Claude Code 2.1.196

Released: 2026-06-29

Release notes

FEATURE

Organization default models, named sessions, easier collaboration

If you use Claude in an enterprise team, admins can now configure a default AI model (like Opus or Sonnet) for the whole company; if you haven't picked one, your menu will simply show "Org default". To help you avoid getting lost in a sea of background tasks, the system now automatically assigns readable names to new sessions as soon as they start, making them much easier to identify and message. Also, when Claude mentions a file in the chat, you can now simply Cmd-click (or Ctrl-click) it to instantly reveal that file in your Finder or Explorer. It's like going to a library where the clerk used to just hand you a list of barcode numbers; now, every book has a clear title, and simply pointing at a title on the list magically summons the book right to your hands.

FEATURE

Background tasks survive app closes and updates

Background tasks are practically immortal now. Previously, if you closed Claude, restarted it, or if the app updated itself in the background, your long-running commands and workflows would instantly die; they now survive these severe disruptions and carry on, even on Windows. If a system restart does manage to kill a background worker, the next time you open the agent list, it will automatically resume exactly from where it left off. This also fixes a nasty bug where waking a stalled task could accidentally delete its entire conversation history and force it to restart from scratch. It's like cooking a slow stew when the house loses power: previously you had to throw out the ruined pot and start over, but now when the power returns, the stove turns itself back on and flawlessly finishes simmering your meal.

PERF

Performance and foolproof: no false errors, saves 25% tokens on code review

Running /code-review now saves roughly 25% of tokens, and stalled responses will auto-retry. The /code-review command has been streamlined: five separate cleanup steps are now merged into one, cutting your token usage (API costs) by roughly 25%. On the foolproof side, typing very fast will no longer accidentally trigger the voice dictation system or swallow your spaces; and if an AI response completely stalls for 5 minutes with no output, a new watchdog will automatically abort and retry instead of leaving you staring at a frozen screen. Security got a bump too: malicious MCP (external tool) servers trying to sneak in via project settings files are now firmly blocked with a "Pending approval" badge. Also, using commands like git diff in Windows PowerShell will no longer falsely trigger catastrophic error alarms just because of standard text output. It's like hiring a lawyer to review a contract: they used to charge you for five separate meetings, but now they do it all at once for a 25% discount, and they instantly red-flag any sketchy clauses slipped in by the other party.

BUGFIX

Remote crash recovery and permission command fixes

Remote sessions just got a major resilience upgrade. If a mid-turn server restart interrupts your Remote session connection, it will now gracefully auto-resume on the next available worker instead of dying abruptly. If you moved directories with /cd and the app crashed, your old path won't haunt the resume list forever just because it had special characters in its name. On the permissions side, using the hazardous --dangerously-skip-permissions flag now actually displays the bypass disclaimer and applies the bypass to spawned agents as promised, instead of silently falling back to regular auto mode. Additionally, the regression where pressing Esc twice at an idle prompt failed to open the rewind menu is fixed, and opening the agents view from a foreground session now requires just a single left arrow press instead of two, matching the background session experience.

BUGFIX

Reduced UI stuttering and smooth sailing for plugins and logins

The terminal interface has been optimized to save energy and reduce visual clutter. When streaming long responses, the UI now skips redrawing unchanged areas to cut down on rendering work. If a background agent's structured output fails validation, it will no longer confusingly print the rejected attempt right next to its retry. We've also fixed several misleading statuses: /context will no longer falsely show 0 tokens across the board on Bedrock, and the /deep-research tool will accurately report "unverified" instead of dramatically claiming "all claims refuted" when a verification fails. For plugins and integrations, validating local plugins from the "." path now works properly, dependency version pins are respected even in git-backed local folders, and MCP OAuth logins will no longer ask for an entire encyclopedia of scopes causing enterprise IdPs like GitLab to outright reject you. Finally, if you configure a custom non-Anthropic base URL, the app now automatically disables the unneeded Remote Control feature to match other Bedrock/Vertex environments. It's like fixing a twitchy fuel gauge and upgrading the AC efficiency in your car; and when you go to get your security badge, the guard no longer rejects you just because you asked for building access in the wrong format.

Original changelog

Original changelogOrganization default models, named sessions, easier collaboration
Added support for organization default models — admins set it in the org console; it shows as "Org default" (or "Role default") in `/model` when you haven't picked one yourself
Added readable default names for sessions at start, making them easier to identify and message
Added clickable file attachments in chat — Cmd/Ctrl-click reveals the file in Finder/Explorer
Original changelogBackground tasks survive app closes and updates
Improved background session reliability: long-running commands and workflows now survive the session's process being stopped, restarted, or updated — including on Windows, where background shells are handed off instead of being killed
Improved background agents: workers killed by a daemon restart are now automatically resumed from where they left off the next time the agents view opens
Fixed waking a background job permanently deleting its conversation and re-running the original prompt when the transcript probe misread a real transcript; the file is now set aside, never deleted
Fixed multiple `claude agents` side panel issues: keyboard focus getting stuck when opening an agent, background jobs losing their subagent types on every open, and sessions showing incorrect status while actively running
Fixed `claude agents` session status: completed rows no longer flip between "Done" and "Needs your input", stalled agents are now labeled "Needs attention", and results that mention a PR show a clickable link
Original changelogPerformance and foolproof: no false errors, saves 25% tokens on code review
Improved `/code-review` workflow: merged five cleanup finders into one, cutting token usage by roughly 25%
Security: `claude mcp list`/`get` no longer spawn `.mcp.json` servers that a repo self-approved via a committed `.claude/settings.json`; untrusted workspaces show `⏸ Pending approval`
Fixed the rate-limit warning flickering off and rate-limit telemetry being over-counted when multiple parallel requests were in flight at the moment a usage limit was hit
Fixed PowerShell `git diff`/`git grep`, `egrep`/`fgrep`, and quoted search patterns containing `|` being reported as failures when they exit 1, matching Bash behavior
Fixed voice dictation swallowing spaces and spuriously starting a recording during very fast typing when voice mode is enabled
The streaming idle watchdog is now on by default for all providers — it aborts and retries when a response stream produces no events for 5 minutes. Set `CLAUDE_ENABLE_STREAM_WATCHDOG=0` to disable.
Original changelogRemote crash recovery and permission command fixes
Fixed mid-turn crash recovery for Remote sessions — sessions interrupted by a server restart now auto-resume on the next worker
Fixed sessions moved with `/cd` reappearing in the old directory's resume list after a non-graceful exit when the old path contained special characters
Fixed `claude agents --dangerously-skip-permissions` silently falling back to auto mode instead of showing the bypass disclaimer and applying bypass mode to spawned agents
Fixed Esc Esc at an idle prompt not opening the rewind menu (regression); use Ctrl+C or Ctrl+X Ctrl+K to stop background agents
Changed opening the agents view from a foreground session to require a single `←` press instead of two, matching the behavior in background sessions
Original changelogReduced UI stuttering and smooth sailing for plugins and logins
Reduced per-frame rendering work in the terminal UI by skipping no-op subtree walks during streaming
Fixed duplicate recap lines after a background session's turn: a schema-rejected StructuredOutput attempt no longer renders alongside its retry
Fixed `/context` showing 0 tokens for all tool groups on Bedrock
Fixed `/deep-research` misreporting verifier failures as "all claims refuted" instead of `unverified`
Fixed `claude plugin validate` skipping local plugins whose source is "." and stopping after the first error class
Fixed plugin dependency version pins not being honored when the marketplace was added as a local folder path backed by a git repo
Fixed MCP OAuth requesting the authorization server's full `scopes_supported` catalog when no scope is specified, causing `invalid_scope` failures on GitLab self-hosted and other enterprise IdPs
Remote Control is now disabled when `ANTHROPIC_BASE_URL` points at a non-Anthropic host, matching the existing behavior under `CLAUDE_CODE_USE_BEDROCK`/`_VERTEX`/`_FOUNDRY`