Plugin Hooks Support Server-Side Tool Logs and Organizational Approval Caps
When writing custom extensions for Claude, plugin hooks can now access more complete contextual information. During execution steps, modules receive timestamps and the list of tools invoked by the API itself. Permission check events now include an agent identifier to distinguish between the main session and subagents. Maximum approval thresholds set by enterprise organizations are now factored directly into evaluations. The editor has also filled in theme color types.
When validating with claude plugin validate, you can also see whether error-handling logic is configured for each hook.
BUGFIX
User Modules No Longer Displace Enterprise Plugins, and Tool Rewrites Retain Security Checks
When installing personal extensions in a corporate environment, system security safeguards are now more rigorous. Previously, module conflicts could accidentally unload officially provisioned enterprise plugins and cause security defenses to bypass checks; the system now unloads the conflicting user module first. Even if hooks rewrite input content before tool execution, existing permission rules and security checks still guard the process strictly.
BUGFIX
Extension Panels No Longer Loop Rerenders, and Multiline Non-Latin Text Renders Smoothly
When viewing custom panels or inline blocks rendered by extensions in the terminal, the screen will no longer rerender continuously. Previously, if a module panel's tree structure changed height on every draw, the display fell into infinite rerenders; this issue has been resolved so infinite redraw loops no longer occur. If a module outputs long multiline non-Latin text such as Chinese characters, plugin hooks no longer stall during each rerender.
BUGFIX
Plugin Hook Lifecycles Gain Stability, While Model Fallbacks and Reloads Preserve State
When developing complex plugins, state passing and exception handling across various hooks are much steadier. Previously, hooks with error catching could be unloaded by mistake under heavy load, and tool calls discarded by model fallbacks no longer linger in logs. When subagents deliver reports in auto mode, completion events no longer read empty content. Failed reloads now clearly indicate that the previous version has been unloaded. Prompt interception and teardown hooks with spaced paths also no longer trigger silent ignores or infinite loops.
FEATURE
Plugin Validation Relaxes Destructuring Syntax, and Module Publishing Guidance Is Clearer
When building or testing your own extensions, toolchain compatibility and guidance are more thoughtful. Previously, using claude plugin validate or loading modules rejected destructuring assignment variables sharing names with top-level functions, but they now parse correctly. Running claude plugin test after an upgrade also avoids getting stuck on legacy configurations. The built-in plugin authoring skill now proactively provides install commands and writes them to documentation. When receiving the /plugin command, the desktop app's code tab clearly guides you to the right place to manage plugins.
FEATURE
Module Subprocess Rejection Messages Are More Precise, and Oversized Text Is Truncated and Logged
Extensions provide more specific messages when calling external programs or passing large amounts of data. When a subprocess spawned by one module is intercepted and rejected by another, the system clearly explains that the subprocess ran but its output was withheld. When hooks pass oversized text, the system now automatically truncates and logs it rather than rejecting it outright or silently discarding it. Running update commands on plugins loaded from local directories also prints the exact reason directly, without extraneous failure prefixes.
FEATURE
Enterprise Gateway Login Adds Reject Button, Supporting Dark Mode and Custom Auth
When logging in through an enterprise application gateway, authorization interfaces and permission controls are much friendlier. A new reject button on the browser approval page terminates the connection immediately, so the terminal no longer has to wait out timeouts. The login page also adopts brand typography, a centered layout, and dark mode support. For users connecting via gateway URLs and keys without direct Anthropic accounts, extensions can now be enabled normally.
FEATURE
Enterprise Gateway Supports Older Databases with Improved Identity Tokens and Expiry Warnings
When maintaining internal enterprise gateway servers, system compatibility and debugging diagnostics are more thorough. The minimum supported PostgreSQL database version has been lowered from 14 to 11, and legacy databases no longer accidentally purge freshly refreshed developer identities when cleaning expired records. Servers with empty certificate subjects can now boot normally, and the system actively logs warnings 30 days before certificates expire. If a database connection URL is malformed, the system highlights the configuration key and the correct format, while also appending the root cause to log ends when upstream cloud credentials fail.
FEATURE
Managed Settings Warn on Outbound Links, Guarding Symlinks from Bypassing Security Boundaries
When distributing unified configuration files across enterprise environments, the system effectively prevents configs from being maliciously redirected to external locations. If a managed settings file uses a symlink outside its dedicated directory, the system immediately issues a warning. Health checks will also alert you if managed settings ignore user-configured sandbox read paths or domains. Project rule files linked outside the working directory no longer bypass restrictions on out-of-directory reads. Model Context Protocol (MCP) server rules can also be fully applied.
BUGFIX
Project Settings Cannot Disable Attachments, and Slow Disk Launch Stalls Are Resolved
In shared team repositories, local configuration files for individual projects can no longer disable attachment functionality on their own. The CLAUDE_CODE_DISABLE_ATTACHMENTS toggle can now only be controlled by global user settings or enterprise managed settings, preventing individual projects from overriding security policies. In environments connected through an enterprise gateway, background commands and daemon services no longer unintentionally send telemetry data externally. On slower file systems such as Windows and WSL, startup lag and launch failures caused by read restriction rules have also been resolved.
FEATURE
Quickly Scaffold Managed Agents, Samples Disable Non-Essential Web Tools by Default
When you want to set up an automated agent architecture quickly, the new onboarding command saves you tedious configuration steps. Entering /claude-api managed-agents-onboard <url> or specifying a Console quickstart template name directly generates configuration files and applies them via command-line tools. Official samples also update permission policies, disabling web search tools by default to reduce risk unless an agent explicitly requires them.
BUGFIX
Connect to Sessions by Name Directly, Session Restarts Stop Resending Old Messages
Managing conversations running in the background is now more intuitive and responsive. When using claude attach <name> or claude logs <name>, you can connect by entering part of a session name directly, without copying lengthy IDs. When you choose to restart a session from scratch, the system opens a blank conversation instead of accidentally resending old messages. Idle conversations moved to the background fully restore their history upon restarting, and loading large conversations no longer freezes input or rendering.
BUGFIX
Rewind Menu Eliminates Keypress Lag, Rapid Left Arrow Navigation Becomes Smoother
When you want to revert or rewind previously sent prompts, interface interactions feel much smoother. Previously, if long code snippets or stack traces had been pasted into the conversation, pressing Esc twice or running /rewind to open the rewind menu caused several hundred milliseconds of keypress lag, but the menu now opens without delay. Prompts submitted while Claude is processing are also correctly listed. After clearing the input box, double-tapping the left arrow key to switch sessions no longer requires deliberate pauses, and holding down the arrow key switches sessions directly.
BUGFIX
Agent List Fixes Accidental Deletions, Permission Prompts Add Stop-All Shortcut
When switching between tasks in the claude agents overview window, keyboard navigation is no longer prone to accidental deletions. Previously, pressing Esc after searching or pressing Ctrl+X repeatedly could shift focus to section headers and accidentally delete entire sessions; now Esc only reopens a session and never mistakenly confirms restart prompts. When background agents trigger permission requests, the screen clearly indicates that the Ctrl+X Ctrl+K shortcut can stop all background agents at once.
BUGFIX
Agent View Adjusts Model and Effort Instantly, Restarts Stop Replaying Old Commands
Adjusting parameters while controlling busy background sessions from the agent overview interface now takes effect immediately. Sending /model, /effort, or /rename commands applies new settings on the spot without waiting for the current turn to finish or requiring manual confirmation. Slash commands or multiple-choice answers that previously failed to reach a stopped session are no longer automatically executed upon restarting. If a background session crashes and restarts, sent replies automatically retry for up to 12 seconds to ensure delivery.
BUGFIX
Agent Status Line Fixes Worktree Tracking, Services Persist After Package Upgrades
Status monitoring and environment upgrades are more reliable when running multiple background agents. Previously, when a background session was created and switched to a worktree, the overview interface lost run counts and countdown timers; status line information now stays synchronized continuously. Running /clear resets and recalculates the count. Pasting images in manual permission mode no longer repeatedly prompts for read confirmation. An issue where upgrading via Homebrew displayed "Couldn't restart the background service" and halted background sessions has been fixed, though this fix takes effect starting with the subsequent upgrade.
BUGFIX
Recurring Scheduled Tasks Persist After Compaction, Container Restarts Trigger Rescheduling
Scheduled wakeup mechanisms are more reliable when setting up periodic schedules for Claude, such as using /loop to check progress at intervals. Previously, scheduled tasks silently disappeared when a conversation resumed after compaction; this is now prevented, though it applies only to compactions performed from this version onward. Foreground schedules handed off via ← or /background previously never fired, but now trigger properly; recurring schedules previously ran an extra turn during resume, respawn, or fork, but no longer do. If cloud sessions lose schedules due to container restarts, Claude is notified and can reschedule them. Background sessions whose schedules disappear transition to a completed state after about 20 seconds.
BUGFIX
Subagents Resume Cleanly After System Sleep, Cross-Worktree Switching Retains Write Access
Permission isolation and compute states are more stable when multiple subagents collaborate in the background. Previously, when the main session switched to a different worktree, background subagents unexpectedly lost write and Bash execution permissions for their own directories; independent access is now maintained. When a Mac wakes from sleep, background agents no longer stall or crash with errors. Subagents and teammates receiving mid-execution messages no longer lose prior reasoning chains or caches. Teammate agent IDs are also clearer, and idle subagents no longer mistakenly trigger teammate hooks.
BUGFIX
Daemon Logs Escape Control Characters Safely, Restarts Verify Skip-Permissions Disclaimers
Terminal displays are no longer disrupted by special control characters when viewing daemon logs. In logs output by claude daemon run and claude daemon logs, control characters are now safely escaped as \uXXXX encodings, and multiline messages are consolidated into single-line JSON formatting for programmatic parsing. When background worker units restart without explicitly accepting the disclaimer, the --allow-dangerously-skip-permissions flag is never automatically applied, ensuring safe operational permissions.
BUGFIX
Command Permission Checks Plug Gaps: Variable Prefixes, Wildcards, Pyright, and ps Prompt First
Several gaps in permission checks during terminal command execution have been resolved. Previously, when variables were defined with prefixes like declare or export and then used to construct commands or paths, deny or prompt rules could miss them; they are now matched correctly. If arguments for read-only commands like rg or git grep expand into wildcards via the shell, they are now prompted instead of directly allowed; the same applies to variable names interpreted differently between zsh and bash. Wildcards in certain option values of read-only commands also now enforce read denial rules and out-of-directory read blocks. pyright is no longer treated as read-only, and additional ps command variations now require confirmation.
BUGFIX
Multiline pipeline input auto-approved in sandbox, large directory scans no longer freeze
Running scripts inside the sandbox isolated environment is smoother and more efficient. Piping multiline text into other commands (such as cat <<EOF | python3) previously triggered repeated confirmation prompts every time, but the sandbox auto-approval mechanism now recognizes it properly. Short flags for git clone now correctly apply exemption rules just like long flags. On Linux and WSL, sandbox read rules that cover massive directories will no longer freeze the /sandbox configuration page. Monitoring tool commands also faithfully respect user permission settings.
BUGFIX
Plan mode strictly guards write tools, restricted mode closes cross-session communication
Safeguards for sensitive operations are tighter when you enable security restrictions or Plan mode. Previously under Plan mode, the automatic classifier could mistakenly allow non-read-only connector tools that carried an ask policy, but such requests are now intercepted. Under restricted mode (--restricted), the system no longer opens cross-session sockets. When authorizing via relay channels, duplicate reply identifiers within the same session are automatically ignored to prevent mistakenly approving different prompts. Modifying the target file behind a configuration symlink will now also reliably trigger a permission confirmation prompt.
Path security is more comprehensive when mentioning files or dragging images into prompts. Previously on macOS and Windows when reading images, if a link was swapped mid-read, it could access files outside the approved scope. Mentioning files with @ also risked letting Claude read files outside the working directory if a symlink was swapped during reading. This issue is now fixed, and links swapped mid-read will no longer let Claude access files outside the approved scope. Dragged or pasted image paths and filenames within mentioned folders now strictly apply read deny rules. Mentioning files in subdirectories also properly includes the AGENTS.md configuration file located in that directory.
BUGFIX
Sensitive key scanning no longer hangs, multiline filenames render cleanly in prompts
The terminal no longer abruptly freezes when conversations and operations involve extremely long strings or sensitive keys. Previously, when sensitive data scanning and redaction encountered very long continuous text or key-like token strings, authorization dialogs caused the terminal UI to freeze for several seconds. That freeze issue is now resolved, allowing scanning and prompts to proceed smoothly. If a processed filename contains newline characters, formatting that previously broke in file tool errors and permission prompts now renders correctly and displays the full filename.
BUGFIX
Code deep review supports special Git setups, uncommitted changes upload safely
Packaging code across edge-case environments is safer when requesting an in-depth review of your current workspace with /ultrareview. Previously on Windows, a stash failure could silently discard uncommitted changes, while enabling newline safety checks or using modern Git versions where branches reside outside the directory could cause upload failures or missed edits. These scenarios are now handled properly. If a git filter driver happens to be named unset or unspecified, the upload aborts and asks you to rename it to prevent uploading unfiltered files.
FEATURE
Remote review errors streamlined, merge and pull list modified files
Error messages are clearer and more approachable when running into issues during code synchronization or remote review. When Git steps fail, instead of dumping raw error logs, message lengths are cut in half to directly highlight the failed step along with specific troubleshooting suggestions. Chained operations like merge or pull now present changed files in a concise list. When migrating with /teleport, directory name collisions are explicitly rejected with explanatory reasons to prevent file loss.
BUGFIX
Plan mode preserves state across resume, skills discovered despite folder name mismatch
Resuming interrupted sessions is more reliable when architecting in Plan mode inside the terminal. Unrendered plans are no longer lost before cloud session containers restart, and resuming a session with --continue or --resume <session-id> properly restores Plan mode. Custom skill commands saved with CRLF line endings on Windows now execute normally. When a skill folder name differs from the name inside SKILL.md (such as a non-English name), the skill is still discoverable by the name in SKILL.md, and listings display both names. Any ! command containing raw control characters other than tabs and newlines will be rejected with its location indicated.
BUGFIX
Corporate proxy compatibility improved, long conversations stream in real time
Request transmission is more reliable when connecting through enterprise proxy servers. Connections that previously dropped when a proxy rejected specific test headers now tolerate non-standard status codes. Custom endpoints defined in project settings also take effect on the initial request. In very long remote-control or cloud sessions, responses stream token-by-token in real time rather than popping up in delayed blocks. Disconnections after streaming structured output in headless mode no longer report false error statuses. Streaming interruptions after waking a computer from sleep are also resolved.
BUGFIX
Hundreds of images handled smoothly in long chats, thinking interruptions auto-retried once
Long, complex analysis can now carry much larger amounts of multimodal data. Sessions with hundreds of accumulated images that previously broke with "failed to process" errors now parse reliably. If Claude's response during extended thinking is unexpectedly cut off by a content filter, the system automatically retries once before reporting an error. Switching to a fallback model no longer accidentally overrides or resets thinking effort settings. When using the SDK with --include-partial-messages, turn-complete signals are accurately received even if streaming is interrupted.
FEATURE
Large external tool responses no longer exhaust memory, proxy blocks skipped immediately
Resource management is more resilient when connecting to external extension services via MCP. Memory no longer grows unbounded when an HTTP MCP server returns massive responses; this issue is now fixed. Listing parsing no longer hangs when external tool names contain numerous combining characters. In proxied environments, if a server is blocked with HTTP 403, the system skips it immediately instead of repeatedly retrying three times. Enterprise-provisioned tools are also no longer mislabeled as personal tools after re-authenticating or reconnecting.
BUGFIX
Web Fetch Supports Resuming Past 100,000 Characters, Search Quotas Refill Hourly
When asking Claude to read long web pages or search for up-to-date information in interactive sessions, data retrieval is no longer bounded by a single-turn limit. Previously, reading web pages over 100,000 characters silently truncated anything beyond that limit. Now, the system explicitly reports unread length and accepts an offset parameter to resume reading. Web search call limits are no longer fixed at 200 total uses; instead, 100 quota units are automatically refilled every hour. Allowlist rule matching for internationalized domain names is also more consistent.
BUGFIX
Multi-Chunk Pastes Merge Seamlessly, Thousands of Nested Blockquotes No Longer Crash
Pasting large volumes of data or multiple chunks of content into the input box now offers a smoother editing experience. Previously, pasting text in rapid succession or filenames with special accented characters could misidentify parts of the content as manual keystroke input; this is now fixed to paste as a single cohesive block. Terminals no longer freeze even when sending extremely long messages. Pressing Ctrl+O to expand large conversation histories containing non-ASCII symbols like arrows and lines no longer lags. Even when responses contain thousands of layers of nested lists or blockquotes, they no longer trigger stack overflows that crash the application.
BUGFIX
Conversation Compaction Resumes After Sleep, Key Notes Honor Language Settings
When long conversations accumulate excessive content, the background compaction mechanism runs more smoothly. Previously, if a Mac computer went to sleep during background compaction, waking it up often failed with a "prompt too long" error that caused it to give up entirely. Now, it reliably resumes and finishes the compaction job after wake-up. Empty-object errors no longer occur intermittently during compaction. The "You should know" notes callout on screen, which highlights key context, now faithfully follows your configured language preference instead of forcing English.
BUGFIX
Login Credentials Sync Accurately, Suffix-Timed Values Fall Back to Defaults
Credential reading is more reliable when authenticating across different devices or operating systems. When logging in with /login on macOS, if the system keychain rejects write attempts, the terminal accurately reports the failure instead of falsely claiming success. First launches no longer repeatedly prompt the login menu when already authenticated or when key files exist. Setting CLAUDE_CODE_USER_DIALOG_TIMEOUT_MS=5m was previously parsed as 5 milliseconds; values with unit suffixes like m are no longer treated as milliseconds and now fall back to the default dialogExpiry. Unauthenticated cloud sessions also provide clearer login guidance.
Visual indicators and diagnostic messages are clearer when typing and opening menus. When typing / or @ to summon suggestion menus, an arrow indicator marks the currently selected item so you can spot it immediately even with terminal colors disabled. If required dependency tools like Git are missing, error messages name the exact missing binary. Switching permission tabs during full-screen search no longer freezes. Reading binary files now provides tips on available tools. Under medium effort, /code-review also reports code cleanup and CLAUDE.md convention findings for untuned review models, including Opus 5.5 and Sonnet 5.5.
BUGFIX
Browser Batch Operations Extended to 90 Seconds, Extension Reconnection Fixed
Stability is significantly improved when having Claude drive browser interactions for page scraping or automated testing. The timeout cap for batch browser actions has increased from 60 seconds to 90 seconds, granting complex web pages more time to load. If disconnected, clicking reconnect extension in the /chrome menu properly restores browser tools. Prompt messages for the browser picker are now more precise. Individual project configuration files can no longer automatically enable browser integration without explicit manual activation by the user.
BUGFIX
Self-Hosted Runner Worktree Links Fixed, Ultra-Long Error Outputs No Longer Lag
Resilience and conversation recovery are more dependable when deploying self-hosted runners on internal servers. When session directories use relative symlinks, resuming tasks after a runner restart no longer falsely reports worktree conflicts. The main process no longer freezes for several seconds when encountering extremely long single-line error log outputs. Creating sessions with specified environment parameters now routes through standard APIs under the hood, maintaining consistent identifier formatting.
Tooling and artifact interactions are smoother when collaborating with Claude in cloud sessions. Previously, if a cloud container restarted right after Claude sent messages or files, the response could get stuck in an incomplete state; it now wraps up cleanly. Artifact operations work properly when launched from within cloud sessions. Custom aliases and paths across the session are no longer accidentally lost when the terminal launches. Typing /artifacts to open an artifact in the browser now automatically closes the menu list in the terminal.
BUGFIX
Remote Sessions Support Multi-File Transfers, Marketplace Download Conflicts Fixed
File transfers and plugin downloads in remote sessions follow stricter workflows. Previously, transferring four or more files at once could misclassify some files as unapproved and reject them; batch multi-file transfers are now accepted and processed normally. Download conflicts caused by identical marketplace directory names have been resolved. When using the built-in gh api command in cloud sessions, configuring unofficial hosts via environment variables is rejected in favor of --hostname or full URLs to guarantee connection security.
FEATURE
[VSCode] Messages Show Timestamps by Default, File Tab Hover Previews Full Paths
Interface polish and accessibility are improved when using the Claude extension in VS Code. Every message in conversations now displays a sent timestamp by default. Hovering over file tabs displays full paths relative to the project, making it easy to distinguish identical filenames across different folders. When sending messages while Claude is busy computing, screen readers announce queued status. The plugin management interface can execute install commands directly. Reloading the editor also resumes interrupted task steps.
The VS Code extension is now more stable when handling background processes and session switching. Previously, opening an empty chat window and directly loading a saved session left running processes lingering in the background; unused processes now close properly to release resources. Pop-up authorization requests no longer steal keyboard focus from other dialogs, preventing accidental confirmations. The branch-switching window no longer offers switch options prematurely when unable to check uncommitted changes. The agent hierarchy chart accurately renders nested subagent relationships. When login or creating a new session fails, the system clearly explains why the main binary could not be found.
FEATURE
[Cloud sessions] Cloud status indicators stop promptly, scheduled task run logs display properly
Interface feedback is more immediate when checking Claude's working status on the cloud web interface. Previously, after Claude finished answering, the active spinner icon often spun for several extra seconds or appeared to run indefinitely; the status indicator now stops immediately the moment a reply finishes. Clicking "Run now" on scheduled tasks instantly displays the new run in the history tab instead of staying stuck on an empty screen. Unarchived sessions no longer appear to remain running continuously. Disabling prompt suggestions via environment variables also takes effect properly in fresh cloud sessions.
FEATURE
[Remote Control] Newly launched Remote Control computers appear in menus within seconds
When you launch Remote Control on your computer to connect and operate immediately from a new session, you no longer have to wait around for the device to come online. Previously, a computer with newly launched Remote Control took up to one minute to appear in the Remote Control menu of a new session; it is now listed within seconds for immediate connection.
FEATURE
[Claude Tag] Slack supports fast mode commands, channel guideline length switches to character count
When collaborating with Claude in Slack, you can now manage response speed and security permissions with greater flexibility. Mentioning Claude in a thread with !fast switches to fast mode, routing the thread to Opus when necessary with an explanatory note in the response, while typing !fast off returns to standard mode. When creating custom connections in access bundles, a new path prefix field lets allowlist rules restrict access strictly to specific directory paths. The length limit for channel custom instructions is now calculated as 8,192 characters, giving non-English instructions like Chinese the exact same generous capacity.
FEATURE
[Claude Tag] Admin memory reads properly, guest clicks no longer dismiss member confirmations
Permission controls and error feedback are more precise when managing Claude integrations in Slack team workspaces. Members with administrative permissions can now view workspace and channel memory files properly. When a guest clicks a configuration card, the system displays a rejection notice only to that guest, rather than mistakenly removing confirmation buttons for all members. Channel scheduled tasks consistently use the channel default model every time a new session launches. When individual plan usage hits its quota limit, direct messages provide real-time notification of the reset time. Clear explanations and troubleshooting steps are also provided if a session fails to start.
FEATURE
[Code Review] Blocking review comments no longer mislabeled as nits, disabled reviews stop prompting
Review tags and prompt messages are more rigorous when inspecting automated review feedback on pull requests. Previously, suggestions containing major blocking issues were sometimes erroneously prefixed as minor remarks (nits), creating inconsistencies in severity; labels now remain consistent with actual severity. If an organization has explicitly disabled code review, prompt comments for @claude review are no longer automatically posted on pull requests in forked repositories or manual mode.
Original changelog
Original changelogPlugin Hooks Support Server-Side Tool Logs and Organizational Approval Caps
Added `serverToolUses` to the result of a mod's `turn.step` hook: the tool calls the API ran itself (the advisor), each with its id, name, input, start and end
Added `agentId` to the `tool.check` event of plugin hooks, so a hook can tell a subagent's permission check from the main session's
Added `ceiling` to the question and verdict a mod's `tool.check` hook reads, naming the approval an organization requires for a tool
Added `ThemeKey` and `Color` types to the plugin hooks typings, so an editor lists the theme colors a mod's drawing can name
Added to `claude plugin validate`: each hook a mod registers at a gating site is listed with whether it has a `.catch` (`gatingHooks` under `--json`)
Original changelogUser Modules No Longer Displace Enterprise Plugins, and Tool Rewrites Retain Security Checks
Fixed a case where a user-installed mod could get an organization's plugin unloaded; the mod is now the one unloaded
Fixed a case where a user-installed mod could make an organization's guard skip its check; such a mod is now unloaded
Fixed some permission rules and safety checks not being applied to a tool call after a PreToolUse hook rewrote its input
Original changelogExtension Panels No Longer Loop Rerenders, and Multiline Non-Latin Text Renders Smoothly
Fixed a mod's pane or band being redrawn without end when it followed its end over a tree that changed height at every drawing
Fixed a mod's inline pane being redrawn without end when its tree changed height at every drawing
Fixed plugin hooks stalling each redraw when a mod draws a long multi-line text holding non-Latin characters
Original changelogPlugin Hook Lifecycles Gain Stability, While Model Fallbacks and Reloads Preserve State
Fixed a plugin hook with a `.catch` being unloaded, and its `.catch` skipped, when the hook kept the hooks worker busy on a prompt or tool call
Fixed a mod's `turn.step` result listing a tool call that a mid-response model fallback had discarded
Fixed plugin hooks reading an empty `answer` on `turn.complete` for a subagent that hands its report back in auto mode
Fixed a mod being unloaded without a message when a refresh followed its failed reload; its failure line now says the version loaded before is unloaded
Fixed a mod's `prompt.submit` hook that drops a prompt after calling `next(e)` being ignored silently: the hook is now reported as failed, by name
Fixed Claude replying in an endless loop when a plugin's async Stop hook passes an unquoted script path under a folder with a space, such as Application Support
Original changelogPlugin Validation Relaxes Destructuring Syntax, and Module Publishing Guidance Is Clearer
Fixed `claude plugin validate` and plugin loading refusing a hooks module that destructures an option named like one of its top-level functions
Fixed `claude plugin test` refusing to run after an upgrade because of an out-of-date saved setting
Improved the built-in `plugin-authoring` skill: Claude now gives the one command another person runs to install a mod you made, and writes it in a README's install section
Improved the reply to `/plugin` in the desktop app's Code tab: it now says where to install and manage plugins there
Original changelogModule Subprocess Rejection Messages Are More Precise, and Oversized Text Is Truncated and Logged
Changed what a mod's `$.process.spawn` rejects with when another mod denies it after the child ran: it now says the call ran and a plugin withheld its result
Changed plugin hooks so long text is clipped and logged instead of being refused or dropped silently
Changed `claude plugin update` on a plugin loaded from a directory to print just its reason, without the "Failed to update plugin" prefix, as for built-in plugins
Original changelogEnterprise Gateway Login Adds Reject Button, Supporting Dark Mode and Custom Auth
Added a Deny button to the Claude apps gateway's sign-in approval page: it ends the pending sign-in, so the waiting terminal stops within seconds
Fixed mods staying off for people who reach Claude through a gateway (`ANTHROPIC_BASE_URL` with `ANTHROPIC_AUTH_TOKEN`) and have no Anthropic account
Improved the Claude apps gateway's browser sign-in pages: brand fonts, centered layout, and dark mode
Original changelogEnterprise Gateway Supports Older Databases with Improved Identity Tokens and Expiry Warnings
Fixed the Claude apps gateway's retention sweep deleting a returning developer's identity row refreshed at the same moment, on PostgreSQL versions without the November 2025 fixes
Fixed the Claude apps gateway failing to start when the certificate it presents to the identity provider has an empty subject
Fixed the Claude apps gateway exiting with a bare "Invalid URL" when `store.postgres_url` can't be parsed; the error now names the setting and says what the URL may hold
Improved the Claude apps gateway's log when an upstream's cloud credentials or connection fail: the warning now ends with the underlying cause
Improved the Claude apps gateway to log a warning during the last 30 days before the certificate it presents to the identity provider expires
Changed the Claude apps gateway's minimum supported PostgreSQL version from 14 to 11
Original changelogManaged Settings Warn on Outbound Links, Guarding Symlinks from Bypassing Security Boundaries
Added a warning when a managed settings file is a link to a file outside the managed settings folder
Added a /status and doctor warning when managed settings ignore user-configured sandbox allowRead paths or allowed domains
Fixed a project `CLAUDE.md`, rule or `AGENTS.md` symlinked outside the working directories loading under `permissions.blockReadsOutsideWorkingDirectories` or a `Read` deny rule
Fixed `disableClaudeAiConnectors` and `allowedMcpServers` URL rules not being applied to some MCP entries declared in `.mcp.json`, plugins or agents
Original changelogProject Settings Cannot Disable Attachments, and Slow Disk Launch Stalls Are Resolved
Fixed slow or failed startup since 2.1.285 under SDK hosts such as the VS Code extension when managed settings deny reads of many paths on a slow filesystem (notably Windows drives under WSL)
Fixed background commands, the agents view and daemon workers sending telemetry and a feature-flag request to Anthropic behind a Claude apps gateway when no managed settings on the machine force gateway login
Changed `CLAUDE_CODE_DISABLE_ATTACHMENTS` so a repository's `.claude/settings.json` or `.claude/settings.local.json` can no longer set it; shell, user and managed settings still can
Original changelogQuickly Scaffold Managed Agents, Samples Disable Non-Essential Web Tools by Default
Added `/claude-api managed-agents-onboard <url>` to set up the Managed Agents pattern a page describes as `ant apply` files
Added `/claude-api managed-agents-onboard <quickstart-name>` to build a Console quickstart template, such as `deep-researcher`, with the `ant` CLI
Changed the `claude-api` skill's Managed Agents examples to turn off the web tools unless the agent needs them and to use the `auto` permission policy
Original changelogConnect to Sessions by Name Directly, Session Restarts Stop Resending Old Messages
Added `claude attach <name>` and `claude logs <name>`: part of a session name works in place of the id
Fixed `claude respawn` re-sending an earlier message to a backgrounded session that has no saved transcript instead of starting it with an empty conversation
Fixed agent view's "restart this session fresh" re-sending an earlier message from the session instead of starting with an empty conversation
Fixed sessions moved to the background while idle reopening as "no saved transcript" after a restart or idle cleanup; they now resume their conversation
Improved responsiveness while resuming large sessions: timers, input and rendering keep running while the transcript loads
Original changelogRewind Menu Eliminates Keypress Lag, Rapid Left Arrow Navigation Becomes Smoother
Fixed `/rewind` not listing a prompt sent while Claude was still working
Fixed the rewind menu (Esc Esc / `/rewind`) freezing for hundreds of milliseconds per keypress when the conversation contains a very large pasted stack trace or source file
Changed the "Press ← again" confirm on a just-cleared prompt: a second ← no longer has to wait a second before it switches, and holding ← down now switches too
Original changelogAgent List Fixes Accidental Deletions, Permission Prompts Add Stop-All Shortcut
Fixed Esc in the agents view confirming "Press enter again to restart this session — it isn't responding"; Esc now just reopens the session
Fixed repeated Ctrl+X in the agents view deleting the whole next section after the bottom session of a section was deleted
Fixed Esc after an `n:` or Ctrl+F search in the agents view moving focus to a section header, where Ctrl+X twice would delete every session in the section
Fixed Esc confirming agent view's "Press enter again to restart this session fresh" prompt
Improved permission prompts from background agents to show the Ctrl+X Ctrl+K shortcut that stops all background agents
Original changelogAgent View Adjusts Model and Effort Instantly, Restarts Stop Replaying Old Commands
Fixed `claude agents` saving a slash command it could not deliver to a stopped session and then running it by itself the next time that session restarted
Fixed replies sent from `claude agents` just after a background session crashed being refused after 2 seconds: they are now retried for up to 12 seconds while the session restarts
Fixed slash commands and answers to a multiple-choice question that `claude agents` could not deliver to a running session being saved and sent by themselves the next time it was restarted
Changed `/model`, `/effort` and `/rename` sent from `claude agents` to a busy background session to apply right away, without a confirmation, instead of when the turn ends
Original changelogAgent Status Line Fixes Worktree Tracking, Services Persist After Package Upgrades
Fixed agent view losing a background session's `/loop` run count, countdown and live status line after the session enters a worktree that it creates
Fixed `claude agents` sessions in manual permission mode asking for approval to read an image pasted into a reply or a new agent's prompt
Fixed agent view's `/loop` run count freezing and its countdown disappearing after `/clear`; the count now restarts with the new conversation
Fixed `claude agents` failing with "Couldn't restart the background service" and background sessions stopping after a Homebrew upgrade (takes effect from the upgrade after this one)
Original changelogRecurring Scheduled Tasks Persist After Compaction, Container Restarts Trigger Rescheduling
Fixed scheduled tasks (`/loop` with an interval, reminders) silently not coming back on resume once the conversation was compacted; covers compactions made from this version on
Fixed scheduled tasks set in the foreground never firing after a ← or `/background` hand-off, and recurring ones firing an extra run on every resume, respawn or fork
Fixed cloud sessions staying asleep after a container restart lost a pending `/loop` wakeup or scheduled task; Claude is now told and can schedule it again
Fixed `/loop` and other recurring session-only scheduled tasks running an extra time after a sandboxed Bash command on Linux or after `.claude/scheduled_tasks.json` was deleted
Changed background sessions whose scheduled task is gone: they now move to Completed about 20 seconds later and can be updated or shut down when idle
Changed background sessions waiting on a scheduled wakeup (`/loop`): they are now left running through updates and low memory, where being restarted or shut down could silently lose the wakeup
Original changelogSubagents Resume Cleanly After System Sleep, Cross-Worktree Switching Retains Write Access
Fixed resumed subagents and teammates losing their earlier thinking and prompt cache after receiving a message mid-run
Fixed background agents failing with "Agent stalled" and Workflow tool subagents restarting from their prompt when a Mac woke from sleep
Fixed background subagents losing write and Bash access in their worktree after the main session enters or exits a different worktree
Changed an in-process teammate's `agent_id` in Agent results to its agent ID (its `name@team` address stays in `teammate_id`); TeammateIdle hooks no longer fire from its subagents or forks
Original changelogDaemon Logs Escape Control Characters Safely, Restarts Verify Skip-Permissions Disclaimers
Fixed the background daemon's log passing terminal control characters to the screen under `claude daemon run` and `claude daemon logs`; they now show as `\uXXXX` escapes
Fixed background workers honoring `--allow-dangerously-skip-permissions` on respawn without the bypass-permissions disclaimer having been accepted
Changed the background daemon's log to write a multi-line message as one JSON-quoted line
Original changelogCommand Permission Checks Plug Gaps: Variable Prefixes, Wildcards, Pyright, and ps Prompt First
Fixed a deny or ask rule missing a command or path whose name came from a variable set as a prefix on `declare`, `typeset`, `export` or `readonly`
Fixed Bash permission checks auto-approving some read-only commands (such as `rg` or `git grep`) whose arguments the shell would still expand as wildcards; these now prompt for approval
Fixed Bash permission checks auto-approving certain commands whose variable names zsh reads differently from bash; these now prompt for approval
Fixed Bash permission checks not applying Read deny rules or the outside-directory read block to a wildcard in some option values of read-only commands
Changed the Bash tool to ask for permission before running `pyright`, which is no longer treated as a read-only command
Changed Bash permission checks so that more forms of the `ps` command ask for approval instead of running without asking
Original changelogMultiline pipeline input auto-approved in sandbox, large directory scans no longer freeze
Fixed sandboxed commands that pipe a heredoc into another command (`cat <<EOF | python3`) asking for approval on every run
Fixed a short form of a `git clone` option keeping the sandbox exemption from a git pattern such as `git *` in `sandbox.excludedCommands`; it is now treated like the long form
Fixed sandboxed Monitor tool commands skipping the permission prompt under sandbox auto-allow; they now follow your permission rules
Fixed a freeze before the first request and in the `/sandbox` Config tab on Linux and WSL when a sandbox read rule such as `~/**/.env` covers a large folder
Fixed sandboxed Bash commands on Linux running `ConfigChange` hooks and reloading settings mid-command when `.claude/settings.json` or `.claude/settings.local.json` does not exist
Original changelogPlan mode strictly guards write tools, restricted mode closes cross-session communication
Fixed plan mode letting the auto mode classifier approve non-read-only connector tools that carry a server-pushed ask policy
Fixed auto mode denials suggesting a permission rule that would skip the classifier for a whole tool or that Claude Code would ignore
Fixed `--channels` permission relay: a reply ID that repeats within a session is now ignored instead of approving a different prompt
Fixed `--restricted` (and `CLAUDE_CODE_RESTRICTED=1`) sessions opening the cross-session messaging socket
Fixed edits to the file a symlinked settings file points at running without the settings-file permission question
Original changelogGuard against mid-read symlink swapping, pasted images strictly apply deny rules
Fixed an image read on macOS and Windows being able to return a file outside what was approved, through a link swapped in mid-read
Fixed an `@`-mention under the read block or `--restricted` being able to read a file outside the working directories through a link changed mid-read
Fixed Read deny rules not applying to image paths pasted or dragged into the prompt, or to file names listed for an @-mentioned folder
Fixed a subdirectory's AGENTS.md not being attached when a file under it is @-mentioned
Original changelogSensitive key scanning no longer hangs, multiline filenames render cleanly in prompts
Fixed a freeze when the secret scan or a permission prompt met long token-like text
Fixed a freeze of several seconds when secret masking met very long unbroken text
Fixed file names containing line breaks being displayed incorrectly in file tool errors and permission prompts
Original changelogCode deep review supports special Git setups, uncommitted changes upload safely
Fixed `/ultrareview` dropping uncommitted changes without a warning on Windows when `git stash create` failed, and refusing them after a `git add -N` file was deleted or moved
Fixed `/ultrareview` failing to upload uncommitted changes when `core.safecrlf=true` is set in git's configuration
Fixed `/ultrareview` uploading uncommitted changes unfiltered for files under a git filter driver named `unset` or `unspecified`; the upload now stops and asks you to rename the driver
Fixed `/ultrareview` of a local branch silently leaving uncommitted work out of the upload in a repository that keeps its branches outside `.git` (git 2.54+); it now refuses with an explanation
Original changelogRemote review errors streamlined, merge and pull list modified files
Fixed `claude --teleport` and `/teleport` deleting the files in a folder that had replaced a tracked file of the same name when you chose to stash: the stash is now refused, and says why
Improved the Bash changed-files view: when a chained command includes git merge, pull or checkout, it lists the files without full diffs
Improved the error shown when a git config file stops the `/ultrareview` upload: it is about half as long and says what kind of file is the problem
Improved the errors shown when the `/ultrareview` upload refuses a checkout: each known cause now has its own message, with a way to fix it
Changed the errors shown when the `/ultrareview` upload fails at a git step: they name the step and what to try, and no longer repeat git's own error text
Original changelogPlan mode preserves state across resume, skills discovered despite folder name mismatch
Fixed the `plansDirectory` setting's project-root check for paths that contain a backslash on macOS and Linux
Windows: Fixed multi-line `!` shell blocks in skills and commands failing when the file is saved with CRLF line endings
Fixed skills not being found when asked for by the name in SKILL.md when their folder has a different name (for example a non-English name): the skill listing now shows both names
Fixed a plan written in plan mode being lost when a cloud session's container restarted before the plan was presented
Fixed plan mode not being restored when resuming a session with `--continue` or `--resume <session-id>` in the terminal
Changed skills and custom commands to refuse a `!` shell command that contains raw control characters other than tab and newline, with a message that shows where they are
Original changelogCorporate proxy compatibility improved, long conversations stream in real time
Fixed requests failing behind proxies and gateways that reject one of Claude Code's beta headers with a status other than 400, or together with a second beta
Fixed headless `--json-schema` runs exiting non-zero with `is_error: true` on a `success` result when the connection dropped after the structured output was already delivered
Fixed replies in very long Remote Control and cloud sessions that could appear a block at a time instead of streaming in
Fixed the first feature-flag request of a session ignoring a proxy or API endpoint set in a project's settings
Fixed a response interrupted by computer sleep being treated as a stalled stream on Bedrock, Vertex, Foundry, and custom gateways
Changed `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` to also skip the startup connection warm-up
Original changelogHundreds of images handled smoothly in long chats, thinking interruptions auto-retried once
Fixed long sessions with hundreds of images getting stuck on "Request rejected as unprocessable by the model" errors
Fixed a turn ending at once when the API's output content filter stopped a reply while Claude was still thinking; the request is now retried once before the error is shown
Fixed the effort level changing when a flagged message is retried on a fallback model that has a different level saved in settings
Fixed SDK hosts using `--include-partial-messages` seeing a reply stay open after the turn ended when its stream was cut, interrupted or fell back to non-streaming
Original changelogLarge external tool responses no longer exhaust memory, proxy blocks skipped immediately
Fixed an MCP server provided by your organization being relisted as your own after signing in or reconnecting, including from a late result in headless and SDK sessions
Fixed unbounded memory use when an HTTP MCP server sends a very large response
Fixed a stall when an MCP server's tool listing contains very long runs of combining characters
Improved MCP startup behind a network proxy: a server the proxy blocks (HTTP 403) is no longer retried three times
Original changelogWeb Fetch Supports Resuming Past 100,000 Characters, Search Quotas Refill Hourly
Fixed WebFetch silently dropping page text past 100,000 characters; it now says how much was unread and takes an `offset` to read on
Fixed URL allow and deny patterns with a wildcard inside an `xn--` host label matching differently from one process to the next
Changed the interactive session's WebSearch budget to refill over time (100 calls/hour; `CLAUDE_CODE_WEB_SEARCH_REFILLS_PER_HOUR` sets the rate, 0 turns it off) instead of ending after 200 calls
Original changelogMulti-Chunk Pastes Merge Seamlessly, Thousands of Nested Blockquotes No Longer Crash
Fixed a crash ("Maximum call stack size exceeded") when a response nested lists or quotes thousands of levels deep
Fixed a freeze after sending some very long messages
Fixed a slowdown when expanding the transcript (ctrl+o) or resizing over large tool output that contains non-ASCII characters such as arrows, dashes or box-drawing
Fixed two pastes that overlap in one prompt being sent to the model partly as typed text instead of as one pasted block
Fixed a large paste expanded in place being sent to the model as typed text after the next keystroke when it held accents stored as separate characters, as macOS file names do
Original changelogConversation Compaction Resumes After Sleep, Key Notes Honor Language Settings
Fixed conversation compaction sometimes failing with a "null is not an object" error
Fixed You should know writing its notes in English regardless of the `language` setting
Fixed automatic compaction giving up with "Prompt is too long" when a Mac went to sleep while it was running
Original changelogLogin Credentials Sync Accurately, Suffix-Timed Values Fall Back to Defaults
Fixed `CLAUDE_CODE_USER_DIALOG_TIMEOUT_MS=5m` being read as 5 ms and cancelling remote dialogs at once; values with a unit suffix now fall back to `dialogExpiry`
Fixed first launch asking to pick a login method again after `claude auth login` or with a credentials file already in the config directory
Fixed macOS `/login` reporting success when the keychain refused the new login and kept an old one it could not remove
Improved the error shown when a cloud session is started without a claude.ai sign-in: it now names `claude auth login` and /login and no longer blames API-key authentication
Fixed Claude Code hanging until killed when a `/permissions` tab was clicked while searching in fullscreen mode
Fixed errors reading "Premature close" instead of naming the missing program when a tool Claude Code runs, such as git or gh, is not installed (macOS, Linux)
Improved the Read tool's message for binary files: it now points Claude to a skill or a shell command that can read the format
Improved the / and @ suggestion lists: the selected row now starts with a ❯ pointer, so you can see it without color
Changed `/code-review` at medium effort to also report cleanup and CLAUDE.md conventions findings on models without tuned review settings, including Opus 5.5 and Sonnet 5.5
Original changelogBrowser Batch Operations Extended to 90 Seconds, Extension Reconnection Fixed
Fixed `/chrome` "Reconnect extension" not restoring browser tools after a failed Chrome connection, and added an explanation when it can't (anthropics/claude-code#98135)
Fixed Claude in Chrome's browser picker showing a message meant for Claude when the chosen browser is no longer connected, and the VS Code dialog's list going stale after a switch
Improved Claude in Chrome: a `browser_batch` call now gets 90 seconds, up from 60, before it is reported as timed out
Changed Claude in Chrome so that a project's settings files can no longer turn it on; use `--chrome`, `/chrome` or your user settings
Original changelogSelf-Hosted Runner Worktree Links Fixed, Ultra-Long Error Outputs No Longer Lag
Self-hosted runner: Fixed a crafted, very long line of a session's error output freezing the runner for several seconds
Fixed self-hosted runner sessions resumed after a stopped runner failing with "missing but already registered worktree" when the sessions folder is a relative symlink
Self-hosted runners: Changed `claude --environment <id>` to create its session through the current Sessions API; printed and JSON session ids keep their session_… form
Original changelogCloud Container Restarts Complete Responses, Opening Artifacts Closes Menus
Fixed a Cowork cloud session's reply sometimes never finishing when its container restarted just after Claude sent a message or a file
Fixed the Bash tool occasionally losing shell aliases, functions and plugin PATH entries for a whole session when its first command ran seconds after startup on a new config directory
Fixed artifact operations failing in a Claude Code run started from inside a cloud session (for example `claude -p` run from the Bash tool)
Changed `/artifacts`: opening an artifact in your browser now closes the list
Original changelogRemote Sessions Support Multi-File Transfers, Marketplace Download Conflicts Fixed
Fixed files sent from remote sessions sometimes being refused as "not the one approved" when four or more were sent at once
Fixed a marketplace named after another GitHub marketplace's download folder stopping that marketplace from downloading
Changed the built-in `gh api` in cloud sessions: a host other than github.com set in `GH_HOST` or `GH_REPO` is now refused (use `--hostname` or a full URL), and stderr notes requests to other hosts
Original changelog[VSCode] Messages Show Timestamps by Default, File Tab Hover Previews Full Paths
[VSCode] Added a screen reader announcement, "Message queued.", when you send a message while Claude is working
[VSCode] Added a way to review and run a plugin marketplace's install or update command from the Manage plugins dialog
[VSCode] Improved Continue After Reload: tabs reopened after VS Code restarts its extensions now also finish a step the restart interrupted
[VSCode] Improved file pills in messages: hovering one now shows the file's path from the project folder, so same-named files can be told apart
[VSCode] Changed message timestamps to show by default (turn them off with the Claude Code: Show Message Timestamps setting)
Original changelog[VSCode] Background processes release on conversation close, permission dialog focus fixed
[VSCode] Fixed a blank chat you never typed into keeping a background Claude process running after you open a saved conversation in its place
[VSCode] Fixed settings dialogs blaming a timeout when Claude Code stopped unexpectedly during a save
[VSCode] Fixed the branch switch dialog offering to switch when it could not check for uncommitted changes
[VSCode] Fixed a permission prompt that arrived behind an open dialog taking keyboard focus, so a key pressed in the dialog could answer it
[VSCode] Fixed sign-in and new sessions giving no clear reason when Claude Code cannot find or start its program
[VSCode] Fixed the agent map showing a nested sub-agent with "Tool calls (0)" and placing the agents it starts under the main agent
Original changelog[Cloud sessions] Cloud status indicators stop promptly, scheduled task run logs display properly
[Cloud sessions] Fixed turning off prompt suggestions through a cloud environment's environment variables having no effect in new cloud sessions
[Cloud sessions] Fixed the working indicator in a cloud session spinning on for several seconds after Claude's reply had finished; it now stops with the reply
[Cloud sessions] Fixed History on a never-run routine's page still saying "No runs yet" after you pressed Run now; it now shows the new run
[Cloud sessions] Fixed an unarchived cloud session looking as if Claude were still working until you sent another message
Original changelog[Remote Control] Newly launched Remote Control computers appear in menus within seconds
[Remote Control] Fixed a computer that just started Remote Control taking up to a minute to appear in the Remote Control menu of a new session; it now appears within seconds
Original changelog[Claude Tag] Slack supports fast mode commands, channel guideline length switches to character count
[Claude Tag] Added fast mode in Slack: mention Claude with `!fast` to switch a thread to fast mode, moving it to Opus if needed, and `!fast off` to switch back; replies show (fast) while it's on
[Claude Tag] Added the optional Path prefixes field when creating a custom connection in an access bundle, so its allow rule can cover only those paths instead of the whole host
[Claude Tag] Changed the channel instructions limit to 8,192 characters instead of bytes, so non-English text gets the same room, and added a character count beside Save on the Configure page
Original changelog[Claude Tag] Admin memory reads properly, guest clicks no longer dismiss member confirmations
[Claude Tag] Fixed members with the Claude Tag Admin permission getting "Couldn't load memory files" on the Activity page's Memory tab; they can now read workspace and channel memory
[Claude Tag] Fixed a workspace guest's Confirm on a Claude settings card in Slack removing its buttons for everyone; only the guest sees the refusal, and members can still confirm or cancel
[Claude Tag] Fixed scheduled routines in Slack channels running on a model other than the channel's default; each run that starts a new session now uses the current default model
[Claude Tag] Fixed GitHub repositories in an access bundle attached by a channel-name rule being refused in the channels the rule covers; Claude can now add, list and clone them there
[Claude Tag] Improved Claude's notice in your direct messages when your own Claude plan's usage limit is reached: it shows within seconds and says when the limit resets
[Claude Tag] Improved the earlier Claude in Slack app's reply when it can't start a session: it now says what failed and who can fix it, in full only once per thread
Original changelog[Code Review] Blocking review comments no longer mislabeled as nits, disabled reviews stop prompting
[Code Review] Fixed blocking review comments sometimes opening with a "nit" label that contradicted their severity
[Code Review] Fixed tips to comment "@claude review" being posted on fork and Manual-mode pull requests in organizations that have turned Code Review off