Release notes

FEATURE

Agents stay in their lanes, with safety checks intact

When Claude is handling another task in a worktree, you do not want it reaching back into your main checkout. Isolation now covers both file edits and Bash commands in every session type, so those sessions and their subagents cannot run destructive Git commands against the main checkout. A PreToolUse hook that could auto-allow its way around tool limits in background tasks has also been fixed. Messages sent with SendMessage to another agent session now pass through the permission classifier first. And when a skill is marked disable-model-invocation, Claude tells you to run it yourself instead of imitating its workflow. It is like keeping each collaborator in their own room while leaving the locks in place.

BUGFIX

Dismissed credit requests can be sent again

On a Team or Enterprise plan, a member whose earlier /usage-credits request was dismissed should be able to submit another one. Instead, Claude Code treated that dismissed request as if it were still pending, showed “you've already sent a usage credit request,” and blocked the new request. That record now stops blocking the member after dismissal. It is like an application channel reopening after a dismissal, so you can send a new request.

BUGFIX

Connections behind proxies stop timing out by mistake

If your company network uses an HTTPS proxy, Claude Code's startup check used to hang and then fail. It now uses the same proxy-aware transport as API requests and gives a clear timeout message. The false “Connection closed mid-response” report is also gone when a response had already finished. And when ANTHROPIC_BASE_URL points to a custom gateway, the idle timer now recognizes keep-alive pings arriving from the server instead of timing out anyway. Think of a parcel still reporting its location through a transfer station: the recipient should not be told it vanished halfway there.

BUGFIX

Usage, sign-in, and errors now tell the right story

When you open /usage, an MCP server is no longer charged for every turn after someone called it. Its share now includes only requests that actually consumed its tool results. If a claude.ai connector has an invalid session token, it shows a /login hint rather than wrongly asking for authorization. Tool errors also remain visible after the local MCP server that supplied a tool has been removed. Finally, SendMessage truncates an overly long summary instead of failing on its character limit. Think of a customer-service desk's ticket workflow: only a ticket that actually used a desk's supplied information counts usage for that desk; an invalid pass gets a /login instruction; an old ticket's error record stays viewable after its desk closes; and an overlong handoff summary is trimmed to fit the receiving field before it is sent.

FEATURE

Branches, diffs, and Remote Control follow the right settings

If you push a branch and create its pull request later, Claude Code can now link the session to that PR, including one created through the GitHub REST API. The /diff view, Remote Control workspace diff, and web-session file-edit diffs now read raw Git blob content, so project-configured diff drivers and textconv no longer distort what is shown. Remote Control also has a tighter start switch: repo-local .claude/settings.json and .claude/settings.local.json may turn it off, but cannot turn it on. To enable it, use /config at user scope. A shared project can post a “closed today” sign, but it cannot quietly open every collaborator's door.

BUGFIX

Agent model choices and progress labels are corrected; UltraPlan is removed

When an organization restricts a model family, a subagent or teammate using an alias such as model: opus could previously fall back to the parent agent's model. It now steps down within that family to the newest model the organization allows. A subagent transcript's spinner effort label now shows that subagent's own effort: setting, not the session-wide level. When the host manages models through CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST, its model-selection keys now beat stale on-disk managed-settings.json values. UltraPlan has also been removed. It is like a staffing board finally showing each person's actual shift, while the current rule from headquarters no longer loses to an old note in a filing cabinet.

BUGFIX

File watching is steadier, and screen readers stop repeating lines

While you are typing and hit Backspace, a screen reader in --ax-screen-reader mode used to read the entire input line again. Deleting at the end of a line now echoes only the characters just deleted, so you do not have to hear the same sentence repeatedly. Another rare interruption is fixed too: Claude Code could crash when its file watcher met a filesystem error or while that watcher was shutting down. Those moments no longer cause the rare crash. It is like a proofreader who erases one character at the end and reads only that character aloud, while the person watching the door does not switch off the whole office over a small incident.

Original changelog

Original changelogAgents stay in their lanes, with safety checks intact
Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type
Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks (summaries, compaction, renames)
Improved auto mode safety: messages sent to other agent sessions via `SendMessage` are now evaluated by the permission classifier before dispatch
Improved the refusal when Claude tries to invoke a skill with `disable-model-invocation`: Claude is now told to ask you to run the skill instead of replicating its workflow
Original changelogDismissed credit requests can be sent again
Fixed `/usage-credits` on Team and Enterprise showing "you've already sent a usage credit request" for members whose earlier request was dismissed, blocking them from sending a new one
Original changelogConnections behind proxies stop timing out by mistake
Fixed the startup connectivity check hanging and then failing behind an HTTPS proxy; it now uses the same proxy-aware transport as API requests and times out with a clear message
Fixed "Connection closed mid-response" errors being reported on responses that had actually completed
Fixed stream idle timeout firing on custom `ANTHROPIC_BASE_URL` gateways despite server keep-alive pings arriving on the wire
Original changelogUsage, sign-in, and errors now tell the right story
Fixed `/usage` overattributing usage to MCP servers: a server's share now reflects only the requests that actually consumed its tool results, instead of every turn after any call to it
Fixed claude.ai connectors being falsely marked as needing authorization when the session token is invalid — they now show a `/login` hint instead
Fixed tool errors not being displayed for tools no longer available locally, for example after an MCP server is removed
Fixed `SendMessage` rejecting a long summary — it now truncates instead, so sends no longer fail on a character limit
Original changelogBranches, diffs, and Remote Control follow the right settings
Fixed sessions not linking to pull requests created after the branch was pushed, including through the GitHub REST API
Improved the `/diff` view, the Remote Control workspace diff, and file-edit diffs in Claude Code on the web sessions to use raw git blob content, ignoring workspace-configured diff drivers and textconv
Changed Remote Control auto-start so repo-local settings (`.claude/settings.json` or `.claude/settings.local.json`) can no longer turn it on (they can still turn it off); enable it at user scope via `/config`
Original changelogAgent model choices and progress labels are corrected; UltraPlan is removed
Fixed org-restricted `model: opus`-style subagent and teammate family aliases dropping to the parent model instead of stepping down to the newest org-allowed model in the family
Fixed the spinner's effort label in a subagent's transcript view showing the session's effort level instead of the subagent's own `effort:` setting
Fixed host model-selection keys not taking precedence over a stale on-disk `managed-settings.json` when `CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST` is set
Removed ultraplan feature
Original changelogFile watching is steadier, and screen readers stop repeating lines
Fixed rare crashes when a file watcher hit a filesystem error or during file-watcher teardown
Fixed screen readers re-reading the whole input line on every backspace in `--ax-screen-reader` mode — end-of-line deletions now echo just the deleted characters