2.1.101

Added:

• /team-onboarding command to generate teammate ramp-up guides from local Claude Code usage
• OS CA certificate store trust by default for enterprise TLS proxies (set CLAUDE_CODE_CERT_STORE=bundled to use only bundled CAs)
• Auto-creation of default cloud environment for /ultraplan and remote-session features
• Monitor tool for streaming events from background scripts
• Subprocess sandboxing with PID namespace isolation on Linux via CLAUDE_CODE_SUBPROCESS_ENV_SCRUB
• CLAUDE_CODE_SCRIPT_CAPS env var to limit per-session script invocations
• CLAUDE_CODE_PERFORCE_MODE env var for p4 edit hints on read-only files
• --exclude-dynamic-system-prompt-sections flag for improved cross-user prompt caching
• workspace.git_worktree to status line JSON input
• W3C TRACEPARENT env var to Bash tool subprocesses for proper OTEL trace parenting
• LSP clientInfo identification

Improved:

• Brief mode now retries when Claude responds with plain text
• Focus mode with more self-contained summaries
• Tool-not-available errors with explanations and solutions
• Rate-limit retry messages showing which limit was hit and reset time
• Refusal error messages with API-provided explanations
• claude -p --resume <name> to accept titles from /rename or --name
• Settings resilience for unrecognized hook event names
• Plugin hooks from force-enabled plugins run when allowManagedHooksOnly is set
• /plugin and claude plugin update warnings when marketplace refresh fails
• Plan mode hides "Refine with Ultraplan" when org can't reach Claude Code on web
• Beta tracing to honor OTEL_LOG_USER_PROMPTS, OTEL_LOG_TOOL_DETAILS, and OTEL_LOG_TOOL_CONTENT
• SDK query() cleanup of subprocess and temp files on break/await using
• /resume filter hints and project/worktree/branch names in indicator
• Footer indicators to stay on mode-indicator row at narrow widths
• /agents with tabbed layout (Running/Library tabs)
• /reload-plugins to pick up plugin-provided skills without restart
• Accept Edits mode to auto-approve filesystem commands with safe env vars
• Vim mode: j/k in NORMAL mode navigate history and select footer pill
• Hook errors with first line of stderr for diagnosis
• OTEL tracing with correct interaction span wrapping and per-turn span ending
• Transcript entries with final token usage instead of streaming placeholders
• Updated /claude-api skill to cover Managed Agents

Fixed:

• Command injection vulnerability in POSIX which fallback for LSP binary detection
• Memory leak in long sessions with historical message copies in virtual scroller
• --resume/--continue losing context on large sessions
• Chain recovery bridging into unrelated subagent conversations
• Crash on --resume with missing Edit/Write tool result file_path
• Hardcoded 5-minute request timeout aborting slow backends
• permissions.deny rules not overriding PreToolUse hook's permissionDecision: "ask"
• --setting-sources without user causing aggressive history deletion
• Bedrock SigV4 authentication with Authorization headers
• claude -w <name> failing after stale worktree cleanup
• Subagents not inheriting MCP tools from dynamically-injected servers
• Sub-agents in isolated worktrees denied Read/Edit access to their own files
• Sandboxed Bash commands failing with mktemp errors after fresh boot
• claude mcp serve tool calls failing in MCP clients validating outputSchema
• RemoteTrigger tool's run action sending empty body
• Multiple /resume picker issues (narrow default view, preview on Windows Terminal, incorrect cwd, session-not-found errors, terminal title, prompt overlap)
• Grep tool ENOENT when ripgrep path becomes stale; now falls back to system rg
• /btw writing entire conversation to disk on every use
• /context Free space and Messages breakdown disagreeing with header percentage
• Multiple plugin issues (slash command resolution, ENAMETOOLONG errors, Discover showing installed plugins, stale cache, frontmatter fields)
• /mcp menu offering OAuth actions for headersHelper servers; now offers Reconnect
• ctrl+], ctrl+\, ctrl+^ keybindings in terminals with raw C0 control bytes
• /login OAuth URL rendering with selection padding
• Rendering issues (flicker, scrollback wipe, escape sequences leaking)
• Crash when settings.json env values are numbers
• In-app settings writes not refreshing in-memory snapshot
• Custom keybindings not loading on Bedrock/Vertex providers
• claude --continue -p not continuing sessions
• Multiple Remote Control issues (worktrees on crash, connection persistence, spurious indicators, SSH failures)
• /insights omitting report file link
• VSCode file attachment not clearing on last tab close
• Bash tool permission bypass with backslash-escaped flags
• Compound Bash commands bypassing forced permission prompts
• Read-only commands with env-var prefixes not prompting
• Redirects to /dev/tcp/... or /dev/udp/... not prompting
• Stalled streaming responses timing out
• 429 retries burning attempts in ~13s; exponential backoff now applies as minimum
• MCP OAuth oauth.authServerMetadataUrl not honored on token refresh
• Capital letters dropped to lowercase with kitty keyboard protocol
• macOS text replacements deleting trigger word instead of substituting
• --dangerously-skip-permissions downgraded after write to protected path
• Managed-settings allow rules remaining active after removal
• permissions.additionalDirectories changes not applying mid-session
• Removing directory from additionalDirectories revoking --add-dir access
• Wildcard permission rules failing with extra spaces/tabs
• Deny rules downgraded to prompts for piped commands
• False Bash permission prompts for various commands
• Permission rules with prototype property names causing silent ignores
• Agent team members not inheriting leader's permission mode
• Crash in fullscreen mode hovering over MCP tool results
• Wrapped URL copying inserting spaces
• File-edit diffs disappearing on --resume for files >10KB
• Multiple /resume picker issues (uneditable opens, filter reload, empty list, cross-project staleness, task-status text)
• /export not honoring absolute paths, ~, and silently rewriting extensions
• /effort max denied for unknown model IDs
• Slash command picker breaking with YAML boolean keywords
• Rate-limit upsell text hidden after remounts
• MCP tools with _meta["anthropic/maxResultSizeChars"] not bypassing persist layer
• Voice mode leaking space characters on re-hold
• DISABLE_AUTOUPDATER not fully suppressing version check
• Memory leak in Remote Control permission handler entries
• Background subagents not reporting partial progress
• Prompt-type hooks failing on long sessions
• Feedback survey rendering when dismissed
• Bash grep -f FILE / rg -f FILE not prompting
• Stale subagent worktree cleanup removing untracked files
• sandbox.network.allowMachLookup not taking effect on macOS
• CLAUDE_CODE_MAX_CONTEXT_TOKENS not honoring DISABLE_COMPACT
• VSCode false-positive "requires git-bash" error
• Dropped /compact hints when DISABLE_COMPACT is set