Released: 2026-08-17
Hosts that give each session its own config directory can set CLAUDE_CODE_PROJECT_DIR_NAME to choose a short per-project transcript directory name. On the host that starts Claude Code, set CLAUDE_CODE_PROJECT_DIR_NAME=project-a so the project's transcript directory uses project-a.
Bind a key to selection:clear to clear an in-app text selection, including in agents view. In fullscreen, Esc keeps a mouse selection highlighted while still interrupting or dismissing.
Repositories with a GitLab remote and authenticated glab now show MR !N and draft, pending, or green status in the footer and statusline.
Claude Code can now continue your session when a claude.ai usage limit resets. Turn it off in /config under “Continue automatically at usage limit.”
Claude is instructed to use your account email only to identify you, and not send it to unrelated services unless you ask.
Remote reads, session restore, CLAUDE.md includes, workflow scripts, and uploads now reject Windows NT-namespace \??\ paths, hardening remaining pre-approval access against NTLM credential leaks.
After a long conversation is compacted, auto mode no longer repeatedly rechecks and denies sandboxed commands’ network access. Session-scoped allow and deny answers also persist for background subagent permission prompts.
A non-streaming fallback response with a missing thinking or text field no longer crashes Claude Code. Empty or malformed API errors now report content type, body kind, size, request ID, and why streaming failed.
Unusual Unicode sequences no longer make markdown rendering extremely slow, and --- no longer runs into the next line. Your prompts now render markdown like replies, including code blocks, inline code, and lists.
SendMessage accepts recipients copied from ListAgents even at the 200-character session-name cap or with many emoji. Both commands now say when the session list was too long to check completely.
Repository detection now reads unusual git-remote userinfo without choosing the wrong host, so links and repository-specific behavior use the right host.
MCP diagnostics no longer print resolved secrets: scope-conflict warnings show configured ${VAR}, and connection-failure details show only the server origin.
strictKnownMarketplaces allowlists no longer accept an SCP-style Git marketplace source whose host differs from where Git will actually connect.
Fullscreen copying keeps all characters in modal text such as a /login OAuth URL. Expired profile credentials point to /login when a claude.ai login would take precedence, and stale CLAUDE_CODE_OAUTH_TOKEN reminders appear only to you, not Claude’s resumed turn.
While Claude works, /permissions changes apply to the rest of the turn and /add-dir <path> works. Fullscreen TUI dialogs can open mid-turn; dialogs survive a running ! command, and edited queued ! commands stay shell commands.
Queued messages no longer reappear in prompt history while queued; Esc on a selected queued message does not interrupt the turn, and ! mode no longer sticks after a mid-turn submit.
Restarting after “Try the new fullscreen renderer?” preserves permission mode, tool rules, model, and effort flags. /tui declines a switch when it cannot carry --allowed-tools or --disallowed-tools restrictions through restart.
Trust prompts now include the repository-wide scope warning when a repository appeared after its directory was first seen. Closing an IDE diff tab during a re-prompt no longer applies the previous input to the new prompt.
Remote Control files from Desktop or VS Code now upload for phone and web. Signing this computer into another account or organization stops the session within seconds with a reason. Sessions hosted by Desktop or VS Code send permission-mode updates to phone and claude.ai/code, and model updates to claude.ai/code. Effort chosen on a phone or claude.ai/code applies to terminal and Desktop/VS Code-hosted sessions; the session also publishes its effort level to connected clients.
Permission previews relay only to trusted channel servers and honor permission-capability opt-out. Masking no longer hides commands, paths, or destinations from approvers, while large private keys remain redacted and provider API tokens remain redacted even when immediately followed by shell delimiters.
Claude Desktop inter-session messages are no longer silently dropped when the recipient reads cross-session messaging as disabled, leaving the sender stuck “thinking.”
Auto-generated session titles now favor short, specific names such as “Login button bug” instead of restating the request as a sentence.
Loading the built-in claude-api skill now costs about 25k tokens instead of about 200k+ by loading reference docs on demand.
/goal clears itself with notice after unrecoverable errors. When background tasks keep it waiting 30+ minutes, Claude checks in; set CLAUDE_CODE_GOAL_CHECKIN_MINUTES=0 to opt out.
claude setup-token now rejects unexpected extra arguments instead of silently ignoring them.
Auto mode no longer repeats “Allowed by auto mode classifier” below every Agent tool call, and the running tool header dims its elapsed-time counter beside bold counts.
The /config “Default teammate model” setting is gone: agent-team teammates use the leader’s model unless spawn names one.
Between-turn background task notifications now reach the model inside <system-reminder> tags, matching mid-turn delivery.
At startup, Mantle skips the admin-pin availability probe when a main-loop model is already selected.
On Windows, startup no longer stalls on repeated rename retries when ~/.claude.json is read-only.
Consecutive shell commands no longer split into multiple “Ran 1 shell command” rows when todo or task updates occur between them.
Added the optional `CLAUDE_CODE_PROJECT_DIR_NAME` environment variable: hosts that give each session its own config directory can choose a short name for the per-project transcript directoryAdded the `selection:clear` keybinding action, so a key can be bound to clear an in-app text selection; also works in the agents view
Changed Esc in fullscreen mode to no longer clear a mouse text selection: it interrupts or dismisses as usual and the selection stays highlightedAdded a GitLab merge request badge to the footer and statusline: repos with a GitLab remote and an authenticated glab CLI show MR !N with draft/pending/green statesClaude Code now continues your session automatically when a claude.ai usage limit resets; turn it off in `/config` ("Continue automatically at usage limit")Claude is now told to use your account email only to identify you, and not to send it to unrelated services unless you askSecurity: remote file reads, session restore, CLAUDE.md includes, workflow scripts and file uploads now reject Windows NT-namespace (`\??\`) paths, hardening the remaining pre-approval file accesses against the NTLM credential-leak vectorFixed auto mode in very long sessions repeatedly re-checking and denying sandboxed commands' network access after the conversation had been compacted
Fixed session-scoped permission answers (including denies) being dropped when answering background subagent tool permission promptsFixed a crash when an API response on the non-streaming fallback path (typically via third-party gateways) contained a thinking block missing its thinking field or a text block missing its text field
Improved the "API returned an empty or malformed response" error to say what came back (content type, body kind, size, request ID) and why the original streaming request failedFixed markdown rendering becoming extremely slow for some messages containing unusual Unicode sequences
Fixed a `---` horizontal rule in rendered markdown running into the line after it
Improved the transcript: your own prompts now render markdown (highlighted code blocks, inline code, lists) the same way replies doFixed `SendMessage` rejecting a recipient copied from `ListAgents` when the session name is at the 200-character cap or emoji-heavy
`SendMessage` and `ListAgents` now say when your account's session list was too long to check completely, instead of treating unseen sessions as absentFixed repository detection mis-reading the host of git remotes with unusual userinfo, producing links and repo-specific behavior for the wrong hostFixed MCP diagnostics printing resolved secrets: scope-conflict warnings now show the configured `${VAR}` form, and connection-failure details show only the server originFixed `strictKnownMarketplaces` allowlists accepting SCP-style git marketplace sources whose host differs from the one git would actually connect toFixed modal text such as the `/login` OAuth URL losing characters when copied in fullscreen
Fixed: after `/login` while `CLAUDE_CODE_OAUTH_TOKEN` is set, the stale-token reminder no longer leaks into Claude's automatically resumed turn — it now appears only to you
Expired Anthropic profile credential now points you at `/login` when a claude.ai login would take precedenceFixed dialogs like `/permissions` opened while a `!` shell command was running being dismissed when the command finished
Fixed a queued `!` shell command being sent to the model as plain text after pressing up-arrow to edit the queued input
`/permissions` can now be opened while Claude is working — rule changes apply to the rest of the current turn
`/add-dir <path>` can now be used while Claude is working; `/add-dir`, `/autocompact`, `/theme`, `/help`, `/config` and `/advisor` dialogs open mid-turn in the fullscreen TUIFixed queued messages reappearing in the prompt history while still queued, Esc while selecting a queued message no longer interrupts the turn, and `!` mode no longer sticks after a mid-turn submitFixed accepting the "Try the new fullscreen renderer?" prompt restarting the session without its permission mode (e.g. `--dangerously-skip-permissions`), tool allow/deny rules, model or effort flags
Fixed `/tui` dropping launch `--allowed-tools`/`--disallowed-tools` rules when it restarts; it now declines to switch, with the reason, when the session has restrictions a restart can't carry overFixed trust prompts omitting the repository-wide scope warning when the directory was first seen before the repository existed there
Fixed a case where an IDE diff tab closing during a permission re-prompt could answer the new prompt with the previous inputFixed: files sent to the user during Remote Control sessions hosted by Claude Code Desktop or VS Code now upload, so they open on phone and web instead of showing an empty card
Remote Control: signing this computer in to a different claude.ai account or organization now stops the running session within seconds and says why, instead of a misleading HTTP 404 hours later
Remote Control sessions started from Claude Code Desktop or VS Code now keep phones and claude.ai/code updated on the session's permission mode (and claude.ai/code on the model) as they change
Remote Control: effort picks made on a phone or on claude.ai/code now apply to terminal- and Desktop/VS Code-hosted sessions, and the session publishes its effort level to connected clientsFixed: permission previews now relay only to channel servers admitted by the inbound trust gate, and a server's explicit permission-capability opt-out is honored
Fixed: credential masking on relayed permission previews can no longer hide commands, paths, or destinations from the approver; oversized private-key blocks now redact under full-strength redaction
Fixed: provider API tokens that mask on permission previews now mask even when directly followed by shell delimitersFixed Claude Desktop inter-session messages being silently dropped by the recipient session when cross-session messaging read as disabled, which left the sender's query "thinking" for many minutesImproved auto-generated session titles to read as short, specific names (e.g. "Login button bug") rather than sentences restating your request (e.g. "Fix the login button on mobile")Reduced the context cost of loading the built-in `claude-api` skill from ~200k+ tokens to ~25k by loading reference docs on demand`/goal` now clears itself with a notice when a turn dies on an unrecoverable error (e.g. revoked auth, an exhausted credit balance, or a context overflow) instead of staying armed
`/goal`: when background tasks keep a goal waiting for 30+ minutes, Claude now checks in on them instead of waiting indefinitely (set `CLAUDE_CODE_GOAL_CHECKIN_MINUTES=0` to opt out)`claude setup-token` now rejects unexpected extra arguments instead of silently ignoring themRemoved the redundant "Allowed by auto mode classifier" line that auto mode showed under every Agent tool call
Dimmed the elapsed-time counter on the running tool header so it no longer competes with the bold countsRemoved the "Default teammate model" setting from `/config`; agent-team teammates now use the leader's model unless the spawn names oneBackground task notifications delivered between turns are now sent to the model inside `<system-reminder>` tags, matching mid-turn deliveryMantle: skip the admin-pin availability probe at startup when a main-loop model is already pickedWindows: startup no longer stalls on repeated rename retries when `~/.claude.json` is read-onlyFixed consecutive shell commands splitting into multiple "Ran 1 shell command" rows when todo/task updates were interleaved between them