Gateway Hint Headers Introduced for More Precise Enterprise Traffic Routing
To help enterprise gateways tell what each model call is for, requests can now carry their own hint signals.
Claude Code now supports sending five hint headers with requests, covering request class, agent type, previous tool durations, context compaction status, and whether compaction was completed, making it easier for backend gateways to analyze traffic and route requests. To enable these headers when sending requests, simply set CLAUDE_CODE_GATEWAY_HINT_HEADERS=1. When managing model calls via custom gateways on internal networks, this setting helps enterprise systems accurately track the purpose and state of each invocation.
FEATURE
Remote Control Adds Session Forking to Launch Independent Background Sessions
When you want to test an alternative direction on mobile, you can now fork the conversation directly.
After launching Remote Control with claude --remote-control or /remote-control, you can tap fork directly in the Claude app, and your computer will automatically spawn an independent background session to continue execution. When debugging remotely from your phone on the go, this lets you preserve current progress while testing new approaches in parallel.
FEATURE
Proactive Disconnection Alerts for External Tools and Commands for Expired Logins
When an external tool drops mid-session, you are no longer left guessing. When using MCP (Model Context Protocol, a protocol connecting AI to external tools), if a tool server disconnects mid-session and automatic reconnection gives up, the terminal proactively displays a notification pointing you to the /mcp command. Additionally, if an MCP server's login credentials expire mid-session, the error message clearly explains how to re-authenticate.
FEATURE
Cloud Platforms Default Auto Mode to Local Classifier with Switch Available
Running auto mode on cloud-hosted platforms is now more responsive. Across Bedrock, Vertex AI, and Foundry, auto mode currently defaults to using the local classifier to identify commands. If organizations need to switch to the cloud platform's server-side classifier, they can set CLAUDE_CODE_AUTO_MODE_SERVER=1.
FEATURE
Telemetry Metrics Complete Tool Names and Problem Reports Filter Private Data
For performance checks, plugin login, and issue reports, this release separates the data that should be kept from the data that should be hidden. When enabling OTEL_LOG_TOOL_DETAILS=1 to track performance, cost and token metrics become more complete. Logs now include the real names of agents, skills, plugins, and MCP servers. Signing in with a Claude account now also requests access to your claude.ai plugins. When running /bug and /feedback to report issues, submitted reports retain only behavioral parameters from the last API request—such as model name, system prompt, and tools list—while automatically omitting request metadata and CLAUDE_CODE_EXTRA_BODY fields.
BUGFIX
Disabled Skills Move to Trash and Enterprise Management Rules Take Precedence
After a company turns off skills or rolls out managed rules, Claude Code should not keep using old permissions. When an organization turns off skills in claude.ai, previously synced skills no longer remain in sessions and instead move directly to the recoverable trash. Furthermore, allowManagedMcpServersOnly, deniedMcpServers, and disableClaudeAiConnectors rules configured via Mobile Device Management (MDM) or managed-settings.json are no longer ignored even when server-managed settings coexist, ensuring security controls take full effect.
BUGFIX
Security Boundary Protections Reinforced with Stricter Command Prompts and Path Access
Unreadable Bash commands, memory paths outside the working directory, and macOS file paths each return to the right permission handling.
When permissions.blockReadsOutsideWorkingDirectories is enabled, Bash commands that the permission checker cannot fully analyze no longer skip confirmation prompts, and a flaw where a subshell in bypass mode hid a dangerous rm command has been fixed; memory directories specified by project settings outside the working directory are no longer loaded into the prompt, recalled, indexed, or used for memory extraction. On macOS, dragged-in screenshots or files reported under a secondary path are no longer denied due to symlink resolution issues. Previous over-blocking on unanalyzable commands has been reverted, restoring confirmation prompts for commands like time -p make build.
FEATURE
Sub-Agent States Delivered Reliably and Long-Session Scheduling Runs Smoother
When background sub-agents are mid-run, the important part is that results do not disappear and scheduling does not run in the wrong place.
If a streamed reply omits token usage or carries no model ID, sub-agents and background agents are no longer marked as failed with lost results. When outputting via the SDK or --output-format stream-json, remaining messages and final reports from a sub-agent are no longer dropped even if it moves to the background mid-run. /tui no longer hangs on restart due to an agent-team member that has already finished. When .claude/scheduled_tasks.json is copied to a new worktree, scheduled tasks no longer run in the wrong session. Hook progress and sub-agent updates in long sessions no longer re-process the entire conversation history on every update.
BUGFIX
Thinking History Preserved Accurately and Context Usage Metering Avoids Premature Triggers
In long conversations, thinking history and context usage both need to be preserved accurately. Running /login, /upgrade, or /extra-usage no longer discards previous thinking history from the conversation, avoiding forced full prompt-cache rewrites on subsequent requests. The context meter and auto-compact no longer count advisor-tool turns at twice their actual size, fixing an issue where compaction triggered prematurely halfway through the window. Remote Control clients connected to Claude Desktop, VS Code, or JetBrains sessions are no longer refused when querying context window usage. The compaction status line spinner no longer displays duplicate ellipses.
FEATURE
Artifacts Publishing Re-sends Automatically and Databases Support Single-Field Updates
Artifact publishing, page reads, and database updates now make it less likely that you have to redo work after getting stuck.
In cloud or Remote Control sessions, the Artifact tool no longer pauses unnecessarily for approval when auto mode uploads chat attachments. Database updates can now remove a single field without rewriting the entire document, and publishing requests whose connections drop after reaching the server are re-sent safely to avoid failures or duplicate versions. When encountering unsupported file types, the terminal displays a clean single-line error while informing Claude of supported formats; reading a page clearly explains the database rules and capabilities for that page, and operations no longer trigger false-positive plugin suggestions.
FEATURE
Cloud Gateway Auth Errors Provide Specific Guidance with Clearer Certificate and Proxy Diagnostics
Diagnostic messages now pinpoint specific causes during cloud platform and network connection issues. When encountering 401 or 403 errors on Bedrock, Vertex AI, or Foundry, or 403 errors on Claude app gateways, messages no longer blindly prompt to run /login; instead, they clearly specify which credential to refresh or guide you to contact your gateway administrator. When a cloud session cannot be created due to an expired or revoked login, the prompt correctly directs you to run /login. In-session SSL certificate and proxy connection errors now list error codes and remediation steps, such as pointing to NODE_EXTRA_CA_CERTS for untrusted corporate certificates.
FEATURE
GitHub Workflow Errors Pinpoint Causes with Clearer Pull Request Diagnostics
When a GitHub workflow only shows a generic error code, it can leave you stuck outside the real login, SAML, or webhook problem. Running /install-github-app no longer misreports SAML single sign-on blocks as missing administrator permissions, and cloud sessions encountering IP allowlists, suspended app installations, or SAML restrictions directly show the specific cause. When running /autofix-pr, failures with gh pr view display native GitHub CLI errors (such as sign-in or rate limits), while webhook delivery failures state the specific reason. Running /web-setup with a refused GitHub token lists likely causes and fixes, and connection failures clearly point out proxy or TLS certificate issues.
BUGFIX
Exclamation Marks Allowed in Shell Mode and Repository Exclude Stubs No Longer Linger
You are in shell mode, you type ! grep …, and the leading exclamation mark vanishes — that one is fixed. When already in shell mode, the main prompt no longer drops a leading ! exclamation mark, so you can type negated commands. The other fix: during long-running sessions, if a repository's .git directory has been deleted or moved away, Claude Code no longer recreates a stub .git/info/exclude file in its place.
FEATURE
VS Code Hides Disabled Feedback and Windows Error Banner Eliminated
VS Code feedback entry points should stay hidden when disabled, and Windows should not show fake errors after a turn completes. If an organization has disabled product feedback, the "Report a problem" option in VS Code along with /bug and /feedback commands will no longer open a report form. On Windows, a red exit banner showing error code 4294967295 no longer pops up at the top of the screen after completed turns. Furthermore, when adding mapped network drives via --add-dir, the system strengthens network permission checks for Universal Naming Convention (UNC) paths.
FEATURE
Web Routine Management Updated with Confirmation Dialog for Unsaved Changes
Routine pages now ask first before throwing away the name, prompt, or edits you typed.
After an administrator removes and re-adds an organization connector, routines no longer lose access permissions or erroneously invoke old connectors. When a routine name, prompt, or edit has been entered on the New routine page or Edit routine dialog, closing prompts a "Discard unsaved changes?" confirmation. The detail page has also been redesigned: breadcrumbs now include a menu and rename option, the on/off switch and Run now button are integrated at the top, and run history is displayed alongside routine settings.
FEATURE
Web Environment Setup Made More Reliable with Direct Routing to Configuration
Before new users enter the web version, environment creation, privacy settings, and first-run guidance now take fewer detours. When creating a self-hosted environment from organization settings, a server error that left half-created environments behind has been fixed. The administrator "Share cloud sessions" setting has been moved under Data and privacy, allowing Data and privacy admins to manage it directly. New users on Mac and Windows without a configured cloud environment no longer see a mandatory full-page desktop app download screen when visiting the web version, heading straight to setup instead.
BUGFIX
Claude Tag Watches Public Slack Channels with Thread and Memory Fixes
If Claude Tag in Slack goes silent, restarts work, or leaves out memory, teams have a hard time trusting it to take over collaboration.
Claude now proactively watches related public channels (such as incident channels a conversation depends on) without needing manual mentions; replying in an older thread no longer restarts in-progress tasks or loses unpushed work. Scheduled tasks in organization-shared private channels now continue running reliably in their original threads. Reinstalling the app under Enterprise Grid when the grid is disconnected but one of its workspaces stays connected no longer causes Claude to go silent within minutes, and adding channel managers is now supported on Enterprise Grid shared channels, channels where Claude has not yet been used, and legacy private channels. The admin Memory page now lists channel memory created by Claude, allowing administrators to review, edit, and delete it at any time.
BUGFIX
Cloud Service Connectivity Reinforced with AWS and Authentication Fixes
Connections should not break midway just because an account was freshly authorized, an AWS endpoint has no region, or a third party returns a lowercase auth type. After an account token refreshes, messages are no longer dropped with false notices claiming an environment could not be found. AWS connections fully support region-less endpoints such as Budgets, Savings Plans, WAF Classic, and Import/Export, and Global Accelerator requests now sign properly; if a request cannot be signed due to hostnames lacking a region, the system clearly explains the cause and remediation. When third-party providers return lowercase token types for OAuth client-credentials and JWT-bearer connections, requests now standardize on the standard Bearer scheme.
BUGFIX
Code Review Precision Improved with Dependency Notes and Comment Delivery Fixes
In code review, few things hurt more than a small change getting a full re-review, or retrying comments only to duplicate or miss them.
When merging a base branch into a pull request whose prior review noted "Additional findings," the system runs a lighter follow-up review instead of a full re-review; repositories whose owner or name contains a capital letter now skip empty or content-identical pushes. REVIEW.md files are no longer ignored in their entirety due to @-mentions, multiline code spans, or backticked HTML tags. Instead, only lines that link to changed files are withheld. Suggested fixes now state what dependent code must keep working, and review comments for secondary affected locations use full sentences. Retrying /ultrareview --post ensures findings comments post exactly once while naming the reviewed commit.
Original changelog
Original changelogGateway Hint Headers Introduced for More Precise Enterprise Traffic Routing
Added `x-claude-code-request-class`, `x-claude-code-agent-type`, `x-claude-code-prev-tool-durations`, `x-claude-code-compaction` and `x-claude-code-context-compacted` request headers for LLM gateways; opt in with `CLAUDE_CODE_GATEWAY_HINT_HEADERS=1`
Original changelogRemote Control Adds Session Forking to Launch Independent Background Sessions
Added forking a session started with `claude --remote-control` or `/remote-control` from the Claude app; the fork runs as a background session on your computer
Original changelogProactive Disconnection Alerts for External Tools and Commands for Expired Logins
Added a notification when an MCP server disconnects mid-session and automatic reconnection gives up, pointing at `/mcp`
Improved the error shown when an MCP server's sign-in expires mid-session to say how to re-authenticate (`/mcp`)
Original changelogCloud Platforms Default Auto Mode to Local Classifier with Switch Available
Changed auto mode on Bedrock, Vertex and Foundry to use the local classifier by default for now; set `CLAUDE_CODE_AUTO_MODE_SERVER=1` to use the platform's server-side classifier
Original changelogTelemetry Metrics Complete Tool Names and Problem Reports Filter Private Data
Changed `OTEL_LOG_TOOL_DETAILS=1` to also include real agent, skill, plugin and MCP server names on cost and token metrics
Changed sign-in with a Claude account to also request access to your claude.ai plugins
Changed `/bug` and `/feedback` reports to include only model-behavior params (model, system prompt, tools) from the last API request, omitting request metadata and `CLAUDE_CODE_EXTRA_BODY` fields
Original changelogDisabled Skills Move to Trash and Enterprise Management Rules Take Precedence
Fixed skills synced from claude.ai staying available after your organization turns Skills off; they now move to the recoverable trash
Fixed `allowManagedMcpServersOnly`, `deniedMcpServers` and `disableClaudeAiConnectors` set via MDM or `managed-settings.json` being ignored when server-managed settings are also present
Original changelogSecurity Boundary Protections Reinforced with Stricter Command Prompts and Path Access
Fixed Bash commands the permission checker cannot fully analyze skipping the prompt under `permissions.blockReadsOutsideWorkingDirectories`, and a subshell hiding a dangerous `rm` in bypass mode
Fixed `permissions.blockReadsOutsideWorkingDirectories`: a memory directory chosen by a repository's settings is no longer loaded into the prompt, recalled, indexed, or used by memory extraction
Fixed Read on macOS refusing a dragged-in screenshot, or any file the system reports under a second path, with "symlink resolution changed after permission was checked"
Reverted a 2.1.268 change that checked Read and Edit deny rules on Bash lines the permission checker can't analyze (`eval`, `env -C`); commands like `time -p make build` prompt again instead of being denied
Original changelogSub-Agent States Delivered Reliably and Long-Session Scheduling Runs Smoother
Fixed sub-agents and background agents being reported as failed, with their result never delivered, when the final streamed reply omitted token usage or carried no model id
Fixed SDK and `--output-format stream-json` output dropping a subagent's remaining messages and final report after it is moved to the background mid-run (e.g. by `CLAUDE_AUTO_BACKGROUND_TASKS`)
Fixed `/tui` refusing to restart because of an agent-team teammate that had already finished its work and was no longer shown in the agents panel
Fixed saved scheduled tasks running in the wrong session after `.claude/scheduled_tasks.json` was copied into another folder, such as a new worktree
Improved responsiveness in long sessions: hook progress and sub-agent activity no longer re-process the whole conversation on every update
Original changelogThinking History Preserved Accurately and Context Usage Metering Avoids Premature Triggers
Fixed `/login`, `/upgrade`, and `/extra-usage` discarding earlier thinking from the conversation, which forced a full prompt-cache rewrite on the next request
Fixed the context meter and auto-compact counting advisor-tool turns at roughly twice their real context size, which made auto-compact fire at about half the real window
Fixed Remote Control clients attached to a Claude Desktop, VS Code or JetBrains session being refused when they ask for the session's context window usage
Fixed the spinner showing a doubled ellipsis ("……") on compaction status lines such as "Running PreCompact hooks…"
Original changelogArtifacts Publishing Re-sends Automatically and Databases Support Single-Field Updates
Fixed auto mode stopping for approval when the Artifact tool uploads a file you attached to the chat in a cloud or Remote Control session
Fixed a false-positive spinner tip suggesting the frontend-design plugin after reading or publishing Artifacts
Improved the Artifact tool's error when a publish includes a file type artifacts don't serve: Claude is told which types are served and what to do instead, and the terminal shows one plain line
Improved the Artifact tool's page read to state the capabilities and database rules the artifact service holds for the page, for anyone who can publish to it
Improved artifact database writes: an update can now remove a single field instead of rewriting the whole document
Improved artifact publishing: a publish whose connection drops after reaching claude.ai is now re-sent safely instead of failing or creating a duplicate version
Original changelogCloud Gateway Auth Errors Provide Specific Guidance with Clearer Certificate and Proxy Diagnostics
Fixed 401/403 errors on Bedrock, Vertex and Foundry, and Claude apps gateway 403s, telling you to run `/login`; the message now names the credential to refresh or points to your gateway administrator
Improved the error when a cloud session can't be created because your Claude login expired or was revoked: it now tells you to run `/login`
Improved the in-session SSL certificate and proxy connection errors to name the error code and what to fix, such as `NODE_EXTRA_CA_CERTS` for an untrusted corporate CA
Original changelogGitHub Workflow Errors Pinpoint Causes with Clearer Pull Request Diagnostics
Fixed `/install-github-app` reporting a SAML single sign-on block as "admin permissions required"
Improved the cloud-session GitHub error for an IP allow list, a suspended app installation or SAML single sign-on to show the cause instead of a generic install hint
Improved `/autofix-pr`: when `gh pr view` fails it now shows gh's own error (sign-in, SAML, rate limit) instead of a generic exit-code line
Improved `/autofix-pr` to say why GitHub webhook delivery couldn't be set up for the PR (for example, no linked GitHub account) instead of a generic warning
Improved `/web-setup` errors: a refused GitHub token now lists the likely reasons and the fix, and a connection failure names a configured proxy or TLS certificate problem
Original changelogExclamation Marks Allowed in Shell Mode and Repository Exclude Stubs No Longer Linger
Fixed a long-running session recreating a stub `.git/info/exclude` after the repository's `.git` directory was removed or moved away
Fixed the main prompt dropping a `!` typed at the start while already in shell mode, so negated commands like `! grep …` can be typed
Original changelogVS Code Hides Disabled Feedback and Windows Error Banner Eliminated
[VSCode] Fixed "Report a problem" still appearing, and `/bug` / `/feedback` opening a report form, for organizations that have product feedback disabled
[VSCode] Fixed a red "Claude Code process exited with code 4294967295" banner appearing after completed turns on Windows
Windows: Improved the network-path permission check for UNC paths when a mapped network drive was added with `--add-dir`
Original changelogWeb Routine Management Updated with Confirmation Dialog for Unsaved Changes
[Claude Code on the web] Fixed routines losing access to an organization connector, and still calling the old one, after an admin removed and re-added that connector
[Claude Code on the web] Added a "Discard unsaved changes?" confirmation before the New routine page or the Edit routine dialog throws away a routine name, prompt or edit you typed
[Claude Code on the web] Improved the routine detail page: menu and rename in the breadcrumb, the on/off switch and Run now at the top, and run history beside the routine's settings
Original changelogWeb Environment Setup Made More Reliable with Direct Routing to Configuration
[Claude Code on the web] Fixed creating a self-hosted environment from organization settings occasionally failing with a server error and leaving a half-created environment behind
[Claude Code on the web] Changed the admin "Share cloud sessions" setting to live under Data and privacy instead of the Claude Code page, where Data and privacy admins can also manage it
[Claude Code on the web] Removed the full-page desktop-app download screen that new users without a cloud environment saw on Mac and Windows; they now go straight to setup
Original changelogClaude Tag Watches Public Slack Channels with Thread and Memory Fixes
[Claude Tag] Fixed Claude going silent minutes after reinstalling the app when an Enterprise Grid was disconnected but one of its workspaces stayed connected
[Claude Tag] Fixed scheduled tasks set up in an organization-shared private Slack channel silently never posting; they now keep running in the thread they were created in
[Claude Tag] Fixed replying in an older Slack thread while Claude is mid-task sometimes restarting it from scratch and losing work it had not pushed yet
[Claude Tag] Fixed adding a channel manager being refused on Enterprise Grid shared channels, on channels where Claude hasn't been used yet, and on legacy private channels
[Claude Tag] Changed Claude to start watching related public channels on its own, such as an incident channel a conversation depends on, instead of only when asked
[Claude Tag] Fixed the admin Memory page not listing Slack channels Claude set up on its own even when they had saved memory; admins can now open, edit and delete that memory
Original changelogCloud Service Connectivity Reinforced with AWS and Authentication Fixes
[Claude Tag] Fixed Claude occasionally dropping a message with an incorrect "couldn't find a Claude Code environment" notice right after your account token refreshed
[Claude Tag] Fixed AWS connections refusing region-less endpoints such as Budgets, Savings Plans, WAF Classic and Import/Export; Global Accelerator requests now sign correctly
[Claude Tag] Improved AWS connection failures: when a request can't be signed, such as a hostname with no region, Claude is told why and how to fix it instead of a bare error
[Claude Tag] Fixed OAuth client-credentials and JWT-bearer connections failing with providers that return a lowercase token type; requests now send the standard Bearer scheme
Original changelogCode Review Precision Improved with Dependency Notes and Comment Delivery Fixes
[Code Review] Fixed merging the base branch into a PR whose earlier review listed "Additional findings" triggering a full re-review; these pushes now get the lighter follow-up review
[Code Review] Fixed a whole REVIEW.md being ignored because of an @-mention, a code span wrapped across lines, or a backticked HTML tag; only lines linking to changed files are withheld
[Code Review] Improved suggested fixes to say what the fix must keep working when other code depends on the behavior being changed
[Code Review] Improved review comments that point to a second affected location to state that location's issue in a full sentence instead of a cut-off stub
[Code Review] Fixed `/ultrareview --post` so a retry after a GitHub error posts the findings comment exactly once instead of never or twice; the comment now names the reviewed commit
[Code Review] Fixed empty or content-identical pushes being re-reviewed on GitHub repositories whose owner or name contains a capital letter; these pushes are now skipped