Claude Mods
Claude Mods let plugins change deeper behavior in Claude Code
- A mod
- a plugin whose hooks module hooks the engine's own events
- Built in
- the /diff pane, AGENTS.md support, telemetry, organization policy
Claude Code plugins can now change deeper behavior, as Claude Mods. A mod hooks the engine's own events. Four ship built in, including the diff pane and AGENTS.md support, and their source is public.
You should know
>A new opt-in plugin, You should know, flags what you or Claude might miss
- How
- a side agent watches the session
- Available in
- first-party sessions with telemetry on
There's a new built-in plugin called You should know. A side agent watches your back and flags things you or Claude might miss. It's opt-in, for first-party sessions with telemetry turned on.
1M context by default
>Opus 4.7 and later, and Fable, now default to a 1M context window on more platforms
- Platforms
- Bedrock, Vertex, Foundry, the Claude apps gateway
- Model name
- no [1m] suffix needed
- Keep 200K
- CLAUDE_CODE_DISABLE_1M_CONTEXT=1
Opus 4.7 and later, and Fable, now default to a 1 million token context window on Bedrock, Vertex, Foundry and the Claude apps gateway, with no suffix on the model name. An environment variable keeps 200 thousand.
URL prompts from MCP servers
>MCP servers can now prompt you with a URL, for example to sign in
- Protocol
- MCP 2025-11-25
- If a server stops connecting
- "bareElicitationCapability": true in its MCP config entry
MCP servers on the November 2025 protocol can now prompt you with a URL, for example to sign in. If a server stops connecting after this update, one setting in its config brings it back.
Shell safeguards
>Risky shell deletes and writes now stop and ask you first
- Dangerous rm
- keeps its always-ask safeguard when it also redirects output
- Committed symlinks
- a write onto a sensitive file names where it lands and waits
- Bash allow rules
- prompt before writing files the file tools refuse
Shell safeguards got tighter. A dangerous rm on your home directory keeps asking even when it also redirects output. Writes through a committed symlink onto a sensitive file wait for you, and so do allowed Bash writes to the credentials file.
Fixes
>CLAUDE.md loads once, Remote Control reconnects, and Fable stays current
- CLAUDE.md
- attached once after a resume or a compaction
- Remote Control
- gives up a stalled reconnect after 30 seconds, then retries
- Fable in /model
- on a claude.ai login, your default follows the newest Fable
A folder's CLAUDE.md is no longer attached twice after a resume or compaction. Remote Control retries a stalled reconnect after 30 seconds. And on a claude.ai login, your Fable default follows the newest Fable.
Run in background in VS Code
>In VS Code, a running command or subagent can now move to the background
- Run in background
- on a running command or sub-agent
- Agent map
- background shells and Monitors show their output
In VS Code, a running command or sub-agent now offers Run in background, so you keep working. Background shells and Monitors also show their output in the agent map.
The full changelog
Every change in this release is in the Claude Code changelog
CHANGELOG.md in anthropics/claude-code
The release also carries nine screen reader fixes, and changes for cloud sessions, Code Review and Claude Tag. The full list is in the Claude Code changelog on GitHub.
