Bash rules under sandbox auto-allow
Bash deny and ask rules now hold when the sandbox auto-allows commands
- Variable prefix
- TZ="$HOME" rm -rf build
- Bare assignment
- a variable set before the command
Bash deny and ask rules now hold when the sandbox auto-allows commands. A rule used to miss a command behind an environment variable prefix, or after a bare variable assignment. Now your rule applies.
Deny rules hold
>Deny rules now hold against mods, plugins and symlinks
- Compound commands
- on managed machines, a rule on a nested part beats a user-installed mod's approval
- Managed MCP sign-in
- a user-installed plugin can't rewrite its tool descriptions
- Read deny rules
- apply to IDE files reached through a symlink
On managed machines, a deny or ask rule on part of a compound command now beats a user mod's approval. User plugins can't rewrite managed MCP sign-in tools. And Read deny rules now follow IDE symlinks.
VS Code sign-outs
>In VS Code, a change that may have caused more sign-outs is reverted
- Reverted
- the 2.1.288 change to claude auth status
If VS Code has been signing you out more often since the last release, Claude Code reverted that release's change to the auth status command, which may have made sign-outs more frequent.
Freezes fixed
>Three freezes fixed: in the terminal, on artifact pages and at launch
- Terminal
- short code blocks with many unclosed <script> tags or deeply nested ${ substitutions
- Artifact pages
- the same code blocks no longer freeze or crash the reader's browser tab
- Launch
- a plugin Box with a border style the terminal does not know
A short code block full of unclosed script tags no longer freezes your terminal or an artifact page. And a plugin's unknown border style no longer freezes launch.
Plugin failures stay contained
>A failing plugin or mod no longer ends your session
- Background sessions
- survive a plugin's on-screen handler throwing asynchronously
- A mod's row or Client
- fails alone: the engine draws its own row, or the mod gets ui.fault
- After an upgrade
- installed mods load in the first session
Supervised and background sessions now survive a plugin handler that throws. A mod's row or client that breaks while drawing now fails alone. And installed mods now load in the first session after an upgrade.
agent.spawn for teammates
>Mods get agent.spawn for teammates
- agent.spawn
- for teammates
- Plugin hook events
- one agent id across them
- $.agent.list()
- now reports idle and waiting states
For mod authors, agent.spawn now works for teammates, a plugin's hook events share one agent ID, and the agent list reports which agents are idle or waiting.
The full changelog
Every fix in this release is in the Claude Code changelog
CHANGELOG.md in anthropics/claude-code
The release also fixes plugin panes, plugin validate, and text that drew over the rows below it. The full list is in the Claude Code changelog on GitHub.
