Permission prompts show total pending count and unify command and tool authorization screens
When Claude performs multiple operations in a row and triggers a series of authorization requests, you can now see at a glance how many items remain to be confirmed.
Permission prompts now display counts such as "2 of 5" when multiple requests stack up, keeping you informed of the overall review progress. Authorization panels for web fetching, skills, file reading, sandbox network, Claude in Chrome, workflow scripts, and notebook editing all align their appearance with file edit prompts. Bash, PowerShell, and Monitor commands are framed with dashed lines during prompts, making the command boundaries clearer.
FEATURE
Fullscreen lists support mouse clicks with aligned layouts and scrollbar arrows
Browsing lengthy items in fullscreen mode is now more intuitive to navigate and read.
Collapsed rows like "↑ N more" and "↓ N more" now support mouse hover, pressed states, and clicks that navigate directly to the list ends. Clicking the text gaps of collapsed rows like "Thought for 4s" now properly expands content instead of merely highlighting text. Detailed information across lists such as /artifacts, /mcp, /skills, and /hooks is aligned in a single column. Rows without details, such as operation rows with long names, no longer push the details of other rows to the right. Scrollbars gain up and down arrows that can be clicked or held for continuous scrolling. In most lists, the scrollbar no longer shifts when ellipsis rows appear or disappear.
BUGFIX
Expired credentials avoid duplicate browser launches and accurately reflect login status
When running multiple windows or editor extensions simultaneously, account logins and credential states no longer conflict.
When gcpAuthRefresh or awsAuthRefresh credentials expire, multiple processes will no longer each open separate browser login pages. After a macOS session logs in successfully via /login in another window, it is no longer misidentified as logged out even if a legacy ~/.claude/.credentials.json file remains. claude auth status accurately reports console-stored keys as api_key, and the VS Code extension correctly identifies them as key sessions. When an API key is present, /status explicitly marks Anthropic profiles as unused.
BUGFIX
Session resumption preserves conversations and fixes errors from non-text returns
When encountering terminal crashes or unexpected interruptions, resuming work no longer risks losing conversation progress.
Resuming a previously crashed session with claude --resume or --continue will no longer lose conversation history following parallel tool calls. Non-text returns from tools or hooks—such as objects, numbers, or booleans—no longer trigger API 400 errors, which also applies to resumed sessions. For cloud sessions with massive histories, containers no longer terminate prematurely during transcript loading and fail to wake. Files with extremely long filenames attached to cloud sessions can now also be delivered properly.
FEATURE
Model unavailability triggers same-tier fallback with a unified retry limit
When an API rejects the default model or the model mapped by an alias, you no longer need to switch models manually every turn.
Claude Code retries only once, falling back to an earlier model of the same tier. If the fallback model and --fallback-model retries cannot run at high speed, they execute at standard speed and display a notification only once in interactive sessions. If a fallback reduces the context window from 1M to 200K tokens, both the fallback notification and error messages from repeated auto-compaction will state the capacity change. Failed API requests now calculate their retry limit per individual model call, sending at most 14 requests under default settings. Single-turn fallbacks will also not send duplicate Git commit note reminders.
BUGFIX
Remote Control disconnects on organization policy and queued messages resume on restart
Connecting across devices via Remote Control is now more dependable for connection states and message delivery.
When an organization policy disables Remote Control, sessions including claude remote-control proactively disconnect and display a notification. Claude is informed if attached files sent over remote connections fail to deliver, and an issue where the final download attempt sometimes had only 10 seconds remaining is resolved. Messages arriving right as the program exits are no longer mislabeled as delivered, remaining in the queue to be answered on the next run.
BUGFIX
Sensitive keys masked in error logs and report file formats fixed
When exporting transcripts or inspecting error messages, secret redaction is now far more airtight.
MCP error messages no longer expose credentials when Bearer or Basic precedes key names. Percent-encoded Bearer tokens are no longer only partially redacted. Secret settings with key names containing invisible characters like zero-width spaces are properly hidden in logs and transcripts. When URL passwords contain punctuation such as quotes, parentheses, &, or a second @, no partial characters linger in logs and transcripts. Passwords extending across / to bracketed hosts like [::1] in ssh URLs are also fully redacted. Responding to /feedback, redacted archives no longer produce malformed JSON lines in session transcripts.
FEATURE
MCP server re-authentication avoids duplicate prompts and logs tool usage properly
Connecting to MCP servers now offers more stable connection handshakes and login authorization workflows.
Headless sessions no longer display redundant prompts after successful re-authentication, a fix that applies when discovery caching is enabled. When servers deprecate legacy handshake protocols, MCP connectors will no longer lose track of tools for up to a day. Duplicate login requests will not overwrite pending verification links. Tool calls are accurately counted in /usage while MCP servers are connecting or just connected. When a host re-enables an already connected server, both the SDK and -p mode respond faster.
FEATURE
Subagent communication is more responsive and background transcript actions require confirmation
Dispatching subagents to handle heavy background tasks now provides a smoother experience when sending immediate messages and tracking progress.
Pressing the immediate send shortcut (Ctrl+Enter) in a subagent window moves the subagent's running command to the background to read your input right away. Messages typed to subagents no longer appear twice in the transcript after being read. When background agents reply, they no longer needlessly repeat what you just said. Subagents without registered names display an agent alias instead of raw task IDs when yielding work. Typing /compact, /clear, or /rewind while viewing a background agent or teammate transcript opens a dialog naming the target to confirm, preventing accidental modifications to the main conversation.
BUGFIX
Subagent tool loss and duplicate loading fixed while approval statuses reflect accurately
Launching subagents to work on projects now offers a sturdier tool configuration and lifecycle in background environments.
In sessions with task tracking enabled, foreground subagents will no longer occasionally lose tools like TaskCreate, TaskGet, or TodoWrite. Subagents created with worktree isolation will not redundantly reload the project's CLAUDE.md and imported settings from the copy on the first file read. Workflow tool subagents experiencing a multi-minute stall mid-response will no longer restart from scratch using the initial prompt. Background tasks awaiting user approval are no longer falsely marked as completed on status screens.
BUGFIX
Plugin Installation Restricts Package Sources and Clarifies Marketplace Loading Errors
When managing and installing plugin extensions, package dependency security and troubleshooting information are much clearer.
Plugin installation now rejects npm sources from Git repositories or local folders, allowing dependencies to be installed only from registry packages. When the system rejects loading a specific plugin marketplace, error messages explicitly explain the cause and remediation steps instead of merely showing "not found". On the /plugin Discover page, quotation marks around marketplace names maintain consistent formatting. Plugins enabled on claude.ai no longer abruptly disappear during the active session when brief server hiccups occur.
FEATURE
External Editor Precision Line Navigation and Smoother Slash Commands and Settings Menus
Writing long prompts or tweaking appearance settings in the terminal now feels significantly more responsive.
When using an external editor (Ctrl+G), editors supporting line number arguments open directly at the prompt line where your cursor was positioned. When many skills or plugins are installed, slash command autocomplete is more responsive, matching description text by word prefix. The output style picker now focuses directly on the active style with detailed descriptions shown beneath each name; numeric keys no longer select output styles. The theme picker is now a scrollable list sized to terminal height so previews are not pushed off-screen, and numeric keys no longer select themes. /hooks is now grouped by event in a single list, allowing you to inspect details with a single Enter keystroke. The detailed view ending now says "this hook" instead of "it".
FEATURE
Bare Mode Limits Connections and Background Tasks while Guiding Skill Verification Before Commit
Running tasks or enforcing quality in clean environments now integrates command-line tools and background workflows much tighter.
If a project or personal skill includes a verify skill, Claude is prompted to run it before committing changes, except for pure documentation or test edits. Enabling the --bare flag connects only to specified MCP servers, sends the model no system reminders, and skips launching background tasks; timed-out shell commands stop immediately instead of moving to the background. Submitting prompts while idle instantly displays text in standard coloring instead of gray. Pressing the instant-send key sends skill-invoked shell commands to the background rather than terminating them. Removing a worktree via /exit now terminates servers and shells started by Claude Code inside that worktree first, preventing Windows folder deletion failures caused by locked files. Output from /ultrareview and claude ultrareview no longer includes browser links.
FEATURE
Unified Artifact Reading and Web Permissions with Precise Gateway Cache Billing
Reading claude.ai artifacts or fetching web data now features more accurate permission prompts and billing calculations.
When WebFetch reads claude.ai artifact links, it follows artifact tool rules: no prompts appear when session web access is enabled, and one prompt per artifact is shown when disabled; auto-mode cannot answer prompts that require your direct confirmation. When domain safety checks hit rate limits, error messages advise Claude against repeated retries. The Claude apps gateway previously miscalculated 1-hour prompt caching at the 5-minute rate, which is now fixed. Server-side tool streaming now counts toward input tokens for subsequent calls. The gateway /protocol page now aligns with the latest specification and notes that unknown inputs should not be rejected. The Managed Agents example in the claude-api skill now uses a restricted network environment.
BUGFIX
Windows Resolves Case Sensitivity Mismatches in Folder Trust Checks
Running background agents on Windows no longer encounters access denials caused by folder path casing differences.
Previously on Windows, if stored folder trust records used inconsistent casing, running claude --bg or opening agent views would misclassify the directory as untrusted and deny access; path evaluation logic is now fixed to correctly recognize existing trust states.
FEATURE
VS Code Adds Response Bookmarks, Question Previews, and Integrated Context Drawers
Organizing chat history and inspecting context in the VS Code editor is now significantly more convenient.
The bookmark feature lets you save standout Claude responses to the sidebar Bookmarks panel for pinned viewing at any time. When answering question cards in the chat panel, screenshots or code snippets for the currently highlighted option appear beside or beneath that choice. Once answered, a Questions section is appended to the conversation to preserve the prompt and your selection history. A dedicated bar beneath messages lets you click to expand attached terminal outputs, browser tabs, browser actions, and selected code.
FEATURE
VS Code Status Bar Appears Across All Windows and Stop Action Halts Only Active Turn
Multitasking in VS Code now offers more intuitive extension controls and tab management.
The "✻ Claude Code" status bar icon now displays across all windows, allowing you to open the interface even without any active files. Pressing the Stop button or Escape key now cancels only the active generation turn; background agents continue running and can be stopped individually from the agent map. When a session is already open in the sidebar, clicking it switches to the conversation in the sidebar instead of opening a duplicate tab in the editor area. Settings dialogs no longer falsely report save failures without confirmation when output exceeds 1 MB. An issue where unresponsive extensions remained stuck on a spinning "Teleporting session…" prompt is resolved. The plugin management view now clarifies why disabled plugins remain active due to other settings and explains plugin folder conflicts.
BUGFIX
Cloud Sessions Accurately Reflect Schedule and Run States with Audio Preview and Card Fixes
Running automated schedules or long-running tasks in cloud environments now features more accurate dashboards and controls.
When a scheduled routine is overdue to run, the page displays "Due" with its scheduled time rather than an outdated next run time; if a session fails to start altogether, its status is accurately marked as Failed. After Claude sends a message and goes idle, replying to a question card or approving a tool call reliably triggers subsequent responses. Clearing the organization environment build script in admin settings ensures newly created cloud sessions no longer inherit obsolete scripts. Clicking audio or video files inside the Outputs card now plays media directly rather than opening an empty file search. The runner menu on the self-hosted management page no longer closes automatically seconds after opening.
BUGFIX
Claude Tag Supports Per-Channel Spending Limits with Fixes for Slack Memory and Session Titles
Collaborating with Claude via tags in Slack features sounder administrative controls and conversation continuity.
Admins can click "Add channel" on the spend limits page to assign quotas by channel ID or Slack link for any channel, including private channels. Organizations without access to the default Sonnet model can now retrieve long-term memory normally. When Enterprise Grid admins move channels between workspaces, channel settings remain intact even if the initial post does not mention Claude. Responding to Claude's questions in a thread no longer occasionally spawns a new machine and loses unpushed progress. Spend limit pages for large organizations properly display public channel names instead of raw IDs; session titles initiated from Slack on claude.ai are converted to plain text, stripping escape characters and user IDs.
Original changelog
Original changelogPermission prompts show total pending count and unify command and tool authorization screens
Added a count such as "2 of 5" to the permission prompt when several permission requests stack up
Improved fetch, skill, file read, sandbox network, Claude in Chrome, workflow script and notebook edit permission prompts to match the look of file edit prompts
Improved Bash, PowerShell and Monitor permission prompts to show the command between dashed lines, matching file edit prompts
Original changelogFullscreen lists support mouse clicks with aligned layouts and scrollbar arrows
Added mouse support for the "N more" rows of lists in fullscreen mode: click one to jump to that end of the list, with hover and pressed states
Fixed a click on the space between words of a collapsed row (such as "Thought for 4s") highlighting the row without expanding it in fullscreen mode
Fixed a row with no details, such as an action row with a long name, pushing every other row's details to the right in list screens
Improved list scrollbars in fullscreen mode: in most lists the bar no longer shifts as the "N more" rows come and go, and it now has ↑/↓ arrows you can click or hold to scroll
Changed list screens (`/artifacts`, `/mcp`, `/skills`, `/hooks` and others) to always line up each row's details in one column after the names
Changed the overflow rows of lists to read "↑ N more" / "↓ N more" instead of "N more above" / "N more below"
Original changelogExpired credentials avoid duplicate browser launches and accurately reflect login status
Fixed several Claude Code processes and IDE extensions each opening a login browser when gcpAuthRefresh or awsAuthRefresh credentials expire
Fixed macOS sessions still showing "Not logged in" or "Login expired" after `/login` succeeds in another Claude Code window when a leftover `~/.claude/.credentials.json` exists
Fixed `claude auth status` reporting a Console sign-in's stored API key as `claude.ai`; it now reports `api_key`, and the VS Code extension treats that session as an API key session
Fixed `/status` listing an Anthropic profile beside an API key as if both were in effect; the profile is now marked as not in use
Original changelogSession resumption preserves conversations and fixes errors from non-text returns
Fixed `claude --resume` and `--continue` sometimes losing every turn after a batch of parallel tool calls when the earlier session crashed or was killed
Fixed API 400 errors after a tool or hook returned an object, number or boolean instead of text, including in resumed sessions
Fixed cloud sessions with very large histories never waking up because the container was stopped while the transcript was still loading
Fixed files with very long names not reaching a cloud session when attached to it
Original changelogModel unavailability triggers same-tier fallback with a unified retry limit
Fixed every turn failing when the Anthropic API refuses the model your default or a model alias resolves to: Claude Code now retries once on the previous model of the same tier
Fixed refusal and `--fallback-model` retries failing when the fallback model can't run fast; they now run at standard speed, with a one-time notice in interactive sessions
Fixed the commit attribution reminder being re-sent inside tool output when a model fallback lasts only one turn
Improved the model fallback notice and the autocompact-thrashing error to say when a fallback dropped the context window from 1M to 200K tokens
Changed how failed API requests are retried: one limit now covers a whole model call, so with the default retry settings a failing call sends at most 14 requests
Original changelogRemote Control disconnects on organization policy and queued messages resume on restart
Fixed Remote Control sessions (including `claude remote-control`) staying connected after your organization's policy turns Remote Control off; they now disconnect with a notice
Fixed Claude not being told when a file attached to a message sent over Remote Control did not arrive, and a file sometimes getting only 10 seconds for its last download try
Fixed a Remote Control message that arrived while Claude Code was exiting being marked delivered and then never answered; it now stays queued for the session's next run
Original changelogSensitive keys masked in error logs and report file formats fixed
Fixed MCP error messages showing a credential's value when "Bearer" or "Basic" came before its key name
Fixed percent-encoded Bearer tokens being only partly masked in error messages
Fixed redacted logs and transcripts showing a secret whose key name has an invisible character inside, such as a zero-width space
Fixed logs and transcripts showing part of a URL password that contains punctuation such as `)`, quotes, `]`, `&` or a second `@`, or that runs past a `/` to a bracketed host such as `[::1]` in an ssh URL
Fixed the session transcript in the zip that `/feedback` saves to disk containing invalid JSON lines after secret redaction
Original changelogMCP server re-authentication avoids duplicate prompts and logs tool usage properly
Fixed headless sessions repeating the "MCP servers require authentication" reminder after a successful re-authentication when the MCP discovery cache is enabled
Fixed MCP connectors listing no tools for up to a day after their server dropped the older MCP handshake
Fixed a repeat MCP sign-in request from Claude replacing the pending sign-in link, which could stop that link from working
Fixed `/usage` not crediting an MCP server for a tool call made while that server was still connecting or had only just connected, such as right after a restart
Improved responsiveness of SDK and `-p` sessions when a host re-sends an MCP server enable for a server that is already connected
Original changelogSubagent communication is more responsive and background transcript actions require confirmation
Fixed a message typed into a running subagent showing twice in its transcript after the subagent read it
Fixed subagent hand-back messages showing a raw task id instead of the agent's name when the subagent had no registered name
Fixed `/compact`, `/clear`, and `/rewind` typed while viewing a background agent's or teammate's transcript silently acting on the main conversation: a dialog now names the target and asks first
Improved send now (ctrl+enter) in a subagent's view: it now moves the subagent's running command to the background so your message is read right away
Improved replies from background agents to your messages so they no longer open with a separate recap of what you said
Original changelogSubagent tool loss and duplicate loading fixed while approval statuses reflect accurately
Fixed foreground subagents sometimes missing the task-tracking tools (TaskCreate/Get/Update/List, TodoWrite) in sessions that have them enabled
Fixed subagents spawned with worktree isolation loading the project CLAUDE.md and its imports a second time from the worktree copy on their first file read
Fixed Workflow tool subagents being restarted from their original prompt when a connection stalled for a few minutes mid-response
Fixed background jobs showing done while waiting for your approval
Original changelogPlugin Installation Restricts Package Sources and Clarifies Marketplace Loading Errors
Fixed plugins enabled on claude.ai occasionally going missing from Claude Code for a session after a transient server error
Fixed plugin errors for a marketplace Claude Code refuses to load: they now say why and how to fix it instead of "not found"
Fixed `/plugin`'s Discover tab showing a marketplace name unquoted in its "Checking … for new plugins" line when its rows already show that name in quotes
Changed plugin installs to refuse npm sources that are git repositories or folders, and to install plugin dependencies only from registry packages
Original changelogExternal Editor Precision Line Navigation and Smoother Slash Commands and Settings Menus
Improved the external editor (Ctrl+G): editors that take a line number now open on the line your cursor is on in the prompt
Improved slash command suggestion responsiveness while typing when many skills or plugin commands are installed; command descriptions now match by word prefix
Improved the output style picker: it now opens on your current style instead of Default, with each style's description on the line under its name; number keys no longer pick a style
Improved `/hooks`: the closing line of a hook's detail screen now says "this hook" instead of "it"
Changed `/hooks` to open on one list of your configured hooks grouped by event, so viewing a hook takes one Enter instead of three
Changed the theme picker to a scrolling list that fits your terminal instead of pushing the preview off screen; number keys no longer pick a theme
Original changelogBare Mode Limits Connections and Background Tasks while Guiding Skill Verification Before Commit
Improved commit guidance: when your project or user skills include one named `verify`, Claude is now told to run it right before committing, except for docs-only and tests-only commits
Changed prompts sent while nothing is running or queued to show in the normal text color right away instead of gray
Changed `--bare` to connect only the MCP servers named on the command line, send the model no system reminders, and start no background tasks; under `--bare`, a shell command that reaches its timeout now stops instead of moving to the background
Changed the send-now key (ctrl+enter) to move a skill's own shell command to the background instead of ending it
Changed `/exit`'s Remove worktree to run after Claude Code stops the servers and shells it started there, which on Windows could keep the folder from being deleted
Removed the browser link from `/ultrareview` and `claude ultrareview` output
Original changelogUnified Artifact Reading and Web Permissions with Precise Gateway Cache Billing
Fixed the Claude apps gateway's spend meter pricing 1-hour prompt cache writes at the cheaper 5-minute rate, and counting only the first model call's input tokens on streamed turns that run a server-side tool such as web search
Improved claude.ai artifact link reads: WebFetch now asks the same questions as the Artifact tool's read (no artifact prompt while the session's network access is on, one per artifact while it is off), and an auto-mode yes no longer counts where only you can answer
Improved the protocol page a Claude apps gateway serves at `/protocol`: it now says not to reject unknown input and matches what Claude Code sends today
Changed the WebFetch error for a rate-limited domain safety check to tell Claude not to retry it in a loop
Changed the `claude-api` skill's Managed Agents examples to create environments with limited networking
Original changelogWindows Resolves Case Sensitivity Mismatches in Folder Trust Checks
Windows: Fixed `claude --bg` and the agents view refusing a folder that `claude` already trusts when its trust record was saved with different letter case
Original changelogVS Code Adds Response Bookmarks, Question Previews, and Integrated Context Drawers
[VSCode] Added bookmarks: save Claude's responses and keep them in view in a Bookmarks side panel
[VSCode] Added the questions Claude asks and your answers to the conversation: after you answer a question card, a Questions row shows each question with your picks
[VSCode] Added option previews to question cards in the chat panel: the highlighted choice's mockup or snippet shows beside or under the options
[VSCode] Added rows under a message that open to the terminal output, browser tab, browser instructions and selected code sent with it
Original changelogVS Code Status Bar Appears Across All Windows and Stop Action Halts Only Active Turn
[VSCode] Fixed a second copy of a conversation opening in a tab when it was already open in the side bar; the side bar now switches to it
[VSCode] Fixed settings dialogs reporting a failed save, without re-checking, when Claude Code printed more than 1 MB of output
[VSCode] Fixed an endless "Teleporting session…" spinner when the extension stops responding
[VSCode] Improved the Manage plugins dialog: it says when a turned-off plugin is still on because of other settings, and explains a plugin folder clash
[VSCode] Changed Stop and Escape to end only the current turn; background agents keep running and can be stopped one by one from the agent map
[VSCode] Changed the "✻ Claude Code" status bar item to show in every window, so you can open Claude when no file is open
Original changelogCloud Sessions Accurately Reflect Schedule and Run States with Audio Preview and Card Fixes
[Cloud sessions] Fixed an answered question card or approved tool call getting no reply when the session had gone idle after Claude sent a message
[Cloud sessions] Fixed clearing an organization environment's setup script in admin settings leaving new cloud sessions still running the old script
[Cloud sessions] Fixed the Runner actions menu on the self-hosted environments admin page closing on its own a few seconds after it opened
[Cloud sessions] Fixed routine runs whose cloud session never started showing as Succeeded in the Runs pane, the routine's page and the sidebar; they now show as Failed
[Cloud sessions] Fixed clicking an audio or video file in a cloud session's Outputs card opening an empty file search instead of playing the file
[Cloud sessions] Changed a routine's page to read "Due" with the scheduled time, instead of a next run time in the past, when a scheduled run is late and hasn't started
Original changelogClaude Tag Supports Per-Channel Spending Limits with Fixes for Slack Memory and Session Titles
[Claude Tag] Added an Add channel button to Claude Tag's spend limits page in admin settings, so a limit can be set on any channel, including a private one, from its channel ID or Slack link
[Claude Tag] Fixed memory recall finding nothing in organizations that cannot use the default Sonnet model
[Claude Tag] Fixed a Slack channel losing its Claude settings when an Enterprise Grid admin moves it to another workspace and the first post afterward doesn't mention Claude
[Claude Tag] Fixed Claude in a Slack thread occasionally starting over on a fresh machine, losing work it hadn't pushed, when your reply answered a question it had just asked
[Claude Tag] Fixed public channel names on Claude Tag's spend limits page in admin settings showing as raw Slack IDs in larger organizations
[Claude Tag] Improved the titles of sessions started from Slack as shown on claude.ai: they now read as the words you typed, without Slack user IDs or escape codes