diff --git a/CHANGELOG.md b/CHANGELOG.md
index 05e2d78b1..084abe8d1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,25 @@
# Changelog
+## 2.1.200
+
+- Changed `AskUserQuestion` dialogs to no longer auto-continue by default; opt into an idle timeout via `/config`
+- Changed the "default" permission mode to "Manual" across the CLI, `--help`, VS Code, and JetBrains; `--permission-mode manual` and `"defaultMode": "manual"` are accepted alongside `default`
+- Fixed a crash at startup when `disabledMcpServers` or `enabledMcpServers` in `.claude.json` is set to a non-array value
+- Fixed background sessions silently stopping mid-turn after sleep/wake or when reopening a stalled session
+- Fixed background sessions re-running a turn cancelled with Esc after a stall respawn
+- Fixed background agents never starting again after a crash left a stale `daemon.lock` whose PID the OS reused
+- Fixed background-agent daemon handover so a reinstalled older build can no longer take over the daemon; build recency is now judged by the version's embedded build timestamp
+- Fixed background-agent roster issues: transient corruption permanently disabling orphan cleanup, older binaries not preserving fields written by newer versions, and socket auth tokens being stripped during daemon restarts
+- Fixed subagents cut off by a rate limit before producing any text output returning an empty result instead of failing cleanly
+- Fixed control bytes from background-agent output reaching the terminal in the agent view
+- Fixed `claude agents --plugin-dir
` not showing the plugin's agents and skills in the agent view when the flag is placed after `agents`
+- Fixed project-scoped plugins not loading correctly from git worktrees of the same repository
+- Fixed `/mcp` server list not tracking focus for screen readers and magnifiers
+- Fixed voice dictation showing a misleading "Voice connection failed" message when a recording captures no audio
+- Fixed rendering flicker under tmux 3.4+ by enabling synchronized terminal output
+- Improved screen-reader output: decorative glyphs are now hidden, transcript symbols read as short labels, and nested tables read as `Header: value.` lines
+- Improved the install script to explain when installation is killed by the system running out of memory
+
## 2.1.199
- Stacked slash-skill invocations like `/skill-a /skill-b do XYZ` now load all leading skills (up to 5), not just the first
diff --git a/feed.xml b/feed.xml
index e31e8d6aa..8ff2585d0 100644
--- a/feed.xml
+++ b/feed.xml
@@ -6,7 +6,30 @@
Anthropic
- 2026-07-02T23:35:12Z
+ 2026-07-03T16:52:26Z
+
+ https://github.com/anthropics/claude-code/releases/tag/v2.1.200
+ Claude Code v2.1.200
+
+ 2026-07-03T16:52:26Z
+ <p>• Changed AskUserQuestion dialogs to no longer auto-continue by default; opt into an idle timeout via /config</p>
+<p>• Changed the "default" permission mode to "Manual" across the CLI, --help, VS Code, and JetBrains; --permission-mode manual and "defaultMode": "manual" are accepted alongside default</p>
+<p>• Fixed a crash at startup when disabledMcpServers or enabledMcpServers in .claude.json is set to a non-array value</p>
+<p>• Fixed background sessions silently stopping mid-turn after sleep/wake or when reopening a stalled session</p>
+<p>• Fixed background sessions re-running a turn cancelled with Esc after a stall respawn</p>
+<p>• Fixed background agents never starting again after a crash left a stale daemon.lock whose PID the OS reused</p>
+<p>• Fixed background-agent daemon handover so a reinstalled older build can no longer take over the daemon; build recency is now judged by the version's embedded build timestamp</p>
+<p>• Fixed background-agent roster issues: transient corruption permanently disabling orphan cleanup, older binaries not preserving fields written by newer versions, and socket auth tokens being stripped during daemon restarts</p>
+<p>• Fixed subagents cut off by a rate limit before producing any text output returning an empty result instead of failing cleanly</p>
+<p>• Fixed control bytes from background-agent output reaching the terminal in the agent view</p>
+<p>• Fixed claude agents --plugin-dir <dir> not showing the plugin's agents and skills in the agent view when the flag is placed after agents</p>
+<p>• Fixed project-scoped plugins not loading correctly from git worktrees of the same repository</p>
+<p>• Fixed /mcp server list not tracking focus for screen readers and magnifiers</p>
+<p>• Fixed voice dictation showing a misleading "Voice connection failed" message when a recording captures no audio</p>
+<p>• Fixed rendering flicker under tmux 3.4+ by enabling synchronized terminal output</p>
+<p>• Improved screen-reader output: decorative glyphs are now hidden, transcript symbols read as short labels, and nested tables read as Header: value. lines</p>
+<p>• Improved the install script to explain when installation is killed by the system running out of memory</p>
+ https://github.com/anthropics/claude-code/releases/tag/v2.1.199Claude Code v2.1.199
@@ -436,40 +459,4 @@
<p>• Fixed Fable 5 model names with a [1m] suffix not being normalized — Fable 5 includes 1M context by default, so the suffix is now stripped automatically</p>
<p>• Fixed a spurious "sandbox dependencies missing" startup warning on Windows when sandbox was enabled in settings</p>
-
- https://github.com/anthropics/claude-code/releases/tag/v2.1.172
- Claude Code v2.1.172
-
- 2026-06-10T20:44:09Z
- <p>• Sub-agents can now spawn their own sub-agents (up to 5 levels deep)</p>
-<p>• Amazon Bedrock now reads the AWS region from ~/.aws config files when AWS_REGION isn't set, matching AWS SDK precedence; /status shows where the region came from</p>
-<p>• Added a search bar when browsing a marketplace's plugins in /plugin</p>
-<p>• Added model attribute to the claude_code.lines_of_code.count OTEL metric</p>
-<p>• Fixed sessions using 1M context without usage credits getting permanently stuck — the session now automatically compacts back under the standard context limit</p>
-<p>• Fixed a repeating "an image in the conversation could not be processed and was removed" error when the conversation contained multiple images</p>
-<p>• Fixed the agents view keeping a session under Working with a busy spinner for up to 30 seconds after the worker replied</p>
-<p>• Fixed background agents potentially reading another directory's project settings (.mcp.json approvals, trust) when dispatched onto a pre-warmed worker</p>
-<p>• Fixed background-session attach failing with EAUTH for sessions started on an older version after the daemon auto-updated</p>
-<p>• Fixed a background sub-agent staying stuck as "active" in the agent panel after a nested agent it spawned was stopped</p>
-<p>• Fixed /model suggestions in the claude agents dispatch input rendering with a misleading slash prefix and showing models disabled for your org</p>
-<p>• Fixed availableModels restrictions not being applied to subagent model overrides, the agent dispatch model picker, and the advisor model</p>
-<p>• Fixed availableModels allowlists hiding the /model picker's Opus and Sonnet 1M rows when entries use version-specific IDs like claude-opus-4-8</p>
-<p>• Fixed the /model picker on Bedrock offering models the provider doesn't serve — selecting one silently switched the session model and lit the selection marker on multiple rows</p>
-<p>• Fixed model IDs getting a doubled 1M-context suffix (e.g. [1M][1m]) when ANTHROPIC_DEFAULT_OPUS_MODEL already includes one</p>
-<p>• Fixed opusplan model setting not shipping with 1M context in plan mode for entitled users; the opusplan[1m] workaround now also correctly switches to Opus in plan mode</p>
-<p>• Fixed WebFetch(domain:*.example.com) wildcard domain rules never matching subdomains in allow, deny, and ask position, and file permission rules with mid-pattern wildcards (e.g. Read(secrets-*/config.json)) being rejected at startup</p>
-<p>• Fixed up-arrow prompt history showing the main agent's prompts while a subagent's chat tab is open</p>
-<p>• Fixed memory recall not finding mounted team memory stores (CLAUDE_MEMORY_STORES) in remote sessions</p>
-<p>• Fixed workflow validation rejecting scripts whose prompt strings or comments merely mention Date.now()/Math.random()</p>
-<p>• Disable mouse tracking on Windows consoles that don't fully support it</p>
-<p>• Fixed the /plugin marketplace list losing its cursor after backing out of a long plugin list, and Esc from the plugin browser returning to the wrong tab</p>
-<p>• Improved performance in long conversations by removing redundant message normalization and avoiding full message-history transforms when streaming tool-use state is unchanged</p>
-<p>• Reduced idle CPU usage: /goal status chip no longer re-renders the terminal at 5 Hz while idle, and fewer UI re-renders while subagents run in parallel</p>
-<p>• Improved Claude in Chrome tool loading: browser tools now load in a single batched call instead of one per tool</p>
-<p>• Improved the non-interactive Usage Policy refusal message to suggest starting a new session or changing your model</p>
-<p>• /code-review now keeps the ultra option visible when you're not signed in to claude.ai, with an explanation that the cloud review requires a claude.ai account</p>
-<p>• Shortened the Remote Control footer indicator to "/rc active" and hid it on narrow terminals</p>
-<p>• Stopped promoting /loop in remote sessions, where pending loops don't keep the container alive</p>
-<p>• [VSCode] Fixed PowerShell tool calls rendering as raw JSON instead of a proper command display and permission dialog, and stripped ANSI escape codes from displayed shell output</p>
-