Claude Code 2.1.113

💡

Native-binary distribution, network sandbox denied domains, full-screen viewport scrolling, parallelized `/ultrareview`, and security/stability fixes.

#Claude Code#Update
🔗 Official announcement →

This article is a summary based on official documentation.

What changed

Claude Code 2.1.113 (April 17, 2026) — the CLI moves from a bundled-JS to native-binary distribution, the network sandbox gains denied-domains, full-screen UX and /ultrareview both get faster, Remote Control expands, and the Ctrl+U behavior from 2.1.111 is reverted to its original “delete to start of line.”

New features

  • Native Claude Code binary distribution — platform-specific optional deps instead of a big bundled JS. Faster startup, smaller install.

  • sandbox.network.deniedDomains — explicitly block specific domains even when a broader allowedDomains wildcard matches.

  • Viewport scroll in full-screen mode — Shift+↑/↓ selection now auto-scrolls the viewport so long output can be selected in one pass.

  • Multiline Ctrl+A / Ctrl+E — move to the start/end of the current logical line instead of the whole buffer.

  • Windows Ctrl+Backspace — delete previous word on Windows.

  • OSC 8 hyperlinks — wrapped URLs in responses or bash output stay clickable on terminals that support OSC 8.

  • /loop improvements — Esc cancels a pending wakeup; wakeups print “Claude resuming /loop wakeup” when they fire.

  • /ultrareview parallelized — parallel check steps with a diffstat and animated status in the run dialog.

  • Remote Control — /extra-usage and @ file autocomplete now work on mobile/web.

Improvements

Permissions and security

  • macOS system paths — /private/{etc,var,tmp,home} require extra confirmation even when Bash(rm:*) is allowed.
  • exec-wrapper detection — Bash deny rules now match through env, sudo, watch, ionice, setsid wrappers.
  • Tighter Bash(find:*) — -exec and -delete require explicit confirmation.
  • No-op cd prompts — cd <current-dir> && git … no longer triggers a prompt.
  • Transcript disclosure — multi-line bash commands starting with a comment are now shown in full in the transcript (closes a UI-spoofing vector).

Stability

  • Hung subagents — subagents stuck mid-stream now fail with a clear error after 10 minutes instead of silently hanging.

Notable fixes

Input and UI

  • Ctrl+U / Cmd-Backspace reverted — back to “delete from cursor to start of line” (the 2.1.111 change is gone).
  • NO_COLOR cursor — cursor no longer disappears with NO_COLOR set.
  • Full-screen slash/@ menu — completion menu aligns with the prompt border.
  • Exit confirmation dialog — one-shot scheduled tasks no longer labeled “recurring”; countdown added.
  • “copied N chars” over-count — emoji and multi-code-unit characters were over-counted; fixed.

Commands and features

  • /copy “Full response” table alignment — markdown table columns now align when pasted into GitHub, Notion, or Slack.
  • Markdown table pipe rendering — tables no longer break when inline code spans (`|`) contain pipes.
  • /effort auto status label — confirmation message now matches the status bar: “Effort level set to max”.
  • /insights Windows EBUSY crash — fixed.
  • ToolSearch ranking — pasted MCP tool names no longer mismatch sibling tools with similar descriptions.

Sessions and agents

  • Recap auto-run timing — no longer triggers while the user is still composing unsent text.
  • Input during subagent view — messages typed while viewing a running subagent are no longer hidden from the transcript or misplaced on the parent AI’s side.
  • Long-context resume compaction — fixed “Extra usage is required for long context requests” error on resume.
  • Refine with Ultraplan remote session URL — URL is now shown in the transcript.

MCP and SDK

  • MCP concurrent call timeout mix-up — one tool call’s messages no longer silently defuse another call’s watchdog.
  • SDK image content block crash — failure to process an image no longer crashes the session; it degrades to a text placeholder.

Plugins

  • plugin install version conflict detection — dependency version clashes are now reported clearly as range-conflict instead of being treated as success.

Remote Control

  • Subagent transcript streaming — subagent output now streams to Remote Control sessions.
  • Archive on exit — Remote Control sessions are archived when Claude Code exits.

Bedrock / sandbox

  • CLAUDE_CODE_EXTRA_BODY output_config.effort 400s — fixed for subagent calls on models that don’t support effort, and on Vertex AI.
  • Bedrock Application Inference Profile + Opus 4.7 — fixed thinking.type.enabled is not supported 400.
  • dangerouslyDisableSandbox permission bypass — commands could execute outside the sandbox without a prompt; fixed.

Notes

  • Ctrl+U is back to pre-2.1.111 behavior (cursor to start of line). If you need to clear the whole buffer, use the standard combo.
  • With the switch to native-binary distribution, scripts that reference the CLI path should verify the new location after upgrading.
  • deniedDomains takes precedence over allowedDomains — you can allow broadly via wildcard while denying specific hosts.