GitLab 合併請求可直接開工作樹
同事丟來 GitLab 的合併請求網址時,現在可把網址交給 --worktree,也能在 claude agents 檢視裡直接辨認它。工作樹(worktree,Git 為同一專案開出的平行副本)讓你另開一份地方查看修改,不必離開手邊工作。
合併請求會顯示成 !N,因此清單裡能看出它是 GitLab 的項目。
發布日期:2026-08-14
同事丟來 GitLab 的合併請求網址時,現在可把網址交給 --worktree,也能在 claude agents 檢視裡直接辨認它。工作樹(worktree,Git 為同一專案開出的平行副本)讓你另開一份地方查看修改,不必離開手邊工作。
合併請求會顯示成 !N,因此清單裡能看出它是 GitLab 的項目。
公司透過 apps gateway 連到 Anthropic 上游服務,又想知道費用算在誰身上時,可選擇開啟 forward_user_identity。這個設定會把已登入使用者的身分放進 headers(隨請求附上的資訊欄位)。再交給閘道後方代替你轉送請求的 proxy。
此設定是選用項目;不開啟便不會轉送這份身分資訊。
在 Linux 用 Bash 工具跑建置,若擔心失控的建置拖住工作階段,可選擇設定 CLAUDE_CODE_TOOL_MEMORY_LIMIT。它會替 Bash 指令啟用 memory cgroup(替一組程式設下記憶體界線的 Linux 機制)。
這是選用支援,目的是避免失控的建置讓整個工作階段停住。
同一個 WebFetch 工作階段裡,想調整網址快取保存多久,現在可設定環境變數 CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS。快取(cache,把查過的結果暫存起來直接用)會在工作階段內保存網址查詢結果;這個變數專門調整它的存活時間。
預設值仍是 15 分鐘,沒有因這項設定而改變。
Claude 正等你回應權限提示,雲端環境卻在此時關閉,先前偶爾會把雲端工作階段標成遺失。這次修正針對的正是「等待權限」與「環境關閉」同時發生的情況,也不把環境關閉誤當成工作階段遺失的錯誤依據。
之後遇到這種順序,工作階段不會再被錯誤標記為 lost。
使用會在固定時間結束長連線的 serverless 主機時,MCP v2 連線先前可能不停重開 subscriptions/listen 串流。MCP(Model Context Protocol,讓 AI 連接外部工具的協定)透過這條串流接收訂閱資訊。
因此,面對會終止長持連線的伺服器,連線不會無止盡重啟。
你在 Claude Desktop 或 VS Code 裡等權限提示,若設了 Notification hook,先前它可能沒有反應。Notification hook(通知掛鉤,特定事件發生時被觸發的小程式)原本應在需要權限時告訴你。
這項修正只針對兩個指定環境中的權限提示,讓掛鉤能正常觸發。
Linux 上開著沙盒卻沒有操作時,先前有些閒置工作階段仍會讓一個 CPU 核心維持 100% 使用率。沙盒(sandbox,隔開程式可碰範圍的受限環境)本應在你沒動作時安靜待著,而非持續消耗處理器。
修正後,啟用沙盒的閒置工作階段不再出現這個單核心滿載問題。
你在 -p 模式執行,或載入 plugins、MCP 後輸入 /checkup、/review,若使用者或專案技能恰好同名,先前可能看到「Unknown command」。技能(skill,教 Claude 完成特定工作的說明組)名稱相撞時,不該讓內建別名失效。
這次修正涵蓋 -p,以及 plugins 或 MCP 已載入的情況。
技能或指令收到參數後,先前參數內容可能再被展開成 template markers(模板標記,會被程式替換的特殊符號)。這會把原本只是輸入值的文字,再當成另一輪要處理的指示,改變原有輸入的意思。
現在參數代入一次後便保留其值,不會被再次展開成模板標記。
Windows 路徑若用 NT 的 \??\ device prefix 拼寫,先前可能繞過 UNC 路徑驗證,留下 NTLM 憑證外洩風險。UNC 路徑驗證(檢查網路共享位置寫法的安全檢查)原本就該攔住這類路徑。
這項修正關閉的是透過該特殊前綴造成的 NTLM credential-leak 漏洞。
啟動 claude self-hosted-runner 時,現在會先建立工作階段分支,且不必改寫工作樹。工作階段(session,一次持續工作的連線與狀態)一開始少了會擋住 agent 啟動的兩次伺服器往返。
因此,這個 runner 的工作階段啟動時間獲得改善,agent 不再被那兩次往返阻住。
apps gateway 接到 Vertex、Foundry 或 AWS 上 Claude Platform 回傳的 400 或 413 錯誤時,現在會帶出上游服務自己的錯誤訊息。上游(upstream,請求原本要送往的服務端)說明能讓你看到它實際拒絕的理由。
使用 apps gateway 的 auto-compact 時,這項錯誤已修正。auto-compact(自動壓縮,將較早對話整理得更短以騰出內容空間)是 gateway 替工作階段整理內容的流程。
因此,透過 apps gateway 進行自動壓縮時,不再受這項錯誤影響。
準備檢查 plugin 時,claude plugin validate 現在會查看單獨存在的 .claude/skills 資料夾。它會回報其中 frontmatter(檔案開頭給工具讀取的欄位)無法解析的 SKILL.md。
即使 .claude/skills 是裸資料夾而非完整結構,驗證也會納入檢查。
使用螢幕閱讀器調整 /effort 時,選擇器現在會呈現成編號清單,並要求輸入對應數字。螢幕閱讀器(screen reader,把畫面內容讀出聲的輔助工具)需要能循序讀懂每個操作選項與目前選擇。
此外,提示文字和對話框文字不再被裁切,讀到的內容能完整保留。
用 print mode 送出 Claude Code 不認得的 model ID 時,現在 stderr(標準錯誤輸出,程式用來報告問題的文字通道)會寫出 [claude-code:unrecognized_model]。這條診斷訊息告訴你請求確實帶了未識別的模型 ID。
若想不再看到它,可用 modelOverrides 將該模型 ID 對應到已知模型。
你的儲存庫 origin remote 在 gitlab.com 或 bitbucket.org 時,GitHub app 設定提示不再冒出來。origin remote(儲存庫連向遠端來源的位置)既不是 GitHub,就不該叫你設定 GitHub app。
同時,enterprise marketplace 提示會涵蓋不是 GitHub 的內部 Git 主機。
使用 Opus 4.8、Sonnet 5、Fable 5、Mythos 5 或更高版本模型時,TaskCreate、TaskGet、TaskUpdate、TaskList、TodoWrite 這些待辦與任務追蹤工具不再提供。這是既有工具可用範圍的變更,不是新增工具。
要恢復它們,設定環境變數 CLAUDE_CODE_ENABLE_TODO_TOOLS=1。
Windows 的 auto mode 對一般 cd <dir> && <command> > file Bash 指令反覆停下要求手動核准,這個 2.1.232 回歸問題已修正。同時,2.1.232 對 Cygwin 風格符號連結與輸入重新導向 < file 的 Bash 權限改動被撤回。
較窄的版本會在後續版本回來。
When a teammate sends a GitLab merge-request URL, you can now give that URL to --worktree and recognize it in the claude agents view. A worktree is a parallel copy of a Git project, so you can inspect changes somewhere separate from current work.
Merge requests appear as !N, making their GitLab identity visible in the list.
If your company connects to Anthropic upstreams through an apps gateway and needs to assign spending to people, it can opt into forward_user_identity. This setting puts the signed-in user's identity into request headers for a proxy behind the gateway.
Leave it off and that identity is not forwarded.
When a build runs through the Bash tool on Linux, you can opt into CLAUDE_CODE_TOOL_MEMORY_LIMIT if a runaway build might stall the session. It enables a memory cgroup, Linux's boundary for the memory available to a group of programs.
The optional limit keeps a runaway build from stalling the session.
Within one WebFetch session, you can now set CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS to choose how long its URL cache lasts. A cache keeps a URL lookup result for direct reuse during the session; this variable controls that lifetime.
The default remains 15 minutes.
If Claude was waiting at a permission prompt and the cloud environment shut down, a cloud session could occasionally be marked as lost. This fix covers that exact overlap: waiting for permission while the environment closes.
In that situation, the session is no longer wrongly marked lost.
With a serverless host that ends long-held streams at a fixed timeout, an MCP v2 connection could keep reopening its subscriptions/listen stream. MCP is the protocol that connects AI to outside tools, and this stream receives subscription information.
Such servers no longer trigger endless stream reopening.
If you use a Notification hook while working in Claude Desktop or VS Code, it may previously have stayed silent for a permission prompt. A Notification hook is a small program triggered by an event and should notify you when permission is needed.
The fix covers permission prompts in those two environments.
On Linux, an idle session could keep one CPU core at 100% even when sandboxing was enabled. A sandbox is a restricted environment that limits what a program can touch, and it should sit quietly when unused.
Idle sandboxed sessions no longer hit that single-core saturation.
In -p mode, or after loading plugins or MCP, entering /checkup or /review could produce “Unknown command” if a user or project skill had the same name. A skill is a set of instructions that teaches Claude a particular job, and a name collision should not hide bundled aliases.
The fix covers -p and the loaded plugin or MCP cases.
After a skill or command received an argument, its value could be expanded again as template markers: special symbols the program replaces. That treated input text as another instruction to process.
Now an argument keeps its value after substitution instead of becoming template markers again.
On Windows, a path spelled with the NT \??\ device prefix could bypass UNC path validation and expose an NTLM credential-leak vector. UNC validation is the safety check for network-share path spelling and should catch such paths.
The fix closes the leak route created through that special prefix.
When starting claude self-hosted-runner, the session branch is now created without rewriting the worktree. A session is the connection and state for one continuous stretch of work, and its start no longer waits for two server round trips that blocked the agent launch.
The runner's session starts faster because those two round trips no longer block the agent.
When an apps gateway receives a 400 or 413 error from Vertex, Foundry, or Claude Platform on AWS, it now carries the upstream service's own message. An upstream is the service the request was meant to reach, so its message tells you why it rejected the request.
A bug in auto-compact on apps gateway is fixed. Auto-compact condenses earlier conversation to make room for more content in a session.
Auto-compact through apps gateway is no longer affected by this bug.
When checking a plugin, claude plugin validate now examines a bare .claude/skills directory. It reports SKILL.md files whose frontmatter, the fields at a file's beginning for tools to read, cannot be parsed.
Validation includes .claude/skills even when it stands alone rather than inside a full structure.
When using a screen reader to change /effort, the selector now appears as a numbered list and asks for a typed number. A screen reader is an assistive tool that reads screen content aloud and needs an ordered way to convey choices.
Hint text and dialog text are no longer clipped either.
If print mode sends a model ID Claude Code does not recognize, stderr, the program's text channel for reporting problems, now writes [claude-code:unrecognized_model]. The diagnostic line tells you the request went out with an unknown model ID.
Map that ID with modelOverrides to silence the line.
If a repository's origin remote is on gitlab.com or bitbucket.org, the GitHub app setup tip no longer appears. An origin remote is the repository's destination for its remote source, so a non-GitHub destination should not ask for GitHub app setup.
The enterprise marketplace tip now covers internal Git hosts that are not GitHub.
On Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models, the task-tracking tools TaskCreate, TaskGet, TaskUpdate, TaskList, and TodoWrite are no longer available. This changes the availability of existing tools; it does not add a new tool.
Set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to restore them.
On Windows, auto mode repeatedly stopped for manual approval on ordinary cd <dir> && <command> > file Bash commands; that 2.1.232 regression is fixed. At the same time, 2.1.232 Bash permission changes for Cygwin-style symlinks and input redirection < file have been reverted.
A narrower version will arrive in a later release.
Added GitLab merge request URL support to the `--worktree` flag and the `claude agents` view (where MRs display as `!N`)Added an opt-in `forward_user_identity` apps gateway setting on Anthropic upstreams that sends the signed-in user's identity as headers, so a proxy behind the gateway can attribute spend per userAdded opt-in memory cgroup support for Bash tool commands on Linux (`CLAUDE_CODE_TOOL_MEMORY_LIMIT`) so a runaway build can't stall the sessionAdded `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` environment variable to configure the WebFetch session URL cache TTL (default unchanged: 15 minutes)Fixed cloud sessions occasionally being marked as lost when the environment shut down while Claude was waiting on a permission promptFixed MCP v2 connections endlessly reopening the subscriptions/listen stream against servers that terminate long-held streams on a fixed timeout (e.g. serverless hosts)Fixed Notification hooks not firing for permission prompts when running under Claude Desktop or VS CodeFixed idle sessions on Linux sometimes keeping one CPU core at 100% when sandboxing is enabledFixed bundled skill aliases like `/checkup` and `/review` reporting "Unknown command" in `-p` mode or with plugins/MCP loaded when a user or project skill shadows the bundled skillFixed skill/command argument substitution to prevent argument values from being re-expanded as template markersFixed Windows paths spelled with the NT `\??\` device prefix bypassing UNC path validation, closing an NTLM credential-leak vectorImproved `claude self-hosted-runner` session start time: the session branch is now created without rewriting the working tree, and two server round trips no longer block the agent's launchImproved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gatewayImproved apps gateway error forwarding: 400/413 errors from Vertex, Foundry, and Claude Platform on AWS upstreams now carry the upstream's own message; fixes a bug with auto-compact on apps gatewayImproved `claude plugin validate` to check a bare `.claude/skills` directory, reporting SKILL.md files whose frontmatter fails to parseImproved screen reader mode: the `/effort` selector renders as a numbered list with a typed-number prompt, and hint and dialog text is no longer clippedImproved print mode diagnostics: a `[claude-code:unrecognized_model]` line is written to stderr when a request goes out for a model ID Claude Code doesn't recognize; map it with `modelOverrides` to silenceChanged the GitHub app setup tip to no longer appear in repositories whose origin remote is on gitlab.com or bitbucket.org; the enterprise marketplace tip now covers non-GitHub internal git hostsTodo/task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models; set `CLAUDE_CODE_ENABLE_TODO_TOOLS=1` to bring them backWindows: fixed auto mode repeatedly stopping for manual approval on ordinary `cd <dir> && <command> > file` Bash commands (a 2.1.232 regression)
Reverted the 2.1.232 Bash permission changes for Cygwin-style symlinks on Windows and for input redirections (`< file`); a narrower version will return in a later release