Anthropic

Fixed a permission-check bypass in Windows PowerShell 5.1 sessions and made Bash permission checks fail closed on file-descriptor redirect forms that Bash parses differently than the permission analyzer. Also added the EndConversation tool for abusive users, permission prompts for docker daemon-redirect flags, and fixed unbounded memory growth with oversized settings files.

Redesigned /fork: it now copies your conversation into a new background session, while the old in-session subagent is now /subtask. Added claude auto-mode reset to restore default auto-mode configuration. Fixed plan mode auto-running file-modifying Bash commands without a permission prompt or SDK callback. Plus dozens of additional fixes across worktree creation, ultrareview, Windows, OpenTelemetry, and web reliability.

Fixed permission previews not neutralizing bidirectional-override and look-alike quote characters that could visually alter approval messages. Fixed parallel sessions all logging out after wake-from-sleep, plugin MCP servers not reconnecting after idle, and auto mode overriding a PreToolUse hook's ask decision. Also fixed /clear not resetting the session cost counter, subagent model overrides reverting, and a prompt-caching regression on Bedrock and Vertex. Includes dozens of additional fixes across file uploads, Vim mode, background agents, and Windows stability.

Mid-conversation system messages are now available on Claude Fable 5, Claude Mythos 5, and Claude Opus 4.8 across the Claude API, Amazon Bedrock, and Google Cloud. No beta header is required.

Fixed isolation: 'worktree' subagents being able to run git-mutating commands against the main repo checkout instead of their own isolated worktree. Also fixed the ultracode keyword firing on non-human input, plugin server teardown during re-sync, and dozens of other fixes across session management, MCP, and crash handling.

Fixed /model and other dialogs that were being blocked in background sessions started with claude agents, reverting an overly broad guard.

Added an opt-in screen reader mode for plain-text rendering, and fixed multiple memory leaks in long sessions including MCP stdio server stderr accumulating up to 64 MB per server and LSP documents staying open indefinitely. Also includes a new corporate launcher wrapper, vim insert-mode remaps, and dozens of bug fixes spanning session attach, context window resets, and tool failures.

New Admin API beta for Claude Enterprise lets organizations list members, change roles, remove members, send invites, and manage groups and custom roles. Group and custom-role endpoints require the anthropic-beta: ce-user-management-2026-07-13 beta header.

Auto mode ships without opt-in on Bedrock, Vertex AI, and Foundry, and Claude Opus 4.8 is now the default on those platforms. Fixed a terminal freeze during long streaming responses, remote managed settings being permanently recorded without consent, and a plugin shell-injection vector where user config in commands is now rejected.

Fixed MCP servers configured via --mcp-config or .mcp.json ignoring per-server request_timeout_ms, which caused long-running tool calls to time out at the 60s default in fresh sessions. Also fixed OAuth MCP servers requiring manual re-authentication after a single failed token refresh, and improved the agents view to use full terminal width for the status column instead of truncating at 64 characters.

Dreams (research preview) now supports Claude Fable 5 and Claude Sonnet 5.

Expanded Access Transparency documentation for cmek_preserve events with a filter example, example event payload, and two preservation reason codes. Also clarifies that a preservation event is written whether initiated by a human reviewer or an automated safety pipeline.

A new reflection feature in beta helps users track Claude usage patterns over customizable periods, view summaries of topics and tasks, and receive reflective prompts aligned with Anthropic's 4D AI Fluency Framework (delegation, description, discernment, diligence). Users can set quiet hours or schedule nudges to take breaks. The feature is available for Free, Pro, and Max users with Memory enabled.

A new monthly recap at Settings > Reflect shows topics you spent time on, your most active day and peak hour, and observations about how you work with Claude. Settings > Time and focus lets you set optional break reminders and quiet hours. Both are in beta on Free, Pro, and Max plans on web and Claude Desktop, and require memory to be enabled.

Added an auto mode rule that blocks tampering with session transcript files. Fixed --json-schema silently producing unstructured output when the schema was invalid, and schemas using the format keyword being rejected. Fixed a critical Windows bug where worktree removal deleted files outside the worktree when an NTFS junction or directory symlink existed inside it, and a Windows crash when the directory Claude was launched from is deleted, locked, or unmounted.

Fixed hook events not streaming during SessionStart hooks in headless sessions, which could cause remote workers to be idle-reaped mid-hook.

You can now set an expiration when creating API keys or Admin API keys in the Claude Console, choosing a preset, custom duration, or Never. Keys with a lifetime of at least 7 days trigger an email reminder before expiration.