Release notes

FEATURE

Default model upgraded to Sonnet 5 — memory jumps to a million words, and it's cheaper too

Claude Code now defaults to Sonnet 5, with a native 1-million-token context window (context window, how much of the conversation the AI can remember at once; a token is the small chunk of text the AI reads and writes in) — meaning one conversation can now hold more code or documents without the AI forgetting what came before. From now through August 31, pricing is a promotional $2-$10 per million tokens.

FEATURE

File attachments in chat are now clickable — no more digging through folders yourself

When the AI mentions or attaches a file in chat, you used to have to switch to Finder or Explorer yourself and hunt for it. Now Cmd-click (Mac) or Ctrl-click (Windows/Linux) on the attachment jumps straight to that file, already selected, in your file manager. It's like a delivery slip that walks you straight to the right shelf instead of making you dig through the warehouse yourself.

BUGFIX

Listing MCP plugins no longer secretly starts servers hidden in untrusted projects

MCP servers (Model Context Protocol, the standard that lets the AI talk to external tools) used to spin up just from running the read-only claude mcp list/get commands, even in a project you hadn't trusted yet, as long as its own settings file (.claude/settings.json) had self-approved itself. Not anymore — an untrusted workspace now honestly shows '⏸ Pending approval', and merely listing servers no longer triggers anything to run. It's like flipping through a stranger's business cards used to dial their number by itself; now looking doesn't dial — you have to press confirm yourself.

BUGFIX

Waking a background job no longer wipes its entire conversation and forces a redo

Background jobs (tasks you hand off to the AI to run quietly while you do something else) used to occasionally have their entire conversation permanently deleted on waking, whenever the system misread the transcript as corrupted — and then it would auto-rerun your original prompt from scratch, wasting work and losing history. Now the suspect file just gets set aside instead of deleted, so your transcript survives. It's like a hospital that used to burn a medical record it thought was damaged and start a new one from scratch; now it just files the old one in another drawer instead — at least it's still there.

BUGFIX

The "skip all permission checks" flag now honestly warns you of the risk instead of quietly switching modes

--dangerously-skip-permissions (a flag that lets the AI act without asking your permission first) had a bug: turning it on used to silently downgrade it to 'auto mode' instead (which still asks before risky actions), without showing the risk disclaimer, and subagents (helper AIs spawned to do part of the work) didn't actually inherit the bypass either. Now it's fixed — flipping the switch shows the real risk warning, and subagents genuinely inherit the same bypass. It's like pressing a 'skip security check' button that secretly still stopped and searched you anyway, without telling you why — now pressing it really does skip the check, after first warning you it's risky.

FEATURE

Code review got leaner — same quality, a quarter less quota burned

/code-review (the command that has the AI review your code for problems) used to run five separate 'issue-finder' passes behind the scenes. Now they're merged into one pass — same review quality, but token usage (token, the unit the AI's reading/writing is metered in, which is also what your usage quota counts) drops by roughly a quarter. It's like replacing five separate security guards each patrolling once with one experienced guard who covers the whole route in a single pass — same coverage, a quarter less payroll.

FEATURE

Typing commands in terminal mode now auto-suggests file paths as you go, no more spelling them out yourself

When you press ! in Claude Code to drop into bash mode (typing raw terminal commands directly, bypassing the AI), typing a file path now triggers live autocomplete (autocomplete, a suggestion list that pops up partway through typing) — no need to remember and spell out exact folder names yourself. It's like a search engine that starts suggesting what you're looking for before you've finished typing.

FEATURE

After `/clear` wipes the conversation, `/rewind` can now bring back what came before it

Once you ran /clear (the command that wipes the current conversation so the AI forgets everything before it), there used to be no going back. Now /rewind (the command that rolls the conversation back to an earlier point) can reach back to before a /clear, giving you a second chance. It's like a paper shredder that used to be final — now there's a reconstruction machine next to it that can piece the strips back together.

BUGFIX

Stopping a background agent from the tasks panel now actually stays stopped — no more resurrections

Background agents (helper AIs spawned to work independently) used to occasionally wake themselves back up and keep running a while after you'd hit 'stop' in the tasks panel — your stop command wasn't really being honored. Now it's fixed: stopping an agent is permanent, no resurrections. It's like a vacuum cleaner that used to plug itself back in and start running again a few minutes after you unplugged it; now unplugging it actually means it stays off.

FEATURE

While the AI streams its answer word by word, your computer's fan no longer has to work overtime

When the AI streams its answer (streaming, writing text out token by token instead of waiting until it's fully done), the system used to redraw the screen every single time a little new text arrived, which was hard on your machine. Now text updates are batched and redrawn once every 100 milliseconds (a thousandth of a second), cutting CPU usage (CPU, your computer's 'brain' that does the actual computing) by roughly a third. It's like a waiter who used to run to the kitchen for every single bite of food, now waiting to carry out a full round of dishes at once — fewer trips, less out of breath.

Original changelog

Original changelogDefault model upgraded to Sonnet 5 — memory jumps to a million words, and it's cheaper too
Introducing Claude Sonnet 5: now the default model in Claude Code, with a native 1M-token context window and promotional pricing of $2/$10 per Mtok through August 31.
Original changelogFile attachments in chat are now clickable — no more digging through folders yourself
Added clickable file attachments in chat — Cmd/Ctrl-click reveals the file in Finder/Explorer.
Original changelogListing MCP plugins no longer secretly starts servers hidden in untrusted projects
Security: `claude mcp list`/`get` no longer spawn `.mcp.json` servers that a repo self-approved via a committed `.claude/settings.json`; untrusted workspaces show `⏸ Pending approval`.
Original changelogWaking a background job no longer wipes its entire conversation and forces a redo
Fixed waking a background job permanently deleting its conversation and re-running the original prompt when the transcript probe misread a real transcript; the file is now set aside, never deleted.
Original changelogThe "skip all permission checks" flag now honestly warns you of the risk instead of quietly switching modes
Fixed `claude agents --dangerously-skip-permissions` silently falling back to auto mode instead of showing the bypass disclaimer and applying bypass mode to spawned agents.
Original changelogCode review got leaner — same quality, a quarter less quota burned
Improved `/code-review` workflow: merged five cleanup finders into one, cutting token usage by roughly 25%.
Original changelogTyping commands in terminal mode now auto-suggests file paths as you go, no more spelling them out yourself
Added live file path autocomplete to bash mode (`!`).
Original changelogAfter `/clear` wipes the conversation, `/rewind` can now bring back what came before it
Added `/rewind` support for resuming a conversation from before `/clear` was run.
Original changelogStopping a background agent from the tasks panel now actually stays stopped — no more resurrections
Fixed background agents resurrecting after being stopped — stopping an agent from the tasks panel is now permanent.
Original changelogWhile the AI streams its answer word by word, your computer's fan no longer has to work overtime
Reduced CPU usage during streaming responses by ~37% by coalescing text updates to 100ms.