anthropics/claude-code v2.1.321 on GitHub

What's changed

Added Claude Fable 5.2 (claude-fable-5-2), now the default Fable model — 1M context, $8/$40 per Mtok with $0.20/Mtok cache reads
Added --settings <file> to claude remote-control, which applies a settings file to every session it starts; if the file changes, no new session starts until you restart claude remote-control
Fixed MCP OAuth requests sending secrets such as refresh tokens to another host when a server redirected them
Fixed a case where a read-only Bash command ran outside the sandbox without a permission prompt
Fixed a case where Bash permission checks judged a file write from the wrong folder and didn't prompt
Fixed deny rules and protected-file prompts not applying to the file that a cp or mv into a directory writes
Fixed the "Draws from usage credits" note showing after a switch to Fable on Enterprise seats whose plan includes Fable
Fixed the fallback model sometimes declining a request or mentioning a stopped response when the first model was blocked before replying
Fixed claude mcp login printing a SEP-2352 issuer warning each time you sign in again to a server that Claude Code registered with
Fixed NotebookEdit deleting or overwriting a notebook's first cell when the call named no cell, on network paths (UNC shares, WSL folders, /net mounts)
Fixed Edit changing the first of several matches, replacing a whole file on an empty old_string, or editing a notebook as text, on network paths (UNC shares, WSL folders, /net mounts)
Fixed /config showing Manual as the default permission mode when new sessions start in auto mode; pressing Space on "Auto (default)" now saves Don't Ask, not Plan
Windows: Fixed FileChanged hooks stopping for paths set through watchPaths after the first shell command, when the session's working directory had a lowercase drive letter
Fixed --plugin-dir . and --plugin-dir ./builtin writing generated type files for Claude Code's built-in plugins into a builtin folder
Fixed context usage estimates overcounting tool definitions when exact token counts are unavailable
Fixed /compact showing twice in Remote Control on web and mobile
Fixed plugin auto-updates and /plugin marketplace updates downloading a plugin again for each worktree or folder of a repository
Fixed auto mode losing a background subagent's report that had started a turn when the conversation was compacted before Claude answered it
Fixed project skills, commands and agents staying missing after their folder was removed and came back mid-session, such as with git stash, including after entering a worktree
Fixed claude -p sometimes telling Claude that background commands get 30 minutes when they are stopped after 10
Fixed pkill, pgrep and pidwait in cloud sessions matching the session's own parent processes
Fixed Claude in Chrome and computer use server processes staying alive after their parent exits behind a proxy that stalls connections
Fixed a large hook output pointing Claude to a file that held another hook's output from the same tool call
Fixed apps that embed Claude Code getting their own PreToolUse hook's ask reason instead of another hook's when both asked
Fixed a PreToolUse hook's ask being lost when another hook's defer finished first and could not be honored
Fixed a rare crash on permission prompts and background tasks
Fixed project skills, commands and agents disappearing from the menu in SDK and desktop sessions after Claude entered a worktree
Fixed /desktop on macOS saying Claude Desktop is not installed when it is in ~/Applications
Fixed OpenTelemetry repository attributes (vcs.*) missing from Claude Desktop sessions that start on a pre-started process
Fixed WebFetch passing "No response from model" to Claude as page content when the model reading the page returned no text; the call now fails with a clear error
Fixed screen reader mode delaying the prompt at startup when the system clock moved back while Claude Code was starting
Fixed a command's panel sometimes not coming back after a dialog closed, leaving no panel or prompt on screen until the next redraw
Fixed a project's MCP server being disconnected after the first message in a Claude Desktop Code tab session when the desktop app has an MCP server or extension of the same name
Fixed a turn ending with "API Error: EPROTO: The TLS handshake failed" when the connection broke partway through a reply; the partial reply is kept or the request is retried, as before 2.1.302
Fixed high memory use in long sessions that repeatedly read single lines from large files
Fixed fast mode losing replies, switching models or retrying for minutes when fast serving is rate-limited, overloaded or failing; it now tries standard speed on the same model first
Fixed one request carrying far more background agent reports than intended after Claude was stopped while several were waiting
Fixed messages from a Claude Desktop Code tab session to your other sessions staying paused after you typed while Claude was still working
Fixed claude agents ignoring --permission-mode, --dangerously-skip-permissions, --model, --effort or --agent typed before agents when a flag such as --verbose was also on the line
Fixed a case where Remote Control showed as off with "login expired" in the desktop app while its connection was still up, because the app was briefly unable to hand over a sign-in token
Fixed a Remote Control message sent with "Queue for later" reaching Claude in the middle of the running turn
Fixed the git status given to Claude at session start reading as clean when git status failed; it now reads as unavailable
Fixed the git status given to Claude at session start showing the first listed file as staged when its changes were not staged
Fixed a hang or out-of-memory crash when a connector in a cloud session lists resources with very long names
Fixed Remote Control showing as connected after its connection closed for good while the session's history was still uploading
Fixed screen reader mode turning off when you return to a conversation from agent view
Fixed screen reader mode y/n questions taking as yes a stray "y" at the end of text typed as the question opened
Fixed cloud sessions telling Claude that a host is probably not allowed when it is allowed and the network proxy could not connect to it
Fixed an MCP server sometimes showing as connected with no tools after it was reconnected or the session's directory changed while its tools were still loading
Fixed Bash commands sometimes running in the wrong folder when Claude sent several at once and an earlier one changed folders
Fixed files Claude sends from cloud and Remote Control sessions failing at once when an upload gets an HTTP 507 from a proxy; the upload now gets a second try
Fixed new messages not being saved, and claude -p, SDK and VS Code sessions hanging, when memory ran out while the transcript was being read
Fixed sign-in, token refresh and logout waiting indefinitely when something on the network accepts the connection but never answers the TLS handshake
Fixed a sent file showing under a different name in the Claude apps when its name hid text-direction or control characters; Claude now refuses to send such a file
Fixed sub-agent progress summaries running a request to its end after the model replied with a tool call
Fixed Bash reads such as grep -r foo "$PWD/src" asking for permission when the same command with the path typed out runs without asking
Fixed Claude apps gateway refusing to start when a desktop setting holds a field newer than the gateway, such as a managed MCP server's oauth.omitResource; it now warns and serves it
Fixed Bash commands coming back empty for zsh users whose .zshrc sets KSH_OPTION_PRINT
macOS: Fixed "Unable to read managed policy settings" at startup when a valid MDM profile was slow to read: the read is retried once, and a timeout is now reported as a timeout
Fixed agent view erasing another agent view's saved input text when it restarted for an update with nothing typed
Fixed remote sessions giving no reply after a restart when a UserPromptSubmit hook blocked a replayed permission answer; these hooks no longer run on that replay
Fixed claude remote-control accepting a y typed without Enter at its first-run question when the terminal's input ended
Fixed Claude Desktop not showing spend limit warnings behind a Claude apps gateway whose policy has no code: rules
Fixed fullscreen sessions with some plugins ending with an error when a tool result that had got shorter scrolled off the top of the screen
Fixed prompt suggestions making extra API requests when the model replied with a tool call
Fixed PreToolUse mcp_tool hooks on stdio and HTTP MCP servers being skipped when their answer was over 16 MiB; the tool call is now refused
Fixed skill and command names holding a Bamum letter that some fonts draw as blank: they are now refused
Fixed claude -p on Linux exiting 0 in silence when a full NFS export or a used-up NFS quota lost transcript lines: it now prints an error and, in text and json output, exits 1
Fixed background agents being reported as stopped by the user, and refused a resume, when a service interrupted a cloud session and nobody pressed Stop
Fixed NotebookEdit reporting success to hooks and telemetry when the edit failed, for example when the notebook changed while the permission prompt was open
Fixed a blank screen or no answer at startup, and empty claude mcp list output, when a stored MCP sign-in record was null
Fixed the Artifact tool telling Claude to add filters when an artifact's database collection is too large to sort; it now says to read the collection page by page and sort the results
Fixed a restarted cloud session dropping a message with a large image when the restart came before Claude's first reply to it
Fixed a restarted cloud session leaving a subagent's message to the main conversation unanswered
Fixed Claude not being told when you stop or pause a running workflow, so it no longer says the workflow is still running
Improved the /model picker: "More models" is now an unnumbered row below every other, and older models open under it without renumbering the rest
Gateway: Improved spend limits on a busy replica, which now skips fewer checks and records spend sooner
Improved the Claude apps gateway's sign-in limit messages in Claude Code and on the /device page: they no longer name gateway settings, which the gateway's own log still names
Improved claude install and the install scripts: they finish 2 to 4 seconds sooner
Improved how soon a Remote Control session whose process crashed can pick up a new message
Windows: Improved startup and first-command time by finding programs on PATH without starting a helper process
Improved auto mode in headless sessions, the desktop app and VS Code: reports from background subagents that wait together are answered in one model call, as in the terminal
Improved the agent view's row for a claude --bg --worktree session that couldn't set up its worktree: it now shows the error from its beginning, not an internal tag or its last 200 characters
Improved the messages shown when an artifact is in another organization: /login is offered only if it's one of yours, and Claude now says where a copy may be after an account move
Improved sessions with more images than fit in one request: Claude is told whether it has already seen a dropped image, and repeat reads of an unchanged image are limited
Improved claude remote-control's messages for an unanswered first-run question: each now says what to do next
Improved start-up time by loading trusted TLS certificates faster
Improved Claude apps gateway error messages to show the gateway's address without any user name or password
Improved the Claude apps gateway's spend limit error: the reset now shows in your local time, such as "resets 4pm (America/Los_Angeles)"
Windows: Improved startup time with a standard Git for Windows install by no longer checking which git.exe to run on every launch
Updated the session-feedback message and the allowedProviders setting description to name Ultra alongside Pro and Max, and the forceLoginMethod description to cover every paid Claude plan
Updated the bundled dataviz skill to suggest a list of meters, one row per item, for several ratios that each have their own limit
Updated the "Upgrade to Max" options to say "Upgrade to Max or Ultra"
Changed mods Claude writes to turn on without asking in auto and bypass modes, even with managed allowUnsandboxedCommands: false or allowManagedDomainsOnly, and not to load in dontAsk mode
Changed mods' own tool calls ($.tool.call, $.mcp.call) to raise no permission prompt, even under your own ask rules or in dontAsk and -p runs; deny rules and organization policy still apply
Changed saved Fable 5.1 model picks to move to fable: on Pro and Max plans at once, on Team and Enterprise plans once your organization allows it; use /model claude-fable-5-1 to switch back
Changed the fast mode labels in /fast, /config and /model to name your current model when it supports fast mode, and removed "(Opus only)" from the VS Code row
Changed nested skill loading: .claude/skills folders inside ~/.claude/plugins no longer load when Claude works on files there
Self-hosted runner: Changed an on-demand runner that the server refuses because it is not needed (session ended or paused, work order superseded) to exit 0 instead of 1
Windows: Changed how Claude Code finds programs it starts itself, such as git, to skip relative and UNC PATH entries and links onto a network share, and to pick up PATH changes from settings
Changed OpenTelemetry hook events in non-interactive sessions to leave two built-in hooks out of num_hooks and num_success after Bash and PowerShell calls
Changed the number of messages a Claude Desktop Code tab session can send to your other sessions before it waits for you to type again from 10 to 20
Changed AskUserQuestion in claude -p and SDK sessions to deny a host's permission answer that sets the undocumented afkTimeoutMs input field
Changed managed extraKnownMarketplaces: a declared name can't be added from another source, an entry from elsewhere is hidden, and plugins the declared marketplace lists are reinstalled from it
Changed Claude in Chrome tools that an app running Claude Code provides, such as the Claude desktop app's Code tab, to follow your organization's Claude in Chrome policy
Changed policy_mode: layered in the Claude apps gateway: managed MCP servers now add up over every matching policy, match: {} included, so a gateway already on it serves more after the upgrade
Gateway: Changed Bedrock, Vertex and Foundry upstreams to ignore the ANTHROPIC_*_BASE_URL variables in the gateway's environment. Set base_url on the upstream to use another endpoint
Changed headless sessions to reload mods in .claude/skills when their files change; set CLAUDE_CODE_PLUGIN_DIR_WATCH=0 to turn this off
Changed the Cyber Verification Program sentence on a cyber safeguard block to use the same words as claude.ai
Changed Cowork cloud sessions: a PostToolUse hook can no longer replace the answer to AskUserQuestion or the plan in ExitPlanMode's result; Claude reads the originals
Changed cp and mv spelled by a path, such as /bin/cp, to get the same path checks as cp and mv
Changed background command notifications and TaskStop results to show Claude only the start and end of a command over 1,000 characters, which saves context
Changed artifact design guidance to treat Inter and Space Grotesk as good default typefaces
Changed the account email check to refuse only a shell command that holds your email and names a User-Agent, without asking, so other commands and scheduled runs no longer stop at its prompt
Changed Remote Control sessions to keep the folder they were started in: a connected client can no longer move a session to another folder
Changed managed extraKnownMarketplaces take-overs from an undeclared source: saved data is set aside for cleanupPeriodDays, and options and secrets until claude plugin restore-set-aside
[VSCode] Added a warning above the prompt box when both an auth token and an API key are set, matching the terminal's startup warning
[VSCode] Fixed a plugin's permission request showing a name with hidden characters: it now reads "a plugin"