🚀 CLI Release Notes

- Added `"defer"` permission decision to `PreToolUse` hooks — headless sessions can pause at a tool call and resume with `-p --resume` to have the hook re-evaluate - Added `CLAUDE_CODE_NO_FLICKER=1` environment variable to opt into flicker-free alt-screen rendering with virtualized scrollback - Added `PermissionDenied` hook that fires after auto mode classifier denials — return `{retry: true}` to tell the model it can retry - Added named subagents to `@` mention typeahead suggestions - Added `MCP_CONNECTION_NONBLOCKING=true` for `-p` mode to skip the MCP connection wait entirely, and bounded `--mcp-config` server connections at 5s instead of blocking on the slowest server - Auto mode: denied commands now show a notification and appear in `/permissions` → Recent tab where you can retry with `r` - Fixed `Edit(//path/**)` and `Read(//path/**)` allow rules to check the resolved symlink target, not just the requested path - Fixed voice push-to-talk not activating for some modifier-combo bindings, and voice mode on Windows failing with "WebSocket upgrade rejected with HTTP 101" - Fixed Edit/Write tools doubling CRLF on Windows and stripping Markdown hard line breaks (two trailing spaces) - Fixed `StructuredOutput` schema cache bug causing ~50% failure rate when using multiple schemas - Fixed memory leak where large JSON inputs were retained as LRU cache keys in long-running sessions - Fixed a crash when removing a message from very large session files (over 50MB) - Fixed LSP server zombie state after crash — server now restarts on next request instead of failing until session restart - Fixed prompt history entries containing CJK or emoji being silently dropped when they fall on a 4KB boundary in `~/.claude/history.jsonl` - Fixed `/stats` undercounting tokens by excluding subagent usage, and losing historical data beyond 30 days when the stats cache format changes - Fixed `-p --resume` hangs when the deferred tool input exceeds 64KB or no deferred marker exists, and `-p --continue` not resuming deferred tools - Fixed `claude-cli://` deep links not opening on macOS - Fixed MCP tool errors truncating to only the first content block when the server returns multi-element error content - Fixed skill reminders and other system context being dropped when sending messages with images via the SDK - Fixed PreToolUse/PostToolUse hooks to receive `file_path` as an absolute path for Write/Edit/Read tools, matching the documented behavior - Fixed autocompact thrash loop — now detects when context refills to the limit immediately after compacting three times in a row and stops with an actionable error instead of burning API calls - Fixed prompt cache misses in long sessions caused by tool schema bytes changing mid-session - Fixed nested CLAUDE.md files being re-injected dozens of times in long sessions that read many files - Fixed `--resume` crash when transcript contains a tool result from an older CLI version or interrupted write - Fixed misleading "Rate limit reached" message when the API returned an entitlement error — now shows the actual error with actionable hints - Fixed hooks `if` condition filtering not matching compound commands (`ls && git push`) or commands with env-var prefixes (`FOO=bar git push`) - Fixed collapsed search/read group badges duplicating in terminal scrollback during heavy parallel tool use - Fixed notification `invalidates` not clearing the currently-displayed notification immediately - Fixed prompt briefly disappearing after submit when background messages arrived during processing - Fixed Devanagari and other combining-mark text being truncated in assistant output - Fixed rendering artifacts on main-screen terminals after layout shifts - Fixed voice mode failing to request microphone permission on macOS Apple Silicon - Fixed Shift+Enter submitting instead of inserting a newline on Windows Terminal Preview 1.25 - Fixed periodic UI jitter during streaming in iTerm2 when running inside tmux - Fixed PowerShell tool incorrectly reporting failures when commands like `git push` wrote progress to stderr on Windows PowerShell 5.1 - Fixed a potential out-of-memory crash when the Edit tool was used on very large files (>1 GiB) - Improved collapsed tool summary to show "Listed N directories" for `ls`/`tree`/`du` instead of "Read N files" - Improved Bash tool to warn when a formatter/linter command modifies files you have previously read, preventing stale-edit errors - Improved `@`-mention typeahead to rank source files above MCP resources with similar names - Improved PowerShell tool prompt with version-appropriate syntax guidance (5.1 vs 7+) - Changed `Edit` to work on files viewed via `Bash` with `sed -n` or `cat`, without requiring a separate `Read` call first - Changed hook output over 50K characters to be saved to disk with a file path + preview instead of being injected directly into context - Changed `cleanupPeriodDays: 0` in settings.json to be rejected with a validation error — it previously silently disabled transcript persistence - Changed thinking summaries to no longer be generated by default in interactive sessions — set `showThinkingSummaries: true` in settings.json to restore - Documented `TaskCreated` hook event and its blocking behavior - Preserved task notifications when backgrounding a running command with Ctrl+B - PowerShell tool on Windows: external-command arguments containing both a double-quote and whitespace now prompt instead of auto-allowing (PS 5.1 argument-splitting hardening) - `/env` now applies to PowerShell tool commands (previously only affected Bash) - `/usage` now hides redundant "Current week (Sonnet only)" bar for Pro and Enterprise plans - Image paste no longer inserts a trailing space - Pasting `!command` into an empty prompt now enters bash mode, matching typed `!` behavior - `/buddy` is here for April 1st — hatch a small creature that watches you code

- Fixed messages in Cowork Dispatch not getting delivered

- Added `X-Claude-Code-Session-Id` header to API requests so proxies can aggregate requests by session without parsing the body - Added `.jj` and `.sl` to VCS directory exclusion lists so Grep and file autocomplete don't descend into Jujutsu or Sapling metadata - Fixed `--resume` failing with "tool_use ids were found without tool_result blocks" on sessions created before v2.1.85 - Fixed Write/Edit/Read failing on files outside the project root (e.g., `~/.claude/CLAUDE.md`) when conditional skills or rules are configured - Fixed unnecessary config disk writes on every skill invocation that could cause performance issues and config corruption on Windows - Fixed potential out-of-memory crash when using `/feedback` on very long sessions with large transcript files - Fixed `--bare` mode dropping MCP tools in interactive sessions and silently discarding messages enqueued mid-turn - Fixed the `c` shortcut copying only ~20 characters of the OAuth login URL instead of the full URL - Fixed masked input (e.g., OAuth code paste) leaking the start of the token when wrapping across multiple lines on narrow terminals - Fixed official marketplace plugin scripts failing with "Permission denied" on macOS/Linux since v2.1.83 - Fixed statusline showing another session's model when running multiple Claude Code instances and using `/model` in one of them - Fixed scroll not following new messages after wheel scroll or click-to-select at the bottom of a long conversation - Fixed `/plugin` uninstall dialog: pressing `n` now correctly uninstalls the plugin while preserving its data directory - Fixed a regression where pressing Enter after clicking could leave the transcript blank until the response arrived - Fixed `ultrathink` hint lingering after deleting the keyword - Fixed memory growth in long sessions from markdown/highlight render caches retaining full content strings - Reduced startup event-loop stalls when many claude.ai MCP connectors are configured (macOS keychain cache extended from 5s to 30s) - Reduced token overhead when mentioning files with `@` — raw string content no longer JSON-escaped - Improved prompt cache hit rate for Bedrock, Vertex, and Foundry users by removing dynamic content from tool descriptions - Memory filenames in the "Saved N memories" notice now highlight on hover and open on click - Skill descriptions in the `/skills` listing are now capped at 250 characters to reduce context usage - Changed `/skills` menu to sort alphabetically for easier scanning - Auto mode now shows "unavailable for your plan" when disabled by plan restrictions (was "temporarily unavailable") - [VSCode] Fixed extension incorrectly showing "Not responding" during long-running operations - [VSCode] Fixed extension defaulting Max plan users to Sonnet after the OAuth token refreshes (8 hours after login) - Read tool now uses compact line-number format and deduplicates unchanged re-reads, reducing token usage

- Added `CLAUDE_CODE_MCP_SERVER_NAME` and `CLAUDE_CODE_MCP_SERVER_URL` environment variables to MCP `headersHelper` scripts, allowing one helper to serve multiple servers - Added conditional `if` field for hooks using permission rule syntax (e.g., `Bash(git *)`) to filter when they run, reducing process spawning overhead - Added timestamp markers in transcripts when scheduled tasks (`/loop`, `CronCreate`) fire - Added trailing space after `[Image #N]` placeholder when pasting images - Deep link queries (`claude-cli://open?q=…`) now support up to 5,000 characters, with a "scroll to review" warning for long pre-filled prompts - MCP OAuth now follows RFC 9728 Protected Resource Metadata discovery to find the authorization server - Plugins blocked by organization policy (`managed-settings.json`) can no longer be installed or enabled, and are hidden from marketplace views - PreToolUse hooks can now satisfy `AskUserQuestion` by returning `updatedInput` alongside `permissionDecision: "allow"`, enabling headless integrations that collect answers via their own UI - `tool_parameters` in OpenTelemetry tool_result events are now gated behind `OTEL_LOG_TOOL_DETAILS=1` - Fixed `/compact` failing with "context exceeded" when the conversation has grown too large for the compact request itself to fit - Fixed `/plugin enable` and `/plugin disable` failing when a plugin's install location differs from where it's declared in settings - Fixed `--worktree` exiting with an error in non-git repositories before the `WorktreeCreate` hook could run - Fixed `deniedMcpServers` setting not blocking claude.ai MCP servers - Fixed `switch_display` in the computer-use tool returning "not available in this session" on multi-monitor setups - Fixed crash when `OTEL_LOGS_EXPORTER`, `OTEL_METRICS_EXPORTER`, or `OTEL_TRACES_EXPORTER` is set to `none` - Fixed diff syntax highlighting not working in non-native builds - Fixed MCP step-up authorization failing when a refresh token exists — servers requesting elevated scopes via `403 insufficient_scope` now correctly trigger the re-authorization flow - Fixed memory leak in remote sessions when a streaming response is interrupted - Fixed persistent ECONNRESET errors during edge connection churn by using a fresh TCP connection on retry - Fixed prompts getting stuck in the queue after running certain slash commands, with up-arrow unable to retrieve them - Fixed Python Agent SDK: `type:'sdk'` MCP servers passed via `--mcp-config` are no longer dropped during startup - Fixed raw key sequences appearing in the prompt when running over SSH or in the VS Code integrated terminal - Fixed Remote Control session status staying stuck on "Requires Action" after a permission is resolved - Fixed shift+enter and meta+enter being intercepted by typeahead suggestions instead of inserting newlines - Fixed stale content bleeding through when scrolling up during streaming - Fixed terminal left in enhanced keyboard mode after exit in Ghostty, Kitty, WezTerm, and other terminals supporting the Kitty keyboard protocol — Ctrl+C and Ctrl+D now work correctly after quitting - Improved @-mention file autocomplete performance on large repositories - Improved PowerShell dangerous command detection - Improved scroll performance with large transcripts by replacing WASM yoga-layout with a pure TypeScript implementation - Reduced UI stutter when compaction triggers on large sessions

- Added PowerShell tool for Windows as an opt-in preview. Learn more at https://code.claude.com/docs/en/tools-reference#powershell-tool - Added `ANTHROPIC_DEFAULT_{OPUS,SONNET,HAIKU}_MODEL_SUPPORTS` env vars to override effort/thinking capability detection for pinned default models for 3p (Bedrock, Vertex, Foundry), and `_MODEL_NAME`/`_DESCRIPTION` to customize the `/model` picker label - Added `CLAUDE_STREAM_IDLE_TIMEOUT_MS` env var to configure the streaming idle watchdog threshold (default 90s) - Added `TaskCreated` hook that fires when a task is created via `TaskCreate` - Added `WorktreeCreate` hook support for `type: "http"` — return the created worktree path via `hookSpecificOutput.worktreePath` in the response JSON - Added `allowedChannelPlugins` managed setting for team/enterprise admins to define a channel plugin allowlist - Added `x-client-request-id` header to API requests for debugging timeouts - Added idle-return prompt that nudges users returning after 75+ minutes to `/clear`, reducing unnecessary token re-caching on stale sessions - Deep links (`claude-cli://`) now open in your preferred terminal instead of whichever terminal happens to be first in the detection list - Rules and skills `paths:` frontmatter now accepts a YAML list of globs - MCP tool descriptions and server instructions are now capped at 2KB to prevent OpenAPI-generated servers from bloating context - MCP servers configured both locally and via claude.ai connectors are now deduplicated — the local config wins - Background bash tasks that appear stuck on an interactive prompt now surface a notification after ~45 seconds - Token counts ≥1M now display as "1.5m" instead of "1512.6k" - Global system-prompt caching now works when `ToolSearch` is enabled, including for users with MCP tools configured - Fixed voice push-to-talk: holding the voice key no longer leaks characters into the text input, and transcripts now insert at the correct position - Fixed up/down arrow keys being unresponsive when a footer item is focused - Fixed `Ctrl+U` (kill-to-line-start) being a no-op at line boundaries in multiline input, so repeated `Ctrl+U` now clears across lines - Fixed null-unbinding a default chord binding (e.g. `"ctrl+x ctrl+k": null`) still entering chord-wait mode instead of freeing the prefix key - Fixed mouse events inserting literal "mouse" text into transcript search input - Fixed workflow subagents failing with API 400 when the outer session uses `--json-schema` and the subagent also specifies a schema - Fixed missing background color behind certain emoji in user message bubbles on some terminals - Fixed the "allow Claude to edit its own settings for this session" permission option not sticking for users with `Edit(.claude)` allow rules - Fixed a hang when generating attachment snippets for large edited files - Fixed MCP tool/resource cache leak on server reconnect - Fixed a startup performance issue where partial clone repositories (Scalar/GVFS) triggered mass blob downloads - Fixed native terminal cursor not tracking the text input caret, so IME composition (CJK input) now renders inline and screen readers can follow the input position - Fixed spurious "Not logged in" errors on macOS caused by transient keychain read failures - Fixed cold-start race where core tools could be deferred without their bypass active, causing Edit/Write to fail with InputValidationError on typed parameters - Improved detection for dangerous removals of Windows drive roots (`C:\`, `C:\Windows`, etc.) - Improved interactive startup by ~30ms by running `setup()` in parallel with slash command and agent loading - Improved startup for `claude "prompt"` with MCP servers — the REPL now renders immediately instead of blocking until all servers connect - Improved Remote Control to show a specific reason when blocked instead of a generic "not yet enabled" message - Improved p90 prompt cache rate - Reduced scroll-to-top resets in long sessions by making the message window immune to compaction and grouping changes - Reduced terminal flickering when animated tool progress scrolls above the viewport - Changed issue/PR references to only become clickable links when written as `owner/repo#123` — bare `#123` is no longer auto-linked - Slash commands unavailable for the current auth setup (`/voice`, `/mobile`, `/chrome`, `/upgrade`, etc.) are now hidden instead of shown - [VSCode] Added rate limit warning banner with usage percentage and reset time - Stats screenshot (Ctrl+S in /stats) now works in all builds and is 16× faster

- Added `managed-settings.d/` drop-in directory alongside `managed-settings.json`, letting separate teams deploy independent policy fragments that merge alphabetically - Added `CwdChanged` and `FileChanged` hook events for reactive environment management (e.g., direnv) - Added `sandbox.failIfUnavailable` setting to exit with an error when sandbox is enabled but cannot start, instead of running unsandboxed - Added `disableDeepLinkRegistration` setting to prevent `claude-cli://` protocol handler registration - Added `CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1` to strip Anthropic and cloud provider credentials from subprocess environments (Bash tool, hooks, MCP stdio servers) - Added transcript search — press `/` in transcript mode (`Ctrl+O`) to search, `n`/`N` to step through matches - Added `Ctrl+X Ctrl+E` as an alias for opening the external editor (readline-native binding; `Ctrl+G` still works) - Pasted images now insert an `[Image #N]` chip at the cursor so you can reference them positionally in your prompt - Agents can now declare `initialPrompt` in frontmatter to auto-submit a first turn - `chat:killAgents` and `chat:fastMode` are now rebindable via `~/.claude/keybindings.json` - Fixed mouse tracking escape sequences leaking to shell prompt after exit - Fixed Claude Code hanging on exit on macOS - Fixed screen flashing blank after being idle for a few seconds - Fixed a hang when diffing very large files with few common lines — diffs now time out after 5 seconds and fall back gracefully - Fixed a 1–8 second UI freeze on startup when voice input was enabled, caused by eagerly loading the native audio module - Fixed a startup regression where Claude Code would wait ~3s for claude.ai MCP config fetch before proceeding - Fixed `--mcp-config` CLI flag bypassing `allowedMcpServers`/`deniedMcpServers` managed policy enforcement - Fixed claude.ai MCP connectors (Slack, Gmail, etc.) not being available in single-turn `--print` mode - Fixed `caffeinate` process not properly terminating when Claude Code exits, preventing Mac from sleeping - Fixed bash mode not activating when tab-accepting `!`-prefixed command suggestions - Fixed stale slash command selection showing wrong highlighted command after navigating suggestions - Fixed `/config` menu showing both the search cursor and list selection at the same time - Fixed background subagents becoming invisible after context compaction, which could cause duplicate agents to be spawned - Fixed background agent tasks staying stuck in "running" state when git or API calls hang during cleanup - Fixed `--channels` showing "Channels are not currently available" on first launch after upgrade - Fixed uninstalled plugin hooks continuing to fire until the next session - Fixed queued commands flickering during streaming responses - Fixed slash commands being sent to the model as text when submitted while a message is processing - Fixed scrollback jumping when collapsed read/search groups finish after scrolling offscreen - Fixed scrollback jumping to top when the model starts or stops thinking - Fixed SDK session history loss on resume caused by hook progress/attachment messages forking the parentUuid chain - Fixed copy-on-select not firing when you release the mouse outside the terminal window - Fixed ghost characters appearing in height-constrained lists when items overflow - Fixed `Ctrl+B` interfering with readline backward-char at an idle prompt — it now only fires when a foreground task can be backgrounded - Fixed tool result files never being cleaned up, ignoring the `cleanupPeriodDays` setting - Fixed space key being swallowed for up to 3 seconds after releasing voice hold-to-talk - Fixed ALSA library errors corrupting the terminal UI when using voice mode on Linux without audio hardware (Docker, headless, WSL1) - Fixed voice mode SoX detection on Termux/Android where spawning `which` is kernel-restricted - Fixed Remote Control sessions showing as Idle in the web session list while actively running - Fixed footer navigation selecting an invisible Remote Control pill in config-driven mode - Fixed memory leak in remote sessions where tool use IDs accumulate indefinitely - Improved Bedrock SDK cold-start latency by overlapping profile fetch with other boot work - Improved `--resume` memory usage and startup latency on large sessions - Improved plugin startup — commands, skills, and agents now load from disk cache without re-fetching - Improved Remote Control session titles: AI-generated titles now appear within seconds of the first message - Improved `WebFetch` to identify as `Claude-User` so site operators can recognize and allowlist Claude Code traffic via `robots.txt` - Reduced `WebFetch` peak memory usage for large pages - Reduced scrollback resets in long sessions from once per turn to once per ~50 messages - Faster `claude -p` startup with unauthenticated HTTP/SSE MCP servers (~600ms saved) - Bash ghost-text suggestions now include just-submitted commands immediately - Increased non-streaming fallback token cap (21k → 64k) and timeout (120s → 300s local) so fallback requests are less likely to be truncated - Interrupting a prompt before any response now automatically restores your input so you can edit and resubmit - `/status` now works while Claude is responding, instead of being queued until the turn finishes - Plugin MCP servers that duplicate an org-managed connector are now suppressed instead of running a second connection - Linux: respect `XDG_DATA_HOME` when registering the `claude-cli://` protocol handler - Changed "stop all background agents" keybinding from `Ctrl+F` to `Ctrl+X Ctrl+K` to stop shadowing readline forward-char - Deprecated `TaskOutput` tool in favor of using `Read` on the background task's output file path - Added `CLAUDE_CODE_DISABLE_NONSTREAMING_FALLBACK` env var to disable the non-streaming fallback when streaming fails - Plugin options (`manifest.userConfig`) now available externally — plugins can prompt for configuration at enable time, with `sensitive: true` values stored in keychain (macOS) or protected credentials file (other platforms) - Claude can now reference the on-disk path of clipboard-pasted images for file operations - `Ctrl+L` now clears the screen and forces a full redraw — use this to recover when Cmd+K leaves the UI partially blank. Use `Ctrl+U` or double-Esc to clear prompt input. - `--bare -p` (SDK pattern) is ~14% faster to the API request - Memory: `MEMORY.md` index now truncates at 25KB as well as 200 lines - Disabled `AskUserQuestion` and plan-mode tools when `--channels` is active - Fixed API 400 error when a pasted image was queued during a failing tool call - Fixed MCP tool calls hanging indefinitely when an SSE connection drops mid-call and exhausts its reconnection attempts - Fixed Remote Control session titles showing raw XML when a background agent completed before the first user message - Fixed remote sessions forgetting conversation history after a container restart due to progress-message gaps in the resumed transcript chain - Fixed remote sessions requiring re-login on transient auth errors instead of retrying automatically - Fixed `rg ... | wc -l` and similar piped commands hanging and returning `0` in sandbox mode on Linux - Fixed voice input hold-to-talk not activating when a CJK IME inserts a full-width space - Fixed `--worktree` hanging silently when the worktree name contained a forward slash - [VSCode] Spinner now turns red with "Not responding" when the backend hasn't responded for 60 seconds - [VSCode] Fixed session history not loading correctly when reopening a session via URL or after restart - [VSCode] Added Esc-twice (or `/rewind`) to open a keyboard-navigable rewind picker - [VSCode] Fixed "Fork conversation from here" and rewind actions failing silently after the session cache goes stale

- Added `--bare` flag for scripted `-p` calls — skips hooks, LSP, plugin sync, and skill directory walks; requires `ANTHROPIC_API_KEY` or an `apiKeyHelper` via `--settings` (OAuth and keychain auth disabled); auto-memory fully disabled - Added `--channels` permission relay — channel servers that declare the permission capability can forward tool approval prompts to your phone - Fixed multiple concurrent Claude Code sessions requiring repeated re-authentication when one session refreshes its OAuth token - Fixed voice mode silently swallowing retry failures and showing a misleading "check your network" message instead of the actual error - Fixed voice mode audio not recovering when the server silently drops the WebSocket connection - Fixed `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS` not suppressing the structured-outputs beta header, causing 400 errors on proxy gateways forwarding to Vertex/Bedrock - Fixed `--channels` bypass for Team/Enterprise orgs with no other managed settings configured - Fixed a crash on Node.js 18 - Fixed unnecessary permission prompts for Bash commands containing dashes in strings - Fixed plugin hooks blocking prompt submission when the plugin directory is deleted mid-session - Fixed a race condition where background agent task output could hang indefinitely when the task completed between polling intervals - Resuming a session that was in a worktree now switches back to that worktree - Fixed `/btw` not including pasted text when used during an active response - Fixed a race where fast Cmd+Tab followed by paste could beat the clipboard copy under tmux - Fixed terminal tab title not updating with an auto-generated session description - Fixed invisible hook attachments inflating the message count in transcript mode - Fixed Remote Control sessions showing a generic title instead of deriving from the first prompt - Fixed `/rename` not syncing the title for Remote Control sessions - Fixed Remote Control `/exit` not reliably archiving the session - Improved MCP read/search tool calls to collapse into a single "Queried {server}" line (expand with Ctrl+O) - Improved `!` bash mode discoverability — Claude now suggests it when you need to run an interactive command - Improved plugin freshness — ref-tracked plugins now re-clone on every load to pick up upstream changes - Improved Remote Control session titles to refresh after your third message - Updated MCP OAuth to support Client ID Metadata Document (CIMD / SEP-991) for servers without Dynamic Client Registration - Changed plan mode to hide the "clear context" option by default (restore with `"showClearContextOnPlanAccept": true`) - Disabled line-by-line response streaming on Windows (including WSL in Windows Terminal) due to rendering issues - [VSCode] Fixed Windows PATH inheritance for Bash tool when using Git Bash (regression in v2.1.78)

- Added `rate_limits` field to statusline scripts for displaying Claude.ai rate limit usage (5-hour and 7-day windows with `used_percentage` and `resets_at`) - Added `source: 'settings'` plugin marketplace source — declare plugin entries inline in settings.json - Added CLI tool usage detection to plugin tips, in addition to file pattern matching - Added `effort` frontmatter support for skills and slash commands to override the model effort level when invoked - Added `--channels` (research preview) — allow MCP servers to push messages into your session - Fixed `--resume` dropping parallel tool results — sessions with parallel tool calls now restore all tool_use/tool_result pairs instead of showing `[Tool result missing]` placeholders - Fixed voice mode WebSocket failures caused by Cloudflare bot detection on non-browser TLS fingerprints - Fixed 400 errors when using fine-grained tool streaming through API proxies, Bedrock, or Vertex - Fixed `/remote-control` appearing for gateway and third-party provider deployments where it cannot function - Fixed `/sandbox` tab switching not responding to Tab or arrow keys - Improved responsiveness of `@` file autocomplete in large git repositories - Improved `/effort` to show what auto currently resolves to, matching the status bar indicator - Improved `/permissions` — Tab and arrow keys now switch tabs from within a list - Improved background tasks panel — left arrow now closes from the list view - Simplified plugin install tips to use a single `/plugin install` command instead of a two-step flow - Reduced memory usage on startup in large repositories (~80 MB saved on 250k-file repos) - Fixed managed settings (`enabledPlugins`, `permissions.defaultMode`, policy-set env vars) not being applied at startup when `remote-settings.json` was cached from a prior session

- Added `--console` flag to `claude auth login` for Anthropic Console (API billing) authentication - Added "Show turn duration" toggle to the `/config` menu - Fixed `claude -p` hanging when spawned as a subprocess without explicit stdin (e.g. Python `subprocess.run`) - Fixed Ctrl+C not working in `-p` (print) mode - Fixed `/btw` returning the main agent's output instead of answering the side question when triggered during streaming - Fixed voice mode not activating correctly on startup when `voiceEnabled: true` is set - Fixed left/right arrow tab navigation in `/permissions` - Fixed `CLAUDE_CODE_DISABLE_TERMINAL_TITLE` not preventing terminal title from being set on startup - Fixed custom status line showing nothing when workspace trust is blocking it - Fixed enterprise users being unable to retry on rate limit (429) errors - Fixed `SessionEnd` hooks not firing when using interactive `/resume` to switch sessions - Improved startup memory usage by ~18MB across all scenarios - Improved non-streaming API fallback with a 2-minute per-attempt timeout, preventing sessions from hanging indefinitely - `CLAUDE_CODE_PLUGIN_SEED_DIR` now supports multiple seed directories separated by the platform path delimiter (`:` on Unix, `;` on Windows) - [VSCode] Added `/remote-control` — bridge your session to claude.ai/code to continue from a browser or phone - [VSCode] Session tabs now get AI-generated titles based on your first message - [VSCode] Fixed the thinking pill showing "Thinking" instead of "Thought for Ns" after a response completes - [VSCode] Fixed missing session diff button when opening sessions from the left sidebar

- Added `StopFailure` hook event that fires when the turn ends due to an API error (rate limit, auth failure, etc.) - Added `${CLAUDE_PLUGIN_DATA}` variable for plugin persistent state that survives plugin updates; `/plugin uninstall` prompts before deleting it - Added `effort`, `maxTurns`, and `disallowedTools` frontmatter support for plugin-shipped agents - Terminal notifications (iTerm2/Kitty/Ghostty popups, progress bar) now reach the outer terminal when running inside tmux with `set -g allow-passthrough on` - Response text now streams line-by-line as it's generated - Fixed `git log HEAD` failing with "ambiguous argument" inside sandboxed Bash on Linux, and stub files polluting `git status` in the working directory - Fixed `cc log` and `--resume` silently truncating conversation history on large sessions (>5 MB) that used subagents - Fixed infinite loop when API errors triggered stop hooks that re-fed blocking errors to the model - Fixed `deny: ["mcp__servername"]` permission rules not removing MCP server tools before sending to the model, allowing it to see and attempt blocked tools - Fixed `sandbox.filesystem.allowWrite` not working with absolute paths (previously required `//` prefix) - Fixed `/sandbox` Dependencies tab showing Linux prerequisites on macOS instead of macOS-specific info - **Security:** Fixed silent sandbox disable when `sandbox.enabled: true` is set but dependencies are missing — now shows a visible startup warning - Fixed `.git`, `.claude`, and other protected directories being writable without a prompt in `bypassPermissions` mode - Fixed ctrl+u in normal mode scrolling instead of readline kill-line (ctrl+u/ctrl+d half-page scroll moved to transcript mode only) - Fixed voice mode modifier-combo push-to-talk keybindings (e.g. ctrl+k) requiring a hold instead of activating immediately - Fixed voice mode not working on WSL2 with WSLg (Windows 11); WSL1/Win10 users now get a clear error - Fixed `--worktree` flag not loading skills and hooks from the worktree directory - Fixed `CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS` and `includeGitInstructions` setting not suppressing the git status section in the system prompt - Fixed Bash tool not finding Homebrew and other PATH-dependent binaries when VS Code is launched from Dock/Spotlight - Fixed washed-out Claude orange color in VS Code/Cursor/code-server terminals that don't advertise truecolor support - Added `ANTHROPIC_CUSTOM_MODEL_OPTION` env var to add a custom entry to the `/model` picker, with optional `_NAME` and `_DESCRIPTION` suffixed vars for display - Fixed `ANTHROPIC_BETAS` environment variable being silently ignored when using Haiku models - Fixed queued prompts being concatenated without a newline separator - Improved memory usage and startup time when resuming large sessions - [VSCode] Fixed a brief flash of the login screen when opening the sidebar while already authenticated - [VSCode] Fixed "API Error: Rate limit reached" when selecting Opus — model dropdown no longer offers 1M context variant to subscribers whose plan tier is unknown

- Increased default maximum output token limits for Claude Opus 4.6 to 64k tokens, and the upper bound for Opus 4.6 and Sonnet 4.6 models to 128k tokens - Added `allowRead` sandbox filesystem setting to re-allow read access within `denyRead` regions - `/copy` now accepts an optional index: `/copy N` copies the Nth-latest assistant response - Fixed "Always Allow" on compound bash commands (e.g. `cd src && npm test`) saving a single rule for the full string instead of per-subcommand, leading to dead rules and repeated permission prompts - Fixed auto-updater starting overlapping binary downloads when the slash-command overlay repeatedly opened and closed, accumulating tens of gigabytes of memory - Fixed `--resume` silently truncating recent conversation history due to a race between memory-extraction writes and the main transcript - Fixed PreToolUse hooks returning `"allow"` bypassing `deny` permission rules, including enterprise managed settings - Fixed Write tool silently converting line endings when overwriting CRLF files or creating files in CRLF directories - Fixed memory growth in long-running sessions from progress messages surviving compaction - Fixed cost and token usage not being tracked when the API falls back to non-streaming mode - Fixed `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS` not stripping beta tool-schema fields, causing proxy gateways to reject requests - Fixed Bash tool reporting errors for successful commands when the system temp directory path contains spaces - Fixed paste being lost when typing immediately after pasting - Fixed Ctrl+D in `/feedback` text input deleting forward instead of the second press exiting the session - Fixed API error when dragging a 0-byte image file into the prompt - Fixed Claude Desktop sessions incorrectly using the terminal CLI's configured API key instead of OAuth - Fixed `git-subdir` plugins at different subdirectories of the same monorepo commit colliding in the plugin cache - Fixed ordered list numbers not rendering in terminal UI - Fixed a race condition where stale-worktree cleanup could delete an agent worktree just resumed from a previous crash - Fixed input deadlock when opening `/mcp` or similar dialogs while the agent is running - Fixed Backspace and Delete keys not working in vim NORMAL mode - Fixed status line not updating when vim mode is toggled on or off - Fixed hyperlinks opening twice on Cmd+click in VS Code, Cursor, and other xterm.js-based terminals - Fixed background colors rendering as terminal-default inside tmux with default configuration - Fixed iTerm2 session crash when selecting text inside tmux over SSH - Fixed clipboard copy silently failing in tmux sessions; copy toast now indicates whether to paste with `⌘V` or tmux `prefix+]` - Fixed `←`/`→` accidentally switching tabs in settings, permissions, and sandbox dialogs while navigating lists - Fixed IDE integration not auto-connecting when Claude Code is launched inside tmux or screen - Fixed CJK characters visually bleeding into adjacent UI elements when clipped at the right edge - Fixed teammate panes not closing when the leader exits - Fixed iTerm2 auto mode not detecting iTerm2 for native split-pane teammates - Faster startup on macOS (~60ms) by reading keychain credentials in parallel with module loading - Faster `--resume` on fork-heavy and very large sessions — up to 45% faster loading and ~100-150MB less peak memory - Improved Esc to abort in-flight non-streaming API requests - Improved `claude plugin validate` to check skill, agent, and command frontmatter plus `hooks/hooks.json`, catching YAML parse errors and schema violations - Background bash tasks are now killed if output exceeds 5GB, preventing runaway processes from filling disk - Sessions are now auto-named from plan content when you accept a plan - Improved headless mode plugin installation to compose correctly with `CLAUDE_CODE_PLUGIN_SEED_DIR` - Show a notice when `apiKeyHelper` takes longer than 10s, preventing it from blocking the main loop - The Agent tool no longer accepts a `resume` parameter — use `SendMessage({to: agentId})` to continue a previously spawned agent - `SendMessage` now auto-resumes stopped agents in the background instead of returning an error - Renamed `/fork` to `/branch` (`/fork` still works as an alias) - [VSCode] Improved plan preview tab titles to use the plan's heading instead of "Claude's Plan" - [VSCode] When option+click doesn't trigger native selection on macOS, the footer now points to the `macOptionClickForcesSelection` setting

- Added MCP elicitation support — MCP servers can now request structured input mid-task via an interactive dialog (form fields or browser URL) - Added new `Elicitation` and `ElicitationResult` hooks to intercept and override responses before they're sent back - Added `-n` / `--name <name>` CLI flag to set a display name for the session at startup - Added `worktree.sparsePaths` setting for `claude --worktree` in large monorepos to check out only the directories you need via git sparse-checkout - Added `PostCompact` hook that fires after compaction completes - Added `/effort` slash command to set model effort level - Added session quality survey — enterprise admins can configure the sample rate via the `feedbackSurveyRate` setting - Fixed deferred tools (loaded via `ToolSearch`) losing their input schemas after conversation compaction, causing array and number parameters to be rejected with type errors - Fixed slash commands showing "Unknown skill" - Fixed plan mode asking for re-approval after the plan was already accepted - Fixed voice mode swallowing keypresses while a permission dialog or plan editor was open - Fixed `/voice` not working on Windows when installed via npm - Fixed spurious "Context limit reached" when invoking a skill with `model:` frontmatter on a 1M-context session - Fixed "adaptive thinking is not supported on this model" error when using non-standard model strings - Fixed `Bash(cmd:*)` permission rules not matching when a quoted argument contains `#` - Fixed "don't ask again" in the Bash permission dialog showing the full raw command for pipes and compound commands - Fixed auto-compaction retrying indefinitely after consecutive failures — a circuit breaker now stops after 3 attempts - Fixed MCP reconnect spinner persisting after successful reconnection - Fixed LSP plugins not registering servers when the LSP Manager initialized before marketplaces were reconciled - Fixed clipboard copying in tmux over SSH — now attempts both direct terminal write and tmux clipboard integration - Fixed `/export` showing only the filename instead of the full file path in the success message - Fixed transcript not auto-scrolling to new messages after selecting text - Fixed Escape key not working to exit the login method selection screen - Fixed several Remote Control issues: sessions silently dying when the server reaps an idle environment, rapid messages being queued one-at-a-time instead of batched, and stale work items causing redelivery after JWT refresh - Fixed bridge sessions failing to recover after extended WebSocket disconnects - Fixed slash commands not found when typing the exact name of a soft-hidden command - Improved `--worktree` startup performance by reading git refs directly and skipping redundant `git fetch` when the remote branch is already available locally - Improved background agent behavior — killing a background agent now preserves its partial results in the conversation context - Improved model fallback notifications — now always visible instead of hidden behind verbose mode, with human-friendly model names - Improved blockquote readability on dark terminal themes — text is now italic with a left bar instead of dim - Improved stale worktree cleanup — worktrees left behind after an interrupted parallel run are now automatically cleaned up - Improved Remote Control session titles — now derived from your first prompt instead of showing "Interactive session" - Improved `/voice` to show your dictation language on enable and warn when your `language` setting isn't supported for voice input - Updated `--plugin-dir` to only accept one path to support subcommands — use repeated `--plugin-dir` for multiple directories - [VSCode] Fixed gitignore patterns containing commas silently excluding entire filetypes from the @-mention file picker

- Added 1M context window for Opus 4.6 by default for Max, Team, and Enterprise plans (previously required extra usage) - Added `/color` command for all users to set a prompt-bar color for your session - Added session name display on the prompt bar when using `/rename` - Added last-modified timestamps to memory files, helping Claude reason about which memories are fresh vs. stale - Added hook source display (settings/plugin/skill) in permission prompts when a hook requires confirmation - Fixed voice mode not activating correctly on fresh installs without toggling `/voice` twice - Fixed the Claude Code header not updating the displayed model name after switching models with `/model` or Option+P - Fixed session crash when an attachment message computation returns undefined values - Fixed Bash tool mangling `!` in piped commands (e.g., `jq 'select(.x != .y)'` now works correctly) - Fixed managed-disabled plugins showing up in the `/plugin` Installed tab — plugins force-disabled by your organization are now hidden - Fixed token estimation over-counting for thinking and `tool_use` blocks, preventing premature context compaction - Fixed corrupted marketplace config path handling - Fixed `/resume` losing session names after resuming a forked or continued session - Fixed Esc not closing the `/status` dialog after visiting the Config tab - Fixed input handling when accepting or rejecting a plan - Fixed footer hint in agent teams showing "↓ to expand" instead of the correct "shift + ↓ to expand" - Improved startup performance on macOS non-MDM machines by skipping unnecessary subprocess spawns - Suppressed async hook completion messages by default (visible with `--verbose` or transcript mode) - Breaking change: Removed deprecated Windows managed settings fallback at `C:\ProgramData\ClaudeCode\managed-settings.json` — use `C:\Program Files\ClaudeCode\managed-settings.json`

- Added actionable suggestions to `/context` command — identifies context-heavy tools, memory bloat, and capacity warnings with specific optimization tips - Added `autoMemoryDirectory` setting to configure a custom directory for auto-memory storage - Fixed memory leak where streaming API response buffers were not released when the generator was terminated early, causing unbounded RSS growth on the Node.js/npm code path - Fixed managed policy `ask` rules being bypassed by user `allow` rules or skill `allowed-tools` - Fixed full model IDs (e.g., `claude-opus-4-5`) being silently ignored in agent frontmatter `model:` field and `--agents` JSON config — agents now accept the same model values as `--model` - Fixed MCP OAuth authentication hanging when the callback port is already in use - Fixed MCP OAuth refresh never prompting for re-auth after the refresh token expires, for OAuth servers that return errors with HTTP 200 (e.g. Slack) - Fixed voice mode silently failing on the macOS native binary for users whose terminal had never been granted microphone permission — the binary now includes the `audio-input` entitlement so macOS prompts correctly - Fixed `SessionEnd` hooks being killed after 1.5 s on exit regardless of `hook.timeout` — now configurable via `CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS` - Fixed `/plugin install` failing inside the REPL for marketplace plugins with local sources - Fixed marketplace update not syncing git submodules — plugin sources in submodules no longer break after update - Fixed unknown slash commands with arguments silently dropping input — now shows your input as a warning - Fixed Hebrew, Arabic, and other RTL text not rendering correctly in Windows Terminal, conhost, and VS Code integrated terminal - Fixed LSP servers not working on Windows due to malformed file URIs - Changed `--plugin-dir` so local dev copies now override installed marketplace plugins with the same name (unless that plugin is force-enabled by managed settings) - [VSCode] Fixed delete button not working for Untitled sessions - [VSCode] Improved scroll wheel responsiveness in the integrated terminal with terminal-aware acceleration

- Added `modelOverrides` setting to map model picker entries to custom provider model IDs (e.g. Bedrock inference profile ARNs) - Added actionable guidance when OAuth login or connectivity checks fail due to SSL certificate errors (corporate proxies, `NODE_EXTRA_CA_CERTS`) - Fixed freezes and 100% CPU loops triggered by permission prompts for complex bash commands - Fixed a deadlock that could freeze Claude Code when many skill files changed at once (e.g. during `git pull` in a repo with a large `.claude/skills/` directory) - Fixed Bash tool output being lost when running multiple Claude Code sessions in the same project directory - Fixed subagents with `model: opus`/`sonnet`/`haiku` being silently downgraded to older model versions on Bedrock, Vertex, and Microsoft Foundry - Fixed background bash processes spawned by subagents not being cleaned up when the agent exits - Fixed `/resume` showing the current session in the picker - Fixed `/ide` crashing with `onInstall is not defined` when auto-installing the extension - Fixed `/loop` not being available on Bedrock/Vertex/Foundry and when telemetry was disabled - Fixed SessionStart hooks firing twice when resuming a session via `--resume` or `--continue` - Fixed JSON-output hooks injecting no-op system-reminder messages into the model's context on every turn - Fixed voice mode session corruption when a slow connection overlaps a new recording - Fixed Linux sandbox failing to start with "ripgrep (rg) not found" on native builds - Fixed Linux native modules not loading on Amazon Linux 2 and other glibc 2.26 systems - Fixed "media_type: Field required" API error when receiving images via Remote Control - Fixed `/heapdump` failing on Windows with `EEXIST` error when the Desktop folder already exists - Improved Up arrow after interrupting Claude — now restores the interrupted prompt and rewinds the conversation in one step - Improved IDE detection speed at startup - Improved clipboard image pasting performance on macOS - Improved `/effort` to work while Claude is responding, matching `/model` behavior - Improved voice mode to automatically retry transient connection failures during rapid push-to-talk re-press - Improved the Remote Control spawn mode selection prompt with better context - Changed default Opus model on Bedrock, Vertex, and Microsoft Foundry to Opus 4.6 (was Opus 4.1) - Deprecated `/output-style` command — use `/config` instead. Output style is now fixed at session start for better prompt caching - VSCode: Fixed HTTP 400 errors for users behind proxies or on Bedrock/Vertex with Claude 4.5 models

- Fixed tool search to activate even with `ANTHROPIC_BASE_URL` as long as `ENABLE_TOOL_SEARCH` is set. - Added `w` key in `/copy` to write the focused selection directly to a file, bypassing the clipboard (useful over SSH) - Added optional description argument to `/plan` (e.g., `/plan fix the auth bug`) that enters plan mode and immediately starts - Added `ExitWorktree` tool to leave an `EnterWorktree` session - Added `CLAUDE_CODE_DISABLE_CRON` environment variable to immediately stop scheduled cron jobs mid-session - Added `lsof`, `pgrep`, `tput`, `ss`, `fd`, and `fdfind` to the bash auto-approval allowlist, reducing permission prompts for common read-only operations - Restored the `model` parameter on the Agent tool for per-invocation model overrides - Simplified effort levels to low/medium/high (removed max) with new symbols (○ ◐ ●) and a brief notification instead of a persistent icon. Use `/effort auto` to reset to default - Improved `/config` — Escape now cancels changes, Enter saves and closes, Space toggles settings - Improved up-arrow history to show current session's messages first when running multiple concurrent sessions - Improved voice input transcription accuracy for repo names and common dev terms (regex, OAuth, JSON) - Improved bash command parsing by switching to a native module — faster initialization and no memory leak - Reduced bundle size by ~510 KB - Changed CLAUDE.md HTML comments (`<!-- ... -->`) to be hidden from Claude when auto-injected. Comments remain visible when read with the Read tool - Fixed slow exits when background tasks or hooks were slow to respond - Fixed agent task progress stuck on "Initializing…" - Fixed skill hooks firing twice per event when a hooks-enabled skill is invoked by the model - Fixed several voice mode issues: occasional input lag, false "No speech detected" errors after releasing push-to-talk, and stale transcripts re-filling the prompt after submission - Fixed `--continue` not resuming from the most recent point after `--compact` - Fixed bash security parsing edge cases - Added support for marketplace git URLs without `.git` suffix (Azure DevOps, AWS CodeCommit) - Improved marketplace clone failure messages to show diagnostic info even when git produces no stderr - Fixed several plugin issues: installation failing on Windows with `EEXIST` error in OneDrive folders, marketplace blocking user-scope installs when a project-scope install exists, `CLAUDE_CODE_PLUGIN_CACHE_DIR` creating literal `~` directories, and `plugin.json` with marketplace-only fields failing to load - Fixed feedback survey appearing too frequently in long sessions - Fixed `--effort` CLI flag being reset by unrelated settings writes on startup - Fixed backgrounded Ctrl+B queries losing their transcript or corrupting the new conversation after `/clear` - Fixed `/clear` killing background agent/bash tasks — only foreground tasks are now cleared - Fixed worktree isolation issues: Task tool resume not restoring cwd, and background task notifications missing `worktreePath` and `worktreeBranch` - Fixed `/model` not displaying results when run while Claude is working - Fixed digit keys selecting menu options instead of typing in plan mode permission prompt's text input - Fixed sandbox permission issues: certain file write operations incorrectly allowed without prompting, and output redirections to allowlisted directories (like `/tmp/claude/`) prompting unnecessarily - Improved CPU utilization in long sessions - Fixed prompt cache invalidation in SDK `query()` calls, reducing input token costs up to 12x - Fixed Escape key becoming unresponsive after cancelling a query - Fixed double Ctrl+C not exiting when background agents or tasks are running - Fixed team agents to inherit the leader's model - Fixed "Always Allow" saving permission rules that never match again - Fixed several hooks issues: `transcript_path` pointing to the wrong directory for resumed/forked sessions, agent `prompt` being silently deleted from settings.json on every settings write, PostToolUse block reason displaying twice, async hooks not receiving stdin with bash `read -r`, and validation error message showing an example that fails validation - Fixed session crashes in Desktop/SDK when Read returned files containing U+2028/U+2029 characters - Fixed terminal title being cleared on exit even when `CLAUDE_CODE_DISABLE_TERMINAL_TITLE` was set - Fixed several permission rule matching issues: wildcard rules not matching commands with heredocs, embedded newlines, or no arguments; `sandbox.excludedCommands` failing with env var prefixes; "always allow" suggesting overly broad prefixes for nested CLI tools; and deny rules not applying to all command forms - Fixed oversized and truncated images from Bash data-URL output - Fixed a crash when resuming sessions that contained Bedrock API errors - Fixed intermittent "expected boolean, received string" validation errors on Edit, Bash, and Grep tool inputs - Fixed multi-line session titles when forking from a conversation whose first message contained newlines - Fixed queued messages not showing attached images, and images being lost when pressing ↑ to edit a queued message - Fixed parallel tool calls where a failed Read/WebFetch/Glob would cancel its siblings — only Bash errors now cascade - VSCode: Fixed scroll speed in integrated terminals not matching native terminals - VSCode: Fixed Shift+Enter submitting input instead of inserting a newline for users with older keybindings - VSCode: Added effort level indicator on the input border - VSCode: Added `vscode://anthropic.claude-code/open` URI handler to open a new Claude Code tab programmatically, with optional `prompt` and `session` query parameters

- Added `/loop` command to run a prompt or slash command on a recurring interval (e.g. `/loop 5m check the deploy`) - Added cron scheduling tools for recurring prompts within a session - Added `voice:pushToTalk` keybinding to make the voice activation key rebindable in `keybindings.json` (default: space) — modifier+letter combos like `meta+k` have zero typing interference - Added `fmt`, `comm`, `cmp`, `numfmt`, `expr`, `test`, `printf`, `getconf`, `seq`, `tsort`, and `pr` to the bash auto-approval allowlist - Fixed stdin freeze in long-running sessions where keystrokes stop being processed but the process stays alive - Fixed a 5–8 second startup freeze for users with voice mode enabled, caused by CoreAudio initialization blocking the main thread after system wake - Fixed startup UI freeze when many claude.ai proxy connectors refresh an expired OAuth token simultaneously - Fixed forked conversations (`/fork`) sharing the same plan file, which caused plan edits in one fork to overwrite the other - Fixed the Read tool putting oversized images into context when image processing failed, breaking subsequent turns in long image-heavy sessions - Fixed false-positive permission prompts for compound bash commands containing heredoc commit messages - Fixed plugin installations being lost when running multiple Claude Code instances - Fixed claude.ai connectors failing to reconnect after OAuth token refresh - Fixed claude.ai MCP connector startup notifications appearing for every org-configured connector instead of only previously connected ones - Fixed background agent completion notifications missing the output file path, which made it difficult for parent agents to recover agent results after context compaction - Fixed duplicate output in Bash tool error messages when commands exit with non-zero status - Fixed Chrome extension auto-detection getting permanently stuck on "not installed" after running on a machine without local Chrome - Fixed `/plugin marketplace update` failing with merge conflicts when the marketplace is pinned to a branch/tag ref - Fixed `/plugin marketplace add owner/repo@ref` incorrectly parsing `@` — previously only `#` worked as a ref separator, causing undiagnosable errors with `strictKnownMarketplaces` - Fixed duplicate entries in `/permissions` Workspace tab when the same directory is added with and without a trailing slash - Fixed `--print` hanging forever when team agents are configured — the exit loop no longer waits on long-lived `in_process_teammate` tasks - Fixed "❯ Tool loaded." appearing in the REPL after every `ToolSearch` call - Fixed prompting for `cd <cwd> && git ...` on Windows when the model uses a mingw-style path - Improved startup time by deferring native image processor loading to first use - Improved bridge session reconnection to complete within seconds after laptop wake from sleep, instead of waiting up to 10 minutes - Improved `/plugin uninstall` to disable project-scoped plugins in `.claude/settings.local.json` instead of modifying `.claude/settings.json`, so changes don't affect teammates - Improved plugin-provided MCP server deduplication — servers that duplicate a manually-configured server (same command/URL) are now skipped, preventing duplicate connections and tool sets. Suppressions are shown in the `/plugin` menu. - Updated `/debug` to toggle debug logging on mid-session, since debug logs are no longer written by default - Removed startup notification noise for unauthenticated org-registered claude.ai connectors

- Fixed API 400 errors when using `ANTHROPIC_BASE_URL` with a third-party gateway — tool search now correctly detects proxy endpoints and disables `tool_reference` blocks - Fixed `API Error: 400 This model does not support the effort parameter` when using custom Bedrock inference profiles or other model identifiers not matching standard Claude naming patterns - Fixed empty model responses immediately after `ToolSearch` — the server renders tool schemas with system-prompt-style tags at the prompt tail, which could confuse models into stopping early - Fixed prompt-cache bust when an MCP server with `instructions` connects after the first turn - Fixed Enter inserting a newline instead of submitting when typing over a slow SSH connection - Fixed clipboard corrupting non-ASCII text (CJK, emoji) on Windows/WSL by using PowerShell `Set-Clipboard` - Fixed extra VS Code windows opening at startup on Windows when running from the VS Code integrated terminal - Fixed voice mode failing on Windows native binary with "native audio module could not be loaded" - Fixed push-to-talk not activating on session start when `voiceEnabled: true` was set in settings - Fixed markdown links containing `#NNN` references incorrectly pointing to the current repository instead of the linked URL - Fixed repeated "Model updated to Opus 4.6" notification when a project's `.claude/settings.json` has a legacy Opus model string pinned - Fixed plugins showing as inaccurately installed in `/plugin` - Fixed plugins showing "not found in marketplace" errors on fresh startup by auto-refreshing after marketplace installation - Fixed `/security-review` command failing with `unknown option merge-base` on older git versions - Fixed `/color` command having no way to reset back to the default color — `/color default`, `/color gray`, `/color reset`, and `/color none` now restore the default - Fixed a performance regression in the `AskUserQuestion` preview dialog that re-ran markdown rendering on every keystroke in the notes input - Fixed feature flags read during early startup never refreshing their disk cache, causing stale values to persist across sessions - Fixed `permissions.defaultMode` settings values other than `acceptEdits` or `plan` being applied in Claude Code Remote environments — they are now ignored - Fixed skill listing being re-injected on every `--resume` (~600 tokens saved per resume) - Fixed teleport marker not rendering in VS Code teleported sessions - Improved error message when microphone captures silence to distinguish from "no speech detected" - Improved compaction to preserve images in the summarizer request, allowing prompt cache reuse for faster and cheaper compaction - Improved `/rename` to work while Claude is processing, instead of being silently queued - Reduced prompt input re-renders during turns by ~74% - Reduced startup memory by ~426KB for users without custom CA certificates - Reduced Remote Control `/poll` rate to once per 10 minutes while connected (was 1–2s), cutting server load ~300×. Reconnection is unaffected — transport loss immediately wakes fast polling. - [VSCode] Added spark icon in VS Code activity bar that lists all Claude Code sessions, with sessions opening as full editors - [VSCode] Added full markdown document view for plans in VS Code, with support for adding comments to provide feedback - [VSCode] Added native MCP server management dialog — use `/mcp` in the chat panel to enable/disable servers, reconnect, and manage OAuth authentication without switching to the terminal

- Added the `/claude-api` skill for building applications with the Claude API and Anthropic SDK - Added Ctrl+U on an empty bash prompt (`!`) to exit bash mode, matching `escape` and `backspace` - Added numeric keypad support for selecting options in Claude's interview questions (previously only the number row above QWERTY worked) - Added optional name argument to `/remote-control` and `claude remote-control` (`/remote-control My Project` or `--name "My Project"`) to set a custom session title visible in claude.ai/code - Added Voice STT support for 10 new languages (20 total) — Russian, Polish, Turkish, Dutch, Ukrainian, Greek, Czech, Danish, Swedish, Norwegian - Added effort level display (e.g., "with low effort") to the logo and spinner, making it easier to see which effort setting is active - Added agent name display in terminal title when using `claude --agent` - Added `sandbox.enableWeakerNetworkIsolation` setting (macOS only) to allow Go programs like `gh`, `gcloud`, and `terraform` to verify TLS certificates when using a custom MITM proxy with `httpProxyPort` - Added `includeGitInstructions` setting (and `CLAUDE_CODE_DISABLE_GIT_INSTRUCTIONS` env var) to remove built-in commit and PR workflow instructions from Claude's system prompt - Added `/reload-plugins` command to activate pending plugin changes without restarting - Added a one-time startup prompt suggesting Claude Code Desktop on macOS and Windows (max 3 showings, dismissible) - Added `${CLAUDE_SKILL_DIR}` variable for skills to reference their own directory in SKILL.md content - Added `InstructionsLoaded` hook event that fires when CLAUDE.md or `.claude/rules/*.md` files are loaded into context - Added `agent_id` (for subagents) and `agent_type` (for subagents and `--agent`) to hook events - Added `worktree` field to status line hook commands with name, path, branch, and original repo directory when running in a `--worktree` session - Added `pluginTrustMessage` in managed settings to append organization-specific context to the plugin trust warning shown before installation - Added policy limit fetching (e.g., remote control restrictions) for Team plan OAuth users, not just Enterprise - Added `pathPattern` to `strictKnownMarketplaces` for regex-matching file/directory marketplace sources alongside `hostPattern` restrictions - Added plugin source type `git-subdir` to point to a subdirectory within a git repo - Added `oauth.authServerMetadataUrl` config option for MCP servers to specify a custom OAuth metadata discovery URL when standard discovery fails - Fixed a security issue where nested skill discovery could load skills from gitignored directories like `node_modules` - Fixed trust dialog silently enabling all `.mcp.json` servers on first run. You'll now see the per-server approval dialog as expected - Fixed `claude remote-control` crashing immediately on npm installs with "bad option: --sdk-url" (anthropics/claude-code#28334) - Fixed `--model claude-opus-4-0` and `--model claude-opus-4-1` resolving to deprecated Opus versions instead of current - Fixed macOS keychain corruption when using multiple OAuth MCP servers. Large OAuth metadata blobs could overflow the `security -i` stdin buffer, silently leaving stale credentials behind and causing repeated `/login` prompts. - Fixed `.credentials.json` losing `subscriptionType` (showing "Claude API" instead of "Claude Pro"/"Claude Max") when the profile endpoint transiently fails during token refresh (anthropics/claude-code#30185) - Fixed ghost dotfiles (`.bashrc`, `HEAD`, etc.) appearing as untracked files in the working directory after sandboxed Bash commands on Linux - Fixed Shift+Enter printing `[27;2;13~` instead of inserting a newline in Ghostty over SSH - Fixed stash (Ctrl+S) being cleared when submitting a message while Claude is working - Fixed ctrl+o (transcript toggle) freezing for many seconds in long sessions with lots of file edits - Fixed plan mode feedback input not supporting multi-line text entry (backslash+Enter and Shift+Enter now insert newlines) - Fixed cursor not moving down into blank lines at the top of the input box - Fixed `/stats` crash when transcript files contain entries with missing or malformed timestamps - Fixed a brief hang after a streaming error on long sessions (the transcript was being fully rewritten to drop one line; it is now truncated in place) - Fixed `--setting-sources user` not blocking dynamically discovered project skills - Fixed duplicate CLAUDE.md, slash commands, agents, and rules when running from a worktree nested inside its main repo (e.g. `claude -w`) - Fixed plugin Stop/SessionEnd/etc hooks not firing after any `/plugin` operation - Fixed plugin hooks being silently dropped when two plugins use the same `${CLAUDE_PLUGIN_ROOT}/...` command template - Fixed memory leak in long-running SDK/CCR sessions where conversation messages were retained unnecessarily - Fixed API 400 errors in forked agents (autocompact, summarization) when resuming sessions that were interrupted mid-tool-batch - Fixed "unexpected tool_use_id found in tool_result blocks" error when resuming conversations that start with an orphaned tool result - Fixed teammates accidentally spawning nested teammates via the Agent tool's `name` parameter - Fixed `CLAUDE_CODE_MAX_OUTPUT_TOKENS` being ignored during conversation compaction - Fixed `/compact` summary rendering as a user bubble in SDK consumers (Claude Code Remote web UI, VSCode extension) - Fixed voice space bar getting stuck after a failed voice activation (module loading race, cold GrowthBook) - Fixed worktree file copy on Windows - Fixed global `.claude` folder detection on Windows - Fixed symlink bypass where writing new files through a symlinked parent directory could escape the working directory in `acceptEdits` mode - Fixed sandbox prompting users to approve non-allowed domains when `allowManagedDomainsOnly` is enabled in managed settings — non-allowed domains are now blocked automatically with no bypass - Fixed interactive tools (e.g., `AskUserQuestion`) being silently auto-allowed when listed in a skill's allowed-tools, bypassing the permission prompt and running with empty answers - Fixed multi-GB memory spike when committing with large untracked binary files in the working tree - Fixed Escape not interrupting a running turn when the input box has draft text. Use Up arrow to pull queued messages back for editing, or Ctrl+U to clear the input line. - Fixed Android app crash when running local slash commands (`/voice`, `/cost`) in Remote Control sessions - Fixed a memory leak where old message array versions accumulated in React Compiler `memoCache` over long sessions - Fixed a memory leak where REPL render scopes accumulated over long sessions (~35MB over 1000 turns) - Fixed memory retention in in-process teammates where the parent's full conversation history was pinned for the teammate's lifetime, preventing GC after `/clear` or auto-compact - Fixed a memory leak in interactive mode where hook events could accumulate unboundedly during long sessions - Fixed hang when `--mcp-config` points to a corrupted file - Fixed slow startup when many skills/plugins are installed - Fixed `cd <outside-dir> && <cmd>` permission prompt to surface the chained command instead of only showing "Yes, allow reading from <dir>/" - Fixed conditional `.claude/rules/*.md` files (with `paths:` frontmatter) and nested CLAUDE.md files not loading in print mode (`claude -p`) - Fixed `/clear` not fully clearing all session caches, reducing memory retention in long sessions - Fixed terminal flicker caused by animated elements at the scrollback boundary - Fixed UI frame drops on macOS when using MCP servers with OAuth (regression from 2.1.x) - Fixed occasional frame stalls during typing caused by synchronous debug log flushes - Fixed `TeammateIdle` and `TaskCompleted` hooks to support `{"continue": false, "stopReason": "..."}` to stop the teammate, matching `Stop` hook behavior - Fixed `WorktreeCreate` and `WorktreeRemove` plugin hooks being silently ignored - Fixed skill descriptions with colons (e.g., "Triggers include: X, Y, Z") failing to load from SKILL.md frontmatter - Fixed project skills without a `description:` frontmatter field not appearing in Claude's available skills list - Fixed `/context` showing identical token counts for all MCP tools from a server - Fixed literal `nul` file creation on Windows when the model uses CMD-style `2>nul` redirection in Git Bash - Fixed extra blank lines appearing below each tool call in the expanded subagent transcript view (Ctrl+O) - Fixed Tab/arrow keys not cycling Settings tabs when `/config` search box is focused but empty - Fixed service key OAuth sessions (CCR containers) spamming `[ERROR]` logs with 403s from profile-scoped endpoints - Fixed inconsistent color for "Remote Control active" status indicator - Fixed Voice waveform cursor covering the first suffix letter when dictating mid-input - Fixed Voice input showing all 5 spaces during warmup instead of capping at ~2 (aligning with the "keep holding…" hint) - Improved spinner performance by isolating the 50ms animation loop from the surrounding shell, reducing render and CPU overhead during turns - Improved UI rendering performance in native binaries with React Compiler - Improved `--worktree` startup by eliminating a git subprocess on the startup path - Improved macOS startup by eliminating redundant settings-file reloads when managed settings resolve - Improved macOS startup for Claude.ai enterprise/team users by skipping an unnecessary keychain lookup - Improved MCP `-p` startup by pipelining claude.ai config fetch with local connections and using a concurrency pool instead of sequential batching - Improved voice startup by removing imperceptible warmup pulse animations that were causing re-render stutter - Improved MCP binary content handling: tools returning PDFs, Office documents, or audio now save decoded bytes to disk with the correct file extension instead of dumping raw base64 into the conversation context. WebFetch also saves binary responses alongside its summary. - Improved memory usage in long sessions by stabilizing `onSubmit` across message updates - Improved LSP tool rendering and memory context building to no longer read entire files - Improved session upload and memory sync to avoid reading large files into memory before size/binary checks - Improved file operation performance by avoiding reading file contents for existence checks (6 sites) - Improved documentation to clarify that `--append-system-prompt-file` and `--system-prompt-file` work in interactive mode (the docs previously said print mode only) - Reduced baseline memory by ~16MB by deferring Yoga WASM preloading - Reduced memory footprint for SDK and CCR sessions using stream-json output - Reduced memory usage when resuming large sessions (including compacted history) - Reduced token usage on multi-agent tasks with more concise subagent final reports - Changed Sonnet 4.5 users on Pro/Max/Team Premium to be automatically migrated to Sonnet 4.6 - Changed the `/resume` picker to show your most recent prompt instead of the first one. This also resolves some titles appearing as `(session)`. - Changed claude.ai MCP connector failures to show a notification instead of silently disappearing from the tool list - Changed example command suggestions to be generated deterministically instead of calling Haiku - Changed resuming after compaction to no longer produce a preamble recap before continuing - [SDK] Changed task creation to no longer require the `activeForm` field — the spinner falls back to the task subject - [VSCode] Added compaction display as a collapsible "Compacted chat" card with the summary inside - [VSCode] The permission mode picker now respects `permissions.disableBypassPermissionsMode` from your effective Claude Code settings (including managed/policy settings) — when set to `disable`, bypass permissions mode is hidden from the picker - [VSCode] Fixed RTL text (Arabic, Hebrew, Persian) rendering reversed in the chat panel (regression in v2.1.63)

- Opus 4.6 now defaults to medium effort for Max and Team subscribers. Medium effort works well for most tasks — it's the sweet spot between speed and thoroughness. You can change this anytime with `/model` - Re-introduced the "ultrathink" keyword to enable high effort for the next turn - Removed Opus 4 and 4.1 from Claude Code on the first-party API — users with these models pinned are automatically moved to Opus 4.6

- Reduced spurious error logging

- Added `/simplify` and `/batch` bundled slash commands - Fixed local slash command output like /cost appearing as user-sent messages instead of system messages in the UI - Project configs & auto memory now shared across git worktrees of the same repository - Added `ENABLE_CLAUDEAI_MCP_SERVERS=false` env var to opt out from making claude.ai MCP servers available - Improved `/model` command to show the currently active model in the slash command menu - Added HTTP hooks, which can POST JSON to a URL and receive JSON instead of running a shell command - Fixed listener leak in bridge polling loop - Fixed listener leak in MCP OAuth flow cleanup - Added manual URL paste fallback during MCP OAuth authentication. If the automatic localhost redirect doesn't work, you can paste the callback URL to complete authentication. - Fixed memory leak when navigating hooks configuration menu - Fixed listener leak in interactive permission handler during auto-approvals - Fixed file count cache ignoring glob ignore patterns - Fixed memory leak in bash command prefix cache - Fixed MCP tool/resource cache leak on server reconnect - Fixed IDE host IP detection cache incorrectly sharing results across ports - Fixed WebSocket listener leak on transport reconnect - Fixed memory leak in git root detection cache that could cause unbounded growth in long-running sessions - Fixed memory leak in JSON parsing cache that grew unbounded over long sessions - VSCode: Fixed remote sessions not appearing in conversation history - Fixed a race condition in the REPL bridge where new messages could arrive at the server interleaved with historical messages during the initial connection flush, causing message ordering issues. - Fixed memory leak where long-running teammates retained all messages in AppState even after conversation compaction - Fixed a memory leak where MCP server fetch caches were not cleared on disconnect, causing growing memory usage with servers that reconnect frequently - Improved memory usage in long sessions with subagents by stripping heavy progress message payloads during context compaction - Added "Always copy full response" option to the `/copy` picker. When selected, future `/copy` commands will skip the code block picker and copy the full response directly. - VSCode: Added session rename and remove actions to the sessions list - Fixed `/clear` not resetting cached skills, which could cause stale skill content to persist in the new conversation

- Fixed prompt suggestion cache regression that reduced cache hit rates

- Fixed concurrent writes corrupting config file on Windows

- Claude automatically saves useful context to auto-memory. Manage with /memory - Added `/copy` command to show an interactive picker when code blocks are present, allowing selection of individual code blocks or the full response. - Improved "always allow" prefix suggestions for compound bash commands (e.g. `cd /tmp && git fetch && git push`) to compute smarter per-subcommand prefixes instead of treating the whole command as one - Improved ordering of short task lists - Improved memory usage in multi-agent sessions by releasing completed subagent task state - Fixed MCP OAuth token refresh race condition when running multiple Claude Code instances simultaneously - Fixed shell commands not showing a clear error message when the working directory has been deleted - Fixed config file corruption that could wipe authentication when multiple Claude Code instances ran simultaneously

- Expand Remote Control to more users

- VS Code: Fixed another cause of "command 'claude-vscode.editor.openLast' not found" crashes

- Fixed BashTool failing on Windows with EINVAL error

- Fixed a UI flicker where user input would briefly disappear after submission before the message rendered - Fixed bulk agent kill (ctrl+f) to send a single aggregate notification instead of one per agent, and to properly clear the command queue - Fixed graceful shutdown sometimes leaving stale sessions when using Remote Control by parallelizing teardown network calls - Fixed `--worktree` sometimes being ignored on first launch - Fixed a panic ("switch on corrupted value") on Windows - Fixed a crash that could occur when spawning many processes on Windows - Fixed a crash in the WebAssembly interpreter on Linux x64 & Windows x64 - Fixed a crash that sometimes occurred after 2 minutes on Windows ARM64

- VS Code: Fixed extension crash on Windows ("command 'claude-vscode.editor.openLast' not found")

- Added `claude remote-control` subcommand for external builds, enabling local environment serving for all users. - Updated plugin marketplace default git timeout from 30s to 120s and added `CLAUDE_CODE_PLUGIN_GIT_TIMEOUT_MS` to configure. - Added support for custom npm registries and specific version pinning when installing plugins from npm sources - BashTool now skips login shell (`-l` flag) by default when a shell snapshot is available, improving command execution performance. Previously this required setting `CLAUDE_BASH_NO_LOGIN=true`. - Fixed a security issue where `statusLine` and `fileSuggestion` hook commands could execute without workspace trust acceptance in interactive mode. - Tool results larger than 50K characters are now persisted to disk (previously 100K). This reduces context window usage and improves conversation longevity. - Fixed a bug where duplicate `control_response` messages (e.g. from WebSocket reconnects) could cause API 400 errors by pushing duplicate assistant messages into the conversation. - Added `CLAUDE_CODE_ACCOUNT_UUID`, `CLAUDE_CODE_USER_EMAIL`, and `CLAUDE_CODE_ORGANIZATION_UUID` environment variables for SDK callers to provide account info synchronously, eliminating a race condition where early telemetry events lacked account metadata. - Fixed slash command autocomplete crashing when a plugin's SKILL.md description is a YAML array or other non-string type - The `/model` picker now shows human-readable labels (e.g., "Sonnet 4.5") instead of raw model IDs for pinned model versions, with an upgrade hint when a newer version is available. - Managed settings can now be set via macOS plist or Windows Registry. Learn more at https://code.claude.com/docs/en/settings#settings-files

- Added support for `startupTimeout` configuration for LSP servers - Added `WorktreeCreate` and `WorktreeRemove` hook events, enabling custom VCS setup and teardown when agent worktree isolation creates or removes worktrees. - Fixed a bug where resumed sessions could be invisible when the working directory involved symlinks, because the session storage path was resolved at different times during startup. Also fixed session data loss on SSH disconnect by flushing session data before hooks and analytics in the graceful shutdown sequence. - Linux: Fixed native modules not loading on systems with glibc older than 2.30 (e.g., RHEL 8) - Fixed memory leak in agent teams where completed teammate tasks were never garbage collected from session state - Fixed `CLAUDE_CODE_SIMPLE` to fully strip down skills, session memory, custom agents, and CLAUDE.md token counting - Fixed `/mcp reconnect` freezing the CLI when given a server name that doesn't exist - Fixed memory leak where completed task state objects were never removed from AppState - Added support for `isolation: worktree` in agent definitions, allowing agents to declaratively run in isolated git worktrees. - `CLAUDE_CODE_SIMPLE` mode now also disables MCP tools, attachments, hooks, and CLAUDE.md file loading for a fully minimal experience. - Fixed bug where MCP tools were not discovered when tool search is enabled and a prompt is passed in as a launch argument - Improved memory usage during long sessions by clearing internal caches after compaction - Added `claude agents` CLI command to list all configured agents - Improved memory usage during long sessions by clearing large tool results after they have been processed - Fixed a memory leak where LSP diagnostic data was never cleaned up after delivery, causing unbounded memory growth in long sessions - Fixed a memory leak where completed task output was not freed from memory, reducing memory usage in long sessions with many tasks - Improved startup performance for headless mode (`-p` flag) by deferring Yoga WASM and UI component imports - Fixed prompt suggestion cache regression that reduced cache hit rates - Fixed unbounded memory growth in long sessions by capping file history snapshots - Added `CLAUDE_CODE_DISABLE_1M_CONTEXT` environment variable to disable 1M context window support - Opus 4.6 (fast mode) now includes the full 1M context window - VSCode: Added `/extra-usage` command support in VS Code sessions - Fixed memory leak where TaskOutput retained recent lines after cleanup - Fixed memory leak in CircularBuffer where cleared items were retained in the backing array - Fixed memory leak in shell command execution where ChildProcess and AbortController references were retained after cleanup

- Improved MCP OAuth authentication with step-up auth support and discovery caching, reducing redundant network requests during server connections - Added `--worktree` (`-w`) flag to start Claude in an isolated git worktree - Subagents support `isolation: "worktree"` for working in a temporary git worktree - Added Ctrl+F keybinding to kill background agents (two-press confirmation) - Agent definitions support `background: true` to always run as a background task - Plugins can ship `settings.json` for default configuration - Fixed file-not-found errors to suggest corrected paths when the model drops the repo folder - Fixed Ctrl+C and ESC being silently ignored when background agents are running and the main thread is idle. Pressing twice within 3 seconds now kills all background agents. - Fixed prompt suggestion cache regression that reduced cache hit rates. - Fixed `plugin enable` and `plugin disable` to auto-detect the correct scope when `--scope` is not specified, instead of always defaulting to user scope - Simple mode (`CLAUDE_CODE_SIMPLE`) now includes the file edit tool in addition to the Bash tool, allowing direct file editing in simple mode. - Permission suggestions are now populated when safety checks trigger an ask response, enabling SDK consumers to display permission options - Sonnet 4.5 with 1M context is being removed from the Max plan in favor of our frontier Sonnet 4.6 model, which now has 1M context. Please switch in /model. - Fixed verbose mode not updating thinking block display when toggled via `/config` — memo comparators now correctly detect verbose changes - Fixed unbounded WASM memory growth during long sessions by periodically resetting the tree-sitter parser - Fixed potential rendering issues caused by stale yoga layout references - Improved performance in non-interactive mode (`-p`) by skipping unnecessary API calls during startup - Improved performance by caching authentication failures for HTTP and SSE MCP servers, avoiding repeated connection attempts to servers requiring auth - Fixed unbounded memory growth during long-running sessions caused by Yoga WASM linear memory never shrinking - SDK model info now includes `supportsEffort`, `supportedEffortLevels`, and `supportsAdaptiveThinking` fields so consumers can discover model capabilities. - Added `ConfigChange` hook event that fires when configuration files change during a session, enabling enterprise security auditing and optional blocking of settings changes. - Improved startup performance by caching MCP auth failures to avoid redundant connection attempts - Improved startup performance by reducing HTTP calls for analytics token counting - Improved startup performance by batching MCP tool token counting into a single API call - Fixed `disableAllHooks` setting to respect managed settings hierarchy — non-managed settings can no longer disable managed hooks set by policy (#26637) - Fixed `--resume` session picker showing raw XML tags for sessions that start with commands like `/clear`. Now correctly falls through to the session ID fallback. - Improved permission prompts for path safety and working directory blocks to show the reason for the restriction instead of a bare prompt with no context

- Fixed FileWriteTool line counting to preserve intentional trailing blank lines instead of stripping them with `trimEnd()`. - Fixed Windows terminal rendering bugs caused by `os.EOL` (`\r\n`) in display code — line counts now show correct values instead of always showing 1 on Windows. - Improved VS Code plan preview: auto-updates as Claude iterates, enables commenting only when the plan is ready for review, and keeps the preview open when rejecting so Claude can revise. - Fixed a bug where bold and colored text in markdown output could shift to the wrong characters on Windows due to `\r\n` line endings. - Fixed compaction failing when conversation contains many PDF documents by stripping document blocks alongside images before sending to the compaction API (anthropics/claude-code#26188) - Improved memory usage in long-running sessions by releasing API stream buffers, agent context, and skill state after use - Improved startup performance by deferring SessionStart hook execution, reducing time-to-interactive by ~500ms. - Fixed an issue where bash tool output was silently discarded on Windows when using MSYS2 or Cygwin shells. - Improved performance of `@` file mentions - file suggestions now appear faster by pre-warming the index on startup and using session-based caching with background refresh. - Improved memory usage by trimming agent task message history after tasks complete - Improved memory usage during long agent sessions by eliminating O(n²) message accumulation in progress updates - Fixed the bash permission classifier to validate that returned match descriptions correspond to actual input rules, preventing hallucinated descriptions from incorrectly granting permissions - Fixed user-defined agents only loading one file on NFS/FUSE filesystems that report zero inodes (anthropics/claude-code#26044) - Fixed plugin agent skills silently failing to load when referenced by bare name instead of fully-qualified plugin name (anthropics/claude-code#25834) - Search patterns in collapsed tool results are now displayed in quotes for clarity - Windows: Fixed CWD tracking temp files never being cleaned up, causing them to accumulate indefinitely (anthropics/claude-code#17600) - Use `ctrl+f` to kill all background agents instead of double-pressing ESC. Background agents now continue running when you press ESC to cancel the main thread, giving you more control over agent lifecycle. - Fixed API 400 errors ("thinking blocks cannot be modified") that occurred in sessions with concurrent agents, caused by interleaved streaming content blocks preventing proper message merging. - Simplified teammate navigation to use only Shift+Down (with wrapping) instead of both Shift+Up and Shift+Down. - Fixed an issue where a single file write/edit error would abort all other parallel file write/edit operations. Independent file mutations now complete even when a sibling fails. - Added `last_assistant_message` field to Stop and SubagentStop hook inputs, providing the final assistant response text so hooks can access it without parsing transcript files. - Fixed custom session titles set via `/rename` being lost after resuming a conversation (anthropics/claude-code#23610) - Fixed collapsed read/search hint text overflowing on narrow terminals by truncating from the start. - Fixed an issue where bash commands with backslash-newline continuation lines (e.g., long commands split across multiple lines with `\`) would produce spurious empty arguments, potentially breaking command execution. - Fixed built-in slash commands (`/help`, `/model`, `/compact`, etc.) being hidden from the autocomplete dropdown when many user skills are installed (anthropics/claude-code#22020) - Fixed MCP servers not appearing in the MCP Management Dialog after deferred loading - Fixed session name persisting in status bar after `/clear` command (anthropics/claude-code#26082) - Fixed crash when a skill's `name` or `description` in SKILL.md frontmatter is a bare number (e.g., `name: 3000`) — the value is now properly coerced to a string (anthropics/claude-code#25837) - Fixed /resume silently dropping sessions when the first message exceeds 16KB or uses array-format content (anthropics/claude-code#25721) - Added `chat:newline` keybinding action for configurable multi-line input (anthropics/claude-code#26075) - Added `added_dirs` to the statusline JSON `workspace` section, exposing directories added via `/add-dir` to external scripts (anthropics/claude-code#26096) - Fixed `claude doctor` misclassifying mise and asdf-managed installations as native installs (anthropics/claude-code#26033) - Fixed zsh heredoc failing with "read-only file system" error in sandboxed commands (anthropics/claude-code#25990) - Fixed agent progress indicator showing inflated tool use count (anthropics/claude-code#26023) - Fixed image pasting not working on WSL2 systems where Windows copies images as BMP format (anthropics/claude-code#25935) - Fixed background agent results returning raw transcript data instead of the agent's final answer (anthropics/claude-code#26012) - Fixed Warp terminal incorrectly prompting for Shift+Enter setup when it supports it natively (anthropics/claude-code#25957) - Fixed CJK wide characters causing misaligned timestamps and layout elements in the TUI (anthropics/claude-code#26084) - Fixed custom agent `model` field in `.claude/agents/*.md` being ignored when spawning team teammates (anthropics/claude-code#26064) - Fixed plan mode being lost after context compaction, causing the model to switch from planning to implementation mode (anthropics/claude-code#26061) - Fixed `alwaysThinkingEnabled: true` in settings.json not enabling thinking mode on Bedrock and Vertex providers (anthropics/claude-code#26074) - Fixed `tool_decision` OTel telemetry event not being emitted in headless/SDK mode (anthropics/claude-code#26059) - Fixed session name being lost after context compaction — renamed sessions now preserve their custom title through compaction (anthropics/claude-code#26121) - Increased initial session count in resume picker from 10 to 50 for faster session discovery (anthropics/claude-code#26123) - Windows: fixed worktree session matching when drive letter casing differs (anthropics/claude-code#26123) - Fixed `/resume <session-id>` failing to find sessions whose first message exceeds 16KB (anthropics/claude-code#25920) - Fixed "Always allow" on multiline bash commands creating invalid permission patterns that corrupt settings (anthropics/claude-code#25909) - Fixed React crash (error #31) when a skill's `argument-hint` in SKILL.md frontmatter uses YAML sequence syntax (e.g., `[topic: foo | bar]`) — the value is now properly coerced to a string (anthropics/claude-code#25826) - Fixed crash when using `/fork` on sessions that used web search — null entries in search results from transcript deserialization are now handled gracefully (anthropics/claude-code#25811) - Fixed read-only git commands triggering FSEvents file watcher loops on macOS by adding --no-optional-locks flag (anthropics/claude-code#25750) - Fixed custom agents and skills not being discovered when running from a git worktree — project-level `.claude/agents/` and `.claude/skills/` from the main repository are now included (anthropics/claude-code#25816) - Fixed non-interactive subcommands like `claude doctor` and `claude plugin validate` being blocked inside nested Claude sessions (anthropics/claude-code#25803) - Windows: Fixed the same CLAUDE.md file being loaded twice when drive letter casing differs between paths (anthropics/claude-code#25756) - Fixed inline code spans in markdown being incorrectly parsed as bash commands (anthropics/claude-code#25792) - Fixed teammate spinners not respecting custom spinnerVerbs from settings (anthropics/claude-code#25748) - Fixed shell commands permanently failing after a command deletes its own working directory (anthropics/claude-code#26136) - Fixed hooks (PreToolUse, PostToolUse) silently failing to execute on Windows by using Git Bash instead of cmd.exe (anthropics/claude-code#25981) - Fixed LSP `findReferences` and other location-based operations returning results from gitignored files (e.g., `node_modules/`, `venv/`) (anthropics/claude-code#26051) - Moved config backup files from home directory root to `~/.claude/backups/` to reduce home directory clutter (anthropics/claude-code#26130) - Fixed sessions with large first prompts (>16KB) disappearing from the /resume list (anthropics/claude-code#26140) - Fixed shell functions with double-underscore prefixes (e.g., `__git_ps1`) not being preserved across shell sessions (anthropics/claude-code#25824) - Fixed spinner showing "0 tokens" counter before any tokens have been received (anthropics/claude-code#26105) - VSCode: Fixed conversation messages appearing dimmed while the AskUserQuestion dialog is open (anthropics/claude-code#26078) - Fixed background tasks failing in git worktrees due to remote URL resolution reading from worktree-specific gitdir instead of the main repository config (anthropics/claude-code#26065) - Fixed Right Alt key leaving visible `[25~` escape sequence residue in the input field on Windows/Git Bash terminals (anthropics/claude-code#25943) - The `/rename` command now updates the terminal tab title by default (anthropics/claude-code#25789) - Fixed Edit tool silently corrupting Unicode curly quotes (\u201c\u201d \u2018\u2019) by replacing them with straight quotes when making edits (anthropics/claude-code#26141) - Fixed OSC 8 hyperlinks only being clickable on the first line when link text wraps across multiple terminal lines.

- Fixed orphaned CC processes after terminal disconnect on macOS - Added support for using claude.ai MCP connectors in Claude Code

- Added support for Claude Sonnet 4.6 - Added support for reading `enabledPlugins` and `extraKnownMarketplaces` from `--add-dir` directories - Added `spinnerTipsOverride` setting to customize spinner tips — configure `tips` with an array of custom tip strings, and optionally set `excludeDefault: true` to show only your custom tips instead of the built-in ones - Added `SDKRateLimitInfo` and `SDKRateLimitEvent` types to the SDK, enabling consumers to receive rate limit status updates including utilization, reset times, and overage information - Fixed Agent Teams teammates failing on Bedrock, Vertex, and Foundry by propagating API provider environment variables to tmux-spawned processes (anthropics/claude-code#23561) - Fixed sandbox "operation not permitted" errors when writing temporary files on macOS by using the correct per-user temp directory (anthropics/claude-code#21654) - Fixed Task tool (backgrounded agents) crashing with a `ReferenceError` on completion (anthropics/claude-code#22087) - Fixed autocomplete suggestions not being accepted on Enter when images are pasted in the input - Fixed skills invoked by subagents incorrectly appearing in main session context after compaction - Fixed excessive `.claude.json.backup` files accumulating on every startup - Fixed plugin-provided commands, agents, and hooks not being available immediately after installation without requiring a restart - Improved startup performance by removing eager loading of session history for stats caching - Improved memory usage for shell commands that produce large output — RSS no longer grows unboundedly with command output size - Improved collapsed read/search groups to show the current file or search pattern being processed beneath the summary line while active - [VSCode] Improved permission destination choice (project/user/session) to persist across sessions

- Fixed ENAMETOOLONG errors for deeply-nested directory paths - Fixed auth refresh errors

- Fixed AWS auth refresh hanging indefinitely by adding a 3-minute timeout - Fixed spurious warnings for non-agent markdown files in `.claude/agents/` directory - Fixed structured-outputs beta header being sent unconditionally on Vertex/Bedrock

- Improved startup performance by deferring Zod schema construction - Improved prompt cache hit rates by moving date out of system prompt - Added one-time Opus 4.6 effort callout for eligible users - Fixed /resume showing interrupt messages as session titles - Fixed image dimension limit errors to suggest /compact

- Added guard against launching Claude Code inside another Claude Code session - Fixed Agent Teams using wrong model identifier for Bedrock, Vertex, and Foundry customers - Fixed a crash when MCP tools return image content during streaming - Fixed /resume session previews showing raw XML tags instead of readable command names - Improved model error messages for Bedrock/Vertex/Foundry users with fallback suggestions - Fixed plugin browse showing misleading "Space to Toggle" hint for already-installed plugins - Fixed hook blocking errors (exit code 2) not showing stderr to the user - Added `speed` attribute to OTel events and trace spans for fast mode visibility - Added `claude auth login`, `claude auth status`, and `claude auth logout` CLI subcommands - Added Windows ARM64 (win32-arm64) native binary support - Improved `/rename` to auto-generate session name from conversation context when called without arguments - Improved narrow terminal layout for prompt footer - Fixed file resolution failing for @-mentions with anchor fragments (e.g., `@README.md#installation`) - Fixed FileReadTool blocking the process on FIFOs, `/dev/stdin`, and large files - Fixed background task notifications not being delivered in streaming Agent SDK mode - Fixed cursor jumping to end on each keystroke in classifier rule input - Fixed markdown link display text being dropped for raw URL - Fixed auto-compact failure error notifications being shown to users - Fixed permission wait time being included in subagent elapsed time display - Fixed proactive ticks firing while in plan mode - Fixed clear stale permission rules when settings change on disk - Fixed hook blocking errors showing stderr content in UI

- Improved terminal rendering performance - Fixed fatal errors being swallowed instead of displayed - Fixed process hanging after session close - Fixed character loss at terminal screen boundary - Fixed blank lines in verbose transcript view

- Fixed VS Code terminal scroll-to-top regression introduced in 2.1.37 - Fixed Tab key queueing slash commands instead of autocompleting - Fixed bash permission matching for commands using environment variable wrappers - Fixed text between tool uses disappearing when not using streaming - Fixed duplicate sessions when resuming in VS Code extension - Improved heredoc delimiter parsing to prevent command smuggling - Blocked writes to `.claude/skills` directory in sandbox mode

- Fixed an issue where /fast was not immediately available after enabling /extra-usage

- Fast mode is now available for Opus 4.6. Learn more at https://code.claude.com/docs/en/fast-mode

- Fixed a crash when agent teams setting changed between renders - Fixed a bug where commands excluded from sandboxing (via `sandbox.excludedCommands` or `dangerouslyDisableSandbox`) could bypass the Bash ask permission rule when `autoAllowBashIfSandboxed` was enabled

- Fixed agent teammate sessions in tmux to send and receive messages - Fixed warnings about agent teams not being available on your current plan - Added `TeammateIdle` and `TaskCompleted` hook events for multi-agent workflows - Added support for restricting which sub-agents can be spawned via `Task(agent_type)` syntax in agent "tools" frontmatter - Added `memory` frontmatter field support for agents, enabling persistent memory with `user`, `project`, or `local` scope - Added plugin name to skill descriptions and `/skills` menu for better discoverability - Fixed an issue where submitting a new message while the model was in extended thinking would interrupt the thinking phase - Fixed an API error that could occur when aborting mid-stream, where whitespace text combined with a thinking block would bypass normalization and produce an invalid request - Fixed API proxy compatibility issue where 404 errors on streaming endpoints no longer triggered non-streaming fallback - Fixed an issue where proxy settings configured via `settings.json` environment variables were not applied to WebFetch and other HTTP requests on the Node.js build - Fixed `/resume` session picker showing raw XML markup instead of clean titles for sessions started with slash commands - Improved error messages for API connection failures — now shows specific cause (e.g., ECONNREFUSED, SSL errors) instead of generic "Connection error" - Errors from invalid managed settings are now surfaced - VSCode: Added support for remote sessions, allowing OAuth users to browse and resume sessions from claude.ai - VSCode: Added git branch and message count to the session picker, with support for searching by branch name - VSCode: Fixed scroll-to-bottom under-scrolling on initial session load and session switch

- Claude Opus 4.6 is now available! - Added research preview agent teams feature for multi-agent collaboration (token-intensive feature, requires setting CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1) - Claude now automatically records and recalls memories as it works - Added "Summarize from here" to the message selector, allowing partial conversation summarization. - Skills defined in `.claude/skills/` within additional directories (`--add-dir`) are now loaded automatically. - Fixed `@` file completion showing incorrect relative paths when running from a subdirectory - Updated --resume to re-use --agent value specified in previous conversation by default. - Fixed: Bash tool no longer throws "Bad substitution" errors when heredocs contain JavaScript template literals like `${index + 1}`, which previously interrupted tool execution - Skill character budget now scales with context window (2% of context), so users with larger context windows can see more skill descriptions without truncation - Fixed Thai/Lao spacing vowels (สระ า, ำ) not rendering correctly in the input field - VSCode: Fixed slash commands incorrectly being executed when pressing Enter with preceding text in the input field - VSCode: Added spinner when loading past conversations list

- Added session resume hint on exit, showing how to continue your conversation later - Added support for full-width (zenkaku) space input from Japanese IME in checkbox selection - Fixed PDF too large errors permanently locking up sessions, requiring users to start a new conversation - Fixed bash commands incorrectly reporting failure with "Read-only file system" errors when sandbox mode was enabled - Fixed a crash that made sessions unusable after entering plan mode when project config in `~/.claude.json` was missing default fields - Fixed `temperatureOverride` being silently ignored in the streaming API path, causing all streaming requests to use the default temperature (1) regardless of the configured override - Fixed LSP shutdown/exit compatibility with strict language servers that reject null params - Improved system prompts to more clearly guide the model toward using dedicated tools (Read, Edit, Glob, Grep) instead of bash equivalents (`cat`, `sed`, `grep`, `find`), reducing unnecessary bash command usage - Improved PDF and request size error messages to show actual limits (100 pages, 20MB) - Reduced layout jitter in the terminal when the spinner appears and disappears during streaming - Removed misleading Anthropic API pricing from model selector for third-party provider (Bedrock, Vertex, Foundry) users

- Added `pages` parameter to the Read tool for PDFs, allowing specific page ranges to be read (e.g., `pages: "1-5"`). Large PDFs (>10 pages) now return a lightweight reference when `@` mentioned instead of being inlined into context. - Added pre-configured OAuth client credentials for MCP servers that don't support Dynamic Client Registration (e.g., Slack). Use `--client-id` and `--client-secret` with `claude mcp add`. - Added `/debug` for Claude to help troubleshoot the current session - Added support for additional `git log` and `git show` flags in read-only mode (e.g., `--topo-order`, `--cherry-pick`, `--format`, `--raw`) - Added token count, tool uses, and duration metrics to Task tool results - Added reduced motion mode to the config - Fixed phantom "(no content)" text blocks appearing in API conversation history, reducing token waste and potential model confusion - Fixed prompt cache not correctly invalidating when tool descriptions or input schemas changed, only when tool names changed - Fixed 400 errors that could occur after running `/login` when the conversation contained thinking blocks - Fixed a hang when resuming sessions with corrupted transcript files containing `parentUuid` cycles - Fixed rate limit message showing incorrect "/upgrade" suggestion for Max 20x users when extra-usage is unavailable - Fixed permission dialogs stealing focus while actively typing - Fixed subagents not being able to access SDK-provided MCP tools because they were not synced to the shared application state - Fixed a regression where Windows users with a `.bashrc` file could not run bash commands - Improved memory usage for `--resume` (68% reduction for users with many sessions) by replacing the session index with lightweight stat-based loading and progressive enrichment - Improved `TaskStop` tool to display the stopped command/task description in the result line instead of a generic "Task stopped" message - Changed `/model` to execute immediately instead of being queued - [VSCode] Added multiline input support to the "Other" text input in question dialogs (use Shift+Enter for new lines) - [VSCode] Fixed duplicate sessions appearing in the session list when starting a new conversation

- Fixed startup performance issues when resuming sessions that have `saved_hook_context`

- Added tool call failures and denials to debug logs - Fixed context management validation error for gateway users, ensuring `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1` avoids the error - Added `--from-pr` flag to resume sessions linked to a specific GitHub PR number or URL - Sessions are now automatically linked to PRs when created via `gh pr create` - Fixed /context command not displaying colored output - Fixed status bar duplicating background task indicator when PR status was shown - Windows: Fixed bash command execution failing for users with `.bashrc` files - Windows: Fixed console windows flashing when spawning child processes - VSCode: Fixed OAuth token expiration causing 401 errors after extended sessions

- Fixed beta header validation error for gateway users on Bedrock and Vertex, ensuring `CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1` avoids the error

- Added customizable spinner verbs setting (`spinnerVerbs`) - Fixed mTLS and proxy connectivity for users behind corporate proxies or using client certificates - Fixed per-user temp directory isolation to prevent permission conflicts on shared systems - Fixed a race condition that could cause 400 errors when prompt caching scope was enabled - Fixed pending async hooks not being cancelled when headless streaming sessions ended - Fixed tab completion not updating the input field when accepting a suggestion - Fixed ripgrep search timeouts silently returning empty results instead of reporting errors - Improved terminal rendering performance with optimized screen data layout - Changed Bash commands to show timeout duration alongside elapsed time - Changed merged pull requests to show a purple status indicator in the prompt footer - [IDE] Fixed model options displaying incorrect region strings for Bedrock users in headless mode

- Fixed structured outputs for non-interactive (-p) mode

- Added support for full-width (zenkaku) number input from Japanese IME in option selection prompts - Fixed shell completion cache files being truncated on exit - Fixed API errors when resuming sessions that were interrupted during tool execution - Fixed auto-compact triggering too early on models with large output token limits - Fixed task IDs potentially being reused after deletion - Fixed file search not working in VS Code extension on Windows - Improved read/search progress indicators to show "Reading…" while in progress and "Read" when complete - Improved Claude to prefer file operation tools (Read, Edit, Write) over bash equivalents (cat, sed, awk) - [VSCode] Added automatic Python virtual environment activation, ensuring `python` and `pip` commands use the correct interpreter (configurable via `claudeCode.usePythonEnvironment` setting) - [VSCode] Fixed message action buttons having incorrect background colors

- Added arrow key history navigation in vim normal mode when cursor cannot move further - Added external editor shortcut (Ctrl+G) to the help menu for better discoverability - Added PR review status indicator to the prompt footer, showing the current branch's PR state (approved, changes requested, pending, or draft) as a colored dot with a clickable link - Added support for loading `CLAUDE.md` files from additional directories specified via `--add-dir` flag (requires setting `CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1`) - Added ability to delete tasks via the `TaskUpdate` tool - Fixed session compaction issues that could cause resume to load full history instead of the compact summary - Fixed agents sometimes ignoring user messages sent while actively working on a task - Fixed wide character (emoji, CJK) rendering artifacts where trailing columns were not cleared when replaced by narrower characters - Fixed JSON parsing errors when MCP tool responses contain special Unicode characters - Fixed up/down arrow keys in multi-line and wrapped text input to prioritize cursor movement over history navigation - Fixed draft prompt being lost when pressing UP arrow to navigate command history - Fixed ghost text flickering when typing slash commands mid-input - Fixed marketplace source removal not properly deleting settings - Fixed duplicate output in some commands like `/context` - Fixed task list sometimes showing outside the main conversation view - Fixed syntax highlighting for diffs occurring within multiline constructs like Python docstrings - Fixed crashes when cancelling tool use - Improved `/sandbox` command UI to show dependency status with installation instructions when dependencies are missing - Improved thinking status text with a subtle shimmer animation - Improved task list to dynamically adjust visible items based on terminal height - Improved fork conversation hint to show how to resume the original session - Changed collapsed read/search groups to show present tense ("Reading", "Searching for") while in progress, and past tense ("Read", "Searched for") when complete - Changed `ToolSearch` results to appear as a brief notification instead of inline in the conversation - Changed the `/commit-push-pr` skill to automatically post PR URLs to Slack channels when configured via MCP tools - Changed the `/copy` command to be available to all users - Changed background agents to prompt for tool permissions before launching - Changed permission rules like `Bash(*)` to be accepted and treated as equivalent to `Bash` - Changed config backups to be timestamped and rotated (keeping 5 most recent) to prevent data loss

- Added env var `CLAUDE_CODE_ENABLE_TASKS`, set to `false` to keep the old system temporarily - Added shorthand `$0`, `$1`, etc. for accessing individual arguments in custom commands - Fixed crashes on processors without AVX instruction support - Fixed dangling Claude Code processes when terminal is closed by catching EIO errors from `process.exit()` and using SIGKILL as fallback - Fixed `/rename` and `/tag` not updating the correct session when resuming from a different directory (e.g., git worktrees) - Fixed resuming sessions by custom title not working when run from a different directory - Fixed pasted text content being lost when using prompt stash (Ctrl+S) and restore - Fixed agent list displaying "Sonnet (default)" instead of "Inherit (default)" for agents without an explicit model setting - Fixed backgrounded hook commands not returning early, potentially causing the session to wait on a process that was intentionally backgrounded - Fixed file write preview omitting empty lines - Changed skills without additional permissions or hooks to be allowed without requiring approval - Changed indexed argument syntax from `$ARGUMENTS.0` to `$ARGUMENTS[0]` (bracket syntax) - [SDK] Added replay of `queued_command` attachment messages as `SDKUserMessageReplay` events when `replayUserMessages` is enabled - [VSCode] Enabled session forking and rewind functionality for all users

- Added customizable keyboard shortcuts. Configure keybindings per context, create chord sequences, and personalize your workflow. Run `/keybindings` to get started. Learn more at https://code.claude.com/docs/en/keybindings

- Fixed crashes on processors without AVX instruction support

- Added new task management system, including new capabilities like dependency tracking - [VSCode] Added native plugin management support - [VSCode] Added ability for OAuth users to browse and resume remote Claude sessions from the Sessions dialog - Fixed out-of-memory crashes when resuming sessions with heavy subagent usage - Fixed an issue where the "context remaining" warning was not hidden after running `/compact` - Fixed session titles on the resume screen not respecting the user's language setting - [IDE] Fixed a race condition on Windows where the Claude Code sidebar view container would not appear on start

- Added deprecation notification for npm installations - run `claude install` or see https://docs.anthropic.com/en/docs/claude-code/getting-started for more options - Improved UI rendering performance with React Compiler - Fixed the "Context left until auto-compact" warning not disappearing after running `/compact` - Fixed MCP stdio server timeout not killing child process, which could cause UI freezes

- Added history-based autocomplete in bash mode (`!`) - type a partial command and press Tab to complete from your bash command history - Added search to installed plugins list - type to filter by name or description - Added support for pinning plugins to specific git commit SHAs, allowing marketplace entries to install exact versions - Fixed a regression where the context window blocking limit was calculated too aggressively, blocking users at ~65% context usage instead of the intended ~98% - Fixed memory issues that could cause crashes when running parallel subagents - Fixed memory leak in long-running sessions where stream resources were not cleaned up after shell commands completed - Fixed `@` symbol incorrectly triggering file autocomplete suggestions in bash mode - Fixed `@`-mention menu folder click behavior to navigate into directories instead of selecting them - Fixed `/feedback` command generating invalid GitHub issue URLs when description is very long - Fixed `/context` command to show the same token count and percentage as the status line in verbose mode - Fixed an issue where `/config`, `/context`, `/model`, and `/todos` command overlays could close unexpectedly - Fixed slash command autocomplete selecting wrong command when typing similar commands (e.g., `/context` vs `/compact`) - Fixed inconsistent back navigation in plugin marketplace when only one marketplace is configured - Fixed iTerm2 progress bar not clearing properly on exit, preventing lingering indicators and bell sounds - Improved backspace to delete pasted text as a single token instead of one character at a time - [VSCode] Added `/usage` command to display current plan usage

- Fixed message rendering bug

- Fixed excessive MCP connection requests for HTTP/SSE transports

- Added new `Setup` hook event that can be triggered via `--init`, `--init-only`, or `--maintenance` CLI flags for repository setup and maintenance operations - Added keyboard shortcut 'c' to copy OAuth URL when browser doesn't open automatically during login - Fixed a crash when running bash commands containing heredocs with JavaScript template literals like `${index + 1}` - Improved startup to capture keystrokes typed before the REPL is fully ready - Improved file suggestions to show as removable attachments instead of inserting text when accepted - [VSCode] Added install count display to plugin listings - [VSCode] Added trust warning when installing plugins

- Added `auto:N` syntax for configuring the MCP tool search auto-enable threshold, where N is the context window percentage (0-100) - Added `plansDirectory` setting to customize where plan files are stored - Added external editor support (Ctrl+G) in AskUserQuestion "Other" input field - Added session URL attribution to commits and PRs created from web sessions - Added support for `PreToolUse` hooks to return `additionalContext` to the model - Added `${CLAUDE_SESSION_ID}` string substitution for skills to access the current session ID - Fixed long sessions with parallel tool calls failing with an API error about orphan tool_result blocks - Fixed MCP server reconnection hanging when cached connection promise never resolves - Fixed Ctrl+Z suspend not working in terminals using Kitty keyboard protocol (Ghostty, iTerm2, kitty, WezTerm)

- Added `showTurnDuration` setting to hide turn duration messages (e.g., "Cooked for 1m 6s") - Added ability to provide feedback when accepting permission prompts - Added inline display of agent's final response in task notifications, making it easier to see results without reading the full transcript file - Fixed security vulnerability where wildcard permission rules could match compound commands containing shell operators - Fixed false "file modified" errors on Windows when cloud sync tools, antivirus scanners, or Git touch file timestamps without changing content - Fixed orphaned tool_result errors when sibling tools fail during streaming execution - Fixed context window blocking limit being calculated using the full context window instead of the effective context window (which reserves space for max output tokens) - Fixed spinner briefly flashing when running local slash commands like `/model` or `/theme` - Fixed terminal title animation jitter by using fixed-width braille characters - Fixed plugins with git submodules not being fully initialized when installed - Fixed bash commands failing on Windows when temp directory paths contained characters like `t` or `n` that were misinterpreted as escape sequences - Improved typing responsiveness by reducing memory allocation overhead in terminal rendering - Enabled MCP tool search auto mode by default for all users. When MCP tool descriptions exceed 10% of the context window, they are automatically deferred and discovered via the MCPSearch tool instead of being loaded upfront. This reduces context usage for users with many MCP tools configured. Users can disable this by adding `MCPSearch` to `disallowedTools` in their settings. - Changed OAuth and API Console URLs from console.anthropic.com to platform.claude.com - [VSCode] Fixed `claudeProcessWrapper` setting passing the wrapper path instead of the Claude binary path

- Added search functionality to `/config` command for quickly filtering settings - Added Updates section to `/doctor` showing auto-update channel and available npm versions (stable/latest) - Added date range filtering to `/stats` command - press `r` to cycle between Last 7 days, Last 30 days, and All time - Added automatic discovery of skills from nested `.claude/skills` directories when working with files in subdirectories - Added `context_window.used_percentage` and `context_window.remaining_percentage` fields to status line input for easier context window display - Added an error display when the editor fails during Ctrl+G - Fixed permission bypass via shell line continuation that could allow blocked commands to execute - Fixed false "File has been unexpectedly modified" errors when file watchers touch files without changing content - Fixed text styling (bold, colors) getting progressively misaligned in multi-line responses - Fixed the feedback panel closing unexpectedly when typing 'n' in the description field - Fixed rate limit warning appearing at low usage after weekly reset (now requires 70% usage) - Fixed rate limit options menu incorrectly auto-opening when resuming a previous session - Fixed numpad keys outputting escape sequences instead of characters in Kitty keyboard protocol terminals - Fixed Option+Return not inserting newlines in Kitty keyboard protocol terminals - Fixed corrupted config backup files accumulating in the home directory (now only one backup is created per config file) - Fixed `mcp list` and `mcp get` commands leaving orphaned MCP server processes - Fixed visual artifacts in ink2 mode when nodes become hidden via `display:none` - Improved the external CLAUDE.md imports approval dialog to show which files are being imported and from where - Improved the `/tasks` dialog to go directly to task details when there's only one background task running - Improved @ autocomplete with icons for different suggestion types and single-line formatting - Updated "Help improve Claude" setting fetch to refresh OAuth and retry when it fails due to a stale OAuth token - Changed task notification display to cap at 3 lines with overflow summary when multiple background tasks complete simultaneously - Changed terminal title to "Claude Code" on startup for better window identification - Removed ability to @-mention MCP servers to enable/disable - use `/mcp enable <name>` instead - [VSCode] Fixed usage indicator not updating after manual compact

- Added `CLAUDE_CODE_TMPDIR` environment variable to override the temp directory used for internal temp files, useful for environments with custom temp directory requirements

- Added `CLAUDE_CODE_DISABLE_BACKGROUND_TASKS` environment variable to disable all background task functionality including auto-backgrounding and the Ctrl+B shortcut - Fixed "Help improve Claude" setting fetch to refresh OAuth and retry when it fails due to a stale OAuth token

- Merged slash commands and skills, simplifying the mental model with no change in behavior - Added release channel (`stable` or `latest`) toggle to `/config` - Added detection and warnings for unreachable permission rules, with warnings in `/doctor` and after saving rules that include the source of each rule and actionable fix guidance - Fixed plan files persisting across `/clear` commands, now ensuring a fresh plan file is used after clearing a conversation - Fixed false skill duplicate detection on filesystems with large inodes (e.g., ExFAT) by using 64-bit precision for inode values - Fixed mismatch between background task count in status bar and items shown in tasks dialog - Fixed sub-agents using the wrong model during conversation compaction - Fixed web search in sub-agents using incorrect model - Fixed trust dialog acceptance when running from the home directory not enabling trust-requiring features like hooks during the session - Improved terminal rendering stability by preventing uncontrolled writes from corrupting cursor state - Improved slash command suggestion readability by truncating long descriptions to 2 lines - Changed tool hook execution timeout from 60 seconds to 10 minutes - [VSCode] Added clickable destination selector for permission requests, allowing you to choose where settings are saved (this project, all projects, shared with team, or session only)

- Added source path metadata to images dragged onto the terminal, helping Claude understand where images originated - Added clickable hyperlinks for file paths in tool output in terminals that support OSC 8 (like iTerm) - Added support for Windows Package Manager (winget) installations with automatic detection and update instructions - Added Shift+Tab keyboard shortcut in plan mode to quickly select "auto-accept edits" option - Added `FORCE_AUTOUPDATE_PLUGINS` environment variable to allow plugin autoupdate even when the main auto-updater is disabled - Added `agent_type` to SessionStart hook input, populated if `--agent` is specified - Fixed a command injection vulnerability in bash command processing where malformed input could execute arbitrary commands - Fixed a memory leak where tree-sitter parse trees were not being freed, causing WASM memory to grow unbounded over long sessions - Fixed binary files (images, PDFs, etc.) being accidentally included in memory when using `@include` directives in CLAUDE.md files - Fixed updates incorrectly claiming another installation is in progress - Fixed crash when socket files exist in watched directories (defense-in-depth for EOPNOTSUPP errors) - Fixed remote session URL and teleport being broken when using `/tasks` command - Fixed MCP tool names being exposed in analytics events by sanitizing user-specific server configurations - Improved Option-as-Meta hint on macOS to show terminal-specific instructions for native CSIu terminals like iTerm2, Kitty, and WezTerm - Improved error message when pasting images over SSH to suggest using `scp` instead of the unhelpful clipboard shortcut hint - Improved permission explainer to not flag routine dev workflows (git fetch/rebase, npm install, tests, PRs) as medium risk - Changed large bash command outputs to be saved to disk instead of truncated, allowing Claude to read the full content - Changed large tool outputs to be persisted to disk instead of truncated, providing full output access via file references - Changed `/plugins` installed tab to unify plugins and MCPs with scope-based grouping - Deprecated Windows managed settings path `C:\ProgramData\ClaudeCode\managed-settings.json` - administrators should migrate to `C:\Program Files\ClaudeCode\managed-settings.json` - [SDK] Changed minimum zod peer dependency to ^4.0.0 - [VSCode] Fixed usage display not updating after manual compact

- Added automatic skill hot-reload - skills created or modified in `~/.claude/skills` or `.claude/skills` are now immediately available without restarting the session - Added support for running skills and slash commands in a forked sub-agent context using `context: fork` in skill frontmatter - Added support for `agent` field in skills to specify agent type for execution - Added `language` setting to configure Claude's response language (e.g., language: "japanese") - Changed Shift+Enter to work out of the box in iTerm2, WezTerm, Ghostty, and Kitty without modifying terminal configs - Added `respectGitignore` support in `settings.json` for per-project control over @-mention file picker behavior - Added `IS_DEMO` environment variable to hide email and organization from the UI, useful for streaming or recording sessions - Fixed security issue where sensitive data (OAuth tokens, API keys, passwords) could be exposed in debug logs - Fixed files and skills not being properly discovered when resuming sessions with `-c` or `--resume` - Fixed pasted content being lost when replaying prompts from history using up arrow or Ctrl+R search - Fixed Esc key with queued prompts to only move them to input without canceling the running task - Reduced permission prompts for complex bash commands - Fixed command search to prioritize exact and prefix matches on command names over fuzzy matches in descriptions - Fixed PreToolUse hooks to allow `updatedInput` when returning `ask` permission decision, enabling hooks to act as middleware while still requesting user consent - Fixed plugin path resolution for file-based marketplace sources - Fixed LSP tool being incorrectly enabled when no LSP servers were configured - Fixed background tasks failing with "git repository not found" error for repositories with dots in their names - Fixed Claude in Chrome support for WSL environments - Fixed Windows native installer silently failing when executable creation fails - Improved CLI help output to display options and subcommands in alphabetical order for easier navigation - Added wildcard pattern matching for Bash tool permissions using `*` at any position in rules (e.g., `Bash(npm *)`, `Bash(* install)`, `Bash(git * main)`) - Added unified Ctrl+B backgrounding for both bash commands and agents - pressing Ctrl+B now backgrounds all running foreground tasks simultaneously - Added support for MCP `list_changed` notifications, allowing MCP servers to dynamically update their available tools, prompts, and resources without requiring reconnection - Added `/teleport` and `/remote-env` slash commands for claude.ai subscribers, allowing them to resume and configure remote sessions - Added support for disabling specific agents using `Task(AgentName)` syntax in settings.json permissions or the `--disallowedTools` CLI flag - Added hooks support to agent frontmatter, allowing agents to define PreToolUse, PostToolUse, and Stop hooks scoped to the agent's lifecycle - Added hooks support for skill and slash command frontmatter - Added new Vim motions: `;` and `,` to repeat f/F/t/T motions, `y` operator for yank with `yy`/`Y`, `p`/`P` for paste, text objects (`iw`, `aw`, `iW`, `aW`, `i"`, `a"`, `i'`, `a'`, `i(`, `a(`, `i[`, `a[`, `i{`, `a{`), `>>` and `<<` for indent/dedent, and `J` to join lines - Added `/plan` command shortcut to enable plan mode directly from the prompt - Added slash command autocomplete support when `/` appears anywhere in input, not just at the beginning - Added `--tools` flag support in interactive mode to restrict which built-in tools Claude can use during interactive sessions - Added `CLAUDE_CODE_FILE_READ_MAX_OUTPUT_TOKENS` environment variable to override the default file read token limit - Added support for `once: true` config for hooks - Added support for YAML-style lists in frontmatter `allowed-tools` field for cleaner skill declarations - Added support for prompt and agent hook types from plugins (previously only command hooks were supported) - Added Cmd+V support for image paste in iTerm2 (maps to Ctrl+V) - Added left/right arrow key navigation for cycling through tabs in dialogs - Added real-time thinking block display in Ctrl+O transcript mode - Added filepath to full output in background bash task details dialog - Added Skills as a separate category in the context visualization - Fixed OAuth token refresh not triggering when server reports token expired but local expiration check disagrees - Fixed session persistence getting stuck after transient server errors by recovering from 409 conflicts when the entry was actually stored - Fixed session resume failures caused by orphaned tool results during concurrent tool execution - Fixed a race condition where stale OAuth tokens could be read from the keychain cache during concurrent token refresh attempts - Fixed AWS Bedrock subagents not inheriting EU/APAC cross-region inference model configuration, causing 403 errors when IAM permissions are scoped to specific regions - Fixed API context overflow when background tasks produce large output by truncating to 30K chars with file path reference - Fixed a hang when reading FIFO files by skipping symlink resolution for special file types - Fixed terminal keyboard mode not being reset on exit in Ghostty, iTerm2, Kitty, and WezTerm - Fixed Alt+B and Alt+F (word navigation) not working in iTerm2, Ghostty, Kitty, and WezTerm - Fixed `${CLAUDE_PLUGIN_ROOT}` not being substituted in plugin `allowed-tools` frontmatter, which caused tools to incorrectly require approval - Fixed files created by the Write tool using hardcoded 0o600 permissions instead of respecting the system umask - Fixed commands with `$()` command substitution failing with parse errors - Fixed multi-line bash commands with backslash continuations being incorrectly split and flagged for permissions - Fixed bash command prefix extraction to correctly identify subcommands after global options (e.g., `git -C /path log` now correctly matches `Bash(git log:*)` rules) - Fixed slash commands passed as CLI arguments (e.g., `claude /context`) not being executed properly - Fixed pressing Enter after Tab-completing a slash command selecting a different command instead of submitting the completed one - Fixed slash command argument hint flickering and inconsistent display when typing commands with arguments - Fixed Claude sometimes redundantly invoking the Skill tool when running slash commands directly - Fixed skill token estimates in `/context` to accurately reflect frontmatter-only loading - Fixed subagents sometimes not inheriting the parent's model by default - Fixed model picker showing incorrect selection for Bedrock/Vertex users using `--model haiku` - Fixed duplicate Bash commands appearing in permission request option labels - Fixed noisy output when background tasks complete - now shows clean completion message instead of raw output - Fixed background task completion notifications to appear proactively with bullet point - Fixed forked slash commands showing "AbortError" instead of "Interrupted" message when cancelled - Fixed cursor disappearing after dismissing permission dialogs - Fixed `/hooks` menu selecting wrong hook type when scrolling to a different option - Fixed images in queued prompts showing as "[object Object]" when pressing Esc to cancel - Fixed images being silently dropped when queueing messages while backgrounding a task - Fixed large pasted images failing with "Image was too large" error - Fixed extra blank lines in multiline prompts containing CJK characters (Japanese, Chinese, Korean) - Fixed ultrathink keyword highlighting being applied to wrong characters when user prompt text wraps to multiple lines - Fixed collapsed "Reading X files…" indicator incorrectly switching to past tense when thinking blocks appear mid-stream - Fixed Bash read commands (like `ls` and `cat`) not being counted in collapsed read/search groups, causing groups to incorrectly show "Read 0 files" - Fixed spinner token counter to properly accumulate tokens from subagents during execution - Fixed memory leak in git diff parsing where sliced strings retained large parent strings - Fixed race condition where LSP tool could return "no server available" during startup - Fixed feedback submission hanging indefinitely when network requests timeout - Fixed search mode in plugin discovery and log selector views exiting when pressing up arrow - Fixed hook success message showing trailing colon when hook has no output - Multiple optimizations to improve startup performance - Improved terminal rendering performance when using native installer or Bun, especially for text with emoji, ANSI codes, and Unicode characters - Improved performance when reading Jupyter notebooks with many cells - Improved reliability for piped input like `cat refactor.md | claude` - Improved reliability for AskQuestion tool - Improved sed in-place edit commands to render as file edits with diff preview - Improved Claude to automatically continue when response is cut off due to output token limit, instead of showing an error message - Improved compaction reliability - Improved subagents (Task tool) to continue working after permission denial, allowing them to try alternative approaches - Improved skills to show progress while executing, displaying tool uses as they happen - Improved skills from `/skills/` directories to be visible in the slash command menu by default (opt-out with `user-invocable: false` in frontmatter) - Improved skill suggestions to prioritize recently and frequently used skills - Improved spinner feedback when waiting for the first response token - Improved token count display in spinner to include tokens from background agents - Improved incremental output for async agents to give the main thread more control and visibility - Improved permission prompt UX with Tab hint moved to footer, cleaner Yes/No input labels with contextual placeholders - Improved the Claude in Chrome notification with shortened help text and persistent display until dismissed - Improved macOS screenshot paste reliability with TIFF format support - Improved `/stats` output - Updated Atlassian MCP integration to use a more reliable default configuration (streamable HTTP) - Changed "Interrupted" message color from red to grey for a less alarming appearance - Removed permission prompt when entering plan mode - users can now enter plan mode without approval - Removed underline styling from image reference links - [SDK] Changed minimum zod peer dependency to ^4.0.0 - [VSCode] Added currently selected model name to the context menu - [VSCode] Added descriptive labels on auto-accept permission button (e.g., "Yes, allow npm for this project" instead of "Yes, and don't ask again") - [VSCode] Fixed paragraph breaks not rendering in markdown content - [VSCode] Fixed scrolling in the extension inadvertently scrolling the parent iframe - [Windows] Fixed issue with improper rendering

- Fixed issue with macOS code-sign warning when using Claude in Chrome integration

- Minor bugfixes

- Added LSP (Language Server Protocol) tool for code intelligence features like go-to-definition, find references, and hover documentation - Added `/terminal-setup` support for Kitty, Alacritty, Zed, and Warp terminals - Added ctrl+t shortcut in `/theme` to toggle syntax highlighting on/off - Added syntax highlighting info to theme picker - Added guidance for macOS users when Alt shortcuts fail due to terminal configuration - Fixed skill `allowed-tools` not being applied to tools invoked by the skill - Fixed Opus 4.5 tip incorrectly showing when user was already using Opus - Fixed a potential crash when syntax highlighting isn't initialized correctly - Fixed visual bug in `/plugins discover` where list selection indicator showed while search box was focused - Fixed macOS keyboard shortcuts to display 'opt' instead of 'alt' - Improved `/context` command visualization with grouped skills and agents by source, slash commands, and sorted token count - [Windows] Fixed issue with improper rendering - [VSCode] Added gift tag pictogram for year-end promotion message

- Added clickable `[Image #N]` links that open attached images in the default viewer - Added alt-y yank-pop to cycle through kill ring history after ctrl-y yank - Added search filtering to the plugin discover screen (type to filter by name, description, or marketplace) - Added support for custom session IDs when forking sessions with `--session-id` combined with `--resume` or `--continue` and `--fork-session` - Fixed slow input history cycling and race condition that could overwrite text after message submission - Improved `/theme` command to open theme picker directly - Improved theme picker UI - Improved search UX across resume session, permissions, and plugins screens with a unified SearchBox component - [VSCode] Added tab icon badges showing pending permissions (blue) and unread completions (orange)

- Added Claude in Chrome (Beta) feature that works with the Chrome extension (https://claude.ai/chrome) to let you control your browser directly from Claude Code - Reduced terminal flickering - Added scannable QR code to mobile app tip for quick app downloads - Added loading indicator when resuming conversations for better feedback - Fixed `/context` command not respecting custom system prompts in non-interactive mode - Fixed order of consecutive Ctrl+K lines when pasting with Ctrl+Y - Improved @ mention file suggestion speed (~3× faster in git repositories) - Improved file suggestion performance in repos with `.ignore` or `.rgignore` files - Improved settings validation errors to be more prominent - Changed thinking toggle from Tab to Alt+T to avoid accidental triggers

- Added /config toggle to enable/disable prompt suggestions - Added `/settings` as an alias for the `/config` command - Fixed @ file reference suggestions incorrectly triggering when cursor is in the middle of a path - Fixed MCP servers from `.mcp.json` not loading when using `--dangerously-skip-permissions` - Fixed permission rules incorrectly rejecting valid bash commands containing shell glob patterns (e.g., `ls *.txt`, `for f in *.png`) - Bedrock: Environment variable `ANTHROPIC_BEDROCK_BASE_URL` is now respected for token counting and inference profile listing - New syntax highlighting engine for native build

- Added Enter key to accept and submit prompt suggestions immediately (tab still accepts for editing) - Added wildcard syntax `mcp__server__*` for MCP tool permissions to allow or deny all tools from a server - Added auto-update toggle for plugin marketplaces, allowing per-marketplace control over automatic updates - Added `current_usage` field to status line input, enabling accurate context window percentage calculations - Fixed input being cleared when processing queued commands while the user was typing - Fixed prompt suggestions replacing typed input when pressing Tab - Fixed diff view not updating when terminal is resized - Improved memory usage by 3x for large conversations - Improved resolution of stats screenshots copied to clipboard (Ctrl+S) for crisper images - Removed # shortcut for quick memory entry (tell Claude to edit your CLAUDE.md instead) - Fix thinking mode toggle in /config not persisting correctly - Improve UI for file creation permission dialog

- Minor bugfixes

- Fixed IME (Input Method Editor) support for languages like Chinese, Japanese, and Korean by correctly positioning the composition window at the cursor - Fixed a bug where disallowed MCP tools were visible to the model - Fixed an issue where steering messages could be lost while a subagent is working - Fixed Option+Arrow word navigation treating entire CJK (Chinese, Japanese, Korean) text sequences as a single word instead of navigating by word boundaries - Improved plan mode exit UX: show simplified yes/no dialog when exiting with empty or missing plan instead of throwing an error - Add support for enterprise managed settings. Contact your Anthropic account team to enable this feature.

- Thinking mode is now enabled by default for Opus 4.5 - Thinking mode configuration has moved to /config - Added search functionality to `/permissions` command with `/` keyboard shortcut for filtering rules by tool name - Show reason why autoupdater is disabled in `/doctor` - Fixed false "Another process is currently updating Claude" error when running `claude update` while another instance is already on the latest version - Fixed MCP servers from `.mcp.json` being stuck in pending state when running in non-interactive mode (`-p` flag or piped input) - Fixed scroll position resetting after deleting a permission rule in `/permissions` - Fixed word deletion (opt+delete) and word navigation (opt+arrow) not working correctly with non-Latin text such as Cyrillic, Greek, Arabic, Hebrew, Thai, and Chinese - Fixed `claude install --force` not bypassing stale lock files - Fixed consecutive @~/ file references in CLAUDE.md being incorrectly parsed due to markdown strikethrough interference - Windows: Fixed plugin MCP servers failing due to colons in log directory paths

- Added ability to switch models while writing a prompt using alt+p (linux, windows), option+p (macos). - Added context window information to status line input - Added `fileSuggestion` setting for custom `@` file search commands - Added `CLAUDE_CODE_SHELL` environment variable to override automatic shell detection (useful when login shell differs from actual working shell) - Fixed prompt not being saved to history when aborting a query with Escape - Fixed Read tool image handling to identify format from bytes instead of file extension

- Made auto-compacting instant - Agents and bash commands can run asynchronously and send messages to wake up the main agent - /stats now provides users with interesting CC stats, such as favorite model, usage graph, usage streak - Added named session support: use `/rename` to name sessions, `/resume <name>` in REPL or `claude --resume <name>` from the terminal to resume them - Added support for .claude/rules/`. See https://code.claude.com/docs/en/memory for details. - Added image dimension metadata when images are resized, enabling accurate coordinate mappings for large images - Fixed auto-loading .env when using native installer - Fixed `--system-prompt` being ignored when using `--continue` or `--resume` flags - Improved `/resume` screen with grouped forked sessions and keyboard shortcuts for preview (P) and rename (R) - VSCode: Added copy-to-clipboard button on code blocks and bash tool inputs - VSCode: Fixed extension not working on Windows ARM64 by falling back to x64 binary via emulation - Bedrock: Improve efficiency of token counting - Bedrock: Add support for `aws login` AWS Management Console credentials - Unshipped AgentOutputTool and BashOutputTool, in favor of a new unified TaskOutputTool

- Added "(Recommended)" indicator for multiple-choice questions, with the recommended option moved to the top of the list - Added `attribution` setting to customize commit and PR bylines (deprecates `includeCoAuthoredBy`) - Fixed duplicate slash commands appearing when ~/.claude is symlinked to a project directory - Fixed slash command selection not working when multiple commands share the same name - Fixed an issue where skill files inside symlinked skill directories could become circular symlinks - Fixed running versions getting removed because lock file incorrectly going stale - Fixed IDE diff tab not closing when rejecting file changes

- Reverted VSCode support for multiple terminal clients due to responsiveness issues.

- Added background agent support. Agents run in the background while you work - Added --disable-slash-commands CLI flag to disable all slash commands - Added model name to "Co-Authored-By" commit messages - Enabled "/mcp enable [server-name]" or "/mcp disable [server-name]" to quickly toggle all servers - Updated Fetch to skip summarization for pre-approved websites - VSCode: Added support for multiple terminal clients connecting to the IDE server simultaneously

- Added --agent CLI flag to override the agent setting for the current session - Added `agent` setting to configure main thread with a specific agent's system prompt, tool restrictions, and model - VS Code: Fixed .claude.json config file being read from incorrect location

- Pro users now have access to Opus 4.5 as part of their subscription! - Fixed timer duration showing "11m 60s" instead of "12m 0s" - Windows: Managed settings now prefer `C:\Program Files\ClaudeCode` if it exists. Support for `C:\ProgramData\ClaudeCode` will be removed in a future version.

- Added feedback input when rejecting plans, allowing users to tell Claude what to change - VSCode: Added streaming message support for real-time response display

- Added setting to enable/disable terminal progress bar (OSC 9;4) - VSCode Extension: Added support for VS Code's secondary sidebar (VS Code 1.97+), allowing Claude Code to be displayed in the right sidebar while keeping the file explorer on the left. Requires setting sidebar as Preferred Location in the config.

- Fixed proxy DNS resolution being forced on by default. Now opt-in via `CLAUDE_CODE_PROXY_RESOLVES_HOSTS=true` environment variable - Fixed keyboard navigation becoming unresponsive when holding down arrow keys in memory location selector - Improved AskUserQuestion tool to auto-submit single-select questions on the last question, eliminating the extra review screen for simple question flows - Improved fuzzy matching for `@` file suggestions with faster, more accurate results

- Hooks: Enable PermissionRequest hooks to process 'always allow' suggestions and apply permission updates - Fix issue with excessive iTerm notifications

- Fixed duplicate message display when starting Claude with a command line argument - Fixed `/usage` command progress bars to fill up as usage increases (instead of showing remaining percentage) - Fixed image pasting not working on Linux systems running Wayland (now falls back to wl-paste when xclip is unavailable) - Permit some uses of `$!` in bash commands

- Added Opus 4.5! https://www.anthropic.com/news/claude-opus-4-5 - Introducing Claude Code for Desktop: https://claude.com/download - To give you room to try out our new model, we've updated usage limits for Claude Code users. See the Claude Opus 4.5 blog for full details - Pro users can now purchase extra usage for access to Opus 4.5 in Claude Code - Plan Mode now builds more precise plans and executes more thoroughly - Usage limit notifications now easier to understand - Switched `/usage` back to "% used" - Fixed handling of thinking errors - Fixed performance regression

- Fixed bug preventing calling MCP tools that have nested references in their input schemas - Silenced a noisy but harmless error during upgrades - Improved ultrathink text display - Improved clarity of 5-hour session limit warning message

- Added readline-style ctrl-y for pasting deleted text - Improved clarity of usage limit warning message - Fixed handling of subagent permissions

- Improved error messages and validation for `claude --teleport` - Improved error handling in `/usage` - Fixed race condition with history entry not getting logged at exit - Fixed Vertex AI configuration not being applied from `settings.json`

- Fixed image files being reported with incorrect media type when format cannot be detected from metadata

- Added support for Microsoft Foundry! See https://code.claude.com/docs/en/azure-ai-foundry - Added `PermissionRequest` hook to automatically approve or deny tool permission requests with custom logic - Send background tasks to Claude Code on the web by starting a message with `&`

- Added `permissionMode` field for custom agents - Added `tool_use_id` field to `PreToolUseHookInput` and `PostToolUseHookInput` types - Added skills frontmatter field to declare skills to auto-load for subagents - Added the `SubagentStart` hook event - Fixed nested `CLAUDE.md` files not loading when @-mentioning files - Fixed duplicate rendering of some messages in the UI - Fixed some visual flickers - Fixed NotebookEdit tool inserting cells at incorrect positions when cell IDs matched the pattern `cell-N`

- Added `agent_id` and `agent_transcript_path` fields to `SubagentStop` hooks.

- Added `model` parameter to prompt-based stop hooks, allowing users to specify a custom model for hook evaluation - Fixed slash commands from user settings being loaded twice, which could cause rendering issues - Fixed incorrect labeling of user settings vs project settings in command descriptions - Fixed crash when plugin command hooks timeout during execution - Fixed: Bedrock users no longer see duplicate Opus entries in the /model picker when using `--model haiku` - Fixed broken security documentation links in trust dialogs and onboarding - Fixed issue where pressing ESC to close the diff modal would also interrupt the model - ctrl-r history search landing on a slash command no longer cancels the search - SDK: Support custom timeouts for hooks - Allow more safe git commands to run without approval - Plugins: Added support for sharing and installing output styles - Teleporting a session from web will automatically set the upstream branch

- Fixed how idleness is computed for notifications - Hooks: Added matcher values for Notification hook events - Output Styles: Added `keep-coding-instructions` option to frontmatter

- Fixed: DISABLE_AUTOUPDATER environment variable now properly disables package manager update notifications - Fixed queued messages being incorrectly executed as bash commands - Fixed input being lost when typing while a queued message is processed

- Improve fuzzy search results when searching commands - Improved VS Code extension to respect `chat.fontSize` and `chat.fontFamily` settings throughout the entire UI, and apply font changes immediately without requiring reload - Added `CLAUDE_CODE_EXIT_AFTER_STOP_DELAY` environment variable to automatically exit SDK mode after a specified idle duration, useful for automated workflows and scripts - Migrated `ignorePatterns` from project config to deny permissions in the localSettings. - Fixed menu navigation getting stuck on items with empty string or other falsy values (e.g., in the `/hooks` menu)

- VSCode Extension: Added setting to configure the initial permission mode for new conversations - Improved file path suggestion performance with native Rust-based fuzzy finder - Fixed infinite token refresh loop that caused MCP servers with OAuth (e.g., Slack) to hang during connection - Fixed memory crash when reading or writing large files (especially base64-encoded images)

- Native binary installs now launch quicker. - Fixed `claude doctor` incorrectly detecting Homebrew vs npm-global installations by properly resolving symlinks - Fixed `claude mcp serve` exposing tools with incompatible outputSchemas

- Un-deprecate output styles based on community feedback - Added `companyAnnouncements` setting for displaying announcements on startup - Fixed hook progress messages not updating correctly during PostToolUse hook execution

- Windows: native installation uses shift+tab as shortcut for mode switching, instead of alt+m - Vertex: add support for Web Search on supported models - VSCode: Adding the respectGitIgnore configuration to include .gitignored files in file searches (defaults to true) - Fixed a bug with subagents and MCP servers related to "Tool names must be unique" error - Fixed issue causing `/compact` to fail with `prompt_too_long` by making it respect existing compact boundaries - Fixed plugin uninstall not removing plugins

- Added helpful hint to run `security unlock-keychain` when encountering API key errors on macOS with locked keychain - Added `allowUnsandboxedCommands` sandbox setting to disable the dangerouslyDisableSandbox escape hatch at policy level - Added `disallowedTools` field to custom agent definitions for explicit tool blocking - Added prompt-based stop hooks - VSCode: Added respectGitIgnore configuration to include .gitignored files in file searches (defaults to true) - Enabled SSE MCP servers on native build - Deprecated output styles. Review options in `/output-style` and use --system-prompt-file, --system-prompt, --append-system-prompt, CLAUDE.md, or plugins instead - Removed support for custom ripgrep configuration, resolving an issue where Search returns no results and config discovery fails - Fixed Explore agent creating unwanted .md investigation files during codebase exploration - Fixed a bug where `/context` would sometimes fail with "max_tokens must be greater than thinking.budget_tokens" error message - Fixed `--mcp-config` flag to correctly override file-based MCP configurations - Fixed bug that saved session permissions to local settings - Fixed MCP tools not being available to sub-agents - Fixed hooks and plugins not executing when using --dangerously-skip-permissions flag - Fixed delay when navigating through typeahead suggestions with arrow keys - VSCode: Restored selection indicator in input footer showing current file or code selection status

- Plan mode: introduced new Plan subagent - Subagents: claude can now choose to resume subagents - Subagents: claude can dynamically choose the model used by its subagents - SDK: added --max-budget-usd flag - Discovery of custom slash commands, subagents, and output styles no longer respects .gitignore - Stop `/terminal-setup` from adding backslash to `Shift + Enter` in VS Code - Add branch and tag support for git-based plugins and marketplaces using fragment syntax (e.g., `owner/repo#branch`) - Fixed a bug where macOS permission prompts would show up upon initial launch when launching from home directory - Various other bug fixes

- New UI for permission prompts - Added current branch filtering and search to session resume screen for easier navigation - Fixed directory @-mention causing "No assistant message found" error - VSCode Extension: Add config setting to include .gitignored files in file searches - VSCode Extension: Bug fixes for unrelated 'Warmup' conversations, and configuration/settings occasionally being reset to defaults

- Removed legacy SDK entrypoint. Please migrate to @anthropic-ai/claude-agent-sdk for future SDK updates: https://platform.claude.com/docs/en/agent-sdk/migration-guide

- Fixed a bug where project-level skills were not loading when --setting-sources 'project' was specified - Claude Code Web: Support for Web -> CLI teleport - Sandbox: Releasing a sandbox mode for the BashTool on Linux & Mac - Bedrock: Display awsAuthRefresh output when auth is required

- Fixed content layout shift when scrolling through slash commands - IDE: Add toggle to enable/disable thinking. - Fix bug causing duplicate permission prompts with parallel tool calls - Add support for enterprise managed MCP allowlist and denylist

- Support MCP `structuredContent` field in tool responses - Added an interactive question tool - Claude will now ask you questions more often in plan mode - Added Haiku 4.5 as a model option for Pro users - Fixed an issue where queued commands don't have access to previous messages' output

- Added support for Claude Skills

- Auto-background long-running bash commands instead of killing them. Customize with BASH_DEFAULT_TIMEOUT_MS - Fixed a bug where Haiku was unnecessarily called in print mode

- Added Haiku 4.5 to model selector! - Haiku 4.5 automatically uses Sonnet in plan mode, and Haiku for execution (i.e. SonnetPlan by default) - 3P (Bedrock and Vertex) are not automatically upgraded yet. Manual upgrading can be done through setting `ANTHROPIC_DEFAULT_HAIKU_MODEL` - Introducing the Explore subagent. Powered by Haiku it'll search through your codebase efficiently to save context! - OTEL: support HTTP_PROXY and HTTPS_PROXY - `CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC` now disables release notes fetching

- Fixed bug with resuming where previously created files needed to be read again before writing - Fixed bug with `-p` mode where @-mentioned files needed to be read again before writing

- Fix @-mentioning MCP servers to toggle them on/off - Improve permission checks for bash with inline env vars - Fix ultrathink + thinking toggle - Reduce unnecessary logins - Document --system-prompt - Several improvements to rendering - Plugins UI polish

- Fixed `/plugin` not working on native build

- **Plugin System Released**: Extend Claude Code with custom commands, agents, hooks, and MCP servers from marketplaces - `/plugin install`, `/plugin enable/disable`, `/plugin marketplace` commands for plugin management - Repository-level plugin configuration via `extraKnownMarketplaces` for team collaboration - `/plugin validate` command for validating plugin structure and configuration - Plugin announcement blog post at https://www.anthropic.com/news/claude-code-plugins - Plugin documentation available at https://code.claude.com/docs/en/plugins - Comprehensive error messages and diagnostics via `/doctor` command - Avoid flickering in `/model` selector - Improvements to `/help` - Avoid mentioning hooks in `/resume` summaries - Changes to the "verbose" setting in `/config` now persist across sessions

- Reduced system prompt size by 1.4k tokens - IDE: Fixed keyboard shortcuts and focus issues for smoother interaction - Fixed Opus fallback rate limit errors appearing incorrectly - Fixed /add-dir command selecting wrong default tab

- Rewrote terminal renderer for buttery smooth UI - Enable/disable MCP servers by @mentioning, or in /mcp - Added tab completion for shell commands in bash mode - PreToolUse hooks can now modify tool inputs - Press Ctrl-G to edit your prompt in your system's configured text editor - Fixes for bash permission checks with environment variables in the command

- Fix regression where bash backgrounding stopped working

- Update Bedrock default Sonnet model to `global.anthropic.claude-sonnet-4-5-20250929-v1:0` - IDE: Add drag-and-drop support for files and folders in chat - /context: Fix counting for thinking blocks - Improve message rendering for users with light themes on dark terminals - Remove deprecated .claude.json allowedTools, ignorePatterns, env, and todoFeatureEnabled config options (instead, configure these in your settings.json)

- IDE: Fix IME unintended message submission with Enter and Tab - IDE: Add "Open in Terminal" link in login screen - Fix unhandled OAuth expiration 401 API errors - SDK: Added SDKUserMessageReplay.isReplay to prevent duplicate messages

- Skip Sonnet 4.5 default model setting change for Bedrock and Vertex - Various bug fixes and presentation improvements

- New native VS Code extension - Fresh coat of paint throughout the whole app - /rewind a conversation to undo code changes - /usage command to see plan limits - Tab to toggle thinking (sticky across sessions) - Ctrl-R to search history - Unshipped claude config command - Hooks: Reduced PostToolUse 'tool_use' ids were found without 'tool_result' blocks errors - SDK: The Claude Code SDK is now the Claude Agent SDK - Add subagents dynamically with `--agents` flag

- Enable /context command for Bedrock and Vertex - Add mTLS support for HTTP-based OpenTelemetry exporters

- Set `CLAUDE_BASH_NO_LOGIN` environment variable to 1 or true to to skip login shell for BashTool - Fix Bedrock and Vertex environment variables evaluating all strings as truthy - No longer inform Claude of the list of allowed tools when permission is denied - Fixed security vulnerability in Bash tool permission checks - Improved VSCode extension performance for large files

- Bash permission rules now support output redirections when matching (e.g., `Bash(python:*)` matches `python script.py > output.txt`) - Fixed thinking mode triggering on negation phrases like "don't think" - Fixed rendering performance degradation during token streaming - Added SlashCommand tool, which enables Claude to invoke your slash commands. https://code.claude.com/docs/en/slash-commands#SlashCommand-tool - Enhanced BashTool environment snapshot logging - Fixed a bug where resuming a conversation in headless mode would sometimes enable thinking unnecessarily - Migrated --debug logging to a file, to enable easy tailing & filtering

- Fix input lag during typing, especially noticeable with large prompts - Improved VSCode extension command registry and sessions dialog user experience - Enhanced sessions dialog responsiveness and visual feedback - Fixed IDE compatibility issue by removing worktree support check - Fixed security vulnerability where Bash tool permission checks could be bypassed using prefix matching

- Fix Windows issue where process visually freezes on entering interactive mode - Support dynamic headers for MCP servers via headersHelper configuration - Fix thinking mode not working in headless sessions - Fix slash commands now properly update allowed tools instead of replacing them

- Add Ctrl-R history search to recall previous commands like bash/zsh - Fix input lag while typing, especially on Windows - Add sed command to auto-allowed commands in acceptEdits mode - Fix Windows PATH comparison to be case-insensitive for drive letters - Add permissions management hint to /add-dir output

- Improve thinking mode display with enhanced visual effects - Type /t to temporarily disable thinking mode in your prompt - Improve path validation for glob and grep tools - Show condensed output for post-tool hooks to reduce visual clutter - Fix visual feedback when loading state completes - Improve UI consistency for permission request dialogs

- Deprecated piped input in interactive mode - Move Ctrl+R keybinding for toggling transcript to Ctrl+O

- Transcript mode (Ctrl+R): Added the model used to generate each assistant message - Addressed issue where some Claude Max users were incorrectly recognized as Claude Pro users - Hooks: Added systemMessage support for SessionEnd hooks - Added `spinnerTipsEnabled` setting to disable spinner tips - IDE: Various improvements and bug fixes

- /model now validates provided model names - Fixed Bash tool crashes caused by malformed shell syntax parsing

- /terminal-setup command now supports WezTerm - MCP: OAuth tokens now proactively refresh before expiration - Fixed reliability issues with background Bash processes

- SDK: Added partial message streaming support via `--include-partial-messages` CLI flag

- Windows: Fixed path permission matching to consistently use POSIX format (e.g., `Read(//c/Users/...)`)

- Settings: /doctor now validates permission rule syntax and suggests corrections

- Vertex: add support for global endpoints for supported models - /memory command now allows direct editing of all imported memory files - SDK: Add custom tools as callbacks - Added /todos command to list current todo items

- Windows: Add alt + v shortcut for pasting images from clipboard - Support NO_PROXY environment variable to bypass proxy for specified hostnames and IPs

- Settings file changes take effect immediately - no restart required

- Fixed issue causing "OAuth authentication is currently not supported" - Status line input now includes `exceeds_200k_tokens` - Fixed incorrect usage tracking in /cost. - Introduced `ANTHROPIC_DEFAULT_SONNET_MODEL` and `ANTHROPIC_DEFAULT_OPUS_MODEL` for controlling model aliases opusplan, opus, and sonnet. - Bedrock: Updated default Sonnet model to Sonnet 4

- Added /context to help users self-serve debug context issues - SDK: Added UUID support for all SDK messages - SDK: Added `--replay-user-messages` to replay user messages back to stdout

- Status line input now includes session cost info - Hooks: Introduced SessionEnd hook

- Fix tool_use/tool_result id mismatch error when network is unstable - Fix Claude sometimes ignoring real-time steering when wrapping up a task - @-mention: Add ~/.claude/\* files to suggestions for easier agent, output style, and slash command editing - Use built-in ripgrep by default; to opt out of this behavior, set USE_BUILTIN_RIPGREP=0

- @-mention: Support files with spaces in path - New shimmering spinner

- SDK: Add request cancellation support - SDK: New additionalDirectories option to search custom paths, improved slash command processing - Settings: Validation prevents invalid fields in .claude/settings.json files - MCP: Improve tool name consistency - Bash: Fix crash when Claude tries to automatically read large files

- Released output styles, including new built-in educational output styles "Explanatory" and "Learning". Docs: https://code.claude.com/docs/en/output-styles - Agents: Fix custom agent loading when agent files are unparsable

- UI improvements: Fix text contrast for custom subagent colors and spinner rendering issues

- Bash tool: Fix heredoc and multiline string escaping, improve stderr redirection handling - SDK: Add session support and permission denial tracking - Fix token limit errors in conversation summarization - Opus Plan Mode: New setting in `/model` to run Opus only in plan mode, Sonnet otherwise

- MCP: Support multiple config files with `--mcp-config file1.json file2.json` - MCP: Press Esc to cancel OAuth authentication flows - Bash: Improved command validation and reduced false security warnings - UI: Enhanced spinner animations and status line visual hierarchy - Linux: Added support for Alpine and musl-based distributions (requires separate ripgrep installation)

- Ask permissions: have Claude Code always ask for confirmation to use specific tools with /permissions

- Background commands: (Ctrl-b) to run any Bash command in the background so Claude can keep working (great for dev servers, tailing logs, etc.) - Customizable status line: add your terminal prompt to Claude Code with /statusline

- Performance: Optimized message rendering for better performance with large contexts - Windows: Fixed native file search, ripgrep, and subagent functionality - Added support for @-mentions in slash command arguments

- Upgraded Opus to version 4.1

- Fix incorrect model names being used for certain commands like `/pr-comments` - Windows: improve permissions checks for allow / deny tools and project trust. This may create a new project entry in `.claude.json` - manually merge the history field if desired. - Windows: improve sub-process spawning to eliminate "No such file or directory" when running commands like pnpm - Enhanced /doctor command with CLAUDE.md and MCP tool context for self-serve debugging - SDK: Added canUseTool callback support for tool confirmation - Added `disableAllHooks` setting - Improved file suggestions performance in large repos

- IDE: Fixed connection stability issues and error handling for diagnostics - Windows: Fixed shell environment setup for users without .bashrc files

- Agents: Added model customization support - you can now specify which model an agent should use - Agents: Fixed unintended access to the recursive agent tool - Hooks: Added systemMessage field to hook JSON output for displaying warnings and context - SDK: Fixed user input tracking across multi-turn conversations - Added hidden files to file search and @-mention suggestions

- Windows: Fixed file search, @agent mentions, and custom slash commands functionality

- Added @-mention support with typeahead for custom agents. @<your-custom-agent> to invoke it - Hooks: Added SessionStart hook for new session initialization - /add-dir command now supports typeahead for directory paths - Improved network connectivity check reliability

- Transcript mode (Ctrl+R): Changed Esc to exit transcript mode rather than interrupt - Settings: Added `--settings` flag to load settings from a JSON file - Settings: Fixed resolution of settings files paths that are symlinks - OTEL: Fixed reporting of wrong organization after authentication changes - Slash commands: Fixed permissions checking for allowed-tools with Bash - IDE: Added support for pasting images in VSCode MacOS using ⌘+V - IDE: Added `CLAUDE_CODE_AUTO_CONNECT_IDE=false` for disabling IDE auto-connection - Added `CLAUDE_CODE_SHELL_PREFIX` for wrapping Claude and user-provided shell commands run by Claude Code

- You can now create custom subagents for specialized tasks! Run /agents to get started

- SDK: Added tool confirmation support with canUseTool callback - SDK: Allow specifying env for spawned process - Hooks: Exposed PermissionDecision to hooks (including "ask") - Hooks: UserPromptSubmit now supports additionalContext in advanced JSON output - Fixed issue where some Max users that specified Opus would still see fallback to Sonnet

- Added support for reading PDFs - MCP: Improved server health status display in 'claude mcp list' - Hooks: Added CLAUDE_PROJECT_DIR env var for hook commands

- Added support for specifying a model in slash commands - Improved permission messages to help Claude understand allowed tools - Fix: Remove trailing newlines from bash output in terminal wrapping

- Windows: Enabled shift+tab for mode switching on versions of Node.js that support terminal VT mode - Fixes for WSL IDE detection - Fix an issue causing awsRefreshHelper changes to .aws directory not to be picked up

- Clarified knowledge cutoff for Opus 4 and Sonnet 4 models - Windows: fixed Ctrl+Z crash - SDK: Added ability to capture error logging - Add --system-prompt-file option to override system prompt in print mode

- Hooks: Added UserPromptSubmit hook and the current working directory to hook inputs - Custom slash commands: Added argument-hint to frontmatter - Windows: OAuth uses port 45454 and properly constructs browser URL - Windows: mode switching now uses alt + m, and plan mode renders properly - Shell: Switch to in-memory shell snapshot to fix file-related errors

- Updated @-mention file truncation from 100 lines to 2000 lines - Add helper script settings for AWS token refresh: awsAuthRefresh (for foreground operations like aws sso login) and awsCredentialExport (for background operation with STS-like response).

- Added support for MCP server instructions

- Added support for native Windows (requires Git for Windows) - Added support for Bedrock API keys through environment variable AWS_BEARER_TOKEN_BEDROCK - Settings: /doctor can now help you identify and fix invalid setting files - `--append-system-prompt` can now be used in interactive mode, not just --print/-p. - Increased auto-compact warning threshold from 60% to 80% - Fixed an issue with handling user directories with spaces for shell snapshots - OTEL resource now includes os.type, os.version, host.arch, and wsl.version (if running on Windows Subsystem for Linux) - Custom slash commands: Fixed user-level commands in subdirectories - Plan mode: Fixed issue where rejected plan from sub-task would get discarded

- Fixed a bug in v1.0.45 where the app would sometimes freeze on launch - Added progress messages to Bash tool based on the last 5 lines of command output - Added expanding variables support for MCP server configuration - Moved shell snapshots from /tmp to ~/.claude for more reliable Bash tool calls - Improved IDE extension path handling when Claude Code runs in WSL - Hooks: Added a PreCompact hook - Vim mode: Added c, f/F, t/T

- Redesigned Search (Grep) tool with new tool input parameters and features - Disabled IDE diffs for notebook files, fixing "Timeout waiting after 1000ms" error - Fixed config file corruption issue by enforcing atomic writes - Updated prompt input undo to Ctrl+\_ to avoid breaking existing Ctrl+U behavior, matching zsh's undo shortcut - Stop Hooks: Fixed transcript path after /clear and fixed triggering when loop ends with tool call - Custom slash commands: Restored namespacing in command names based on subdirectories. For example, .claude/commands/frontend/component.md is now /frontend:component, not /component.

- New /export command lets you quickly export a conversation for sharing - MCP: resource_link tool results are now supported - MCP: tool annotations and tool titles now display in /mcp view - Changed Ctrl+Z to suspend Claude Code. Resume by running `fg`. Prompt input undo is now Ctrl+U.

- Fixed a bug where the theme selector was saving excessively - Hooks: Added EPIPE system error handling

- Added tilde (`~`) expansion support to `/add-dir` command

- Hooks: Split Stop hook triggering into Stop and SubagentStop - Hooks: Enabled optional timeout configuration for each command - Hooks: Added "hook_event_name" to hook input - Fixed a bug where MCP tools would display twice in tool list - New tool parameters JSON for Bash tool in `tool_decision` event

- Fixed a bug causing API connection errors with UNABLE_TO_GET_ISSUER_CERT_LOCALLY if `NODE_EXTRA_CA_CERTS` was set

- New Active Time metric in OpenTelemetry logging

- Released hooks. Special thanks to community input in https://github.com/anthropics/claude-code/issues/712. Docs: https://code.claude.com/docs/en/hooks

- Remove ability to set `Proxy-Authorization` header via ANTHROPIC_AUTH_TOKEN or apiKeyHelper

- Web search now takes today's date into context - Fixed a bug where stdio MCP servers were not terminating properly on exit

- Added support for MCP OAuth Authorization Server discovery

- Fixed a memory leak causing a MaxListenersExceededWarning message to appear

- Improved logging functionality with session ID support - Added prompt input undo functionality (Ctrl+Z and vim 'u' command) - Improvements to plan mode

- Updated loopback config for litellm - Added forceLoginMethod setting to bypass login selection screen

- Fixed a bug where ~/.claude.json would get reset when file contained invalid JSON

- Custom slash commands: Run bash output, @-mention files, enable thinking with thinking keywords - Improved file path autocomplete with filename matching - Added timestamps in Ctrl-r mode and fixed Ctrl-c handling - Enhanced jq regex support for complex filters with pipes and select

- Improved CJK character support in cursor navigation and rendering

- Slash commands: Fix selector display during history navigation - Resizes images before upload to prevent API size limit errors - Added XDG_CONFIG_HOME support to configuration directory - Performance optimizations for memory usage - New attributes (terminal.type, language) in OpenTelemetry logging

- Streamable HTTP MCP servers are now supported - Remote MCP servers (SSE and HTTP) now support OAuth - MCP resources can now be @-mentioned - /resume slash command to switch conversations within Claude Code

- Slash commands: moved "project" and "user" prefixes to descriptions - Slash commands: improved reliability for command discovery - Improved support for Ghostty - Improved web search reliability

- Improved /mcp output - Fixed a bug where settings arrays got overwritten instead of merged

- Released TypeScript SDK: import @anthropic-ai/claude-code to get started - Released Python SDK: pip install claude-code-sdk to get started

- SDK: Renamed `total_cost` to `total_cost_usd`

- Improved editing of files with tab-based indentation - Fix for tool_use without matching tool_result errors - Fixed a bug where stdio MCP server processes would linger after quitting Claude Code

- Added --add-dir CLI argument for specifying additional working directories - Added streaming input support without require -p flag - Improved startup performance and session storage performance - Added CLAUDE_BASH_MAINTAIN_PROJECT_WORKING_DIR environment variable to freeze working directory for bash commands - Added detailed MCP server tools display (/mcp) - MCP authentication and permission improvements - Added auto-reconnection for MCP SSE connections on disconnect - Fixed issue where pasted content was lost when dialogs appeared

- We now emit messages from sub-tasks in -p mode (look for the parent_tool_use_id property) - Fixed crashes when the VS Code diff tool is invoked multiple times quickly - MCP server list UI improvements - Update Claude Code process title to display "claude" instead of "node"

- Claude Code can now also be used with a Claude Pro subscription - Added /upgrade for smoother switching to Claude Max plans - Improved UI for authentication from API keys and Bedrock/Vertex/external auth tokens - Improved shell configuration error handling - Improved todo list handling during compaction

- Added markdown table support - Improved streaming performance

- Fixed Vertex AI region fallback when using CLOUD_ML_REGION - Increased default otel interval from 1s -> 5s - Fixed edge cases where MCP_TIMEOUT and MCP_TOOL_TIMEOUT weren't being respected - Fixed a regression where search tools unnecessarily asked for permissions - Added support for triggering thinking non-English languages - Improved compacting UI

- Renamed /allowed-tools -> /permissions - Migrated allowedTools and ignorePatterns from .claude.json -> settings.json - Deprecated claude config commands in favor of editing settings.json - Fixed a bug where --dangerously-skip-permissions sometimes didn't work in --print mode - Improved error handling for /install-github-app - Bugfixes, UI polish, and tool reliability improvements

- Improved edit reliability for tab-indented files - Respect CLAUDE_CONFIG_DIR everywhere - Reduced unnecessary tool permission prompts - Added support for symlinks in @file typeahead - Bugfixes, UI polish, and tool reliability improvements

- Fixed a bug where MCP tool errors weren't being parsed correctly

- Added `DISABLE_INTERLEAVED_THINKING` to give users the option to opt out of interleaved thinking. - Improved model references to show provider-specific names (Sonnet 3.7 for Bedrock, Sonnet 4 for Console) - Updated documentation links and OAuth process descriptions

- Claude Code is now generally available - Introducing Sonnet 4 and Opus 4 models

- Breaking change: Bedrock ARN passed to `ANTHROPIC_MODEL` or `ANTHROPIC_SMALL_FAST_MODEL` should no longer contain an escaped slash (specify `/` instead of `%2F`) - Removed `DEBUG=true` in favor of `ANTHROPIC_LOG=debug`, to log all requests

- Breaking change: --print JSON output now returns nested message objects, for forwards-compatibility as we introduce new metadata fields - Introduced settings.cleanupPeriodDays - Introduced CLAUDE_CODE_API_KEY_HELPER_TTL_MS env var - Introduced --debug mode

- You can now send messages to Claude while it works to steer Claude in real-time - Introduced BASH_DEFAULT_TIMEOUT_MS and BASH_MAX_TIMEOUT_MS env vars - Fixed a bug where thinking was not working in -p mode - Fixed a regression in /cost reporting - Deprecated MCP wizard interface in favor of other MCP commands - Lots of other bugfixes and improvements

- CLAUDE.md files can now import other files. Add @path/to/file.md to ./CLAUDE.md to load additional files on launch

- MCP SSE server configs can now specify custom headers - Fixed a bug where MCP permission prompt didn't always show correctly

- Claude can now search the web - Moved system & account status to /status - Added word movement keybindings for Vim - Improved latency for startup, todo tool, and file edits

- Improved thinking triggering reliability - Improved @mention reliability for images and folders - You can now paste multiple large chunks into one prompt

- Fixed a crash caused by a stack overflow error - Made db storage optional; missing db support disables --continue and --resume

- Fixed an issue where auto-compact was running twice

- Claude Code can now also be used with a Claude Max subscription (https://claude.ai/upgrade)

- Resume conversations from where you left off from with "claude --continue" and "claude --resume" - Claude now has access to a Todo list that helps it stay on track and be more organized

- Added support for --disallowedTools - Renamed tools for consistency: LSTool -> LS, View -> Read, etc.

- Hit Enter to queue up additional messages while Claude is working - Drag in or copy/paste image files directly into the prompt - @-mention files to directly add them to context - Run one-off MCP servers with `claude --mcp-config <path-to-file>` - Improved performance for filename auto-complete

- Added support for refreshing dynamically generated API keys (via apiKeyHelper), with a 5 minute TTL - Task tool can now perform writes and run bash commands

- Updated spinner to indicate tokens loaded and tool usage

- Network commands like curl are now available for Claude to use - Claude can now run multiple web queries in parallel - Pressing ESC once immediately interrupts Claude in Auto-accept mode

- Fixed UI glitches with improved Select component behavior - Enhanced terminal output display with better text truncation logic

- Shared project permission rules can be saved in .claude/settings.json

- Print mode (-p) now supports streaming output via --output-format=stream-json - Fixed issue where pasting could trigger memory or bash mode unexpectedly

- Fixed an issue where MCP tools were loaded twice, which caused tool call errors

- Navigate menus with vim-style keys (j/k) or bash/emacs shortcuts (Ctrl+n/p) for faster interaction - Enhanced image detection for more reliable clipboard paste functionality - Fixed an issue where ESC key could crash the conversation history selector

- Copy+paste images directly into your prompt - Improved progress indicators for bash and fetch tools - Bugfixes for non-interactive mode (-p)

- Quickly add to Memory by starting your message with '#' - Press ctrl+r to see full output for long tool results - Added support for MCP SSE transport

- New web fetch tool lets Claude view URLs that you paste in - Fixed a bug with JPEG detection

- New MCP "project" scope now allows you to add MCP servers to .mcp.json files and commit them to your repository

- Previous MCP server scopes have been renamed: previous "project" scope is now "local" and "global" scope is now "user"

- Press Tab to auto-complete file and folder names - Press Shift + Tab to toggle auto-accept for file edits - Automatic conversation compaction for infinite conversation length (toggle with /config)

- Ask Claude to make a plan with thinking mode: just say 'think' or 'think harder' or even 'ultrathink'

- MCP server startup timeout can now be configured via MCP_TIMEOUT environment variable - MCP server startup no longer blocks the app from starting up

- New /release-notes command lets you view release notes at any time - `claude config add/remove` commands now accept multiple values separated by commas or spaces

- Import MCP servers from Claude Desktop with `claude mcp add-from-claude-desktop` - Add MCP servers as JSON strings with `claude mcp add-json <n> <json>`

- Vim bindings for text input - enable with /vim or /config

- Interactive MCP setup wizard: Run "claude mcp add" to add MCP servers with a step-by-step interface - Fix for some PersistentShell issues

- Custom slash commands: Markdown files in .claude/commands/ directories now appear as custom slash commands to insert prompts into your conversation - MCP debug mode: Run with --mcp-debug flag to get more information about MCP server errors

- Added ANSI color theme for better terminal compatibility - Fixed issue where slash command arguments weren't being sent properly - (Mac-only) API keys are now stored in macOS Keychain

- New /approved-tools command for managing tool permissions - Word-level diff display for improved code readability - Fuzzy matching for slash commands

- Fuzzy matching for /commands

## New Features - Windows sandbox runs can now enforce proxy-only networking with OS-level egress rules, instead of relying on environment variables alone. (#12220) - App-server clients can now start ChatGPT sign-in with a device code flow, which helps when browser callback login is unreliable or unavailable. (#15525) - `codex exec` now supports the prompt-plus-stdin workflow, so you can pipe input and still pass a separate prompt on the command line. (#15917) - Custom model providers can now fetch and refresh short-lived bearer tokens dynamically, instead of being limited to static credentials from config or environment variables. (#16286, #16287, #16288) ## Bug Fixes - Project-local `.codex` files are now protected even on first creation, closing a gap where the initial write could bypass normal approval checks. (#15067) - Linux sandbox launches are more reliable because Codex once again finds a trusted system `bwrap` on normal multi-entry `PATH`s. (#15791, #15973) - The app-server-backed TUI regained several missing workflows: hook notifications replay correctly, `/copy` and `/resume <name>` work again, `/agent` no longer shows stale threads, and the skills picker scrolls past the first page. (#16013, #16021, #16050, #16014, #16109, #16110) - MCP startup is more robust: local servers get a longer startup window, and failed handshakes surface warnings in the TUI again instead of looking like clean startups. (#16080, #16041) - On Windows, `apply_patch` is less likely to fail because it no longer adds redundant writable roots that could trigger unnecessary ACL churn. (#16030) ## Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.117.0...rust-v0.118.0 - #15891 [plugins] Polish tool suggest prompts. @mzeng-openai - #15791 fix: resolve bwrap from trusted PATH entry @viyatb-oai - #15900 skills: remove unused skill permission metadata @bolinfest - #15811 app-server: Split transport module @euroelessar - #15067 Protect first-time project .codex creation across Linux and macOS sandboxes @rreichel3-oai - #15903 [codex] import token_data from codex-login directly @bolinfest - #15897 sandboxing: use OsString for SandboxCommand.program @bolinfest - #15910 docs: update AGENTS.md to discourage adding code to codex-core @bolinfest - #15898 chore: move bwrap config helpers into dedicated module @viyatb-oai - #15906 chore: remove skill metadata from command approval payloads @bolinfest - #15909 fix(network-proxy): fail closed on network-proxy DNS lookup errors @viyatb-oai - #14495 Preserve bazel repository cache in github actions @siggisim - #15522 bazel: re-organize bazelrc @sluongng - #15923 codex-tools: extract shared tool schema parsing @bolinfest - #15918 permissions: remove macOS seatbelt extension profiles @bolinfest - #12220 feat(windows-sandbox): add network proxy support @viyatb-oai - #15931 fix: make MACOS_DEFAULT_PREFERENCES_POLICY part of MACOS_SEATBELT_BASE_POLICY @bolinfest - #15933 fix: use matrix.target instead of matrix.os for actions/cache build action @bolinfest - #15928 codex-tools: extract MCP schema adapters @bolinfest - #15948 fix: increase timeout for rust-ci to 45 minutes for now @bolinfest - #15921 [app-server-protocol] introduce generic ClientResponse for app-server-protocol @rhan-oai - #15120 chore: refactor network permissions to use explicit domain and unix socket rule maps @celia-oai - #15525 Add ChatGPT device-code login to app server @daniel-oai - #15876 chore: drop useless stuff @jif-oai - #15954 chore: move pty and windows sandbox to Rust 2024 @bolinfest - #15986 feat: spawn v2 make task name as mandatory @jif-oai - #16000 Use codex-utils-template for login error page @jif-oai - #16001 Use codex-utils-template for review prompts @jif-oai - #15998 Use codex-utils-template for sandbox mode prompts @jif-oai - #15995 Use codex-utils-template for collaboration mode presets @jif-oai - #15996 Use codex-utils-template for search tool descriptions @jif-oai - #15999 Use codex-utils-template for review exit XML @jif-oai - #15985 feat: spawn v2 as inter agent communication @jif-oai - #15973 fix(sandbox): fix bwrap lookup for multi-entry PATH @viyatb-oai - #15944 codex-tools: extract dynamic tool adapters @bolinfest - #15955 ci: add Bazel clippy workflow for codex-rs @bolinfest - #15953 codex-tools: introduce named tool definitions @bolinfest - #16027 fix: fix Windows CI regression introduced in #15999 @bolinfest - #16036 fix: disable plugins in SDK integration tests @bolinfest - #15946 Normalize /mcp tool grouping for hyphenated server names @pakrym-oai - #16035 plugins: Clean up stale curated plugin sync temp dirs and add sync metrics @xl-openai - #15934 Add usage-based business plan types @bwanner-oai - #16031 codex-tools: extract responses API tool models @bolinfest - #16013 Fix tui_app_server hook notification rendering and replay @etraut-openai - #16021 Fix /copy regression in tui_app_server turn completion @etraut-openai - #16044 [mcp] Bypass read-only tool checks. @mzeng-openai - #16030 don't include redundant write roots in apply_patch @iceweasel-oai - #15922 Remove the legacy TUI split @etraut-openai - #15828 [codex] Pin GitHub Actions workflow references @hintz-openai - #16046 ci: run SDK tests with a Bazel-built codex @bolinfest - #16050 Fix tui_app_server resume-by-name lookup regression @etraut-openai - #16014 Fix tui_app_server agent picker closed-state regression @etraut-openai - #16054 chore: clean up argument-comment lint and roll out all-target CI on macOS @bolinfest - #15917 Support Codex CLI stdin piping for `codex exec` @jliccini - #16057 shell-command: reuse a PowerShell parser process on Windows @bolinfest - #16063 refactor: rewrite argument-comment lint wrappers in Python @bolinfest - #15952 bazel: enable the full Windows gnullvm CI path @bolinfest - #16067 ci: run Bazel clippy on Windows gnullvm @bolinfest - #16071 fix: clean up remaining Windows argument-comment-lint violations @bolinfest - #16072 ci: split fast PR Rust CI from full post-merge Cargo CI @bolinfest - #16074 bazel: add Windows gnullvm stack flags to unit test binaries @bolinfest - #16026 fix(tui): refresh footer on collaboration mode changes @fcoury - #16112 Update PR babysitter skill for review replies and resolution @etraut-openai - #16104 Rename tui_app_server to tui @etraut-openai - #16118 fix: fix comment linter lint violations in Linux-only code @bolinfest - #16106 build: migrate argument-comment-lint to a native Bazel aspect @bolinfest - #16115 Remove remaining custom prompt support @etraut-openai - #16116 Remove the codex-tui app-server originator workaround @etraut-openai - #16047 codex-tools: extract tool spec models @bolinfest - #16128 bazel: refresh the expired macOS SDK pin @bolinfest - #16129 codex-tools: extract configured tool specs @bolinfest - #16130 ci: keep rust-ci-full Windows argument-comment-lint on packaged wrapper @bolinfest - #16126 core: fix stale curated plugin cache refresh races @bolinfest - #16132 codex-tools: extract code mode tool spec adapters @bolinfest - #16136 ci: use BuildBuddy for rust-ci-full non-Windows argument-comment-lint @bolinfest - #16137 exec: make review-policy tests hermetic @bolinfest - #16109 Fix skills picker scrolling in tui app server @etraut-openai - #16138 codex-tools: extract local host tool specs @bolinfest - #16114 Remove TUI voice transcription feature @etraut-openai - #16080 [mcp] Increase MCP startup timeout. @mzeng-openai - #16141 codex-tools: extract collaboration tool specs @bolinfest - #16041 Fix app-server TUI MCP startup warnings regression @etraut-openai - #16110 Fix tui_app_server ghost subagent entries in /agent @etraut-openai - #16154 codex-tools: extract utility tool specs @bolinfest - #16204 [codex] Normalize Windows path in MCP startup snapshot test @etraut-openai - #16010 feat: add mailbox concept for wait @jif-oai - #16237 fix: ma1 @jif-oai - #16193 codex-tools: extract discovery tool specs @bolinfest - #16254 codex-tools: extract discoverable tool models @bolinfest - #16253 fix: close Bazel argument-comment-lint CI gaps @bolinfest - #16225 [codex-analytics] refactor analytics to use reducer architecture @rhan-oai - #16279 Update code mode exec() instructions @andmis - #16120 ci: run Windows argument-comment-lint via native Bazel @bolinfest - #16286 auth: generalize external auth tokens for bearer-only sources @bolinfest - #16287 auth: let AuthManager own external bearer auth @bolinfest - #16288 core: support dynamic auth tokens for model providers @bolinfest

## New Features - Plugins are now a first-class workflow: Codex can sync product-scoped plugins at startup, browse them in `/plugins`, and install or remove them with clearer auth/setup handling. (#15041, #15042, #15195, #15215, #15217, #15264, #15275, #15342, #15580, #15606, #15802) - Sub-agents now use readable path-based addresses like `/root/agent_a`, with structured inter-agent messaging and agent listing for multi-agent v2 workflows. (#15313, #15515, #15556, #15570, #15621, #15647) - The `/title` terminal-title picker now works in both the classic TUI and the app-server TUI, making parallel sessions easier to tell apart. (#12334, #15860) - App-server clients can now send `!` shell commands, watch filesystem changes, and connect to remote websocket servers with bearer-token auth. (#14988, #14533, #14847, #14853) - Image workflows got smoother: `view_image` now returns image URLs for code mode, generated images are reopenable from the TUI, and image-generation history survives resume. (#15072, #15154, #15223) - Prompt history recall now works in the app-server TUI, including across sessions. (#14945) ## Bug Fixes - `tui_app_server` no longer duplicates live reasoning summaries or `/review` output, and it preserves transcript text instead of dropping it under backpressure. (#15758, #15839, #15759) - ChatGPT login in `tui_app_server` now opens the local browser again, cancels cleanly on `Ctrl+C`, and no longer fails startup when you're logged out. (#15672, #15673, #15670) - Early exits now restore terminal state reliably, avoiding broken shell state after quitting; tmux users also get a working queued-message edit shortcut on `Shift+Left`. (#15671, #15480) - Linux sandboxed tool calls are more reliable on older distributions with older `bubblewrap`, and Windows restricted-token sandboxing now supports more split-policy carveout layouts. (#15693, #14172) - Remote multi-agent sessions now show agent names instead of raw IDs and recover more gracefully from stale turn-steering races. (#15513, #15714, #15163) - Plugin-backed mentions and product gating now behave more predictably, fixing cases where explicit mentions lost context or plugins were filtered incorrectly. (#15372, #15263, #15279) ## Documentation - Expanded the app-server and exec-server docs/schema fixtures to cover exec-server setup, filesystem watch RPCs, realtime transcript notifications, and the new Python `thread.run(...)` quickstart flow. (#15089, #14533, #15344, #15088) ## Chores - The app-server-backed TUI is now enabled by default, and the plugin/app rollout flags have been flipped on in normal builds. (#15661, #15713, #15719, #15820) - Removed the legacy artifact tool and retired the old `read_file` and `grep_files` handlers as part of ongoing tool-surface cleanup. (#15851, #15864, #15773, #15775) ## Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.116.0...rust-v0.117.0 - #14945 feat(tui): restore composer history in app-server tui @fcoury - #15092 fix: try to fix "Stage npm package" step in ci.yml @bolinfest - #15075 Propagate tool errors to code mode @pakrym-oai - #15072 Return image URL from view_image tool @pakrym-oai - #15076 Add a startup deprecation warning for custom prompts @etraut-openai - #15102 Revert "fix: harden plugin feature gating" @xl-openai - #15077 Add final message prefix to realtime handoff output @aibrahim-oai - #13494 Align SQLite feedback logs with feedback formatter @charley-oai - #14888 Feat: reuse persisted model and reasoning effort on thread resume @shijie-oai - #15111 don't add transcript for v2 realtime @aibrahim-oai - #15103 Add update_plan code mode result @pakrym-oai - #15100 Add apply_patch code mode result @pakrym-oai - #15104 fix: harden plugin feature gating @xl-openai - #15089 Add exec-server stub server and protocol docs @starr-openai - #15042 Support featured plugins @alexsong-oai - #15088 Add Python SDK thread.run convenience methods @shaqayeq-oai - #15119 Remove stdio transport from exec server @pakrym-oai - #14632 feat(core, tracing): create turn spans over websockets @owenlin0 - #15011 Forward session and turn headers to MCP HTTP requests @nicholasclark-openai - #15118 [hooks] turn_id extension for Stop & UserPromptSubmit @eternal-openai - #14970 Simple directory mentions @canvrno-oai - #14988 Add thread/shellCommand to app server API surface @etraut-openai - #15041 feat: support product-scoped plugins. @xl-openai - #15056 feat: add graph representation of agent network @jif-oai - #15163 fix: case where agent is already closed @jif-oai - #15125 Move environment abstraction into exec server @pakrym-oai - #15180 chore: add metrics for profile @jif-oai - #15175 chore: morpheus does not generate memories @jif-oai - #15185 Revert "Forward session and turn headers to MCP HTTP requests" @nicholasclark-openai - #14867 [hooks] use a user message > developer message for prompt continuation @eternal-openai - #15196 Add experimental exec server URL handling @pakrym-oai - #15198 Publish runnable DotSlash package for argument-comment lint @bolinfest - #15090 Add exec-server process and filesystem RPCs @starr-openai - #15201 Log automated reviewer approval sources distinctly @gabec-openai - #12334 feat(tui): add /title terminal title configuration @yvolovich-cyber - #15206 feat(tracing): tag app-server turn spans with turn_id @owenlin0 - #15216 Move terminal module to terminal-detection crate @aibrahim-oai - #15207 add specific tool guidance for Windows destructive commands @iceweasel-oai - #15154 adding full imagepath to tui @won-openai - #15217 feat: expose needs_auth for plugin/read. @xl-openai - #15190 Plumb MCP turn metadata through _meta @nicholasclark-openai - #15220 feat(app-server): add mcpServer/startupStatus/updated notification @owenlin0 - #15222 changed save directory to codex_home @won-openai - #15232 Refactor ExecServer filesystem split between local and remote @pakrym-oai - #15021 V8 Bazel Build @cconger - #15150 Move auth code into login crate @aibrahim-oai - #15195 [plugins] Install MCPs when calling plugin/install @mzeng-openai - #15254 core: add a full-buffer exec capture policy @bolinfest - #15263 fix: Distinguish missing and empty plugin products @xl-openai - #15253 Split features into codex-features crate @aibrahim-oai - #15233 Split exec process into local and remote implementations @starr-openai - #15199 Use released DotSlash package for argument-comment lint @bolinfest - #15215 Initial plugins TUI menu - list and read only. tui + tui_app_server @canvrno-oai - #15252 Disable hooks on windows for now @eternal-openai - #15264 feat: Add One-Time Startup Remote Plugin Sync @xl-openai - #15262 Add guardian follow-up reminder @charley-oai - #15223 Feat/restore image generation history @won-openai - #15275 feat: prefer git for curated plugin sync @xl-openai - #14869 Add remote env CI matrix and integration test @pakrym-oai - #15218 Add temporary app-server originator fallback for codex-tui @etraut-openai - #15328 try to fix bazel @jif-oai - #15324 Add remote test skill @pakrym-oai - #15313 feat: change multi-agent to use path-like system instead of uuids @jif-oai - #15244 Pin Python SDK app-server stdio to UTF-8 on Windows @shaqayeq-oai - #15337 Bump aws-lc-rs @cconger - #15203 Add v8-poc consumer of our new built v8 @cconger - #15273 [apps] Use ARC for yolo mode. @mzeng-openai - #15128 chore(core) Remove Feature::PowershellUtf8 @dylan-hurd-oai - #15344 Add realtime transcript notification in v2 @aibrahim-oai - #15285 Gate tui /plugins menu behind flag @canvrno-oai - #15114 fix: allow restricted filesystem profiles to read helper executables @celia-oai - #15231 chore(core) update prefix_rule guidance @dylan-hurd-oai - #15036 fix(core) disable command_might_be_dangerous when unsandboxed @dylan-hurd-oai - #15348 Pass platform param to featured plugins @alexsong-oai - #15276 Code mode on v8 @cconger - #15372 [plugins] Fix plugin explicit mention context management. @mzeng-openai - #15366 chore(context) Include guardian approval context @dylan-hurd-oai - #15390 Remove legacy app-server notification handling from tui_app_server @etraut-openai - #15409 Add JIT entitlement for macosx @cconger - #15414 Remove legacy auth and notification handling from tui_app_server @etraut-openai - #15376 [apps] Improve app tools loading for TUI. @mzeng-openai - #15415 chore(exec_policy) ExecPolicyRequirementScenario tests @dylan-hurd-oai - #15464 Remove smart_approvals alias migration @charley-oai - #15443 core: snapshot fork startup context injection @charley-oai - #15480 Use Shift+Left to edit queued messages in tmux @charley-oai - #15317 nit: guard -> registry @jif-oai - #15338 fix: fall back to vendored bubblewrap when system bwrap lacks --argv0 @bolinfest - #15520 fix: cargo deny @jif-oai - #15279 Label plugins as plugins, and hide skills/apps for given plugin @canvrno-oai - #15259 tui: queue follow-ups during manual /compact @charley-oai - #15515 feat: structured multi-agent output @jif-oai - #15357 Fix: proactive auth refresh to reload guarded disk state first @celia-oai - #15342 Plugins TUI install/uninstall @canvrno-oai - #15540 chore: split sub-agent v2 implementation @jif-oai - #15516 Thread guardian Responses API errors into denial rationale @charley-oai - #15378 feat: support disable skills by name. @xl-openai - #15529 Unify realtime stop handling in TUI @aibrahim-oai - #15557 fix: main tui @jif-oai - #15556 feat: new op type for sub-agents communication @jif-oai - #15211 [hooks] add non-streaming (non-stdin style) shell-only PreToolUse support @eternal-openai - #15560 feat: use serde to differenciate inter agent communication @jif-oai - #15426 chore(core) Add approvals reviewer to UserTurn @dylan-hurd-oai - #15562 [codex] Add rollback context duplication snapshot @charley-oai - #15570 feat: custom watcher for multi-agent v2 @jif-oai - #15575 feat: custom watcher for multi-agent v2 @jif-oai - #15576 feat: custom watcher for multi-agent v2 @jif-oai - #15360 fix: build PATH env var using OsString instead of String @bolinfest - #15239 Add fork snapshot modes @charley-oai - #15554 Add plugin-creator as system skill @alexsong-oai - #15592 Extract landlock helpers into codex-sandboxing @pakrym-oai - #15593 Move macOS sandbox builders into codex-sandboxing @pakrym-oai - #15478 [codex-cli][app-server] Update self-serve business usage limit copy in error returned @dhruvgupta-oai - #15600 move imagegen skill into system skills @dkundel-openai - #15599 Move sandbox policy transforms into codex-sandboxing @pakrym-oai - #15580 Remove filter from plugins/list result @canvrno-oai - #15581 Stabilize macOS CI test timeouts @dylan-hurd-oai - #15613 nit: split v2 wait @jif-oai - #15614 fix: flaky test @jif-oai - #15621 feat: list agents for sub-agent v2 @jif-oai - #15623 nit: optim on list agents @jif-oai - #15549 Allow global network allowlist wildcard @rreichel3-oai - #15424 Finish moving codex exec to app-server @etraut-openai - #15603 Extract sandbox manager and transforms into codex-sandboxing @pakrym-oai - #15484 chore(deps): bump pnpm/action-setup from 4 to 5 @dependabot - #14777 Bump vedantmgoyal9/winget-releaser from 19e706d4c9121098010096f9c495a70a7518b30f to 7bd472be23763def6e16bd06cc8b1cdfab0e2fd5 @dependabot - #15558 [Codex TUI] - Sort /plugins TUI menu by installed status first, alpha second @canvrno-oai - #15598 Refresh mentions list after plugin install/uninstall @canvrno-oai - #15624 feat: disable notifier v2 and start turn on agent interaction @jif-oai - #15605 [codex] Stabilize compact resume and fork snapshot flaky tests @charley-oai - #15658 try to fix git glitch @jif-oai - #15657 try to fix git glitch @jif-oai - #15656 try to fix git glitch @jif-oai - #15655 try to fix git glitch @jif-oai - #15654 try to fix git glitch @jif-oai - #15653 try to fix git glitch @jif-oai - #15652 try to fix git glitch @jif-oai - #15651 try to fix git glitch @jif-oai - #15650 try to fix git glitch @jif-oai - #15606 Pretty plugin labels, preserve plugin app provenance during MCP tool refresh @canvrno-oai - #15579 Increase voice space hold timeout to 1s @aibrahim-oai - #15093 core: Make FileWatcher reusable @euroelessar - #15547 app-server: Add back pressure and batching to `command/exec` @euroelessar - #15647 feat: communication pattern v2 @jif-oai - #15438 feat: include marketplace loading error in plugin/list @xl-openai - #15545 chore: use access token expiration for proactive auth refresh @celia-oai - #15530 chore: stop app-server auth refresh storms after permanent token failure @celia-oai - #15577 Trim pre-turn context updates during rollback @charley-oai - #15660 Hide numeric prefixes on disabled TUI list rows @canvrno-oai - #15644 fix: keep zsh-fork release assets after removing shell-tool-mcp @bolinfest - #15670 tui_app_server: tolerate missing rate limits while logged out @etraut-openai - #15564 Move git utilities into a dedicated crate @aibrahim-oai - #15669 Clean up TUI /plugins row allignment @canvrno-oai - #15671 tui: always restore the terminal on early exit @etraut-openai - #15672 tui_app_server: open ChatGPT login in the local browser @etraut-openai - #15673 tui_app_server: cancel active login before Ctrl+C exit @etraut-openai - #15676 Tweak /plugin menu wording @canvrno-oai - #15666 Suppress plugin-install MCP OAuth URL console spam @canvrno-oai - #15573 [plugins] Additional gating for tool suggest and apps. @mzeng-openai - #15665 Drop sandbox_permissions from sandbox exec requests @pakrym-oai - #15572 Move string truncation helpers into codex-utils-string @aibrahim-oai - #14533 app-server: add filesystem watch support @euroelessar - #15674 Use delayed shimmer for plugin loading headers in tui and tui_app_server @canvrno-oai - #15689 app-server: Return codex home in initialize response @euroelessar - #15363 fix: keep rmcp-client env vars as OsString @bolinfest - #15700 Remove provenance filtering in $mentions for apps and skills from plugins @canvrno-oai - #15692 Add legal link to TUI /plugin details @canvrno-oai - #15351 Expand ~ in MDM workspace write roots @evawong-oai - #15548 Extract rollout into its own crate @aibrahim-oai - #15699 [codex] Defer fork context injection until first turn @charley-oai - #15601 [app-server] Add a method to override feature flags. @mzeng-openai - #15708 TUI plugin menu cleanup - hide app ID @canvrno-oai - #15677 Fix stale quickstart integration assertion @shaqayeq-oai - #15713 [plugins] Flip the flags. @mzeng-openai - #15719 [plugins] Flip on additional flags. @mzeng-openai - #14172 fix: support split carveouts in windows restricted-token sandbox @viyatb-oai - #15714 Fix stale turn steering fallback in tui_app_server @etraut-openai - #15722 [plugins] Add a flag for tool search. @mzeng-openai - #15734 Update plugin creator skill. @xl-openai - #15766 chore: tty metric @jif-oai - #15519 fix(core): default approval behavior for mcp missing annotations @fouad-openai - #15775 chore: remove grep_files handler @jif-oai - #15710 Use AbsolutePathBuf for cwd state @pakrym-oai - #15778 feat: rendering library v1 @jif-oai - #15758 fix(tui): avoid duplicate live reasoning summaries @fcoury - #15773 chore: remove read_file handler @jif-oai - #15776 feat: add multi-thread log query @jif-oai - #15744 Extract codex-instructions crate @aibrahim-oai - #15339 Add non-interactive resume filter option @nornagon-openai - #15746 Extract codex-utils-plugins crate @aibrahim-oai - #15747 Extract codex-plugin crate @aibrahim-oai - #15748 Extract codex-analytics crate @aibrahim-oai - #15707 Clarify codex_home base for MDM path resolution @evawong-oai - #15513 fix(tui_app_server): fix remote subagent switching and agent names @fcoury - #14856 [apps][tool_suggest] Remove tool_suggest's dependency on tool search. @mzeng-openai - #14847 feat: add websocket auth for app-server @viyatb-oai - #15759 fix(tui_app_server): preserve transcript events under backpressure @fcoury - #15749 Extract codex-core-skills crate @aibrahim-oai - #15798 Avoid duplicate auth refreshes in `getAuthStatus` @etraut-openai - #15659 Add MCP tool call spans @nicholasclark-openai - #15789 Treat ChatGPT `hc` plan as Enterprise @arnavdugar-openai - #15802 TUI plugin menu polish @canvrno-oai - #15785 Add cached environment manager for exec server URL @pakrym-oai - #15806 Add ReloadUserConfig to tui_app_server @canvrno-oai - #15810 app-server: Organize app-server to allow more transports @euroelessar - #15800 [mcp] Improve custom MCP elicitation @mzeng-openai - #15531 [hooks] add non-streaming (non-stdin style) shell-only PostToolUse support @eternal-openai - #15820 [plugins] Flip flags on. @mzeng-openai - #15825 Fix quoted command rendering in tui_app_server @etraut-openai - #14853 Wire remote app-server auth through the client @etraut-openai - #15817 Expand home-relative paths on Windows @tiffanycitra - #15693 fix: fix old system bubblewrap compatibility without falling back to vendored bwrap @viyatb-oai - #15784 feat: replace askama by custom lib @jif-oai - #15851 feat: drop artifact tool and feature @jif-oai - #15861 feat: clean spawn v1 @jif-oai - #15691 feat: exec-server prep for unified exec @jif-oai - #15864 chore: drop artifacts lib @jif-oai - #15812 core: remove special execve handling for skill scripts @bolinfest - #15869 fix: flaky @jif-oai - #15877 chore: ask agents md not to play with PIDs @jif-oai - #15866 feat: use `ProcessId` in `exec-server` @jif-oai - #15829 [plugins] Update the suggestable plugins list. @mzeng-openai - #15880 fix: max depth agent still has v2 tools @jif-oai - #15839 Fix duplicate /review messages in app-server TUI @etraut-openai - #15805 Add MCP connector metrics @nicholasclark-openai - #15661 Enable `tui_app_server` feature by default @etraut-openai - #15835 fix: box apply_patch test harness futures @bolinfest - #15796 [codex] Block unsafe git global options from safe allowlist @adrian-openai - #15813 Add wildcard in the middle test coverage @evawong-oai - #15881 fix: root as std agent @jif-oai - #15860 feat(tui): add terminal title support to tui app server @fcoury - #15885 [mcp] Fix legacy_tools @mzeng-openai

## What's Changed * fix(patch): cherry-pick 765fb67 to release/v0.35.2-pr-24055 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/24063 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.35.2...v0.35.3

**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.35.1...v0.35.2

**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.35.0...v0.35.1

## What's Changed * feat(cli): customizable keyboard shortcuts by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21945 * feat(core): Thread `AgentLoopContext` through core. by @joshualitt in https://github.com/google-gemini/gemini-cli/pull/21944 * chore(release): bump version to 0.35.0-nightly.20260311.657f19c1f by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21966 * refactor(a2a): remove legacy CoreToolScheduler by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/21955 * feat(ui): add missing vim mode motions (X, ~, r, f/F/t/T, df/dt and friends) by @aanari in https://github.com/google-gemini/gemini-cli/pull/21932 * Feat/retry fetch notifications by @aishaneeshah in https://github.com/google-gemini/gemini-cli/pull/21813 * fix(core): remove OAuth check from handleFallback and clean up stray file by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21962 * feat(cli): support literal character keybindings and extended Kitty protocol keys by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21972 * fix(ui): clamp cursor to last char after all NORMAL mode deletes by @aanari in https://github.com/google-gemini/gemini-cli/pull/21973 * test(core): add missing tests for prompts/utils.ts by @krrishverma1805-web in https://github.com/google-gemini/gemini-cli/pull/19941 * fix(cli): allow scrolling keys in copy mode (Ctrl+S selection mode) by @nsalerni in https://github.com/google-gemini/gemini-cli/pull/19933 * docs(cli): add custom keybinding documentation by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21980 * docs: fix misleading YOLO mode description in defaultApprovalMode by @Gyanranjan-Priyam in https://github.com/google-gemini/gemini-cli/pull/21878 * fix: clean up /clear and /resume by @jackwotherspoon in https://github.com/google-gemini/gemini-cli/pull/22007 * fix(core)#20941: reap orphaned descendant processes on PTY abort by @manavmax in https://github.com/google-gemini/gemini-cli/pull/21124 * fix(core): update language detection to use LSP 3.18 identifiers by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/21931 * feat(cli): support removing keybindings via '-' prefix by @scidomino in https://github.com/google-gemini/gemini-cli/pull/22042 * feat(policy): add --admin-policy flag for supplemental admin policies by @galz10 in https://github.com/google-gemini/gemini-cli/pull/20360 * merge duplicate imports packages/cli/src subtask1 by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/22040 * perf(core): parallelize user quota and experiments fetching in refreshAuth by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21648 * Changelog for v0.34.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21965 * Changelog for v0.33.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21967 * fix(core): handle EISDIR in robustRealpath on Windows by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21984 * feat(core): include initiationMethod in conversation interaction telemetry by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/22054 * feat(ui): add vim yank/paste (y/p/P) with unnamed register by @aanari in https://github.com/google-gemini/gemini-cli/pull/22026 * fix(core): enable numerical routing for api key users by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21977 * feat(telemetry): implement retry attempt telemetry for network related retries by @aishaneeshah in https://github.com/google-gemini/gemini-cli/pull/22027 * fix(policy): remove unnecessary escapeRegex from pattern builders by @spencer426 in https://github.com/google-gemini/gemini-cli/pull/21921 * fix(core): preserve dynamic tool descriptions on session resume by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/18835 * chore: allow 'gemini-3.1' in sensitive keyword linter by @scidomino in https://github.com/google-gemini/gemini-cli/pull/22065 * feat(core): support custom base URL via env vars by @junaiddshaukat in https://github.com/google-gemini/gemini-cli/pull/21561 * merge duplicate imports packages/cli/src subtask2 by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/22051 * fix(core): silently retry API errors up to 3 times before halting session by @spencer426 in https://github.com/google-gemini/gemini-cli/pull/21989 * feat(core): simplify subagent success UI and improve early termination display by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/21917 * merge duplicate imports packages/cli/src subtask3 by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/22056 * fix(hooks): fix BeforeAgent/AfterAgent inconsistencies (#18514) by @krishdef7 in https://github.com/google-gemini/gemini-cli/pull/21383 * feat(core): implement SandboxManager interface and config schema by @galz10 in https://github.com/google-gemini/gemini-cli/pull/21774 * docs: document npm deprecation warnings as safe to ignore by @h30s in https://github.com/google-gemini/gemini-cli/pull/20692 * fix: remove status/need-triage from maintainer-only issues by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22044 * fix(core): propagate subagent context to policy engine by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/22086 * fix(cli): resolve skill uninstall failure when skill name is updated by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/22085 * docs(plan): clarify interactive plan editing with Ctrl+X by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/22076 * fix(policy): ensure user policies are loaded when policyPaths is empty by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/22090 * Docs: Add documentation for model steering (experimental). by @jkcinouye in https://github.com/google-gemini/gemini-cli/pull/21154 * Add issue for automated changelogs by @g-samroberts in https://github.com/google-gemini/gemini-cli/pull/21912 * fix(core): secure argsPattern and revert WEB_FETCH_TOOL_NAME escalation by @spencer426 in https://github.com/google-gemini/gemini-cli/pull/22104 * feat(core): differentiate User-Agent for a2a-server and ACP clients by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22059 * refactor(core): extract ExecutionLifecycleService for tool backgrounding by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/21717 * feat: Display pending and confirming tool calls by @sripasg in https://github.com/google-gemini/gemini-cli/pull/22106 * feat(browser): implement input blocker overlay during automation by @kunal-10-cloud in https://github.com/google-gemini/gemini-cli/pull/21132 * fix: register themes on extension load not start by @jackwotherspoon in https://github.com/google-gemini/gemini-cli/pull/22148 * feat(ui): Do not show Ultra users /upgrade hint (#22154) by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22156 * chore: remove unnecessary log for themes by @jackwotherspoon in https://github.com/google-gemini/gemini-cli/pull/22165 * fix(core): resolve MCP tool FQN validation, schema export, and wildcards in subagents by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22069 * fix(cli): validate --model argument at startup by @JaisalJain in https://github.com/google-gemini/gemini-cli/pull/21393 * fix(core): handle policy ALLOW for exit_plan_mode by @backnotprop in https://github.com/google-gemini/gemini-cli/pull/21802 * feat(telemetry): add Clearcut instrumentation for AI credits billing events by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/22153 * feat(core): add google credentials provider for remote agents by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/21024 * test(cli): add integration test for node deprecation warnings by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/20215 * feat(cli): allow safe tools to execute concurrently while agent is busy by @spencer426 in https://github.com/google-gemini/gemini-cli/pull/21988 * feat(core): implement model-driven parallel tool scheduler by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/21933 * update vulnerable deps by @scidomino in https://github.com/google-gemini/gemini-cli/pull/22180 * fix(core): fix startup stats to use int values for timestamps and durations by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/22201 * fix(core): prevent duplicate tool schemas for instantiated tools by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22204 * fix(core): add proxy routing support for remote A2A subagents by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/22199 * fix(core/ide): add Antigravity CLI fallbacks by @apfine in https://github.com/google-gemini/gemini-cli/pull/22030 * fix(browser): fix duplicate function declaration error in browser agent by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/22207 * feat(core): implement Stage 1 improvements for webfetch tool by @aishaneeshah in https://github.com/google-gemini/gemini-cli/pull/21313 * Changelog for v0.34.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22194 * perf(cli): enable code splitting and deferred UI loading by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22117 * fix: remove unused img.png from project root by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22222 * docs(local model routing): add docs on how to use Gemma for local model routing by @douglas-reid in https://github.com/google-gemini/gemini-cli/pull/21365 * feat(a2a): enable native gRPC support and protocol routing by @alisa-alisa in https://github.com/google-gemini/gemini-cli/pull/21403 * fix(cli): escape @ symbols on paste to prevent unintended file expansion by @krishdef7 in https://github.com/google-gemini/gemini-cli/pull/21239 * feat(core): add trajectoryId to ConversationOffered telemetry by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/22214 * docs: clarify that tools.core is an allowlist for ALL built-in tools by @hobostay in https://github.com/google-gemini/gemini-cli/pull/18813 * docs(plan): document hooks with plan mode by @ruomengz in https://github.com/google-gemini/gemini-cli/pull/22197 * Changelog for v0.33.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22235 * build(ci): fix false positive evals trigger on merge commits by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22237 * fix(core): explicitly pass messageBus to policy engine for MCP tool saves by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22255 * feat(core): Fully migrate packages/core to AgentLoopContext. by @joshualitt in https://github.com/google-gemini/gemini-cli/pull/22115 * feat(core): increase sub-agent turn and time limits by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22196 * feat(core): instrument file system tools for JIT context discovery by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22082 * refactor(ui): extract pure session browser utilities by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22256 * fix(plan): Fix AskUser evals by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/22074 * fix(settings): prevent j/k navigation keys from intercepting edit buffer input by @student-ankitpandit in https://github.com/google-gemini/gemini-cli/pull/21865 * feat(skills): improve async-pr-review workflow and logging by @mattKorwel in https://github.com/google-gemini/gemini-cli/pull/21790 * refactor(cli): consolidate getErrorMessage utility to core by @scidomino in https://github.com/google-gemini/gemini-cli/pull/22190 * fix(core): show descriptive error messages when saving settings fails by @afarber in https://github.com/google-gemini/gemini-cli/pull/18095 * docs(core): add authentication guide for remote subagents by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/22178 * docs: overhaul subagents documentation and add /agents command by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22345 * refactor(ui): extract SessionBrowser static ui components by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22348 * test: add Object.create context regression test and tool confirmation integration test by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/22356 * feat(tracker): return TodoList display for tracker tools by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22060 * feat(agent): add allowed domain restrictions for browser agent by @cynthialong0-0 in https://github.com/google-gemini/gemini-cli/pull/21775 * chore/release: bump version to 0.35.0-nightly.20260313.bb060d7a9 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22251 * Move keychain fallback to keychain service by @chrstnb in https://github.com/google-gemini/gemini-cli/pull/22332 * feat(core): integrate SandboxManager to sandbox all process-spawning tools by @galz10 in https://github.com/google-gemini/gemini-cli/pull/22231 * fix(cli): support CJK input and full Unicode scalar values in terminal protocols by @scidomino in https://github.com/google-gemini/gemini-cli/pull/22353 * Promote stable tests. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22253 * feat(tracker): add tracker policy by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22379 * feat(security): add disableAlwaysAllow setting to disable auto-approvals by @galz10 in https://github.com/google-gemini/gemini-cli/pull/21941 * Revert "fix(cli): validate --model argument at startup" by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22378 * fix(mcp): handle equivalent root resource URLs in OAuth validation by @galz10 in https://github.com/google-gemini/gemini-cli/pull/20231 * fix(core): use session-specific temp directory for task tracker by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22382 * Fix issue where config was undefined. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22397 * fix(core): deduplicate project memory when JIT context is enabled by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22234 * feat(prompts): implement Topic-Action-Summary model for verbosity reduction by @Abhijit-2592 in https://github.com/google-gemini/gemini-cli/pull/21503 * fix(core): fix manual deletion of subagent histories by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22407 * Add registry var by @kevinjwang1 in https://github.com/google-gemini/gemini-cli/pull/22224 * Add ModelDefinitions to ModelConfigService by @kevinjwang1 in https://github.com/google-gemini/gemini-cli/pull/22302 * fix(cli): improve command conflict handling for skills by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/21942 * fix(core): merge user settings with extension-provided MCP servers by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22484 * fix(core): skip discovery for incomplete MCP configs and resolve merge race condition by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22494 * fix(automation): harden stale PR closer permissions and maintainer detection by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22558 * fix(automation): evaluate staleness before checking protected labels by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22561 * feat(agent): replace the runtime npx for browser agent chrome devtool mcp with pre-built bundle by @cynthialong0-0 in https://github.com/google-gemini/gemini-cli/pull/22213 * perf: optimize TrackerService dependency checks by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22384 * docs(policy): remove trailing space from commandPrefix examples by @kawasin73 in https://github.com/google-gemini/gemini-cli/pull/22264 * fix(a2a-server): resolve unsafe assignment lint errors by @ehedlund in https://github.com/google-gemini/gemini-cli/pull/22661 * fix: Adjust ToolGroupMessage filtering to hide Confirming and show Canceled tool calls. by @sripasg in https://github.com/google-gemini/gemini-cli/pull/22230 * Disallow Object.create() and reflect. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22408 * Guard pro model usage by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22665 * refactor(core): Creates AgentSession abstraction for consolidated agent interface. by @mbleigh in https://github.com/google-gemini/gemini-cli/pull/22270 * docs(changelog): remove internal commands from release notes by @jackwotherspoon in https://github.com/google-gemini/gemini-cli/pull/22529 * feat: enable subagents by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22386 * feat(extensions): implement cryptographic integrity verification for extension updates by @ehedlund in https://github.com/google-gemini/gemini-cli/pull/21772 * feat(tracker): polish UI sorting and formatting by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22437 * Changelog for v0.34.0-preview.2 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22220 * fix(core): fix three JIT context bugs in read_file, read_many_files, and memoryDiscovery by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22679 * refactor(core): introduce InjectionService with source-aware injection and backend-native background completions by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/22544 * Linux sandbox bubblewrap by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/22680 * feat(core): increase thought signature retry resilience by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22202 * feat(core): implement Stage 2 security and consistency improvements for web_fetch by @aishaneeshah in https://github.com/google-gemini/gemini-cli/pull/22217 * refactor(core): replace positional execute params with ExecuteOptions bag by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/22674 * feat(config): enable JIT context loading by default by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22736 * fix(config): ensure discoveryMaxDirs is passed to global config during initialization by @kevin-ramdass in https://github.com/google-gemini/gemini-cli/pull/22744 * fix(plan): allowlist get_internal_docs in Plan Mode by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/22668 * Changelog for v0.34.0-preview.3 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22393 * feat(core): add foundation for subagent tool isolation by @akh64bit in https://github.com/google-gemini/gemini-cli/pull/22708 * fix(core): handle surrogate pairs in truncateString by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22754 * fix(cli): override j/k navigation in settings dialog to fix search input conflict by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22800 * feat(plan): add 'All the above' option to multi-select AskUser questions by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/22365 * docs: distribute package-specific GEMINI.md context to each package by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22734 * fix(cli): clean up stale pasted placeholder metadata after word/line deletions by @Jomak-x in https://github.com/google-gemini/gemini-cli/pull/20375 * refactor(core): align JIT memory placement with tiered context model by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22766 * Linux sandbox seccomp by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/22815 * fix(patch): cherry-pick 4e5dfd0 to release/v0.35.0-preview.1-pr-23074 to patch version v0.35.0-preview.1 and create version 0.35.0-preview.2 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/23134 * fix(patch): cherry-pick daf3691 to release/v0.35.0-preview.2-pr-23558 to patch version v0.35.0-preview.2 and create version 0.35.0-preview.3 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/23565 * fix(patch): cherry-pick b2d6dc4 to release/v0.35.0-preview.4-pr-23546 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/23585 ## New Contributors * @aanari made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21932 * @krrishverma1805-web made their first contribution in https://github.com/google-gemini/gemini-cli/pull/19941 * @manavmax made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21124 * @junaiddshaukat made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21561 * @JaisalJain made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21393 * @backnotprop made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21802 * @apfine made their first contribution in https://github.com/google-gemini/gemini-cli/pull/22030 * @douglas-reid made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21365 * @hobostay made their first contribution in https://github.com/google-gemini/gemini-cli/pull/18813 * @student-ankitpandit made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21865 * @kawasin73 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/22264 * @Jomak-x made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20375 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.34.0...v0.35.0

## What's Changed * feat(cli): add chat resume footer on session quit by @lordshashank in https://github.com/google-gemini/gemini-cli/pull/20667 * Support bold and other styles in svg snapshots by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/20937 * fix(core): increase A2A agent timeout to 30 minutes by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/21028 * Cleanup old branches. by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/19354 * chore(release): bump version to 0.34.0-nightly.20260303.34f0c1538 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21034 * feat(ui): standardize semantic focus colors and enhance history visibility by @keithguerin in https://github.com/google-gemini/gemini-cli/pull/20745 * fix: merge duplicate imports in packages/core (3/4) by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/20928 * Add extra safety checks for proto pollution by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/20396 * feat(core): Add tracker CRUD tools & visualization by @anj-s in https://github.com/google-gemini/gemini-cli/pull/19489 * Revert "fix(ui): persist expansion in AskUser dialog when navigating options" by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21042 * Changelog for v0.33.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21030 * fix: model persistence for all scenarios by @sripasg in https://github.com/google-gemini/gemini-cli/pull/21051 * chore/release: bump version to 0.34.0-nightly.20260304.28af4e127 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21054 * Consistently guard restarts against concurrent auto updates by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21016 * Defensive coding to reduce the risk of Maximum update depth errors by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/20940 * fix(cli): Polish shell autocomplete rendering to be a little more shell native feeling. by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/20931 * Docs: Update plan mode docs by @jkcinouye in https://github.com/google-gemini/gemini-cli/pull/19682 * fix(mcp): Notifications/tools/list_changed support not working by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21050 * fix(cli): register extension lifecycle events in DebugProfiler by @fayerman-source in https://github.com/google-gemini/gemini-cli/pull/20101 * chore(dev): update vscode settings for typescriptreact by @rohit-4321 in https://github.com/google-gemini/gemini-cli/pull/19907 * fix(cli): enable multi-arch docker builds for sandbox by @ru-aish in https://github.com/google-gemini/gemini-cli/pull/19821 * Changelog for v0.32.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21033 * Changelog for v0.33.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21058 * feat(core): improve @file autocomplete to prioritize filenames by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21064 * feat(sandbox): add experimental LXC container sandbox support by @h30s in https://github.com/google-gemini/gemini-cli/pull/20735 * feat(evals): add overall pass rate row to eval nightly summary table by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/20905 * feat(telemetry): include language in telemetry and fix accepted lines computation by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/21126 * Changelog for v0.32.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21055 * feat(core): add robustness tests, logging, and metrics for CodeAssistServer SSE parsing by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/21013 * feat: add issue assignee workflow by @kartikangiras in https://github.com/google-gemini/gemini-cli/pull/21003 * fix: improve error message when OAuth succeeds but project ID is required by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/21070 * feat(loop-reduction): implement iterative loop detection and model feedback by @aishaneeshah in https://github.com/google-gemini/gemini-cli/pull/20763 * chore(github): require prompt approvers for agent prompt files by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/20896 * Docs: Create tools reference by @jkcinouye in https://github.com/google-gemini/gemini-cli/pull/19470 * fix(core, a2a-server): prevent hang during OAuth in non-interactive sessions by @spencer426 in https://github.com/google-gemini/gemini-cli/pull/21045 * chore(cli): enable deprecated settings removal by default by @yashodipmore in https://github.com/google-gemini/gemini-cli/pull/20682 * feat(core): Disable fast ack helper for hints. by @joshualitt in https://github.com/google-gemini/gemini-cli/pull/21011 * fix(ui): suppress redundant failure note when tool error note is shown by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/21078 * docs: document planning workflows with Conductor example by @jerop in https://github.com/google-gemini/gemini-cli/pull/21166 * feat(release): ship esbuild bundle in npm package by @genneth in https://github.com/google-gemini/gemini-cli/pull/19171 * fix(extensions): preserve symlinks in extension source path while enforcing folder trust by @galz10 in https://github.com/google-gemini/gemini-cli/pull/20867 * fix(cli): defer tool exclusions to policy engine in non-interactive mode by @EricRahm in https://github.com/google-gemini/gemini-cli/pull/20639 * fix(ui): removed double padding on rendered content by @devr0306 in https://github.com/google-gemini/gemini-cli/pull/21029 * fix(core): truncate excessively long lines in grep search output by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/21147 * feat: add custom footer configuration via `/footer` by @jackwotherspoon in https://github.com/google-gemini/gemini-cli/pull/19001 * perf(core): fix OOM crash in long-running sessions by @WizardsForgeGames in https://github.com/google-gemini/gemini-cli/pull/19608 * refactor(cli): categorize built-in themes into dark/ and light/ directories by @JayadityaGit in https://github.com/google-gemini/gemini-cli/pull/18634 * fix(core): explicitly allow codebase_investigator and cli_help in read-only mode by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/21157 * test: add browser agent integration tests by @kunal-10-cloud in https://github.com/google-gemini/gemini-cli/pull/21151 * fix(cli): fix enabling kitty codes on Windows Terminal by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21136 * refactor(core): extract shared OAuth flow primitives from MCPOAuthProvider by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/20895 * fix(ui): add partial output to cancelled shell UI by @devr0306 in https://github.com/google-gemini/gemini-cli/pull/21178 * fix(cli): replace hardcoded keybinding strings with dynamic formatters by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21159 * DOCS: Update quota and pricing page by @g-samroberts in https://github.com/google-gemini/gemini-cli/pull/21194 * feat(telemetry): implement Clearcut logging for startup statistics by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/21172 * feat(triage): add area/documentation to issue triage by @g-samroberts in https://github.com/google-gemini/gemini-cli/pull/21222 * Fix so shell calls are formatted by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21237 * feat(cli): add native gVisor (runsc) sandboxing support by @Zheyuan-Lin in https://github.com/google-gemini/gemini-cli/pull/21062 * docs: use absolute paths for internal links in plan-mode.md by @jerop in https://github.com/google-gemini/gemini-cli/pull/21299 * fix(core): prevent unhandled AbortError crash during stream loop detection by @7hokerz in https://github.com/google-gemini/gemini-cli/pull/21123 * fix:reorder env var redaction checks to scan values first by @kartikangiras in https://github.com/google-gemini/gemini-cli/pull/21059 * fix(acp): rename --experimental-acp to --acp & remove Zed-specific refrences by @skeshive in https://github.com/google-gemini/gemini-cli/pull/21171 * feat(core): fallback to 2.5 models with no access for toolcalls by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21283 * test(core): improve testing for API request/response parsing by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21227 * docs(links): update docs-writer skill and fix broken link by @g-samroberts in https://github.com/google-gemini/gemini-cli/pull/21314 * Fix code colorizer ansi escape bug. by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21321 * remove wildcard behavior on keybindings by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21315 * feat(acp): Add support for AI Gateway auth by @skeshive in https://github.com/google-gemini/gemini-cli/pull/21305 * fix(theme): improve theme color contrast for macOS Terminal.app by @clocky in https://github.com/google-gemini/gemini-cli/pull/21175 * feat (core): Implement tracker related SI changes by @anj-s in https://github.com/google-gemini/gemini-cli/pull/19964 * Changelog for v0.33.0-preview.2 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21333 * Changelog for v0.33.0-preview.3 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21347 * docs: format release times as HH:MM UTC by @pavan-sh in https://github.com/google-gemini/gemini-cli/pull/20726 * fix(cli): implement --all flag for extensions uninstall by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21319 * docs: fix incorrect relative links to command reference by @kanywst in https://github.com/google-gemini/gemini-cli/pull/20964 * documentiong ensures ripgrep by @Jatin24062005 in https://github.com/google-gemini/gemini-cli/pull/21298 * fix(core): handle AbortError thrown during processTurn by @MumuTW in https://github.com/google-gemini/gemini-cli/pull/21296 * docs(cli): clarify ! command output visibility in shell commands tutorial by @MohammedADev in https://github.com/google-gemini/gemini-cli/pull/21041 * fix: logic for task tracker strategy and remove tracker tools by @anj-s in https://github.com/google-gemini/gemini-cli/pull/21355 * fix(partUtils): display media type and size for inline data parts by @Aboudjem in https://github.com/google-gemini/gemini-cli/pull/21358 * Fix(accessibility): add screen reader support to RewindViewer by @Famous077 in https://github.com/google-gemini/gemini-cli/pull/20750 * fix(hooks): propagate stopHookActive in AfterAgent retry path (#20426) by @Aarchi-07 in https://github.com/google-gemini/gemini-cli/pull/20439 * fix(core): deduplicate GEMINI.md files by device/inode on case-insensitive filesystems (#19904) by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/19915 * feat(core): add concurrency safety guidance for subagent delegation (#17753) by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/21278 * feat(ui): dynamically generate all keybinding hints by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21346 * feat(core): implement unified KeychainService and migrate token storage by @ehedlund in https://github.com/google-gemini/gemini-cli/pull/21344 * fix(cli): gracefully handle --resume when no sessions exist by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/21429 * fix(plan): keep approved plan during chat compression by @ruomengz in https://github.com/google-gemini/gemini-cli/pull/21284 * feat(core): implement generic CacheService and optimize setupUser by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21374 * Update quota and pricing documentation with subscription tiers by @srithreepo in https://github.com/google-gemini/gemini-cli/pull/21351 * fix(core): append correct OTLP paths for HTTP exporters by @sebastien-prudhomme in https://github.com/google-gemini/gemini-cli/pull/16836 * Changelog for v0.33.0-preview.4 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21354 * feat(cli): implement dot-prefixing for slash command conflicts by @ehedlund in https://github.com/google-gemini/gemini-cli/pull/20979 * refactor(core): standardize MCP tool naming to mcp_ FQN format by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/21425 * feat(cli): hide gemma settings from display and mark as experimental by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/21471 * feat(skills): refine string-reviewer guidelines and description by @clocky in https://github.com/google-gemini/gemini-cli/pull/20368 * fix(core): whitelist TERM and COLORTERM in environment sanitization by @deadsmash07 in https://github.com/google-gemini/gemini-cli/pull/20514 * fix(billing): fix overage strategy lifecycle and settings integration by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/21236 * fix: expand paste placeholders in TextInput on submit by @Jefftree in https://github.com/google-gemini/gemini-cli/pull/19946 * fix(core): add in-memory cache to ChatRecordingService to prevent OOM by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/21502 * feat(cli): overhaul thinking UI by @keithguerin in https://github.com/google-gemini/gemini-cli/pull/18725 * fix(ui): unify Ctrl+O expansion hint experience across buffer modes by @jwhelangoog in https://github.com/google-gemini/gemini-cli/pull/21474 * fix(cli): correct shell height reporting by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21492 * Make test suite pass when the GEMINI_SYSTEM_MD env variable or GEMINI_WRITE_SYSTEM_MD variable happens to be set locally/ by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21480 * Disallow underspecified types by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/21485 * refactor(cli): standardize on 'reload' verb for all components by @keithguerin in https://github.com/google-gemini/gemini-cli/pull/20654 * feat(cli): Invert quota language to 'percent used' by @keithguerin in https://github.com/google-gemini/gemini-cli/pull/20100 * Docs: Add documentation for notifications (experimental)(macOS) by @jkcinouye in https://github.com/google-gemini/gemini-cli/pull/21163 * Code review comments as a pr by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21209 * feat(cli): unify /chat and /resume command UX by @LyalinDotCom in https://github.com/google-gemini/gemini-cli/pull/20256 * docs: fix typo 'allowslisted' -> 'allowlisted' in mcp-server.md by @Gyanranjan-Priyam in https://github.com/google-gemini/gemini-cli/pull/21665 * fix(core): display actual graph output in tracker_visualize tool by @anj-s in https://github.com/google-gemini/gemini-cli/pull/21455 * fix(core): sanitize SSE-corrupted JSON and domain strings in error classification by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/21702 * Docs: Make documentation links relative by @diodesign in https://github.com/google-gemini/gemini-cli/pull/21490 * feat(cli): expose /tools desc as explicit subcommand for discoverability by @aworki in https://github.com/google-gemini/gemini-cli/pull/21241 * feat(cli): add /compact alias for /compress command by @jackwotherspoon in https://github.com/google-gemini/gemini-cli/pull/21711 * feat(plan): enable Plan Mode by default by @jerop in https://github.com/google-gemini/gemini-cli/pull/21713 * feat(core): Introduce `AgentLoopContext`. by @joshualitt in https://github.com/google-gemini/gemini-cli/pull/21198 * fix(core): resolve symlinks for non-existent paths during validation by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/21487 * docs: document tool exclusion from memory via deny policy by @Abhijit-2592 in https://github.com/google-gemini/gemini-cli/pull/21428 * perf(core): cache loadApiKey to reduce redundant keychain access by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21520 * feat(cli): implement /upgrade command by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21511 * Feat/browser agent progress emission by @kunal-10-cloud in https://github.com/google-gemini/gemini-cli/pull/21218 * fix(settings): display objects as JSON instead of [object Object] by @Zheyuan-Lin in https://github.com/google-gemini/gemini-cli/pull/21458 * Unmarshall update by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/21721 * Update mcp's list function to check for disablement. by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/21148 * robustness(core): static checks to validate history is immutable by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21228 * refactor(cli): better react patterns for BaseSettingsDialog by @psinha40898 in https://github.com/google-gemini/gemini-cli/pull/21206 * feat(security): implement robust IP validation and safeFetch foundation by @alisa-alisa in https://github.com/google-gemini/gemini-cli/pull/21401 * feat(core): improve subagent result display by @joshualitt in https://github.com/google-gemini/gemini-cli/pull/20378 * docs: fix broken markdown syntax and anchor links in /tools by @campox747 in https://github.com/google-gemini/gemini-cli/pull/20902 * feat(policy): support subagent-specific policies in TOML by @akh64bit in https://github.com/google-gemini/gemini-cli/pull/21431 * Add script to speed up reviewing PRs adding a worktree. by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21748 * fix(core): prevent infinite recursion in symlink resolution by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/21750 * fix(docs): fix headless mode docs by @ame2en in https://github.com/google-gemini/gemini-cli/pull/21287 * feat/redesign header compact by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/20922 * refactor: migrate to useKeyMatchers hook by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21753 * perf(cli): cache loadSettings to reduce redundant disk I/O at startup by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21521 * fix(core): resolve Windows line ending and path separation bugs across CLI by @muhammadusman586 in https://github.com/google-gemini/gemini-cli/pull/21068 * docs: fix heading formatting in commands.md and phrasing in tools-api.md by @campox747 in https://github.com/google-gemini/gemini-cli/pull/20679 * refactor(ui): unify keybinding infrastructure and support string initialization by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21776 * Add support for updating extension sources and names by @chrstnb in https://github.com/google-gemini/gemini-cli/pull/21715 * fix(core): handle GUI editor non-zero exit codes gracefully by @reyyanxahmed in https://github.com/google-gemini/gemini-cli/pull/20376 * fix(core): destroy PTY on kill() and exception to prevent fd leak by @nbardy in https://github.com/google-gemini/gemini-cli/pull/21693 * fix(docs): update theme screenshots and add missing themes by @ashmod in https://github.com/google-gemini/gemini-cli/pull/20689 * refactor(cli): rename 'return' key to 'enter' internally by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21796 * build(release): restrict npm bundling to non-stable tags by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21821 * fix(core): override toolRegistry property for sub-agent schedulers by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/21766 * fix(cli): make footer items equally spaced by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21843 * docs: clarify global policy rules application in plan mode by @jerop in https://github.com/google-gemini/gemini-cli/pull/21864 * fix(core): ensure correct flash model steering in plan mode implementation phase by @jerop in https://github.com/google-gemini/gemini-cli/pull/21871 * fix(core): update @a2a-js/sdk to 0.3.11 by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/21875 * refactor(core): improve API response error logging when retry by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/21784 * fix(ui): handle headless execution in credits and upgrade dialogs by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/21850 * fix(core): treat retryable errors with >5 min delay as terminal quota errors by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/21881 * feat(telemetry): add specific PR, issue, and custom tracking IDs for GitHub Actions by @cocosheng-g in https://github.com/google-gemini/gemini-cli/pull/21129 * feat(core): add OAuth2 Authorization Code auth provider for A2A agents by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/21496 * feat(cli): give visibility to /tools list command in the TUI and follow the subcommand pattern of other commands by @JayadityaGit in https://github.com/google-gemini/gemini-cli/pull/21213 * Handle dirty worktrees better and warn about running scripts/review.sh on untrusted code. by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/21791 * feat(policy): support auto-add to policy by default and scoped persistence by @spencer426 in https://github.com/google-gemini/gemini-cli/pull/20361 * fix(core): handle AbortError when ESC cancels tool execution by @PrasannaPal21 in https://github.com/google-gemini/gemini-cli/pull/20863 * fix(release): Improve Patch Release Workflow Comments: Clearer Approval Guidance by @jerop in https://github.com/google-gemini/gemini-cli/pull/21894 * docs: clarify telemetry setup and comprehensive data map by @jerop in https://github.com/google-gemini/gemini-cli/pull/21879 * feat(core): add per-model token usage to stream-json output by @yongruilin in https://github.com/google-gemini/gemini-cli/pull/21839 * docs: remove experimental badge from plan mode in sidebar by @jerop in https://github.com/google-gemini/gemini-cli/pull/21906 * fix(cli): prevent race condition in loop detection retry by @skyvanguard in https://github.com/google-gemini/gemini-cli/pull/17916 * Add behavioral evals for tracker by @anj-s in https://github.com/google-gemini/gemini-cli/pull/20069 * fix(auth): update terminology to 'sign in' and 'sign out' by @clocky in https://github.com/google-gemini/gemini-cli/pull/20892 * docs(mcp): standardize mcp tool fqn documentation by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/21664 * fix(ui): prevent empty tool-group border stubs after filtering by @Aaxhirrr in https://github.com/google-gemini/gemini-cli/pull/21852 * make command names consistent by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21907 * refactor: remove agent_card_requires_auth config flag by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/21914 * feat(a2a): implement standardized normalization and streaming reassembly by @alisa-alisa in https://github.com/google-gemini/gemini-cli/pull/21402 * feat(cli): enable skill activation via slash commands by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/21758 * docs(cli): mention per-model token usage in stream-json result event by @yongruilin in https://github.com/google-gemini/gemini-cli/pull/21908 * fix(plan): prevent plan truncation in approval dialog by supporting unconstrained heights by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/21037 * feat(a2a): switch from callback-based to event-driven tool scheduler by @cocosheng-g in https://github.com/google-gemini/gemini-cli/pull/21467 * feat(voice): implement speech-friendly response formatter by @ayush31010 in https://github.com/google-gemini/gemini-cli/pull/20989 * feat: add pulsating blue border automation overlay to browser agent by @kunal-10-cloud in https://github.com/google-gemini/gemini-cli/pull/21173 * Add extensionRegistryURI setting to change where the registry is read from by @kevinjwang1 in https://github.com/google-gemini/gemini-cli/pull/20463 * fix: patch gaxios v7 Array.toString() stream corruption by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/21884 * fix: prevent hangs in non-interactive mode and improve agent guidance by @cocosheng-g in https://github.com/google-gemini/gemini-cli/pull/20893 * Add ExtensionDetails dialog and support install by @chrstnb in https://github.com/google-gemini/gemini-cli/pull/20845 * chore/release: bump version to 0.34.0-nightly.20260310.4653b126f by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21816 * Changelog for v0.33.0-preview.13 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21927 * fix(cli): stabilize prompt layout to prevent jumping when typing by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/21081 * fix: preserve prompt text when cancelling streaming by @Nixxx19 in https://github.com/google-gemini/gemini-cli/pull/21103 * fix: robust UX for remote agent errors by @Shyam-Raghuwanshi in https://github.com/google-gemini/gemini-cli/pull/20307 * feat: implement background process logging and cleanup by @galz10 in https://github.com/google-gemini/gemini-cli/pull/21189 * Changelog for v0.33.0-preview.14 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21938 * fix(patch): cherry-pick 45faf4d to release/v0.34.0-preview.0-pr-22148 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22174 * fix(patch): cherry-pick 8432bce to release/v0.34.0-preview.1-pr-22069 to patch version v0.34.0-preview.1 and create version 0.34.0-preview.2 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22205 * fix(patch): cherry-pick 24adacd to release/v0.34.0-preview.2-pr-22332 to patch version v0.34.0-preview.2 and create version 0.34.0-preview.3 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22391 * fix(patch): cherry-pick 48130eb to release/v0.34.0-preview.3-pr-22665 to patch version v0.34.0-preview.3 and create version 0.34.0-preview.4 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22719 ## New Contributors * @lordshashank made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20667 * @fayerman-source made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20101 * @rohit-4321 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/19907 * @ru-aish made their first contribution in https://github.com/google-gemini/gemini-cli/pull/19821 * @yashodipmore made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20682 * @genneth made their first contribution in https://github.com/google-gemini/gemini-cli/pull/19171 * @WizardsForgeGames made their first contribution in https://github.com/google-gemini/gemini-cli/pull/19608 * @Zheyuan-Lin made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21062 * @7hokerz made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21123 * @clocky made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21175 * @kanywst made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20964 * @Jatin24062005 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21298 * @MumuTW made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21296 * @MohammedADev made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21041 * @Aboudjem made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21358 * @Famous077 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20750 * @Aarchi-07 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20439 * @sebastien-prudhomme made their first contribution in https://github.com/google-gemini/gemini-cli/pull/16836 * @deadsmash07 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20514 * @diodesign made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21490 * @aworki made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21241 * @ame2en made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21287 * @muhammadusman586 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21068 * @nbardy made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21693 * @PrasannaPal21 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20863 * @yongruilin made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21839 * @Aaxhirrr made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21852 * @ayush31010 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20989 * @Shyam-Raghuwanshi made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20307 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.33.2...v0.34.0

## What's Changed * fix(patch): cherry-pick 48130eb to release/v0.33.1-pr-22665 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22720 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.33.1...v0.33.2

## What's Changed * fix(patch): cherry-pick 8432bce to release/v0.33.0-pr-22069 to patch version v0.33.0 and create version 0.33.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22206 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.33.0...v0.33.1

## What's Changed * Docs: Update model docs to remove Preview Features. by @jkcinouye in https://github.com/google-gemini/gemini-cli/pull/20084 * docs: fix typo in installation documentation by @AdityaSharma-Git3207 in https://github.com/google-gemini/gemini-cli/pull/20153 * docs: add Windows PowerShell equivalents for environments and scripting by @scidomino in https://github.com/google-gemini/gemini-cli/pull/20333 * fix(core): parse raw ASCII buffer strings in Gaxios errors by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/20626 * chore(release): bump version to 0.33.0-nightly.20260227.ba149afa0 by @galz10 in https://github.com/google-gemini/gemini-cli/pull/20637 * fix(github): use robot PAT for automated PRs to pass CLA check by @galz10 in https://github.com/google-gemini/gemini-cli/pull/20641 * chore/release: bump version to 0.33.0-nightly.20260228.1ca5c05d0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/20644 * Changelog for v0.31.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/20634 * fix: use full paths for ACP diff payloads by @JagjeevanAK in https://github.com/google-gemini/gemini-cli/pull/19539 * Changelog for v0.32.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/20627 * fix: acp/zed race condition between MCP initialisation and prompt by @kartikangiras in https://github.com/google-gemini/gemini-cli/pull/20205 * fix(cli): reset themeManager between tests to ensure isolation by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/20598 * refactor(core): Extract tool parameter names as constants by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/20460 * fix(cli): resolve autoThemeSwitching when background hasn't changed but theme mismatches by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/20706 * feat(skills): add github-issue-creator skill by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/20709 * fix(cli): allow sub-agent confirmation requests in UI while preventing background flicker by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/20722 * Merge User and Agent Card Descriptions #20849 by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/20850 * fix(core): reduce LLM-based loop detection false positives by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/20701 * fix(plan): deflake plan mode integration tests by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/20477 * Add /unassign support by @scidomino in https://github.com/google-gemini/gemini-cli/pull/20864 * feat(core): implement HTTP authentication support for A2A remote agents by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/20510 * feat(core): centralize read_file limits and update gemini-3 description by @aishaneeshah in https://github.com/google-gemini/gemini-cli/pull/20619 * Do not block CI on evals by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/20870 * document node limitation for shift+tab by @scidomino in https://github.com/google-gemini/gemini-cli/pull/20877 * Add install as an option when extension is selected. by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/20358 * Update CODEOWNERS for README.md reviewers by @g-samroberts in https://github.com/google-gemini/gemini-cli/pull/20860 * feat(core): truncate large MCP tool output by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/19365 * Subagent activity UX. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/17570 * style(cli) : Dialog pattern for /hooks Command by @AbdulTawabJuly in https://github.com/google-gemini/gemini-cli/pull/17930 * feat: redesign header to be compact with ASCII icon by @keithguerin in https://github.com/google-gemini/gemini-cli/pull/18713 * fix(core): ensure subagents use qualified MCP tool names by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/20801 * feat(core): support authenticated A2A agent card discovery by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/20622 * refactor(cli): fully remove React anti patterns, improve type safety and fix UX oversights in SettingsDialog.tsx by @psinha40898 in https://github.com/google-gemini/gemini-cli/pull/18963 * Adding MCPOAuthProvider implementing the MCPSDK OAuthClientProvider by @Nayana-Parameswarappa in https://github.com/google-gemini/gemini-cli/pull/20121 * feat(core): add tool name validation in TOML policy files by @allenhutchison in https://github.com/google-gemini/gemini-cli/pull/19281 * docs: fix broken markdown links in main README.md by @Hamdanbinhashim in https://github.com/google-gemini/gemini-cli/pull/20300 * refactor(core): replace manual syncPlanModeTools with declarative policy rules by @jerop in https://github.com/google-gemini/gemini-cli/pull/20596 * fix(core): increase default headers timeout to 5 minutes by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/20890 * feat(admin): enable 30 day default retention for chat history & remove warning by @skeshive in https://github.com/google-gemini/gemini-cli/pull/20853 * feat(plan): support annotating plans with feedback for iteration by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/20876 * Add some dos and don'ts to behavioral evals README. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/20629 * fix(core): skip telemetry logging for AbortError exceptions by @yunaseoul in https://github.com/google-gemini/gemini-cli/pull/19477 * fix(core): restrict "System: Please continue" invalid stream retry to Gemini 2 models by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/20897 * ci(evals): only run evals in CI if prompts or tools changed by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/20898 * Build binary by @aswinashok44 in https://github.com/google-gemini/gemini-cli/pull/18933 * Code review fixes as a pr by @jacob314 in https://github.com/google-gemini/gemini-cli/pull/20612 * fix(ci): handle empty APP_ID in stale PR closer by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/20919 * feat(cli): invert context window display to show usage by @keithguerin in https://github.com/google-gemini/gemini-cli/pull/20071 * fix(plan): clean up session directories and plans on deletion by @jerop in https://github.com/google-gemini/gemini-cli/pull/20914 * fix(core): enforce optionality for API response fields in code_assist by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/20714 * feat(extensions): add support for plan directory in extension manifest by @mahimashanware in https://github.com/google-gemini/gemini-cli/pull/20354 * feat(plan): enable built-in research subagents in plan mode by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/20972 * feat(agents): directly indicate auth required state by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/20986 * fix(cli): wait for background auto-update before relaunching by @scidomino in https://github.com/google-gemini/gemini-cli/pull/20904 * fix: pre-load @file references from external editor prompts by @kartikangiras in https://github.com/google-gemini/gemini-cli/pull/20963 * feat(evals): add behavioral evals for ask_user tool by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/20620 * refactor common settings logic for skills,agents by @ishaanxgupta in https://github.com/google-gemini/gemini-cli/pull/17490 * Update docs-writer skill with new resource by @g-samroberts in https://github.com/google-gemini/gemini-cli/pull/20917 * fix(cli): pin clipboardy to ~5.2.x by @scidomino in https://github.com/google-gemini/gemini-cli/pull/21009 * feat: Implement slash command handling in ACP for `/memory`,`/init`,`/extensions` and `/restore` by @sripasg in https://github.com/google-gemini/gemini-cli/pull/20528 * Docs/add hooks reference by @AadithyaAle in https://github.com/google-gemini/gemini-cli/pull/20961 * feat(plan): add copy subcommand to plan (#20491) by @ruomengz in https://github.com/google-gemini/gemini-cli/pull/20988 * fix(core): sanitize and length-check MCP tool qualified names by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/20987 * Format the quota/limit style guide. by @g-samroberts in https://github.com/google-gemini/gemini-cli/pull/21017 * fix(core): send shell output to model on cancel by @devr0306 in https://github.com/google-gemini/gemini-cli/pull/20501 * remove hardcoded tiername when missing tier by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/21022 * feat(acp): add set models interface by @skeshive in https://github.com/google-gemini/gemini-cli/pull/20991 * fix(patch): cherry-pick 0659ad1 to release/v0.33.0-preview.0-pr-21042 to patch version v0.33.0-preview.0 and create version 0.33.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21047 * fix(patch): cherry-pick 173376b to release/v0.33.0-preview.1-pr-21157 to patch version v0.33.0-preview.1 and create version 0.33.0-preview.2 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21300 * fix(patch): cherry-pick 0135b03 to release/v0.33.0-preview.2-pr-21171 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21336 * fix(patch): cherry-pick 7ec477d to release/v0.33.0-preview.3-pr-21305 to patch version v0.33.0-preview.3 and create version 0.33.0-preview.4 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21349 * fix(patch): cherry-pick 931e668 to release/v0.33.0-preview.4-pr-21425 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21478 * fix(patch): cherry-pick 7837194 to release/v0.33.0-preview.5-pr-21487 to patch version v0.33.0-preview.5 and create version 0.33.0-preview.6 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21720 * fix(patch): cherry-pick 4f4431e to release/v0.33.0-preview.7-pr-21750 to patch version v0.33.0-preview.7 and create version 0.33.0-preview.8 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21782 * fix(patch): cherry-pick 9a74271 to release/v0.33.0-preview.8-pr-21236 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21788 * fix(patch): cherry-pick 936f624 to release/v0.33.0-preview.9-pr-21702 to patch version v0.33.0-preview.9 and create version 0.33.0-preview.10 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21800 * fix(patch): cherry-pick 35ee2a8 to release/v0.33.0-preview.10-pr-21713 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21859 * fix(patch): cherry-pick 5dd2dab to release/v0.33.0-preview.11-pr-21871 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21876 * fix(patch): cherry-pick e5615f4 to release/v0.33.0-preview.12-pr-21037 to patch version v0.33.0-preview.12 and create version 0.33.0-preview.13 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21922 * fix(patch): cherry-pick 1b69637 to release/v0.33.0-preview.13-pr-21467 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21930 * fix(patch): cherry-pick 3ff68a9 to release/v0.33.0-preview.14-pr-21884 [CONFLICTS] by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/21952 ## New Contributors * @AdityaSharma-Git3207 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20153 * @Nayana-Parameswarappa made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20121 * @Hamdanbinhashim made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20300 * @mahimashanware made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20354 * @AadithyaAle made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20961 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.32.1...v0.33.0

## What's Changed * fix(docs): update references from Bailian to ModelStudio in README an… by @JohnKeating1997 in https://github.com/QwenLM/qwen-code/pull/2714 * chore: bump version to 0.13.1 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/2716 * chore(release): sdk-typescript v0.1.6 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/2743 * fix(shell): resolve Git Bash path for node-pty on Windows by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2733 * fix: resolve /clear command and ESC key lag caused by hooks system by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2656 * feat: add bundled qc-helper skill, qwen-code-claw reference, and README claw guide by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2623 * docs: clarify envKey usage and add env field examples by @Mingholy in https://github.com/QwenLM/qwen-code/pull/2715 * fix: preserve original line endings (CRLF/LF) when editing files by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2707 * fix(core): resolve tree-sitter wasm path for symlinked CLI by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2744 * fix(cli): prevent terminal response leakage on high-latency SSH by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/2718 * fix(shell): remove command substitution deny check from getDefaultPermission by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2747 * chore: release v0.13.2 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/2750 * fix: make list_directory integration test more deterministic by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2752 **Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.13.1...v0.13.2

## Bundled CLI Version This SDK release bundles CLI version: 0.13.1 Source: latest stable CLI from npm --- > Backfilled release for npm-published version 0.1.5 (original workflow failed before GitHub release creation). ## What's Changed * chore: bump version to 0.8.2 by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1632 * chore(release): sdk-typescript v0.1.4 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/1633 * Fix: Use resolved authType to initialize ACP agent by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1622 * Add parentToolCallId and subagentType for ACP subagent tracking by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1620 * feat(core): improve error message when skill is invoked as tool by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1623 * fix(acp): stream subagent text + reasoning chunks by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1626 * fix: ensure output-language.md is created before config initialization by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1637 * fix(security): prevent command injection via newline bypass in shell command validation by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1638 * Fix Claude plugin resource collection to respect marketplace config by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1639 * feat(core): improve retry logic for better 429/5xx error handling by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1628 * feat: add extra_body support for OpenAI-compatible providers by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1654 * Support model selection through ACP in vscode ide companion by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/1582 * feat: add multi-modal input support (image, PDF, audio) across all content generators by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1564 * Add Zed extension for Qwen Code agent server by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1630 * feat: clarify output formats for non-interactive mode by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1579 * feat: add concurrent runner for batch CLI execution by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1640 * Add experimental LSP support for code intelligence by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/1401 * Fix: React/React-DOM version inconsistency in package.json and lockfile by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1659 * feat(webui): implement unified UI architecture with shared component library by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/1543 * chore: bump version to 0.9.0 by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1661 * Add contextWindowSize Configuration Support by @xuewenjie123 in https://github.com/QwenLM/qwen-code/pull/1539 * fix(core): avoid passing undici agent to Anthropic SDK by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1663 * fix(vscode-ide-companion): fix race conditions and improve @ file completion search by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/1676 * fix(core): properly cleanup MCP server subprocesses on exit by @tt-a1i in https://github.com/QwenLM/qwen-code/pull/1285 * test(cli): stabilize AuthDialog ESC assertion by @liqiongyu in https://github.com/QwenLM/qwen-code/pull/1535 * fix(cli): expand MCP @server: resource references by @liqiongyu in https://github.com/QwenLM/qwen-code/pull/1531 * fix(core): auto-enable WebFetch and WebSearch tools in Plan mode by @afarber in https://github.com/QwenLM/qwen-code/pull/1686 * feat(core): add symlink support for skill manager by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/1690 * fix: normalize skill file content in extensions to handle BOM and CRLF by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1667 * fix(ci): honor manual preview version input by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1665 * build: Improve build efficiency and add dev mode by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1681 * fix(core): handle heredoc in command substitution guard by @liqiongyu in https://github.com/QwenLM/qwen-code/pull/1701 * feat: Preserve UTF-8 BOM when editing files by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1680 * fix(core): Preserve trailing whitespace in newString during edits by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1688 * fix: enable Shift+Tab shortcut in Windows PowerShell by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1607 * fix(core): enforce tool restrictions in subagents by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1691 * [AnthropicContentGenerator] optimize: ADD cache_control for system and last user text message by @Weaxs in https://github.com/QwenLM/qwen-code/pull/1613 * refactor(i18n): translate Agent as 智能体 by @itchina110 in https://github.com/QwenLM/qwen-code/pull/1718 * fix(docker): fix build error and enable manual version builds by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1722 * chore(release): Bump version to 0.10.0 by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1720 * fix(settings): rename negative settings to positive naming (disable* -> enable*) by @afarber in https://github.com/QwenLM/qwen-code/pull/1330 * ci(sdk-release): use stable CLI tags for SDK releases by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1710 * feat(query): add support for resuming sessions with session ID by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/1714 * add hint for installing external source extensions by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1694 * Feat/javasdk alpha 202501 by @gwinthis in https://github.com/QwenLM/qwen-code/pull/1717 * Fix: clarify is_background parameter is required in docs and examples by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1716 * feat: Remove Smart Edit tool and ClearcutLogger by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1684 * Add export command for session history with markdown and HTML formats by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1515 * Add FORK_MODE support to ProcessTransport for Electron IPC integration by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1719 * feat(sdk): add resume, continue options and extend authType support by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1726 * Fix ACP model selection to handle all configured authentication types by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1555 * refactor: remove read_many_files tool, add readManyFiles utility for user @-commands by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1673 * fix(vscode-ide-companion): Fix UI display issues with server-side timestamp and file path extraction by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/1682 * chore: Reduce Qwen OAuth free quota from 2000 to 1000 requests per day by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/1730 * fix(ui): resolve auth not updating in top-right corner by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/1670 * feat: debug mode output refactor — route console calls to logfile-first debugLogger by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1610 * fix: use openai model instead of index=0 in acp integration test by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1733 * fix(cli): route sandbox diagnostic messages to stderr by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1735 * Add CLI source selection for SDK releases and fix subagent output handler by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1732 * feat(paste): add large paste placeholder and fix enter-submit on macOS by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1713 * fix(cli): prevent Tab key from cycling approval mode when autocomplete is active on Windows by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1736 * feat: promote Agent Skills from experimental to stable by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1738 * feat: add source information tracking in telemetry logs by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/1653 * docs: Update Linux/Mac installation commands in README by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/1739 * feat(settings): add settings.env field for environment variable configuration by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1751 * fix(mcp): improve MCP server management and authentication by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1752 * fix(core): properly handle MCP multi-part tool results in OpenAI converter by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1755 * Fix CLI argument parsing for /dist/cli/cli.js entry point by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1758 * fix(integration-tests): correct MCP tool name in simple-mcp-server test by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1763 * Fix SDK MCP integration tests by updating hardcoded tool names to use constants by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1769 * Fix: Warning in installation shell script by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/1771 * fix(ui): resolve model not updating in top-right corner by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/1662 * fix(cli): use PowerShell Get-Command for Windows sandbox detection by @afarber in https://github.com/QwenLM/qwen-code/pull/1604 * fix: prioritize local path detection in extension installation by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1770 * fix(auth-model-login-ui): prevent Enter key from triggering empty message submission by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/1773 * feat: add MCP tool progress update support in TUI and SDK mode by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1756 * feat: add Coding Plan authentication mode with unified AuthDialog by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1788 * feat(coding-plan): implement Coding Plan configuration management and update prompts by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1805 * docs: update authentication documentation with Coding Plan setup guide by @joeytoday in https://github.com/QwenLM/qwen-code/pull/1800 * chore: bump version to 0.10.1 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/1808 * Fix: Fix node installation permission issue in shell script by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/1819 * fix: prevent AbortSignal listener memory leak by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1811 * feat: add TPM throttling error handling with 1-minute retry delay by @wenshao in https://github.com/QwenLM/qwen-code/pull/1791 * fix: correct showLineNumbers default value to true by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1813 * fix: support JSON Schema draft-2020-12 for MCP tools (fixes #1818) by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/1821 * Add dev launch config and preserve existing NODE_OPTIONS by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/1784 * Fix abort listener accumulation in subagent while loop by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1825 * refactor(cli): unify Escape key handling in AppContainer by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1824 * Fix auth UI to use semantic theme colors and correct selection sync by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1823 * Add --session-id support for CLI and SDK by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1822 * chore: bump version to 0.10.2 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/1844 * docs: improve settings.json configuration guide with quick setup examples by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/1850 * feat: update readme by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/1853 * docs: add news banner about Qwen3.5-Plus launch by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/1854 * Fix sandbox user permission in integration tests by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1843 * Add Coding Plan Global/Intl region support by @Mingholy in https://github.com/QwenLM/qwen-code/pull/1860 * chore: bump version to 0.10.3 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/1863 * chore: bump version to 0.10.4 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/1864 ## New Contributors * @itchina110 made their first contribution in https://github.com/QwenLM/qwen-code/pull/1718 * @joeytoday made their first contribution in https://github.com/QwenLM/qwen-code/pull/1800 * @wenshao made their first contribution in https://github.com/QwenLM/qwen-code/pull/1791 **Full Changelog**: https://github.com/QwenLM/qwen-code/compare/sdk-typescript-v0.1.4...sdk-typescript-v0.1.5

## What's Changed * fix(extensions): support non-GitHub git URLs for extension installation by @d191 in https://github.com/QwenLM/qwen-code/pull/2539 * fix(cli): `/memory show --project` and `--global` now display all configured context files by @huww98 in https://github.com/QwenLM/qwen-code/pull/2368 * fix(mcp): restore trust+isTrustedFolder permission check in getDefaultPermission by @huww98 in https://github.com/QwenLM/qwen-code/pull/2642 * fix(cli): preserve selected auth type on startup auth failure by @zy6p in https://github.com/QwenLM/qwen-code/pull/2080 * feat(hooks): Add comprehensive hook execution telemetry by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2421 * fix(vscode-ide-companion): improve ACP error handling to prevent silent loading hangs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/2546 * fix(vscode-ide-companion): silence secondary sidebar warning on older VS Code versions by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/2545 * fix(lsp): improve C++/Java/Python language server support by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/2547 * fix(vscode-ide-companion): preserve model metadata on switch by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/2591 * fix(windows): support git bash/MSYS2 shell detection on Windows by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2645 * feat(hooks ui): refactor ui for Qwen Code hooks by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2602 * docs: add hooks documentation and fix JSON schema by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2679 * test(sdk): improve tool control docs and add pattern matching tests by @Mingholy in https://github.com/QwenLM/qwen-code/pull/2644 * fix(shell): handle PTY race condition errors gracefully by @Mingholy in https://github.com/QwenLM/qwen-code/pull/2611 * feat: human-readable permission labels, deny rule feedback, and multi-dir search improvements by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2637 * fix(acp-integration/agent): clear stale subagent diff confirmation after IDE accept by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/2631 * fix: use config working directory for OpenAI logger path resolution in ACP mode by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2675 * fix: @ file search stops working after selecting a slash command by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2694 * fix(acp): align permission flow across clients by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2690 * test(sdk): improve permission message pattern matching by @Mingholy in https://github.com/QwenLM/qwen-code/pull/2712 * feat(auth): implement Alibaba Cloud Standard API Key support by @JohnKeating1997 in https://github.com/QwenLM/qwen-code/pull/2668 ## New Contributors * @d191 made their first contribution in https://github.com/QwenLM/qwen-code/pull/2539 * @JohnKeating1997 made their first contribution in https://github.com/QwenLM/qwen-code/pull/2668 **Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.13.0...v0.13.1

## What's Changed * chore: bump version to 0.13.0 by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/2451 * fix(pipeline): handle duplicate finish_reason chunks from OpenRouter by @simon100500 in https://github.com/QwenLM/qwen-code/pull/2403 * feat: add system prompt customization options in SDK and CLI by @DragonnZhang in https://github.com/QwenLM/qwen-code/pull/2400 * fix(cli): show newest-first history for Ctrl+R command search by @kkhomej33-netizen in https://github.com/QwenLM/qwen-code/pull/2425 * feat(hooks): implement hooks extension mechanism by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2352 * Fix: Ensure message_start and message_stop events are paired in SDK streaming by @Mingholy in https://github.com/QwenLM/qwen-code/pull/2448 * fix(core): add truncation support for MCP tool output by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/2446 * feat(core): execute task tools concurrently for improved performance by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/2434 * refactor(core): improve error handling and quota detection by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/2458 * feat(arena): Add agent collaboration arena with multi-model competitive execution by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/1912 * refactor: Refactors the VS Code file completion system to use fuzzy search by @qqqys in https://github.com/QwenLM/qwen-code/pull/2437 * feat(ui): Display token usage in the loading/progress indicator by @qqqys in https://github.com/QwenLM/qwen-code/pull/2445 * feat(vscode-ide-companion): add Tab key fill-only behavior for completions by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/2431 * fix(vscode-ide-companion): update URI handling for Windows paths by @qqqys in https://github.com/QwenLM/qwen-code/pull/2457 * feat: add /context command to display context window token usage breakdown by @pomelo-nwu in https://github.com/QwenLM/qwen-code/pull/1835 * fix(test): update LoadingIndicator snapshot for correct output alignment by @qqqys in https://github.com/QwenLM/qwen-code/pull/2469 * feat: support skills in .agents directory and other provider directories by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2202 * feat: add `auth` CLI command and Qwen Code Claw skill by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2440 * feat(export): add metadata and statistics tracking by @Mingholy in https://github.com/QwenLM/qwen-code/pull/2328 * fix: correct token limits for MiniMax-M2.5 and GLM models by @Mingholy in https://github.com/QwenLM/qwen-code/pull/2470 * feat(hooks): Implement 10 core event hooks for session lifecycle and tool execution by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2203 * fix: update TOS link in VS Code extension README by @Br1an67 in https://github.com/QwenLM/qwen-code/pull/2495 * fix: preserve modalities during OpenAI logging request conversion by @kkhomej33-netizen in https://github.com/QwenLM/qwen-code/pull/2473 * Feat: support permission by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2283 * feat: add .agents/skills as a skill provider directory by @Br1an67 in https://github.com/QwenLM/qwen-code/pull/2476 * fix: clean up ACP connection state when child process exits by @zhangxy-zju in https://github.com/QwenLM/qwen-code/pull/2472 * fix(vscode-ide-companion): pass proxy configuration to CLI by @qqqys in https://github.com/QwenLM/qwen-code/pull/2501 * fix: include bundled skills directory in published package by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2521 * docs: rename QWEN.md to AGENTS.md to follow community best practices by @qwen-code-ci-bot in https://github.com/QwenLM/qwen-code/pull/2527 * feat(vscode-ide-companion): add image paste support by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/1978 * feat(storage): support configurable runtime output directory by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/2127 * feat(core): add Explore agent and rename TaskTool to AgentTool by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/2489 * docs: add Screenshots/Video Demo section to PR template by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/2533 * fix: update Discord invite link to permanent URL by @joeytoday in https://github.com/QwenLM/qwen-code/pull/2535 * feat(hooks): use extension dir files instead of tmp dir files by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2478 * feat(cli): add /btw slash command for ephemeral side questions by @wenshao in https://github.com/QwenLM/qwen-code/pull/2371 * Fix shell permission parsing and test-created debug artifacts by @LaZzyMan in https://github.com/QwenLM/qwen-code/pull/2536 * fix(web-fetch): add simplified system instruction to prevent AI greeting responses by @tanzhenxin in https://github.com/QwenLM/qwen-code/pull/2610 * fix(hooks): terminate hook child processes when user exits CLI by @DennisYu07 in https://github.com/QwenLM/qwen-code/pull/2607 ## New Contributors * @simon100500 made their first contribution in https://github.com/QwenLM/qwen-code/pull/2403 * @Br1an67 made their first contribution in https://github.com/QwenLM/qwen-code/pull/2495 **Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.12.6...v0.13.0