繁體中文

新功能

GitLab 合併請求可直接開工作樹

同事丟來 GitLab 的合併請求網址時,現在可把網址交給 --worktree,也能在 claude agents 檢視裡直接辨認它。工作樹(worktree,Git 為同一專案開出的平行副本)讓你另開一份地方查看修改,不必離開手邊工作。

合併請求會顯示成 !N,因此清單裡能看出它是 GitLab 的項目。

新功能

閘道可把使用者身分交給後端記帳

公司透過 apps gateway 連到 Anthropic 上游服務,又想知道費用算在誰身上時,可選擇開啟 forward_user_identity。這個設定會把已登入使用者的身分放進 headers(隨請求附上的資訊欄位)。再交給閘道後方代替你轉送請求的 proxy。

此設定是選用項目;不開啟便不會轉送這份身分資訊。

新功能

Linux Bash 可替失控建置設記憶體上限

在 Linux 用 Bash 工具跑建置,若擔心失控的建置拖住工作階段,可選擇設定 CLAUDE_CODE_TOOL_MEMORY_LIMIT。它會替 Bash 指令啟用 memory cgroup(替一組程式設下記憶體界線的 Linux 機制)。

這是選用支援,目的是避免失控的建置讓整個工作階段停住。

新功能

WebFetch 網址快取保存時間可自行設定

同一個 WebFetch 工作階段裡,想調整網址快取保存多久,現在可設定環境變數 CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS。快取(cache,把查過的結果暫存起來直接用)會在工作階段內保存網址查詢結果;這個變數專門調整它的存活時間。

預設值仍是 15 分鐘,沒有因這項設定而改變。

問題修復

雲端關機等權限時,不再誤報遺失工作階段

Claude 正等你回應權限提示,雲端環境卻在此時關閉,先前偶爾會把雲端工作階段標成遺失。這次修正針對的正是「等待權限」與「環境關閉」同時發生的情況,也不把環境關閉誤當成工作階段遺失的錯誤依據。

之後遇到這種順序,工作階段不會再被錯誤標記為 lost。

問題修復

MCP 長連線遇逾時不再反覆重開

使用會在固定時間結束長連線的 serverless 主機時,MCP v2 連線先前可能不停重開 subscriptions/listen 串流。MCP(Model Context Protocol,讓 AI 連接外部工具的協定)透過這條串流接收訂閱資訊。

因此,面對會終止長持連線的伺服器,連線不會無止盡重啟。

問題修復

桌面版與 VS Code 的權限提示會觸發通知掛鉤

你在 Claude Desktop 或 VS Code 裡等權限提示,若設了 Notification hook,先前它可能沒有反應。Notification hook(通知掛鉤,特定事件發生時被觸發的小程式)原本應在需要權限時告訴你。

這項修正只針對兩個指定環境中的權限提示,讓掛鉤能正常觸發。

問題修復

Linux 閒置沙盒不再佔滿單一 CPU 核心

Linux 上開著沙盒卻沒有操作時,先前有些閒置工作階段仍會讓一個 CPU 核心維持 100% 使用率。沙盒(sandbox,隔開程式可碰範圍的受限環境)本應在你沒動作時安靜待著,而非持續消耗處理器。

修正後,啟用沙盒的閒置工作階段不再出現這個單核心滿載問題。

問題修復

同名技能遮住內建指令時,別名仍可使用

你在 -p 模式執行,或載入 plugins、MCP 後輸入 /checkup、/review,若使用者或專案技能恰好同名,先前可能看到「Unknown command」。技能(skill,教 Claude 完成特定工作的說明組)名稱相撞時,不該讓內建別名失效。

這次修正涵蓋 -p,以及 plugins 或 MCP 已載入的情況。

問題修復

指令參數不會再被當成模板標記重算

技能或指令收到參數後,先前參數內容可能再被展開成 template markers(模板標記,會被程式替換的特殊符號)。這會把原本只是輸入值的文字,再當成另一輪要處理的指示,改變原有輸入的意思。

現在參數代入一次後便保留其值,不會被再次展開成模板標記。

問題修復

Windows 特殊路徑不能繞過網路路徑檢查

Windows 路徑若用 NT 的 \??\ device prefix 拼寫,先前可能繞過 UNC 路徑驗證,留下 NTLM 憑證外洩風險。UNC 路徑驗證(檢查網路共享位置寫法的安全檢查)原本就該攔住這類路徑。

這項修正關閉的是透過該特殊前綴造成的 NTLM credential-leak 漏洞。

新功能

自架執行器啟動時不再改寫工作樹

啟動 claude self-hosted-runner 時,現在會先建立工作階段分支,且不必改寫工作樹。工作階段(session,一次持續工作的連線與狀態)一開始少了會擋住 agent 啟動的兩次伺服器往返。

因此,這個 runner 的工作階段啟動時間獲得改善,agent 不再被那兩次往返阻住。

新功能

閘道轉送上游錯誤原文,方便看懂問題

apps gateway 接到 Vertex、Foundry 或 AWS 上 Claude Platform 回傳的 400 或 413 錯誤時,現在會帶出上游服務自己的錯誤訊息。上游(upstream,請求原本要送往的服務端)說明能讓你看到它實際拒絕的理由。

新功能

apps gateway 的自動壓縮錯誤已修正

使用 apps gateway 的 auto-compact 時,這項錯誤已修正。auto-compact(自動壓縮,將較早對話整理得更短以騰出內容空間)是 gateway 替工作階段整理內容的流程。

因此,透過 apps gateway 進行自動壓縮時,不再受這項錯誤影響。

新功能

外掛驗證可找出技能說明檔格式錯誤

準備檢查 plugin 時,claude plugin validate 現在會查看單獨存在的 .claude/skills 資料夾。它會回報其中 frontmatter(檔案開頭給工具讀取的欄位)無法解析的 SKILL.md。

即使 .claude/skills 是裸資料夾而非完整結構,驗證也會納入檢查。

新功能

螢幕閱讀器可用數字選擇努力程度

使用螢幕閱讀器調整 /effort 時,選擇器現在會呈現成編號清單,並要求輸入對應數字。螢幕閱讀器(screen reader,把畫面內容讀出聲的輔助工具)需要能循序讀懂每個操作選項與目前選擇。

此外,提示文字和對話框文字不再被裁切,讀到的內容能完整保留。

新功能

列印模式會提示未認得的模型 ID

用 print mode 送出 Claude Code 不認得的 model ID 時,現在 stderr(標準錯誤輸出,程式用來報告問題的文字通道)會寫出 [claude-code:unrecognized_model]。這條診斷訊息告訴你請求確實帶了未識別的模型 ID。

若想不再看到它,可用 modelOverrides 將該模型 ID 對應到已知模型。

新功能

非 GitHub 儲存庫不再收到錯誤的 App 設定提醒

你的儲存庫 origin remote 在 gitlab.com 或 bitbucket.org 時,GitHub app 設定提示不再冒出來。origin remote(儲存庫連向遠端來源的位置)既不是 GitHub,就不該叫你設定 GitHub app。

同時,enterprise marketplace 提示會涵蓋不是 GitHub 的內部 Git 主機。

新功能

較新模型預設不用待辦工具,仍可用環境變數取回

使用 Opus 4.8、Sonnet 5、Fable 5、Mythos 5 或更高版本模型時,TaskCreate、TaskGet、TaskUpdate、TaskList、TodoWrite 這些待辦與任務追蹤工具不再提供。這是既有工具可用範圍的變更,不是新增工具。

要恢復它們,設定環境變數 CLAUDE_CODE_ENABLE_TODO_TOOLS=1。

問題修復

Windows Bash 權限調整收回過寬規則

Windows 的 auto mode 對一般 cd <dir> && <command> > file Bash 指令反覆停下要求手動核准,這個 2.1.232 回歸問題已修正。同時,2.1.232 對 Cygwin 風格符號連結與輸入重新導向 < file 的 Bash 權限改動被撤回。

較窄的版本會在後續版本回來。

English

FEATURE

Open a worktree straight from a GitLab merge request

When a teammate sends a GitLab merge-request URL, you can now give that URL to --worktree and recognize it in the claude agents view. A worktree is a parallel copy of a Git project, so you can inspect changes somewhere separate from current work.

Merge requests appear as !N, making their GitLab identity visible in the list.

FEATURE

Gateway can pass user identity to proxy accounting

If your company connects to Anthropic upstreams through an apps gateway and needs to assign spending to people, it can opt into forward_user_identity. This setting puts the signed-in user's identity into request headers for a proxy behind the gateway.

Leave it off and that identity is not forwarded.

FEATURE

Linux Bash can cap memory for a runaway build

When a build runs through the Bash tool on Linux, you can opt into CLAUDE_CODE_TOOL_MEMORY_LIMIT if a runaway build might stall the session. It enables a memory cgroup, Linux's boundary for the memory available to a group of programs.

The optional limit keeps a runaway build from stalling the session.

FEATURE

Set WebFetch URL cache lifetime yourself

Within one WebFetch session, you can now set CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS to choose how long its URL cache lasts. A cache keeps a URL lookup result for direct reuse during the session; this variable controls that lifetime.

The default remains 15 minutes.

BUGFIX

Cloud shutdown during a permission wait no longer loses session

If Claude was waiting at a permission prompt and the cloud environment shut down, a cloud session could occasionally be marked as lost. This fix covers that exact overlap: waiting for permission while the environment closes.

In that situation, the session is no longer wrongly marked lost.

BUGFIX

MCP long connections stop reopening after timeouts

With a serverless host that ends long-held streams at a fixed timeout, an MCP v2 connection could keep reopening its subscriptions/listen stream. MCP is the protocol that connects AI to outside tools, and this stream receives subscription information.

Such servers no longer trigger endless stream reopening.

BUGFIX

Permission prompts trigger notification hooks in Desktop and VS Code

If you use a Notification hook while working in Claude Desktop or VS Code, it may previously have stayed silent for a permission prompt. A Notification hook is a small program triggered by an event and should notify you when permission is needed.

The fix covers permission prompts in those two environments.

BUGFIX

Idle Linux sandbox stops filling one CPU core

On Linux, an idle session could keep one CPU core at 100% even when sandboxing was enabled. A sandbox is a restricted environment that limits what a program can touch, and it should sit quietly when unused.

Idle sandboxed sessions no longer hit that single-core saturation.

BUGFIX

Bundled aliases still work when same-named skills shadow them

In -p mode, or after loading plugins or MCP, entering /checkup or /review could produce “Unknown command” if a user or project skill had the same name. A skill is a set of instructions that teaches Claude a particular job, and a name collision should not hide bundled aliases.

The fix covers -p and the loaded plugin or MCP cases.

BUGFIX

Command arguments no longer get re-read as template markers

After a skill or command received an argument, its value could be expanded again as template markers: special symbols the program replaces. That treated input text as another instruction to process.

Now an argument keeps its value after substitution instead of becoming template markers again.

BUGFIX

Windows device paths cannot bypass network-path checks

On Windows, a path spelled with the NT \??\ device prefix could bypass UNC path validation and expose an NTLM credential-leak vector. UNC validation is the safety check for network-share path spelling and should catch such paths.

The fix closes the leak route created through that special prefix.

FEATURE

Self-hosted runner starts without rewriting worktree

When starting claude self-hosted-runner, the session branch is now created without rewriting the worktree. A session is the connection and state for one continuous stretch of work, and its start no longer waits for two server round trips that blocked the agent launch.

The runner's session starts faster because those two round trips no longer block the agent.

FEATURE

Gateway forwards upstream error message itself

When an apps gateway receives a 400 or 413 error from Vertex, Foundry, or Claude Platform on AWS, it now carries the upstream service's own message. An upstream is the service the request was meant to reach, so its message tells you why it rejected the request.

FEATURE

Apps gateway auto-compact bug is fixed

A bug in auto-compact on apps gateway is fixed. Auto-compact condenses earlier conversation to make room for more content in a session.

Auto-compact through apps gateway is no longer affected by this bug.

FEATURE

Plugin validation finds malformed skill description files

When checking a plugin, claude plugin validate now examines a bare .claude/skills directory. It reports SKILL.md files whose frontmatter, the fields at a file's beginning for tools to read, cannot be parsed.

Validation includes .claude/skills even when it stands alone rather than inside a full structure.

FEATURE

Screen readers can choose effort with numbers

When using a screen reader to change /effort, the selector now appears as a numbered list and asks for a typed number. A screen reader is an assistive tool that reads screen content aloud and needs an ordered way to convey choices.

Hint text and dialog text are no longer clipped either.

FEATURE

Print mode flags unrecognized model IDs

If print mode sends a model ID Claude Code does not recognize, stderr, the program's text channel for reporting problems, now writes [claude-code:unrecognized_model]. The diagnostic line tells you the request went out with an unknown model ID.

Map that ID with modelOverrides to silence the line.

FEATURE

Non-GitHub repositories stop getting wrong app setup tip

If a repository's origin remote is on gitlab.com or bitbucket.org, the GitHub app setup tip no longer appears. An origin remote is the repository's destination for its remote source, so a non-GitHub destination should not ask for GitHub app setup.

The enterprise marketplace tip now covers internal Git hosts that are not GitHub.

FEATURE

Newer models hide todo tools by default, with an opt-in return

On Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models, the task-tracking tools TaskCreate, TaskGet, TaskUpdate, TaskList, and TodoWrite are no longer available. This changes the availability of existing tools; it does not add a new tool.

Set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to restore them.

BUGFIX

Windows Bash permission change narrows back overly broad rules

On Windows, auto mode repeatedly stopped for manual approval on ordinary cd <dir> && <command> > file Bash commands; that 2.1.232 regression is fixed. At the same time, 2.1.232 Bash permission changes for Cygwin-style symlinks and input redirection < file have been reverted.

A narrower version will arrive in a later release.

原始 CHANGELOG

Original changelogGitLab 合併請求可直接開工作樹
Added GitLab merge request URL support to the `--worktree` flag and the `claude agents` view (where MRs display as `!N`)
Original changelog閘道可把使用者身分交給後端記帳
Added an opt-in `forward_user_identity` apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per user
Original changelogLinux Bash 可替失控建置設記憶體上限
Added opt-in memory cgroup support for Bash tool commands on Linux (`CLAUDE_CODE_TOOL_MEMORY_LIMIT`) so a runaway build can't stall the session
Original changelogWebFetch 網址快取保存時間可自行設定
Added `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes)
Original changelog雲端關機等權限時,不再誤報遺失工作階段
Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission prompt
Original changelogMCP 長連線遇逾時不再反覆重開
Fixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g. serverless hosts)
Original changelog桌面版與 VS Code 的權限提示會觸發通知掛鉤
Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS Code
Original changelogLinux 閒置沙盒不再佔滿單一 CPU 核心
Fixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabled
Original changelog同名技能遮住內建指令時,別名仍可使用
Fixed bundled skill aliases like `/checkup` and `/review` reporting "Unknown command" in `-p` mode or with plugins/MCP loaded when a user or project skill shadows the bundled skill
Original changelog指令參數不會再被當成模板標記重算
Fixed skill/command argument substitution to prevent argument values from being re-expanded as template markers
Original changelogWindows 特殊路徑不能繞過網路路徑檢查
Fixed Windows paths spelled with the NT `\??\` device prefix bypassing UNC path validation, closing an NTLM credential-leak vector
Original changelog自架執行器啟動時不再改寫工作樹
Improved `claude self-hosted-runner` session start time: the session branch is now created without rewriting the working tree, and two server round trips no longer block the agent's launch
Original changelog閘道轉送上游錯誤原文,方便看懂問題
Improved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gateway
Original changelogapps gateway 的自動壓縮錯誤已修正
Improved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gateway
Original changelog外掛驗證可找出技能說明檔格式錯誤
Improved `claude plugin validate` to check a bare `.claude/skills` directory, reporting SKILL.md files whose frontmatter fails to parse
Original changelog螢幕閱讀器可用數字選擇努力程度
Improved screen reader mode: the `/effort` selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clipped
Original changelog列印模式會提示未認得的模型 ID
Improved print mode diagnostics: a `[claude-code:unrecognized_model]` line is written to stderr when a request goes out for a model ID Claude Code doesn't recognize; map it with `modelOverrides` to silence
Original changelog非 GitHub 儲存庫不再收到錯誤的 App 設定提醒
Changed the GitHub app setup tip to no longer appear in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hosts
Original changelog較新模型預設不用待辦工具,仍可用環境變數取回
Todo/task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` to bring them back
Original changelogWindows Bash 權限調整收回過寬規則
Windows: fixed auto mode repeatedly stopping for manual approval on ordinary `cd <dir> && <command> > file` Bash commands (a 2.1.232 regression)
Reverted the 2.1.232 Bash permission changes for Cygwin-style symlinks on Windows and for input redirections (`< file`); a narrower version will return in a later release