diff --git a/CHANGELOG.md b/CHANGELOG.md index a903062be..ac7d9caef 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,39 @@ # Changelog +## 2.1.224 + +- Added self-hosted environments: `claude self-hosted-runner` turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans +- Added `archive` plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning +- Added a cancel-and-confirm step when removing an unavailable paste changes a command's text +- Added `ANTHROPIC_BEDROCK_REGION_PREFIX` env var for Bedrock to prefer a specific cross-region inference profile over the `AWS_REGION`-derived one +- Added `crossSessionInbound` and `dialogExpiry` settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver +- Added sandbox credential-masking options: `extract` and `onExtractNoMatch` for structured env values, `decode: "jwt"` with `maskClaims` for JWT-aware masking, and `awsPairs`/`sigv4` for AWS SigV4 re-signing; these need `network.tlsTerminate` and are honored only from user, managed, or `--settings` settings +- Added cross-session `SendMessage`: Claude Code sessions can now message each other, on any of your machines, with `ListAgents` to discover them (macOS and Linux) +- Fixed long (>200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and `/resume` no longer cross projects +- Fixed `SendMessage` reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors +- Fixed sandbox filesystem deny entries written with a trailing slash (e.g. `denyRead: "~/.aws/"`) being silently bypassable on Linux and macOS +- Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why +- Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model +- Fixed plugin install records being silently corrupted when the same plugin is installed in multiple projects +- Fixed recalled or restored paste content occasionally attaching wrong data or silently losing text when the paste had aged out or placeholder numbers collided +- Fixed copy-on-select on Wayland sometimes not reaching the clipboard; the two selection writes no longer race +- Fixed the feedback survey's transcript share silently failing on long sessions; a failed share now shows an error instead of a success message +- Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token +- Fixed Remote Control and SDK clients showing a blank "(no content)" message after `/clear` and other output-less commands +- Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session +- Improved fullscreen mode to keep the full pre-compaction history in scrollback across repeated compactions, instead of only the most recent interval +- Improved Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary instead of a silent pause; `/clear` resets now propagate to attached clients +- Improved Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut, instead of only an 8-second toast +- Removed the 200-subagent-per-session spawn cap; long-running sessions no longer refuse new agents (concurrency and depth limits still apply) +- Changed managed settings: the approval prompt no longer re-appears after re-login or org switching when the organization's settings are unchanged +- Changed the feedback-survey transcript share: with your consent it now also uploads the last request's model settings — the system prompt (which includes your `CLAUDE.md` instructions), tool definitions, and model parameters. Secrets are redacted as before, and these fields are dropped first if the share is too large +- Changed the Bash tool description to always note that command output is displayed to the model, not reliably to the user +- Changed recalled paste placeholder numbers to renumber when accepted into the input +- Changed Remote Control to archive the stale server session instead of leaving a dead one listed when a fresh session is minted after compaction or `/resume` +- [VSCode] Fixed the extension showing Remote Control as connected after the connection failed +- Fixed a session resume silently reconnecting Remote Control after the user turned it off (`--resume`, SDK hosts, and the VS Code extension) +- [VSCode] Fixed sessions not honoring `remoteControlAtStartup` when explicitly enabled + ## 2.1.223 - Added owner wildcard entries (`"owner/*"`) to the `strictKnownMarketplaces` and `blockedMarketplaces` managed settings for allowing or blocking all marketplace repos under a GitHub org diff --git a/feed.xml b/feed.xml index fafe2b80b..89011c87a 100644 --- a/feed.xml +++ b/feed.xml @@ -6,7 +6,44 @@ Anthropic - 2026-08-06T00:52:31Z + 2026-08-07T04:00:51Z + + https://github.com/anthropics/claude-code/releases/tag/v2.1.224 + Claude Code v2.1.224 + + 2026-08-07T04:00:51Z + <p>• Added self-hosted environments: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans</p> +<p>• Added archive plugin source: install plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning</p> +<p>• Added a cancel-and-confirm step when removing an unavailable paste changes a command's text</p> +<p>• Added ANTHROPIC_BEDROCK_REGION_PREFIX env var for Bedrock to prefer a specific cross-region inference profile over the AWS_REGION-derived one</p> +<p>• Added crossSessionInbound and dialogExpiry settings: cross-session messages sent to a session running with bypassed permissions are held for your approval, and messages to other sessions auto-deliver</p> +<p>• Added sandbox credential-masking options: extract and onExtractNoMatch for structured env values, decode: "jwt" with maskClaims for JWT-aware masking, and awsPairs/sigv4 for AWS SigV4 re-signing; these need network.tlsTerminate and are honored only from user, managed, or --settings settings</p> +<p>• Added cross-session SendMessage: Claude Code sessions can now message each other, on any of your machines, with ListAgents to discover them (macOS and Linux)</p> +<p>• Fixed long (&gt;200 char) project paths resolving to another project's session directory under a shared sanitized prefix; session list, rename, fork, delete and /resume no longer cross projects</p> +<p>• Fixed SendMessage reporting "Message sent" when the write to a teammate's inbox had actually failed; failed deliveries are now reported as errors</p> +<p>• Fixed sandbox filesystem deny entries written with a trailing slash (e.g. denyRead: "~/.aws/") being silently bypassable on Linux and macOS</p> +<p>• Fixed sandbox violation details never appearing in Bash tool results; Claude now sees which file or network access was denied and why</p> +<p>• Fixed MCP tools that connect mid-turn being deferred for tool search without their names announced to the model</p> +<p>• Fixed plugin install records being silently corrupted when the same plugin is installed in multiple projects</p> +<p>• Fixed recalled or restored paste content occasionally attaching wrong data or silently losing text when the paste had aged out or placeholder numbers collided</p> +<p>• Fixed copy-on-select on Wayland sometimes not reaching the clipboard; the two selection writes no longer race</p> +<p>• Fixed the feedback survey's transcript share silently failing on long sessions; a failed share now shows an error instead of a success message</p> +<p>• Fixed Remote Control auto-start intermittently failing with "Remote credentials fetch failed" on a cold start with a stale login token</p> +<p>• Fixed Remote Control and SDK clients showing a blank "(no content)" message after /clear and other output-less commands</p> +<p>• Fixed a Remote Control session recreated after its server session expired uploading prior local conversation history into the new session</p> +<p>• Improved fullscreen mode to keep the full pre-compaction history in scrollback across repeated compactions, instead of only the most recent interval</p> +<p>• Improved Remote Control: attached web and mobile clients now see compaction progress and the post-compaction boundary instead of a silent pause; /clear resets now propagate to attached clients</p> +<p>• Improved Remote Control: connection failures now show a persistent failure indicator with details and a reconnect shortcut, instead of only an 8-second toast</p> +<p>• Removed the 200-subagent-per-session spawn cap; long-running sessions no longer refuse new agents (concurrency and depth limits still apply)</p> +<p>• Changed managed settings: the approval prompt no longer re-appears after re-login or org switching when the organization's settings are unchanged</p> +<p>• Changed the feedback-survey transcript share: with your consent it now also uploads the last request's model settings — the system prompt (which includes your CLAUDE.md instructions), tool definitions, and model parameters. Secrets are redacted as before, and these fields are dropped first if the share is too large</p> +<p>• Changed the Bash tool description to always note that command output is displayed to the model, not reliably to the user</p> +<p>• Changed recalled paste placeholder numbers to renumber when accepted into the input</p> +<p>• Changed Remote Control to archive the stale server session instead of leaving a dead one listed when a fresh session is minted after compaction or /resume</p> +<p>• [VSCode] Fixed the extension showing Remote Control as connected after the connection failed</p> +<p>• Fixed a session resume silently reconnecting Remote Control after the user turned it off (--resume, SDK hosts, and the VS Code extension)</p> +<p>• [VSCode] Fixed sessions not honoring remoteControlAtStartup when explicitly enabled</p> + https://github.com/anthropics/claude-code/releases/tag/v2.1.223 Claude Code v2.1.223 @@ -609,47 +646,4 @@ 2026-07-08T00:27:43Z <p>• Fixed hook events not streaming during SessionStart hooks in headless sessions, which could cause remote workers to be idle-reaped mid-hook</p> - - https://github.com/anthropics/claude-code/releases/tag/v2.1.203 - Claude Code v2.1.203 - - 2026-07-07T21:06:03Z - <p>• Added a warning when your login is about to expire, so you can re-authenticate before background sessions are interrupted</p> -<p>• Added a grey ⏸ badge to the footer when in manual permission mode, making the active mode always visible</p> -<p>• Added the session's additional working directories to MCP roots/list, with notifications/roots/list_changed sent when the set changes</p> -<p>• Fixed opening or switching background agent sessions on macOS stalling for 15–20 seconds due to a false low-memory detection (regression in 2.1.196)</p> -<p>• Fixed background sessions becoming permanently unresponsive to attach, replies, and stop when the daemon's session token went stale — the session now recovers automatically</p> -<p>• Fixed returning to claude agents silently stopping running subagents and re-running the prompt from scratch — their work now carries over</p> -<p>• Fixed a memory and per-turn CPU regression in interactive sessions: the context-usage indicator no longer re-analyzes the entire transcript after every turn</p> -<p>• Fixed background agents inheriting a stale PATH from the daemon instead of the dispatching shell, causing missing tools on Windows</p> -<p>• Fixed background and agent-view sessions dropping a shell-exported ANTHROPIC_BASE_URL, which sent API keys to the default endpoint and failed with 401</p> -<p>• Fixed Bash failing with "argument list too long" in repos with many git worktrees</p> -<p>• Fixed worktree-isolated subagents sometimes running shell commands in the parent checkout instead of their own worktree</p> -<p>• Fixed worktree creation rejecting nested repositories in multi-repo workspaces, leaving background sessions unable to isolate and edit</p> -<p>• Fixed background agents crash-looping when their working directory was deleted, replaced by a file, or became an invalid path — they now fail once with a clear error</p> -<p>• Fixed a background daemon auto-upgrade failure silently killing all running background sessions</p> -<p>• Fixed TaskStop and TaskOutput failing to find background agents spawned by another agent — errors now list running agents by id and description</p> -<p>• Fixed the claude agents composer discarding your typed message when a slash command isn't available there</p> -<p>• Fixed the agent list crashing when opening a stopped session whose conversation was already open in another session</p> -<p>• Fixed background sessions showing "Needs input" in the agent list after the question was already answered</p> -<p>• Fixed background agent startup failures showing only "exit_with_message" instead of the actual error</p> -<p>• Fixed background sessions ignoring effortLevel changes in settings.json when forked through the daemon</p> -<p>• Fixed attached background sessions ignoring CLAUDE_CODE_DISABLE_MOUSE and CLAUDE_CODE_DISABLE_MOUSE_CLICKS opt-outs</p> -<p>• Fixed /exit incorrectly warning about running background agents after all named agents had completed</p> -<p>• Fixed background sessions started from a non-git directory unable to edit files when a WorktreeCreate hook was configured</p> -<p>• Fixed the @ directory picker in claude agents not showing registered git worktrees</p> -<p>• Fixed background task output on Windows being permanently replaced by an empty file after /clear</p> -<p>• Fixed content jumping when scrolling up through long transcript history</p> -<p>• Fixed the terminal flickering and jumping while typing in bash mode when a shell-history suggestion was shown</p> -<p>• Fixed literal ^[[I / ^[[O escape codes being printed when reattaching to a background session</p> -<p>• Fixed LSP-only plugins being incorrectly flagged for disuse when their language servers deliver diagnostics or answer navigation requests</p> -<p>• Improved responsiveness while long responses stream: live-preview updates no longer re-render the whole screen</p> -<p>• Improved subagent behavior: agents are now less likely to re-delegate their entire task to another subagent</p> -<p>• Reduced binary size by ~7 MB and startup memory by ~7 MB by loading a large bundled dependency lazily instead of inlining it</p> -<p>• Changed left arrow to no longer close the background tasks, diff, and workflow detail views — press Esc instead</p> -<p>• Changed the empty claude agents view to always show the organized sections (Needs input / Working / Completed) with descriptions</p> -<p>• Removed the startup "claude command missing or broken" warnings — they now appear in /doctor and /status instead</p> -<p>• Removed a redundant navigation hint from the claude agents footer</p> -<p>• [VSCode] Added a Settings toggle for "Enable Remote Control for all sessions"</p> -