v2.1.98

Added:

• Interactive Google Vertex AI setup wizard on login screen with GCP authentication, project/region configuration, credential verification, and model pinning
• CLAUDE_CODE_PERFORCE_MODE env var for p4 edit hints on read-only files
• Monitor tool for streaming events from background scripts
• Subprocess sandboxing with PID namespace isolation on Linux via CLAUDE_CODE_SUBPROCESS_ENV_SCRUB
• CLAUDE_CODE_SCRIPT_CAPS env var to limit per-session script invocations
• --exclude-dynamic-system-prompt-sections flag for improved cross-user prompt caching
• workspace.git_worktree to status line JSON input
• W3C TRACEPARENT env var to Bash tool subprocesses for OTEL trace parenting
• LSP clientInfo identification

Fixed:

• Bash tool permission bypass with backslash-escaped flags
• Compound Bash commands bypassing forced permission prompts
• Read-only commands with env-var prefixes not prompting
• Redirects to /dev/tcp/... or /dev/udp/... not prompting
• Stalled streaming responses timing out instead of falling back
• 429 retries burning all attempts in ~13s; exponential backoff now applies as minimum
• MCP OAuth oauth.authServerMetadataUrl not honored on token refresh
• Capital letters dropped to lowercase with kitty keyboard protocol on xterm and VS Code
• macOS text replacements deleting trigger word instead of substituting
• --dangerously-skip-permissions downgraded after write to protected path
• Managed-settings allow rules remaining active after removal
• permissions.additionalDirectories changes not applying mid-session
• Removing directory from additionalDirectories revoking --add-dir access
• Bash(cmd:*) and similar wildcard rules failing with extra spaces/tabs
• Deny rules downgraded to prompts for piped commands with cd
• False Bash permission prompts for cut, paste, column, awk commands and filenames with %
• Permission rules with prototype property names causing silent ignores
• Agent team members not inheriting leader's permission mode
• Crash in fullscreen mode hovering over MCP tool results
• Wrapped URLs copying with spaces at line breaks
• File-edit diffs disappearing on --resume for files >10KB
• Multiple /resume picker issues (uneditable opens, filter reload state, empty list, cross-project staleness, task-status text)
• /export not honoring absolute paths, ~, and silently rewriting extensions
• /effort max denied for unknown/future model IDs
• Slash command picker breaking with YAML boolean keywords
• Rate-limit upsell text hidden after message remounts
• MCP tools with _meta["anthropic/maxResultSizeChars"] not bypassing persist layer
• Voice mode leaking space characters on re-hold
• DISABLE_AUTOUPDATER not fully suppressing version check and symlink modification
• Memory leak in Remote Control permission handler entries
• Background subagents not reporting partial progress
• Prompt-type hooks failing on long sessions
• Feedback survey rendering when dismissed
• Bash grep -f FILE / rg -f FILE not prompting
• Stale subagent worktree cleanup removing worktrees with untracked files
• sandbox.network.allowMachLookup not taking effect on macOS

Improved:

• /resume filter hints and project/worktree/branch names
• Footer indicators staying on mode-indicator row at narrow widths
• /agents with tabbed layout (Running and Library tabs)
• /reload-plugins picking up plugin skills without restart
• Accept Edits mode auto-approving filesystem commands with safe env vars
• Vim mode with j/k navigating history and selecting footer pill
• Hook errors showing first line of stderr
• OTEL tracing with correct interaction span wrapping and per-turn ending
• Transcript entries with final token usage
• /claude-api skill updated for Managed Agents
• VSCode error handling for git-bash requirement