Enterprise Gateway Adds Model List Matching and Load Testing
Organizations running an internal gateway to centrally manage AI requests now have finer control options. Enabling CLAUDE_CODE_GATEWAY_HINT_HEADERS=1 attaches x-claude-code-prompt-id to headers sent to the gateway, making it easy to trace all requests originating from the same prompt. A new availableModelsMatch setting only permits exact matching model versions when set to "exact", preventing unreviewed new versions from going live directly. Meanwhile, deniedModels blocks specific models even if they are allowed in availableModels. The gateway also adds a load_test_mode load-testing mode that returns mock responses immediately after signing requests without forwarding them upstream, and upstream providers now officially support Amazon Bedrock Mantle endpoints.
After upgrading to a new model, you can now run /doctor prompt-audit or /checkup prompt-audit to check whether configuration files in your project are outdated. This tool thoroughly scans project CLAUDE.md files, skills, custom agents, and commands to catch stale prompt patterns written for older models. In the audit report, broken paths, outdated commands, and conflicting instruction files are prioritized at the top, while officially supported thinking keywords are preserved intact.
FEATURE
Plugin Validation Enhances Path Checks and Lists Marketplace Removal Cascades
Command validation and reporting are now clearer during plugin development. claude plugin validate fails when encountering names in marketplace.json that cannot be installed, or when paths for outputStyles, themes, monitors, or lspServers are missing or extend outside the directory. When loading via --plugin-dir fails, plugin_errors entries in the stream-json system/init message now indicate the unloaded directory under path. claude plugin details lists MCP (Model Context Protocol) servers declared in plugin.json. claude plugin marketplace remove lists plugins that will be removed alongside the target. claude plugin eval refuses to run and reports the version when Git is below 2.31.
BUGFIX
Corrupted Installed Plugin Lists Are Automatically Backed Up and Container Cache Loading Is Fixed
After moving home or configuration directories inside dev containers, user-installed plugins and marketplaces will no longer fail to load due to stale cache locations. If installed_plugins.json contains entries with invalid IDs, it can now still be reloaded; if it contains records unparseable by the current version, claude plugin commands identify the entry and explain how to restore it without overwriting the file. Only when the entire file is unreadable will its contents be preserved in an adjacent file before rebuilding, with claude plugin list reporting its location. Unversioned plugins recover to their originally installed revision upon cache loss. When two plugin IDs differ only by case, uninstalling one that lacks an enabledPlugins entry in scope will no longer accidentally delete the other plugin along with its options and secrets. If a plugin hosting a skill fails to load, the Skill tool now explains that the plugin could not load rather than misreporting that the skill is not installed.
When connecting to MCP servers, connection reliability and background progress notifications are now significantly improved. Long-running tools moved to the background now continuously deliver progress notifications to the background tasks view instead of silently dropping them. If a stateless remote MCP server temporarily returns HTTP 404—such as during a proxy redeployment—the bug where it remained marked connected but unusable for the rest of the session has been fixed. Stdio MCP servers that are still starting when a session ends are now properly shut down. For servers without a valid URL, /mcp no longer presents invalid login options, and claude mcp add, add-json, and remove no longer falsely report success when writing to user or local configuration files fails.
FEATURE
MCP Tool List Supports Pagination and Automatically Persists Returned Images
Managing external tools and viewing execution results now offer better presentation and file integration. Running /mcp to inspect MCP tools displays more items per screen, supports mouse wheel scrolling and page navigation keys, and marks organization-blocked tools with a warning icon. Images returned by MCP tools are now automatically saved as physical files, making them easy to open directly via commands or file-reading tools. When running /context to inspect context size, server instructions are broken into a dedicated row and counted toward the total context size. Enabling OTEL_LOG_TOOL_CONTENT=1 includes outputs from MCP tools, WebFetch, and WebSearch in tool.output telemetry events. The post-authorization success page also features a centered layout, dark mode, and updated artwork.
FEATURE
Terminal Lists Add Mouse Navigation and Unified Selection Actions
Navigating lists during terminal tasks and commands is now much smoother. /tasks displays status icons and full task details, keeps headers and key hints pinned when multiple tasks exist, and supports page navigation keys, mouse wheel scrolling, and clicks. Menus including /help, /hooks, /copy, /chrome, /memory, /ide, /release-notes, /rewind, /diff, /remote-env, and /plugin also support mouse and page navigation. When searching /skills or /artifacts, list pointers dim appropriately, and truncated messages from other sessions in fullscreen mode can be clicked to expand. Markdown links in Warp terminal can now be clicked to open. /rewind and /diff now use shared select:* actions while retaining messageSelector:* and diff:* bindings, and the /workflows execution list adopts a half-height layout with a pinned header.
BUGFIX
Custom Keybindings Add Spelling Checks and Fix Rapid Typing Delays
Key responsiveness and configuration validation are now more accurate when customizing shortcuts or typing rapid command sequences. If a modifier key is misspelled as an invalid name like ctl+k in keybindings.json, the system now logs a warning in debug logs with correction suggestions. When rapidly pressing or pre-typing keystrokes over SSH or terminal multiplexers, input is no longer processed against stale state. The built-in shortcuts guide corrects the chord timeout to three seconds and no longer calls cmd an alias for meta. Rebinding or unbinding footer:openSelected in keybindings.json no longer leaves a lingering "Enter to view" prompt at the bottom, and terminal suggestions appear less frequently after being ignored twenty consecutive times, resuming their original cadence once accepted.
BUGFIX
Vim Mode Fixes Cursor Placement for Extra-Long Prompts and Action Repeats
For users editing long prompts with Vim mode in the terminal, cursor positioning and action replay bugs have been resolved. Previously, loading an extra-long prompt exceeding 10,000 characters in normal mode often positioned the cursor past the end of the text; it now lands cleanly within the text boundaries. Repeating actions with . no longer drops Shift+Enter linebreaks, places the cursor inside accented characters, or replays older edits after 3J or a Visual-mode J on the final line. Pressing V to select an entire line followed by p to paste now positions the cursor on the first non-whitespace character. Whitespace indentation handling when joining lines with J, as well as cursor movement when joining on the last line, are now fixed to match native Vim.
File permission safeguards and configuration fault tolerance are strengthened under sandbox protection. When using PowerShell tools on Windows, an issue where cmd /c rd, rmdir, del, or erase could bypass protections to delete drive roots, home directories, or folders rejected by Remove-Item has been fixed. If centrally managed sandbox settings contain an invalid nested field, only that invalid entry is blocked while all valid sandbox rules continue to apply normally. Launching from subdirectories of a Git repository no longer misidentifies auto-memory note writes as sensitive files, and Git operations inside the sandbox no longer prompt credential helpers to store temporary proxy authentication credentials.
BUGFIX
Git Worktrees Fix Certificate Verification and Optimize Runner Workflows
When deploying tasks with worktrees or self-hosted runners, Git credentials and automation workflows are safer. Passing CA certificates to Git through the GIT_CONFIG_COUNT environment variable no longer interrupts worktree checkouts due to certificate verification failures, such as when downloading Git LFS files. In self-hosted runner environments, lifecycle hooks executing Git commands skip repository Git LFS pre-push hooks and ignore system-level writable hook paths; they also no longer sign commits if --configure-git is not used. The runner's own Git now consistently verifies routes to Anthropic Git, and warning messages clearly state where GIT_SSL_CAINFO and GIT_SSL_NO_VERIFY take effect.
BUGFIX
Model Fallback Retries Original Configuration and Fixes Quota Display
When switching models or checking usage quotas, displayed information and fallback mechanisms are more accurate. With telemetry disabled, weekly Fable quotas now display correctly in /usage and the VS Code usage meter. When using /model, model IDs for Sonnet 4.6 or Sonnet 5 with dates or -v1:0 suffixes no longer incorrectly accept the [1m] option that should be rejected, and specifying the default Haiku model correctly displays the corresponding model version and pricing. When Opus already has a 1M context window, Opus options and the Default model name no longer display "(1M context)", while the actual window size remains unchanged. When model fallback occurs, dynamic workflows no longer lock all subagents onto the fallback model and instead retry the originally configured model. If Haiku is the primary session model, DISABLE_PROMPT_CACHING_HAIKU also takes effect.
FEATURE
Connection Warmup Reduces Latency and Startup Modules Load Lazily
When starting conversations and sending the first prompt, wait times are noticeably shorter. Reusing pre-established connections significantly reduces first-request latency, and the compilation step runs concurrently during initial response generation rather than waiting until streaming ends. When using claude -p or Claude Code Remote, unnecessary interactive interfaces are no longer preloaded, and rule classifiers and artifact tools now load lazily on first use. For first-time claude.ai accounts where artifact features are unconfirmed, prompting no longer waits up to 1.5 seconds, deferring the wait to the first message if necessary. When sorted artifact database queries return a full page, they clarify that this is only one page and explain how to retrieve subsequent items. Automatically started artifact watchers shut down after three and a half hours of inactivity, restarting when artifacts are published or watched again.
FEATURE
Remote Control Supports Telemetry-Free Mode and Displays Live Compaction Tokens
When using remote control or waiting for long sessions to undergo background context compaction, displays are clearer and smoother. Paid plan users disabling telemetry via DISABLE_TELEMETRY or DO_NOT_TRACK can now still enable remote control normally, and running /remote-control in narrower terminal windows no longer truncates mobile QR scanning prompts with awkward line wraps. When overly long conversations trigger context compaction, the spinner starts a timer at compaction onset and dynamically counts tokens consumed during summary generation, replacing the previous static percentage progress bar.
FEATURE
System Prompts Support Mixed Files and Skill Naming Limits Are Lifted
When customizing system prompts and managing skill permission rules, configuration is more flexible. In launch flags, --system-prompt and --append-system-prompt now permit passing both inline text and file arguments simultaneously, placing file prompt contents before text arguments automatically. Skill(anthropic-skills:<name>) disable rules now also block that skill when delivered as an extension by Claude Desktop, while Skill(skill:<name>) disable rules match against skill aliases and display names. Prior reserved name restrictions on claude-ai have been lifted: identically named skills, commands, workflows, and MCP server skills and prompts can all be reloaded, while Skill(claude-ai:*) continues to operate under standard prefix rules.
BUGFIX
Third-Party Platforms Default to Auto Mode and Review Prompts Add Warnings
When operating through third-party cloud platforms or executing automated workflows, default permissions and state retention are refined. Without explicitly configured permission modes, interactive sessions on third-party platforms or with telemetry disabled now default directly to auto mode, though users can still override this default via settings. Before launching /ultrareview code reviews, the startup prompt warns that reviewing local branches may upload uncommitted changes from tracked files. In accessible environments, screen readers no longer misread quoted commands and paths as built-in dialog text. When SDK turns end early, deferred tool calls or completed results are no longer lost, and pending approval prompts are preserved across background worker restarts. Usage information for non-streaming fallbacks is likewise retained.
BUGFIX
VS Code Fixes Web Session Sync and Input Field Cursor Misalignment
Resuming cross-platform sessions in the editor or pasting long prompts is now much smoother. Sessions sent from the web app to VS Code no longer drop messages sent while Claude is working, nor do web sessions vanish from the list and open empty chats when older versions leave blank local copies behind. After reopening sessions, turns are no longer split incorrectly if Claude receives a message mid-turn (such as during auto-continue). Reloading also no longer displays rewound turns or shows only pre-compaction messages after compaction. When automatic permission mode switching fails, the switch continually retries until it succeeds, preventing the indicator from showing a mismatch with the active mode. Agent icon alignment in narrow panels and cursor drift when pasting multiline text ending with newlines into long prompts have also both been resolved.
FEATURE
Cloud Sessions Support Read-Only Repositories and Prevent Duplicate Steps
When running background tasks and schedules in cloud environments, multi-repo integration and restart stability are improved. Adding private repositories to running cloud sessions now only requires read permissions on the GitHub account rather than forcing push access. When server restarts trigger automatic recovery, completed steps are no longer re-executed, preventing duplicate comments or pushes. When creating new recurring schedules in the cloud, default execution times are set a few minutes past the hour, and the UI notes that schedules set on the hour may start a few minutes late. Initial conversational words also stream smoothly in cloud environments.
BUGFIX
Slack Mentions Support Restricted Channel Searches and Fix Duplicate Replies
When invoking Claude via mentions in Slack, permission management and connection settings are more comprehensive. Administrators can now configure search restrictions by organization, workspace, or channel, allowing Claude to search only added public channels, while a new back button returns directly to the thread after completing account authorization. For channels with rule-bound permissions, settings pages now correctly show all active extensions and connectors, and searches no longer miss items when a GitHub App installation selects a large number of repositories. When new messages arrive mid-response, the system no longer sends duplicate answers. Schedules no longer stop when legacy private channel IDs change, and non-guest members joining channels configured as Channel only no longer interrupt all conversations when Slack delays identity confirmation.
FEATURE
Code Review Requests Auto-Retry, Waiving Charges for Unverified Timeouts
When submitting branch changes on GitHub and invoking @claude review for assistance, failed requests or timeout interruptions no longer stall without a response. When GitHub fails to return a pull request, the review request retries once; if it fails again, it posts an explanatory comment. If a code review is aborted due to reaching its time limit without completing any verification, the review is marked incomplete, incurs no charge, and automatically retries once.
Original changelog
Original changelogEnterprise Gateway Adds Model List Matching and Load Testing
Added `x-claude-code-prompt-id` to the gateway hint headers so LLM gateways can group the requests that serve one user prompt; opt in with `CLAUDE_CODE_GATEWAY_HINT_HEADERS=1`
Added `availableModelsMatch` managed setting: with `"exact"`, an `availableModels` entry allows only the model version it names, so new releases stay blocked until listed
Added `deniedModels` managed setting to block specific models, even when `availableModels` allows them
Added an opt-in `load_test_mode` block to the Claude apps gateway config: requests are built and signed but not sent upstream, and clients get a canned reply, so a deployment can be load tested
Added a `mantle` upstream provider to the Claude apps gateway for Amazon Bedrock's Mantle endpoint
Original changelogPrompt Audit Tool Automatically Checks Outdated Configurations
Added `/doctor prompt-audit` (also `/checkup prompt-audit`) to audit your CLAUDE.md files, skills, agents and commands for prompting patterns written for older models
Improved `prompt-audit` on Claude Code configuration: stale paths, stale commands and contradicting instruction files now lead the report, and thinking keywords that Claude Code documents are kept
Original changelogPlugin Validation Enhances Path Checks and Lists Marketplace Removal Cascades
Added `path` to `--plugin-dir` load-failure entries in the stream-json `system/init` `plugin_errors`, naming the directory that did not load
Fixed `claude plugin validate` saying Claude Code accepts a plugin or marketplace name it cannot install; such names in `marketplace.json` now fail validation
Fixed `claude plugin validate` passing plugins whose `outputStyles`, `themes`, `monitors`, or `lspServers` paths are missing or point outside the plugin directory
Fixed `claude plugin details` showing 0 MCP servers for plugins that declare their servers in `plugin.json`
Fixed `claude plugin marketplace remove` not saying which installed plugins it uninstalled with the marketplace; it now lists them
Changed `claude plugin eval` to require git 2.31 or later when git is installed; a run on an older git is refused with a message naming the version
Original changelogCorrupted Installed Plugin Lists Are Automatically Backed Up and Container Cache Loading Is Fixed
Fixed `claude plugin uninstall` removing the other of two installed plugins whose ids differ only in case, with its options and secrets, when the one named had no `enabledPlugins` entry at that scope
Fixed plugins that declare no version being silently restored at their source's newest commit, not the installed one, when their cached files were missing
Fixed user-installed plugins and marketplaces failing to load with "cache-miss" after the home or config directory was moved, for example in bind-mounted devcontainers
Fixed `installed_plugins.json` showing no plugins when it holds a record under an invalid plugin id; such a file loads again
Fixed `installed_plugins.json` being rewritten, losing records, when it holds a record this version cannot read; `claude plugin` commands now name the record and say how to recover
Improved the Skill tool's reply when a skill belongs to a plugin that failed to load, so Claude tells you the plugin could not be loaded instead of calling the skill uninstalled
Improved recovery from an `installed_plugins.json` that cannot be read at all: its contents are kept in a file beside it before it is rebuilt, and `claude plugin list` names that file
Original changelogMCP Servers Receive Real-Time Background Progress Updates and Transient Disconnection Fixes
Fixed MCP progress notifications being discarded once a long-running tool call moved to the background; the background task now shows the latest progress
Fixed stdio MCP servers being left running when the session ended while they were still starting
Fixed a brief HTTP 404 from a stateless remote MCP server (for example a proxy mid-redeploy) leaving that server unusable for the rest of the session while still shown as connected
Fixed MCP sign-in for a server with no valid URL failing with an opaque SDK error; `/mcp` no longer offers Authenticate for such servers
Fixed `claude mcp add`, `add-json`, and `remove` reporting success when the user or local config file could not be written, for example inside a sandbox
Original changelogMCP Tool List Supports Pagination and Automatically Persists Returned Images
Added MCP tool, WebFetch and WebSearch outputs to the `tool.output` OpenTelemetry span event when `OTEL_LOG_TOOL_CONTENT=1`
Fixed `/context` not counting MCP server instructions: they now appear as their own row and count toward the total
Improved the `/mcp` tool list: it shows more tools at once, scrolls with the page keys and mouse, and marks tools your organization blocked with a warning icon
Improved MCP tool results: images returned by MCP tools are now also saved to a file, so Bash, Read and other tools can open them
Improved the browser page shown after signing in to an MCP server: centered layout, dark mode, and new artwork
Original changelogTerminal Lists Add Mouse Navigation and Unified Selection Actions
Added click-to-expand for truncated messages from your other sessions in fullscreen mode
Fixed markdown links in the Warp terminal rendering as plain text instead of clickable hyperlinks
Improved `/tasks`: rows show a status icon, the name and whole facts, the title and key hints stay on screen with many tasks, and the list gains paging keys, the mouse wheel and clicks
Improved lists in `/help`, `/hooks`, `/copy`, `/chrome`, `/memory`, `/ide`, `/release-notes`, `/rewind`, `/diff`, `/remote-env`, `/plugin` and other pickers with page keys, mouse wheel and clicks
Improved lists beside a search box, such as `/skills` and `/artifacts`, to draw their pointer dim while the search box has the keys, so only one pointer is highlighted
Changed `/rewind` and `/diff` lists to move on the same keybinding actions as every other list (`select:*`); `messageSelector:*`/`diff:*` rebinds still work
Changed the `/workflows` run list to size itself like other lists: half the terminal inline, and it keeps its title on screen when the prompt shows below
Original changelogCustom Keybindings Add Spelling Checks and Fix Rapid Typing Delays
Fixed Claude's built-in keybindings guide saying chords time out after 1 second instead of 3, and calling `cmd` an alias of `meta`, which could produce `cmd+` shortcuts most terminals never send
Fixed `keybindings.json` silently accepting a misspelled modifier such as `ctl+k`; it now warns in the debug log and suggests the fix
Fixed footer hints still saying "Enter to view" after `footer:openSelected` was rebound or unbound in `keybindings.json`
Fixed keys typed quickly together (type-ahead, key repeat, bursts over ssh or tmux) sometimes being handled against stale state
Changed prompt suggestions in the terminal to appear less often after 20 in a row go unused; using one brings them back
Original changelogVim Mode Fixes Cursor Placement for Extra-Long Prompts and Action Repeats
Fixed vim mode `.` dropping a Shift+Enter newline, leaving the cursor inside an accented letter, and repeating an older change after `3J` or Visual-mode `J` on the last line
Fixed vim mode cursor placement: recalling a prompt over 10,000 characters in normal mode no longer leaves the cursor past the end, and `V` then `p` now lands on the first non-blank
Fixed vim mode `J` joining lines with different spacing than Vim (such as a space before `)` or after a tab), and `3J` or Visual-mode `J` on the last line not moving the cursor as Vim does
Original changelogSandbox Configuration Adds Granular Fault Tolerance and Prevents Protected Directory Deletion
Fixed sandboxed `git` asking credential helpers to store the sandbox proxy's login, which printed "failed to store"
Fixed managed `sandbox` settings being ignored entirely when one nested value was invalid; the invalid value now fails closed and the rest of the block still applies
Fixed Claude's edits to its own auto-memory notes being blocked as sensitive-file writes when Claude Code was started in a subdirectory of a git repository
Windows: Fixed the PowerShell tool letting `cmd /c rd`, `rmdir`, `del` or `erase` delete drive roots, the home folder and other folders that `Remove-Item` refuses
Original changelogGit Worktrees Fix Certificate Verification and Optimize Runner Workflows
Fixed worktree checkouts failing certificate verification (for example on Git LFS downloads) when the CA certificate is passed to git as `GIT_CONFIG_COUNT` environment pairs
Self-hosted runner: Changed lifecycle hooks' git to skip a repository's Git LFS `pre-push` hook, ignore a writable system `core.hooksPath`, and not sign commits without `--configure-git`
Self-hosted runner: Changed `GIT_SSL_CAINFO` and `GIT_SSL_NO_VERIFY` under Anthropic-managed git: the runner's own git always verifies Anthropic's git route, and warning lines say what applies where
Original changelogModel Fallback Retries Original Configuration and Fixes Quota Display
Fixed the weekly Fable limit not appearing in `/usage` and the VS Code usage meters when telemetry is disabled
Fixed `/model` accepting Sonnet 4.6 or Sonnet 5 with `[1m]` when the id carried a date or `-v1:0` suffix, in the cases where the plain id was refused
Fixed `/model` picker showing a hardcoded Haiku version and price when `ANTHROPIC_DEFAULT_HAIKU_MODEL` pins a different model
Fixed dynamic workflows started during a model fallback running every agent on the fallback model instead of retrying the configured model
Fixed `DISABLE_PROMPT_CACHING_HAIKU` having no effect when Haiku is the session's main model
Changed the `/model` picker's Opus row and the Default model's name to drop "(1M context)" where Opus already has a 1M context window; the window is unchanged
Original changelogConnection Warmup Reduces Latency and Startup Modules Load Lazily
Improved artifact database reads: an ordered query that returns a full page now says it is one page and how to read the rest
Improved first-reply latency: a pattern-compile step that ran at the end of a session's first reply now runs while the reply streams in
Improved first-request latency by reusing the preconnected API connection
Improved startup: `claude -p` and Claude Code Remote no longer load the interactive UI, and the auto-mode classifier's rules and the Artifact tool load on first use instead of at launch
Improved startup for claude.ai accounts whose Artifact tool features aren't known yet, as on a first run: the prompt no longer waits up to 1.5 s to check them; the first message waits if needed
Changed artifact watching: a watch that was armed automatically (not one you asked for) now ends after 3.5 hours with no activity; publishing or watching the artifact again re-arms it
Original changelogRemote Control Supports Telemetry-Free Mode and Displays Live Compaction Tokens
Fixed Remote Control being unavailable on paid plans when telemetry is turned off with `DISABLE_TELEMETRY` or `DO_NOT_TRACK`
Fixed the `/remote-control` menu cutting its QR-code hint mid-word in narrow terminals
Improved the compaction spinner: its timer now starts when compaction begins and it counts the summary's tokens as they stream, replacing the percentage bar
Original changelogSystem Prompts Support Mixed Files and Skill Naming Limits Are Lifted
Changed `--system-prompt` and `--append-system-prompt` to accept their text and `-file` forms together; the file's text comes first
Changed `Skill(anthropic-skills:<name>)` deny rules to also block that skill when Claude Desktop delivers it as a plugin, and `Skill(skill:<name>)` denies to match the skill's alias and display name
Reverted the 2.1.282 reservation of the `claude-ai` name: skills, commands, workflows and MCP servers' skills and prompts so named load again, and `Skill(claude-ai:*)` rules are ordinary prefix rules
Original changelogThird-Party Platforms Default to Auto Mode and Review Prompts Add Warnings
Fixed SDK sessions losing a deferred tool call or finished tool result when a turn ended early, a held approval prompt after a worker restart, and a non-streaming fallback's `result.usage`
Fixed permission dialogs in screen-reader mode reading quoted commands and paths as if they were the dialog's own text
Changed interactive sessions on third-party providers or with telemetry off to start in auto mode when no permission mode is configured; `permissions.defaultMode` still overrides it
Changed the `/ultrareview` launch dialog to say that reviewing a local branch may upload uncommitted changes to tracked files
Original changelogVS Code Fixes Web Session Sync and Input Field Cursor Misalignment
[VSCode] Fixed the permission mode indicator showing Default while the session kept running in auto or bypass mode after an automatic switch out of it failed; the switch is now retried until it lands
[VSCode] Fixed a session teleported from the web dropping the messages sent while Claude was working
[VSCode] Fixed a Web session staying hidden from the session list, and an empty chat opening in its place, when an older version had saved an empty local copy of it
[VSCode] Fixed a reopened session splitting a turn at a message Claude received mid-turn, such as an automatic continuation
[VSCode] Fixed a reloaded session showing a rewound-away turn, or only the rows before a compaction
[VSCode] Fixed the footer's agents pill drawing its icon off-center, with the status dot against the edge, in narrow panels
[VSCode] Fixed the chat input showing its text slightly below the cursor and selection after pasting lines that end with a line break into a long prompt
Original changelogCloud Sessions Support Read-Only Repositories and Prevent Duplicate Steps
Fixed the first words of a reply in a cloud session sometimes appearing late instead of streaming as Claude writes them
[Cloud sessions] Improved adding a repository to a running cloud session: a private repository your GitHub account can read but not push to now attaches for reading
[Cloud sessions] Fixed cloud sessions occasionally redoing an already-finished step, such as posting a duplicate comment or push, after recovering from a server-side restart
[Cloud sessions] Changed new routine schedules to default to a few minutes past the hour, with a note that routines set exactly on the hour can start several minutes late
Original changelogSlack Mentions Support Restricted Channel Searches and Fix Duplicate Replies
[Claude Tag] Added a "Channels Claude can search" admin setting that limits Claude's Slack search to public channels it has been added to, set per organization, workspace or channel
[Claude Tag] Added a Back to Slack button on the page shown after connecting your Claude account, returning you to the thread you started from
[Claude Tag] Fixed a channel's configure page listing no connectors or plugins when the channel gets its access bundle through an attach rule; rule-attached bundles are now shown
[Claude Tag] Fixed access-bundle repository search missing repositories on GitHub App installs that are limited to a large list of selected repositories
[Claude Tag] Fixed Claude occasionally posting the same reply twice when a new message interrupted it mid-reply
[Claude Tag] Fixed channel routines that stopped running in older private channels whose Slack channel ID changed, for example after a Slack Connect share
[Claude Tag] Fixed conversations in a channel set to "Channel only" all ending when a non-guest member joined and Slack was slow to confirm their membership
Original changelogCode Review Requests Auto-Retry, Waiving Charges for Unverified Timeouts
[Code Review] Fixed "@claude review" requests going silent when GitHub failed to return the pull request: the request is retried once, and a comment explains if it still fails
[Code Review] Fixed billing for a review that stopped at its time limit with nothing verified: it now shows as incomplete, isn't charged, and is retried once