranges in Linux sandboxes that share the parent's `/proc`

[What's changed] Fixed the `claude remote-control` status line showing `HEAD` as the branch for a folder that is not in a git repository

[What's changed] Fixed split-pane agent teammates not inheriting the tool deny and `--tools` rules given on the leader's command line

[What's changed] Fixed sessions renamed with `/rename` appearing to other sessions under a generated name after a VS Code window reload or a non-interactive `--resume`

[What's changed] Fixed the `/rewind` list showing "No code changes" for a turn that changed checkpointed files through `/code-review --fix`, a subagent or a shell command

[What's changed] Fixed oversized /feedback reports failing instead of being resent without the transcript

[What's changed] Fixed a skill in an `--add-dir` folder being unreachable when another skill already held its name; it is now offered as `<folder>:<name>`

[What's changed] Fixed `/verify` and `/code-review` not finding a nested package's own skill when its files were changed from the shell

[What's changed] Fixed the /claude-api skill saying that `ant beta:worker poll --on-work` passes trace context to the command

[What's changed] Fixed the /claude-api skill's C# tracing setup missing spans from the cloud platform clients

[What's changed] Fixed the /claude-api skill saying that API spans for requests to Claude Platform on AWS can't join the caller's trace

[What's changed] Fixed artifact publishes and updates being refused for some ordinary pages, such as pages with certain minified scripts or artifacts Claude could not read first

[What's changed] Fixed Claude asking for permission on each artifact update for the rest of a turn after the conversation was compacted in that turn

[What's changed] Fixed fine-grained tool streaming staying off on Amazon Bedrock when `ANTHROPIC_BEDROCK_BASE_URL` is set to the default `bedrock-runtime.<region>.amazonaws.com` endpoint

[What's changed] Fixed the "Waiting for API response" hint flickering behind gateways that send only keepalive pings: routes off Anthropic's backend now wait 45 seconds

[What's changed] Fixed Claude notifying unrelated GitHub users by writing role names and placeholders as mentions in PRs, issues and comments

[What's changed] macOS: Fixed the "Install Command Line Developer Tools" dialog opening each time Claude Code starts on a Mac without Xcode or the Command Line Tools

[What's changed] [VSCode] Fixed Session history filling up with empty "Untitled" sessions each time you start a new session without sending a message

[What's changed] [VSCode] Fixed long slash-command messages such as `/goal` filling the chat panel; they now fold behind Show more like other prompts (anthropics/claude-code#97469)

[What's changed] [VSCode] Fixed long messages not folding behind Show more after the chat panel is made narrower

[What's changed] [VSCode] Fixed Ctrl+J in the chat input always inserting a newline: it is now left to VS Code and the OS when "ctrl+j" is set to null in the Chat context of ~/.claude/keybindings.json

[What's changed] [VSCode] Fixed a mod's "From the … plugin" label above the prompt being drawn over the slash command and @-mention menus (anthropics/claude-code#102981)

[What's changed] [VSCode] Fixed an empty list item, paragraph or code block, and list items renumbered from 1, when pasting copied LaTeX math

[What's changed] [VSCode] Fixed the feedback error showing only an HTTP status when your organization does not accept feedback

[What's changed] [Cloud sessions] Fixed the Add connector list in routine forms saying no connectors were available while they were still loading

[What's changed] [Cloud sessions] Fixed the cloud environment editor shuffling environment variables and adding backslashes to values that contain both kinds of quote

[What's changed] [Cloud sessions] Fixed the self-hosted environment details dialog in admin settings so its title, tabs and buttons stay in view while only the content scrolls

[What's changed] [Cloud sessions] Fixed the "read documentation" tool row in cloud sessions, which showed escaped JSON instead of a readable page

[What's changed] [Claude Tag] Fixed Allow and Deny on Claude's approval cards in Slack doing nothing when the session had stopped; your answer now restarts the session

[What's changed] [Claude Tag] Fixed the Slack page in Claude Tag admin settings saying no workspaces were connected when the list failed to load; it now shows an error with a Retry button

[What's changed] Fixed `/privacy-settings` showing an out-of-date "Help improve our AI models" value; it now also says when the setting can't be fetched

[What's changed] Fixed feedback saying "try again later" when your organization does not accept feedback; it now shows the server's reason and where to report a bug