Update log.

[PATCH] Claude Code 2.1.234 · Claude Code now continues your session automatically when a claude.ai usage limit resets, and you can turn it off in /config. Repos with a GitLab remote and an authenticated glab CLI get an MR !N badge in the footer and statusline, a new selection:clear keybinding action clears an in-app text selection, and CLAUDE_CODE_PROJECT_DIR_NAME lets hosts pick a short name for the per-project transcript directory. Loading the built-in claude-api skill drops from ~200k+ tokens to ~25k, and /permissions and /add-dir can now be opened while Claude is working. Over 30 fixes land across permission previews and credential masking, Remote Control sync, and queued ! shell commands.

[PATCH] Claude Code 2.1.233 · The two Bash permission changes from yesterday's 2.1.232 — permission checks on input redirections (`< file`) and on Cygwin-style symlinks on Windows — are reverted, and the auto mode regression that made ordinary `cd <dir> && <command> > file` commands stop for manual approval on Windows is fixed. GitLab support now extends to merge request URLs in the `--worktree` flag and the `claude agents` view, where MRs display as `!N`. Three opt-in settings land: `CLAUDE_CODE_TOOL_MEMORY_LIMIT` for memory cgroup limits on Bash tool commands on Linux, a `forward_user_identity` apps gateway setting that sends the signed-in user's identity as headers, and `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS` for the WebFetch session URL cache TTL. Todo/task-tracking tools are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer models.

[PATCH] Claude Code 2.1.232 · Subagent forking is now enabled by default: a `subagent_type: "fork"` subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions run in the background by default. Type `@` in the prompt to mention another Claude session by name, and interactive sessions on one machine now keep unique names. Plugin marketplaces accept bare `gitlab.com` repo URLs the way they accept `github.com` URLs, and GitLab token families are now redacted. The fixes cluster around permission bypasses and Remote Control: a PowerShell bypass through `$PSDefaultParameterValues`, a Windows bypass through Cygwin-style symlinks followed by Git Bash, and nested git repositories inheriting trust from a parent directory — each repository now requires its own trust confirmation.

[PATCH] Claude Code 2.1.229 · Plugin marketplaces can now come from a `command` source: a local command prints the plugin directory, which is re-resolved each session and applied without a restart. Gateway streaming responses send SSE keepalive pings during long thinking pauses, preventing idle-timeout disconnects on Vertex and Bedrock upstreams, and self-hosted runner sessions now get server-supplied hooks, matching managed-environment behavior. Several crashes are fixed — a RangeError in very narrow terminal windows, a crash on non-string `glob`, `file_path`, or `command` values, and a Windows crash on extended-length or UNC paths — along with long responses partly disappearing while streaming and being printed twice. `/commit-push-pr` no longer auto-approves git/gh commands carrying dangerous flags like `--force`, `--amend`, or `--no-verify`.

[PATCH] Claude Code 2.1.228 · Skills synced from claude.ai are hardened: they no longer shadow local commands or MCP prompts, their descriptions are sanitized and labeled, and on your machine their bodies don't run ! commands or expand @ files. Two fixes stop things from being deleted that shouldn't be — session cleanup deleting contents inside a project's memory folder, and background plugin-cache cleanup deleting a plugin's cache when its only version is a symlinked development checkout. Also fixed: interactive sessions that could stop redrawing entirely while the process kept running, git and Git Bash not being found on Windows, and self-hosted runner sessions ending early.

[PATCH] Claude Code 2.1.227 · Feature flags are no longer evaluated without the user's subscription tier when a session starts with an expired login token, which could wrongly prompt Max plan users to enable usage credits for Fable. Two more fixes land alongside it: every Bash command failing under claude-code-action with allowed_non_write_users on GitHub-hosted runners, and /tui bringing back a conversation that had been rewound to before its first message. The slash-command menu now uses blue only for the selected row, bolds matched characters instead of recoloring them, and keeps the glyphs in emoji or accented names, and there are fewer event-loop stalls on file-not-found suggestions and at-mention size checks.

[PATCH] Claude Code 2.1.225 · Claude Code's usage warning now supports gateway spend limits, so the limit-reached message names the cap, its reset time, and the operator's message (it requires the gateway on 2.1.225). claude agents gained a workspace trust prompt for untrusted directories, matching the behavior of claude, and SendMessage can start a conversation with your Remote Control sessions on other machines by name, with ListAgents showing them as name [ref]. On the fix side, a transient 401 no longer replaces a long-lived CLAUDE_CODE_OAUTH_TOKEN with a stored login's short-lived token, MCP OAuth servers on macOS no longer fail with a burst of 401 errors after a keychain read times out, and conversation history no longer breaks on Remote Control session resume after very large conversations were compacted.

[PATCH] Claude Code 2.1.224 · Self-hosted environments arrive: claude self-hosted-runner turns your own machines or containers into a place Claude Code web, mobile, and desktop sessions can run, on Team and Enterprise plans. Cross-session SendMessage lets Claude Code sessions message each other across your machines, with ListAgents to discover them (macOS and Linux), and a new archive plugin source installs plugins from a zip over HTTPS without git or npm, with optional SHA-256 pinning. Sandbox credential masking gains extract, onExtractNoMatch for structured env values, JWT-aware masking, and AWS SigV4 re-signing. Long project paths no longer resolve to another project's session directory, sandbox deny entries written with a trailing slash are no longer bypassable, sandbox violation details now reach Bash tool results, and the 200-subagent-per-session spawn cap is gone.

[NEW] Auto mode becomes the default in Claude Code for Pro, Max, and Team plans · Starting on August 14, new sessions on Pro, Max, and Team plans will run in auto mode. Instead of permission prompts, auto mode routes each tool call through a classifier targeted at blocking actions that are irreversible, destructive, or aimed outside your environment. Users can switch modes with Shift+Tab in the CLI or the mode dropdown on the desktop app, and admins can pin an org-wide default with defaultMode or turn auto mode off entirely with disableAutoMode.

[PATCH] Claude Code 2.1.223 · A Bash permission bypass where a crafted command could hide parts of itself from permission checks is fixed, along with permission prompts where tabs or invisible Unicode could hide part of the command from the approval dialog. Workflow scripts can no longer use dynamic import() to run code outside the workflow sandbox, and an agent definition's bypassPermissions mode no longer ignores the org bypass-permissions disable policy. The strictKnownMarketplaces and blockedMarketplaces managed settings now accept owner wildcard entries ("owner/*"), and cloud sessions show a /teleport hint for continuing locally with claude --teleport <session id>. CLAUDE_CODE_DISABLE_1M_CONTEXT now holds every Claude model with a native 1M window to 200K, and /review is an alias of /code-review.

[NEW] Run Claude Code sessions on your own compute with self-hosted environments · Now in public beta, self-hosted environments let you run Claude Code sessions on your own infrastructure. You operate runners in either fixed or on-demand mode, and each session runs in its own checkout so work stays isolated between developers and accounts. Repository checkouts, build artifacts, and secrets stay on infrastructure you provision, while the conversation is sent to Anthropic for inference. Available to organizations on Claude Team and Enterprise plans.

[PATCH] Claude Code 2.1.222 · Worktree-isolated sessions and their subagents could run destructive git commands against the main checkout — isolation now applies to file edits and Bash in every session type, and PreToolUse auto-allow hooks no longer bypass tool restrictions in background agent tasks. In auto mode, messages sent to other agent sessions via SendMessage are now evaluated by the permission classifier before dispatch. Remote Control auto-start can no longer be turned on by repo-local settings (they can still turn it off) — enable it at user scope via /config — and the ultraplan feature is removed. Also fixed: the startup connectivity check hanging behind an HTTPS proxy, and /usage overattributing usage to MCP servers.

[PATCH] Claude Code 2.1.221 · The VS Code extension gains Focus view, a chat-menu toggle that hides tool activity behind an expandable per-turn summary. Sandbox credential files on Linux and WSL support `mode: "mask"`, where sandboxed commands read a sentinel copy while the sandbox proxy substitutes the real value on egress. Two permission-check bypasses are fixed: zsh executing hidden commands in `[[ ]]` regex conditionals, and PowerShell checks mishandling paths with quote characters on Windows. Background sessions now commit and push to preserve work and open a draft PR only when the task calls for one, and plugins installed from `/plugin` activate immediately when safe instead of always requiring `/reload-plugins`.

[NEW] Bringing MCP 2026-07-28 to Claude — a stateless core, standardized extensions, and hardened auth · MCP 2026-07-28, the fifth spec release of the Model Context Protocol, is live. It moves MCP from a bidirectional stateful protocol to a stateless request/response core so servers can deploy on serverless and edge infrastructure, graduates MCP Apps and Tasks into a versioned extensions framework, and aligns authorization with production OAuth 2.0 and OIDC deployments. Support is rolling out across Claude products.

[PATCH] Claude Code 2.1.219 · Claude Opus 5 (`claude-opus-5`) is now the default Opus model, with 1M context and fast mode at $10/$50 per Mtok. `/fast` now applies to Opus 5 and Opus 4.8, and Opus 4.7 is out of fast mode. Subagents can spawn nested subagents up to depth 3 by default, and dynamic workflows default to a medium size guideline that aims for fewer than 15 agents. The release also adds `sandbox.network.strictAllowlist` to deny non-allowlisted hosts for sandboxed commands without prompting, a `DirectoryAdded` hook that fires when a working directory is registered mid-session, and fixes `claude -p` dropping the answer it had already produced when a turn dies on a mid-stream API error.

[NEW] Claude Opus 5 · Anthropic introduced Claude Opus 5 on July 24, 2026, for complex agentic coding and enterprise work. It is priced at $5 per million input tokens and $25 per million output tokens, the same as Opus 4.8, with the model ID claude-opus-5, a 1M token context window, and 128k max output tokens. Adaptive thinking is now on by default, effort runs up to max, and two betas ship alongside it: mid-conversation tool changes and automatic fallbacks. It is the new default model on Claude Max and the strongest model on Claude Pro.

[PATCH] Claude Code 2.1.218 · `/code-review` now runs as a background subagent, so review work no longer fills your conversation and stacked slash commands stay as its review target. `/ultrareview` no longer fails on descriptive arguments like "review my auth changes", and `/code-review ultra` no longer silently runs a local review in non-interactive sessions — it launches the cloud review. Auto mode now lets the classifier adjudicate the dangerous-rm, background-`&`, and suspicious-Windows-path checks instead of opening permission dialogs, and skills with `context: fork` run in the background by default. The release also fixes Windows `\u`-prefixed paths corrupting into CJK characters, the left arrow key discarding the conversation with no undo, and a retry loop that re-sent identical doomed requests after a context-overflow error, alongside a large batch of session, input, and accessibility fixes.

[NEW] Ask Claude about the Anthropic Economic Index · A new connector lets you query the Anthropic Economic Index in claude.ai in plain language. Ask questions like "Which occupations use AI the most?" to explore AI adoption, task automation, and geographic usage patterns. There's nothing to install, but you do connect it once in the claude.ai connectors settings.

[PATCH] Claude Code 2.1.217 · Emoji shortcode autocomplete lands in the prompt input (`:heart:` → ❤️), and warnings now surface when transcript writes fail silently or session saving is off. To rein in runaway subagents, concurrent runs are capped by default (20), nested spawning is off by default, and `--max-budget-usd` now halts background subagents at the cap. Fixes cover corporate mTLS, proxy, and OAuth settings being ignored in Claude Desktop, auto-compact on Opus 4.8 over Bedrock, a memory leak that kept truncated MCP outputs in memory, and Windows auto-updates that could leave `claude.exe` missing.

[NEW] The iOS Simulator pane comes to Claude Code Desktop (public beta) · Claude Code Desktop opens your app in an iOS Simulator pane when Claude builds, runs, or checks it, streaming the device screen live next to your conversation. Watch Claude install and tap through the app to verify its own changes, or tap through it yourself. It's in public beta on macOS, available on Pro, Max, and Team plans.

[PATCH] Claude Code 2.1.216 · A new sandbox.filesystem.disabled setting skips filesystem isolation while keeping network egress control. A slowdown in long sessions — where message normalization cost grew quadratically with the number of turns, causing multi-second stalls and slow resumes — is fixed, along with worktree-isolated subagents redirecting git into the shared checkout via git -C, --git-dir, or GIT_DIR/GIT_WORK_TREE, and workflow saves and scheduled-task writes following a symlink at .claude that could redirect writes outside the project. A large batch of session, permission, and worktree regressions also lands, including auto mode denying commands with HTTP 401 classifier errors after the OAuth token rotated mid-session and AskUserQuestion acting against your answer's intent.

[PATCH] Claude Code 2.1.214 · A release centered on permission-check hardening. Single-segment rules like `Edit(src/**)` that auto-approved writes to nested `dir/` directories anywhere in the tree, a permission-check bypass in Windows PowerShell 5.1 sessions, and Bash permission checks misjudging file-descriptor redirects and very long commands (over 10,000 characters) all now fail closed. A new EndConversation tool lets Claude end sessions with highly abusive users or jailbreak attempts, and long-running tool calls get a periodic progress heartbeat. Background daemon and session lifecycle, Windows PowerShell tool reliability, and streaming/proxy fixes round out the release.

[PATCH] Claude Code 2.1.212 · To stop runaway loops, this release adds per-session caps on web searches (default 200) and subagent spawns (default 200). `/fork` now copies your conversation into a new background session while the old in-session subagent moves to `/subtask`, and MCP tool calls running longer than 2 minutes move to the background automatically. Fixes land for plan mode auto-running file-modifying Bash commands without a permission prompt, a `continue:false` hook's halt being dropped, and several session-resume regressions.

[PATCH] Claude Code 2.1.211 · A new --forward-subagent-text flag (and CLAUDE_CODE_FORWARD_SUBAGENT_TEXT env var) includes subagent text and thinking in stream-json output. This is a stabilization-focused release: it fixes a prompt-caching regression on Bedrock, Vertex, Mantle, and Foundry that billed the trailing system context block as fresh input tokens on every request, stops auto mode from overriding a PreToolUse hook's ask decision for unsandboxed Bash, and neutralizes look-alike characters in permission previews relayed to chat channels. always allow rules now save at the repository root so approvals persist across worktrees, and a batch of background-agent reliability issues around respawning, deletion, and result reporting are cleaned up.

[PATCH] Claude Code 2.1.208 · A screen reader mode (`--ax-screen-reader`) adds opt-in plain-text rendering, a `vimInsertModeRemaps` setting maps two-key insert-mode sequences like `jj` to Escape, and `CLAUDE_CODE_PROCESS_WRAPPER` routes every self-spawn through a required corporate launcher. Several long-session memory leaks (MCP stderr, LSP documents, tool-result payloads) and transcript size (up to 79x in edit-heavy sessions) are cut down, and fixes land for the context window resetting to 200k after an auto-update (false "100% context used"), truncated stream-json output when piping large responses from `claude -p`, and a 2.1.207 regression where Bedrock auth failed for AWS SSO profiles.

[NEW] Introducing Claude for Teachers · Claude for Teachers gives verified K-12 educators in the US free access to Claude, with teaching skills for lesson planning and differentiation, a Learning Commons of academic standards across all 50 states, and connectors to nine educational platforms. Sign up by June 30, 2027, for a full year of access.

[PATCH] Claude Code 2.1.207 · Auto mode is now available without the `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in on Bedrock, Vertex AI, and Foundry (disable via `disableAutoMode`), and Bedrock, Vertex, and Claude Platform on AWS now default to Claude Opus 4.8. Fixes land across streaming, permissions, Remote Control, and Bedrock — including terminal freezes while streaming very long lists, tables, or code blocks, remote managed settings from a non-interactive run being recorded as consented without ever showing the consent dialog, and `/usage-credits` amount inputs silently stripping malformed values to digits.

[PATCH] Claude Code 2.1.206 · `/doctor` gained a check that proposes trimming checked-in CLAUDE.md files by cutting content Claude could derive from the codebase, and `/cd` now suggests directory paths like `/add-dir`. Fixes include an expired login failing every model with a misleading error, MCP servers configured via `--mcp-config` or `.mcp.json` ignoring a per-server `request_timeout_ms` and timing out at 60s, and `claude --resume` / `--continue` not responding to keyboard input on startup, alongside several login, MCP, session-resume, and `/model` picker fixes.

[PATCH] Claude Code 2.1.205 · Auto mode gains a rule that blocks tampering with session transcript files and now asks before running `rm -rf` on a variable it can't resolve from context. Background agents and the agent view report session state more accurately, and `/doctor` becomes a full setup checkup that can diagnose and fix issues (`/checkup` alias). Auto-update binary downloads stream to disk instead of buffering in memory, cutting peak memory by roughly 400 MB, alongside fixes for Windows worktree removal deleting files outside the worktree, a message lost at the `--max-turns` limit, and `--json-schema` silently producing unstructured output on an invalid schema.

[PATCH] Claude Code 2.1.203 · This release focuses on background agent and session reliability. Background sessions that became permanently unresponsive when the daemon's session token went stale now recover automatically, returning to claude agents no longer silently stops running subagents or re-runs the prompt from scratch, and background agents no longer inherit a stale PATH or drop a shell-exported ANTHROPIC_BASE_URL, which had caused missing tools and 401 errors. Git worktree isolation also improves — Bash no longer fails in repos with many worktrees and worktree-isolated subagents run in their own checkout — alongside a new login-expiry warning and a grey ⏸ badge for manual permission mode.

[NEW] Claude Cowork is coming to mobile and web · Claude Cowork is rolling out to mobile and web, so your sessions and files go where you go, on any device. Work continues in the background, and when Claude reaches a call only you can make, the question reaches your phone. Beta access rolls out over the next several weeks, starting with Max users.

[PATCH] Claude Code 2.1.202 · Adds a "Dynamic workflow size" setting in `/config` to control how large Claude makes dynamic workflows, plus `workflow.run_id` and `workflow.name` OpenTelemetry attributes so a workflow run can be reconstructed from OTel data. Fixes a batch of Remote Control issues (commands failing with "Unknown command", uncaptioned images and files silently dropped, wrong permission mode), slow session resume in repositories with many git worktrees, and re-invoking an already-loaded skill duplicating its instructions in context. `/review <pr>` is back to a fast single-pass review.

[PATCH] Claude Code 2.1.200 · AskUserQuestion dialogs no longer auto-continue by default; opt into an idle timeout via `/config`. The "default" permission mode is now called "Manual" across the CLI, `--help`, VS Code, and JetBrains, with `--permission-mode manual` and `"defaultMode": "manual"` accepted alongside `default`. Many background bugs were fixed, including sessions silently stopping after sleep/wake and background agents never starting again after a crash left a stale `daemon.lock` whose PID the OS reused, plus improved screen-reader output.

[PATCH] Claude Code 2.1.199 · Stacked slash-skill invocations now load all leading skills (up to 5), and transient server rate-limit errors unrelated to your usage limit are retried automatically with backoff for subscribers. SSL certificate errors from TLS-inspecting proxies or expired certs now fail immediately with actionable guidance instead of burning retries, and streaming responses cut off mid-stream keep their partial output. Many background task and subagent bugs were fixed, including the Linux background-agent daemon killing itself every ~50 seconds and subagents reporting API errors as successful results.

[PATCH] Claude Code 2.1.198 · Claude in Chrome is now generally available, background agents that need input or finish now fire the Notification hook, and a new `/dataviz` skill provides chart and dashboard design guidance. Background agents launched from `claude agents` now commit, push, and open a draft PR when they finish worktree code work, and the built-in Explore agent inherits the main session's model (capped at opus) instead of running on haiku. Many bugs were fixed, including brief network drops aborting a turn and background tasks getting stuck on 'Running' after they finish.

[PATCH] Claude Code 2.1.197 · Claude Sonnet 5 is now the default model in Claude Code, with a native 1M-token context window and promotional pricing of $2/$10 per Mtok through August 31, 2026. Update to version 2.1.197 for access.

[NEW] Introducing Claude Science · Anthropic launched Claude Science in beta on June 30, 2026, an AI workbench that integrates fragmented scientific research tools into a unified environment. Researchers can run complete workflows — from literature analysis through manuscript preparation — in one platform, with specialist agents that query and synthesize across more than 60 curated scientific databases including UniProt, PDB, Ensembl, and ChEMBL. It's available to Claude Pro, Max, Team, and Enterprise users on macOS and Linux.

[NEW] Introducing Claude Sonnet 5 · Anthropic released Claude Sonnet 5 on June 30, 2026, an agentic model that approaches Opus 4.8 performance at lower prices. It can make plans, use tools like browsers and terminals, and run autonomously, with benchmark gains over Sonnet 4.6 across coding, reasoning, tool use, and knowledge work. The model ID is claude-sonnet-5; it is the default model for Free and Pro plans and is available in Claude Code, the Claude Platform, and the Claude API.

[PATCH] Claude Code 2.1.196 · Organization admins can now set a default model that shows as 'Org default' in `/model`, sessions get readable default names at start, and chat file attachments are Cmd/Ctrl-clickable to reveal them in Finder/Explorer. Background sessions and agents are far more reliable — long-running commands and workflows now survive the process being stopped, restarted, or updated, and workers killed by a daemon restart auto-resume. Fixes include waking a background job no longer deleting its conversation, several `claude agents` side panel issues, and `/context` showing 0 tokens for all tool groups on Bedrock.

[NEW] Claude in Microsoft Foundry is now generally available · Claude models are now generally available in Microsoft Foundry, hosted on Azure. Claude runs in your Azure environment with the authentication, billing, and governance controls your teams already use, and you can choose where inference is processed, including a US data zone for teams with data residency requirements. Claude Opus 4.8 and Claude Haiku 4.5 are available, with support for the Messages API, prompt caching, and extended thinking.

[NEW] Introducing the Claude apps gateway — centrally manage Claude Code on Amazon Bedrock and Google Cloud · The Claude apps gateway is a self-hosted control plane for managing Claude Code deployments on Amazon Bedrock and Google Cloud. It provides corporate SSO sign-in, centrally managed settings enforced on every request, and per-user cost attribution, and ships as a stateless container within the existing claude binary. It supports OIDC-based authentication, control over allowed models, and spend caps per organization, group, or user.

[PATCH] Claude Code 2.1.195 · A new CLAUDE_CODE_DISABLE_MOUSE_CLICKS environment variable disables mouse click, drag, and hover in fullscreen mode while keeping wheel scroll. Hook matchers with hyphenated identifiers (code-reviewer, mcp__brave-search) that accidentally substring-matched now exact-match, and voice dictation fixes cover macOS capturing silence after the default input device changes plus auto-submit never firing for languages written without spaces (Japanese, Chinese, Thai). Background agent fixes address jobs disappearing from claude agents when written by a newer version, blank screens when reopening crashed tasks, and daemons running unreachable when the control socket fails to start.

[PATCH] Claude Code 2.1.193 · A new autoMode.classifyAllShell setting routes all Bash/PowerShell commands through the auto-mode classifier, and a claude_code.assistant_response OpenTelemetry log event now carries the model's response text. Bash mode (!) gains live file path autocomplete, and a startup notice points at /mcp when MCP servers need authentication. A cluster of backgrounding and agent-panel regressions gets cleaned up — backgrounding (←←) no longer spuriously cancels when all tasks carry over, and a phantom subagent that re-ran the main conversation is gone. Note that the assistant_response log starts capturing response content on upgrade for deployments that already log prompts.

[PATCH] Claude Code 2.1.191 · `/rewind` now supports resuming a conversation from before `/clear` was run. CPU usage during streaming responses drops by ~37% by coalescing text updates to 100ms, and sandbox network hosts you allow with "Yes" are remembered for the rest of the session instead of re-prompting on every connection. MCP capability discovery and OAuth now retry transient network errors, and a batch of bug fixes lands: stopped background agents no longer resurrect, and hooks with comma-separated matchers (e.g. "Bash,PowerShell") no longer silently fail to fire.

[PATCH] Claude Code 2.1.187 · A security- and stability-focused release. A new sandbox.credentials setting blocks sandboxed commands from reading credential files and secret environment variables, org-configured model restrictions now apply to the model picker, --model, /model, and ANTHROPIC_MODEL, and select menus gain mouse click support in fullscreen mode. Remote MCP tool calls that hung with no response for 5 minutes now abort with an error instead of blocking indefinitely, alongside fixes for mojibake on pasted Korean/CJK text, --resume failing on empty -p runs, and a batch of resume, remote, and terminal stability issues.

[NEW] Introducing Claude Tag — work with @Claude in your Slack channels · Claude Tag is a new way for teams to work with Claude. Tag @Claude in a Slack channel to delegate a task, and it completes work autonomously while keeping context across the channel's conversations. Everyone in a channel works with the same Claude, it learns from channel history and connected data, and you can hand off work asynchronously. Built on Opus 4.8 and available in beta for Claude Enterprise and Team customers.

[PATCH] Claude Code 2.1.186 · New claude mcp login and claude mcp logout commands authenticate MCP servers from the CLI without opening the interactive /mcp menu, with --no-browser stdin redirect for completing over SSH. ! bash commands now trigger Claude to respond to the output automatically (set respondToBashCommands: false to keep the previous context-only behavior), and /workflows gains status filtering (f) plus a Skills section in the /plugin Installed tab. Background subagents now surface permission prompts in the main session instead of auto-denying, Agent(type) deny rules are now enforced for named subagent spawns, streaming requests no longer fail with "Content block not found" after the machine wakes from sleep, and several claude agents display issues are fixed.

[NEW] Claude Code now supports artifacts — turn session work into live web pages · Claude Code can now turn session work into artifacts — live, shareable web pages built from full session context. Ask for a PR walkthrough, dashboard, or incident timeline, and the open page refreshes in place when Claude Code updates it. Artifacts are private by default and viewable only by authenticated members of your org, available in beta for Claude Team and Enterprise orgs.

[NEW] Claude Design now stays on brand for daily work · Claude Design now imports your design system — from GitHub repos, design files, or raw uploads — so Claude builds with your components and validates against your system. New /design-sync and /design commands connect it to Claude Code, the editor gains rich layout controls and hundreds of stability fixes, usage limits are now shared with chat, Claude Cowork, and Claude Code, and connectors expand to Adobe, Base44, Canva, Gamma, Lovable, Miro, Replit, Vercel, and Wix.

[NEW] Workload Identity Federation is now generally available on the Claude Platform · Workload Identity Federation is generally available on the Claude Platform, letting developers authenticate with short-lived, scoped credentials from OIDC-compliant identity providers instead of static API keys. Federation rules bind external identities — AWS IAM, GCP, Azure, Kubernetes, GitHub Actions, Okta — to service accounts that issue tokens at request time across all Claude API endpoints.

[NEW] Claude Fable 5 and Claude Mythos 5 · Anthropic released Claude Fable 5 and Claude Mythos 5 on June 9, 2026. Fable 5 is a Mythos-class model made safe for general use — state-of-the-art on nearly all tested benchmarks, with the `claude-fable-5` model ID. Mythos 5 is identical with cybersecurity safeguards lifted, available in limited release through Project Glasswing. Both support a 1M token context window and up to 128k output tokens by default, priced at $10/$50 per MTok. When a safety classifier declines a request, the Messages API returns stop_reason: "refusal" as an HTTP 200, and the fallbacks parameter (beta) or SDK middleware retries on another Claude model.

[NEW] What's new in Claude Managed Agents — scheduled deployments and environment variables in vaults · Two capabilities land in public beta on the Claude Platform. Scheduled deployments give an agent a cron schedule — each time the schedule fires, the agent starts a new session and completes its task, with no scheduler for you to build or host. Environment variables in vaults store API keys tied to specific approved domains: the agent never sees your key because the sandbox only holds a placeholder, and the real key is attached at the network boundary, only on requests to domains you allow. Supports the Browserbase, KERNEL, Notion, Ramp, and Sentry CLIs plus any CLI using HTTP authentication.

[NEW] Claude in Apple's Foundation Models framework · Anthropic released a Swift package that lets Apple developers use Claude through Apple's Foundation Models framework. The framework gives developers access to tap into models natively from Swift and can return typed Swift values through guided generation in as few as three lines of code. Apps can use on-device models for simple tasks, then hand off to Claude when workflows require multi-step reasoning or code generation, with streaming, tool calls, and structured responses flowing back into your SwiftUI view. Supports iOS 27, iPadOS 27, macOS 27, visionOS 27, and watchOS 27; an Anthropic API key is required.

[NEW] Claude Opus 4.8 · Claude Opus 4.8 builds on Claude Opus 4.7 with improvements across benchmarks and is a more effective collaborator, available today for the same price. It targets long-horizon agentic coding with better long-context handling and compaction recovery, more reliable effort calibration, and better tool triggering. The model ID is claude-opus-4-8; it supports the 1M token context window by default on the Claude API, Amazon Bedrock, and Vertex AI, with 128k max output tokens.

[NEW] Dynamic workflows in Claude Code · Claude breaks a problem into subtasks and fans them out across tens to hundreds of subagents running in parallel, dynamically writing orchestration scripts that run in a single session and checking its work before anything reaches you. It targets broad work like codebase-wide bug hunts and security audits and large migrations spanning thousands of files, verifying each result before folding it into the final answer. Available as a research preview on Max, Team, and Enterprise plans.

[NEW] Claude Managed Agents — Self-hosted sandboxes and MCP tunnels · Claude Managed Agents now supports self-hosted sandboxes (public beta) and MCP tunnels (research preview). The agent orchestration loop stays on Anthropic infrastructure while tool execution runs in customer infrastructure or with managed sandbox providers — Cloudflare, Daytona, Modal, Vercel — and agents reach private-network MCP servers through a lightweight gateway with a single outbound connection, no inbound firewall rules required.

[NEW] Agent view in Claude Code · Agent view is a centralized interface inside the Claude Code CLI for managing multiple concurrent agent sessions. Now in Research Preview, it lets developers see which agents need input, are actively working, or have completed tasks — and scale up background work via peek, `/bg`, and `claude --bg`.

[NEW] Claude Platform on AWS is now generally available · The Claude Platform on AWS — Anthropic-operated, accessed via AWS IAM with CloudTrail audit logging and a single AWS invoice — is generally available. AWS customers get day-one access to all native Claude API features, including Claude Managed Agents (beta), Advisor strategy (beta), Files API (beta), Skills (beta), and the MCP connector (beta), with Claude Opus 4.7, Sonnet 4.6, and Haiku 4.5 available at launch.

[NEW] What's new in Claude Managed Agents — Dreaming, Outcomes, Multiagent, Webhooks · A month after the April 8 beta launch, Managed Agents added two new features and promoted three from research preview to public beta. Dreaming (research preview) curates memory between sessions for self-improvement, and outcomes, multiagent orchestration, memory, and webhooks all ship as public beta.

[NEW] Claude Financial Services Agents — 10 templates, Moody's MCP, and 17 data connectors · Ten ready-to-run financial services agents — pitch builder, KYC screener, month-end closer, and more — ship as plugins in Claude Cowork and Claude Code, and as cookbooks for Claude Managed Agents. A Moody's MCP app brings proprietary credit ratings and data on 600M+ companies, and 17 data partners are integrated alongside.

[NEW] Claude for Microsoft 365 — Excel, PowerPoint, and Word now GA, Outlook joins in beta · The Claude add-ins for Excel, PowerPoint, and Word are generally available on all paid plans, and Claude for Outlook joins in public beta. Once installed, context carries automatically between apps so a model built in Excel can become a PowerPoint deck or a Word memo without re-explaining inputs, assumptions, or calculation flow.

[NEW] Claude Security Enters Public Beta · Anthropic launched Claude Security in public beta — a Claude Opus 4.7-powered tool that scans codebases for vulnerabilities and generates targeted patches. Available directly at claude.ai/security and embedded in CrowdStrike, Microsoft Security, Wiz, and other platforms. Currently for Claude Enterprise customers; Claude Team and Max coming soon.

[NEW] Claude Platform on AWS Announced (Coming Soon) · AWS announced Claude Platform on AWS — a new way to use Anthropic's native Claude Platform with AWS credentials, billing, and access controls. It sits alongside Claude on Amazon Bedrock as a second path with different data-residency tradeoffs.

[NEW] Running Claude Cowork in Amazon Bedrock · AWS published the official guide to running Claude Cowork on Amazon Bedrock — reuse the same Bedrock infrastructure you built for Claude Code to bring Claude to every knowledge worker, inside your AWS perimeter.

[NEW] Claude for Word · A Microsoft Word add-in that brings Claude into your document — with native tracked changes, template-aware drafting, and consistency checks.

[NEW] Claude Design by Anthropic Labs · Collaborative visual creation with Claude — designs, interactive prototypes, presentations, and more through conversation.

[NEW] Claude Opus 4.7 · A new Opus model with significant gains in coding, high-resolution vision, and instruction following. Claude Code adds /ultrareview and the xhigh effort level.

[NEW] Routines — automated Claude Code workflows · Autonomous routines in Claude Code triggered by schedules, API calls, and GitHub events. Run code review, bug fixes, and deploy verification from the cloud — laptop closed.

[NEW] Claude Managed Agents · A new API alongside Messages that provides a pre-built agent harness and managed infrastructure — run Claude agents without building your own loop, sandbox, or tool-execution layer.

[NEW] Claude Code Remote Control · Keep a local Claude Code session running and control it from claude.ai/code or the mobile apps — with your local files, MCP servers, and tools intact.