Claude Code 2.1.183: Auto mode gets safety nets against destructive commands

Release notes

FEATURE

Auto mode gets safety nets against destructive commands

Claude will no longer execute destructive Git commands unless you explicitly ask it to discard your local work. The system will now actively block destructive Git commands (like git reset --hard and git clean -fd that irreversibly delete files). It also refuses to run git commit --amend unless the agent itself made that specific commit during the current session. For infrastructure-as-code tools like Terraform or Pulumi, running a destroy command is now strictly forbidden unless you specifically name the target stack. Additionally, scheduled tasks and Webhook triggers used to be incorrectly interpreted as your keyboard inputs, sometimes accidentally 'approving' an AI action on your behalf; this dangerous loophole has been firmly closed. It's like putting a safety guard on a lawnmower: unless you explicitly flip the switch and point at a specific patch of dirt, it absolutely refuses to shred your prized rose bushes, and a stray bird landing on the handle can no longer accidentally start the engine.

BUGFIX

Agent teams are tougher, and search/output glitches are gone

Team-based AI collaboration just got a lot more dependable. Previously, spawning a teammate in a tmux pane (a terminal multiplexer) could fail if your shell initialization was slow, and keystrokes you typed on the main screen would bizarrely leak into the new teammate's window; these chaotic overlaps are now fixed. Also, if a teammate dispatched a background task to a subagent, that task used to be ruthlessly killed the moment the teammate finished its turn—now it survives to completion. On the cognitive side, subagents using WebSearch no longer return totally blank results, and if the AI spins its wheels generating a "thinking block" but fails to produce actual visible output, it won't just silently give up anymore—it will re-prompt the model once to produce visible output. Finally, we squashed the annoying 400 Extra inputs are not permitted errors that plagued subagent spawns on certain configurations. It's like a busy factory floor: previously, a slow-booting new robot would jam the assembly line, and any chore handed to an intern was immediately thrown in the trash the moment their manager clocked out for the day. Now, handoffs are flawless, and the interns faithfully finish their tasks even after their boss goes home.

BUGFIX

Settings and UI cleaned up, squash screen-corrupting bugs

The interface is now noticeably cleaner and more intuitive. The settings menu (/config) makes sense now: you can hit Enter or Space to toggle switches, and pressing Esc actually saves and closes instead of reverting all your changes. You can also run /config --help to easily look up shorthand keys. We've scrubbed the constant 'setup issues' nag from the startup logo; if you want a system health check, just run /doctor. You'll now get clear warnings if you request a deprecated model or one that automatically updates to a newer version. We also squashed a ton of screen-corrupting bugs: the total UI meltdown (merged text and duplicated spinners) in Windows Terminal under heavy subagent loads is fixed, your cursor won't get stranded above the prompt in vim mode anymore, the noisy 'PostToolUse' timing lines cluttering focus mode are gone, and user-level skills won't infinitely duplicate themselves in your autocomplete list. Finally, headless environments (running without a screen) will no longer crash by exposing fake auth-stub tools to the AI when an MCP server demands authentication. It's like thoroughly decluttering your workstation: broken buttons now work predictably, phantom alarms have been silenced, and the flickering monitor that scrambled your spreadsheets has finally been replaced, leaving you with a distraction-free space.

Original changelog

Original changelogAuto mode gets safety nets against destructive commands

Improved auto mode safety: destructive git commands (`git reset --hard`, `git checkout -- .`, `git clean -fd`, `git stash drop`) are now blocked when you didn't ask to discard local work, `git commit --amend` is blocked when the commit wasn't made by the agent this session, and `terraform destroy`/`pulumi destroy`/`cdk destroy` are blocked unless you asked for the specific stack
Fixed scheduled task and webhook trigger deliveries being treated as keyboard input; they now classify as task notifications and can no longer approve a pending action or set the session title in auto mode

Original changelogAgent teams are tougher, and search/output glitches are gone

Fixed tmux teammate panes failing to launch when the shell has slow rc-file initialization, and keystrokes typed during agent spawn leaking into the new tmux pane instead of the leader prompt
Fixed background tasks started by a teammate being killed when the teammate finishes a turn
Fixed WebSearch returning empty results in subagents
Fixed turns silently completing with no visible output when the model returned only a thinking block; Claude now re-prompts once
Fixed `thinking.disabled.display: Extra inputs are not permitted` 400 errors on subagent spawns and session-title generation for affected configurations

Original changelogSettings and UI cleaned up, squash screen-corrupting bugs

Changed `/config` toggle behavior: Enter and Space both change the selected setting, and Esc now saves and closes instead of reverting
Added `/config --help` to list all available shorthand keys for `/config key=value`
Added `attribution.sessionUrl` setting to omit the claude.ai session link from commits and PRs in web and Remote Control sessions
Removed the startup "setup issues" line under the logo — run `/doctor` to see configuration issues or use `--debug`
Added a warning when the requested model is deprecated or automatically updated to a newer model, shown on stderr in print mode (`-p`) and now also covering models set in agent frontmatter
Fixed fullscreen TUI corruption (statusline mid-screen, duplicated spinner rows, merged text) in Windows Terminal under heavy nested-subagent load
Fixed the terminal cursor being stranded above the prompt after navigating history in vim mode with the native cursor enabled
Fixed user-level skills appearing multiple times in slash-command autocomplete when multiple plugins are enabled
Fixed MCP servers requiring authentication exposing auth-stub tools to the model in headless/SDK mode
Fixed focus mode showing "Ran N PostToolUse hooks" timing lines under each response