claudekit / updates / claude-code-2-1-207
[ PATCH · ]

Claude Code 2.1.207

Auto mode is now available without the `CLAUDE_CODE_ENABLE_AUTO_MODE` opt-in on Bedrock, Vertex AI, and Foundry (disable via `disableAutoMode`), and Bedrock, Vertex, and Claude Platform on AWS now default to Claude Opus 4.8. Fixes land across streaming, permissions, Remote Control, and Bedrock — including terminal freezes while streaming very long lists, tables, or code blocks, remote managed settings from a non-interactive run being recorded as consented without ever showing the consent dialog, and `/usage-credits` amount inputs silently stripping malformed values to digits.

Claude Code
Official announcement →

This article is a summary based on official documentation.

What changed

Claude Code 2.1.207 shipped on July 11, 2026. Auto mode opens up without an opt-in on Bedrock, Vertex AI, and Foundry, and the Bedrock family now defaults to Claude Opus 4.8. Regressions clustered around streaming (terminal freezes on long responses, the transcript jumping when streaming finishes), permissions and security, Remote Control, and Bedrock authentication are all cleaned up.

New features

  • Auto mode without opt-in on Bedrock, Vertex AI, and Foundry

    Using auto mode on these providers required a separate opt-in via the CLAUDE_CODE_ENABLE_AUTO_MODE environment variable. Auto mode is now available without CLAUDE_CODE_ENABLE_AUTO_MODE on Bedrock, Vertex AI, and Foundry; disable it via disableAutoMode in settings.

Key improvements

  • Bedrock, Vertex, and Claude Platform on AWS default to Claude Opus 4.8

    The default model on these providers pointed at an earlier generation. Bedrock, Vertex, and Claude Platform on AWS now default to Claude Opus 4.8.

  • Agent view: repeated pastes

    Pasting the same text again added a second collapsed [Pasted text #N] placeholder. Pasting the same text again now expands the existing collapsed placeholder instead of adding a second one.

  • Agent view: blocked session peeks

    Blocked session peeks showed the same timestamp twice, making it hard to tell what was waiting and for how long. Peeks now lead with the question and show a worded staleness clock (waiting 3m) instead of the same timestamp twice.

  • Auto mode settings source

    Auto mode read autoMode from the repo-resident .claude/settings.local.json, letting a repository influence the behavior. Auto mode no longer reads autoMode from .claude/settings.local.json; use ~/.claude/settings.json instead.

  • Plugin shell-form ${user_config.*} rejected (shell-injection fix)

    ${user_config.*} in shell-form commands for plugin hooks, monitors, and MCP headersHelper was a shell-injection risk. ${user_config.*} in shell-form commands is now rejected. Hooks: use exec form (args array) or $CLAUDE_PLUGIN_OPTION_<KEY>; monitors and headersHelper: read the value inside the script (config file or the server’s env block).

  • Plugin option values honor trusted sources only

    Plugin option values (pluginConfigs) were read from project-level .claude/settings.json, letting a repository inject values. They are no longer read from project-level .claude/settings.json; only user, --settings, and managed settings are honored.

Bug fixes

Rendering and streaming

  • Fixed the terminal freezing and keystrokes lagging while streaming responses containing very long lists, tables, paragraphs, or code blocks.
  • Fixed the transcript jumping above the start of the answer when a response finishes streaming.

Permissions and security

  • Fixed remote managed settings from a non-interactive run (claude -p, the SDK) being permanently recorded as consented without ever showing the security consent dialog.
  • Fixed spurious prompt-injection warnings triggered by benign system-generated conversation updates.
  • Fixed compound commands with cd prompting for permission when the only output redirect was to /dev/null.

Installer and file paths

  • Fixed the auto-updater overwriting a custom launcher script or symlink at ~/.local/bin/claude on every release — /doctor now reports an externally managed launcher.
  • Fixed extensions.worktreeConfig being left in the repo’s .git/config (breaking go-git tools like tea) after the last worktree.sparsePaths worktree was removed.
  • Fixed malformed bracket patterns in rules globs, skill paths, .ignore, and .worktreeinclude breaking file reads, file suggestions, and worktree creation.

Background agents and agent teams

  • Fixed a crash loop in agent teams where a malformed teammate mailbox message caused repeated errors every second until the mailbox file was manually deleted.
  • Fixed background sessions auto-named by accepting a plan not showing that name on their agent-view row.
  • Fixed background sessions that entered a git worktree resuming blank after a cold reopen from the agent list.

Remote Control and research

  • Fixed Remote Control task status updates being lost when the connection recovered from a network interruption or credential refresh.
  • Fixed Remote Control sessions hosted by the desktop app not showing background agent and workflow progress on mobile and web.
  • Fixed Deep research runs labeling every Fetch-phase agent “unknown” — chips now show the source hostname.

Bedrock and AWS

  • Fixed Bedrock repeatedly requesting fresh AWS SSO credentials from IAM Identity Center on every API request.
  • Fixed an indefinite hang on Windows when AWS credential resolution stalls (e.g. a stuck credential_process) — the 60-second stall guard now fires instead of waiting forever.

Usage credits

  • Fixed /usage-credits amount inputs silently stripping malformed values (e.g. a pasted timestamp) to digits — malformed amounts are now rejected with an error, and amounts over $1,000 require a typed confirmation.

Notes

  • Bedrock family default model is now Opus 4.8 — on Bedrock, Vertex, and Claude Platform on AWS, set a different model explicitly if you don’t want Claude Opus 4.8.
  • Auto mode settings moved — autoMode in .claude/settings.local.json is no longer read. Configure auto mode in ~/.claude/settings.json instead.
  • Auto mode no longer needs an opt-in on Bedrock, Vertex AI, and Foundry — it’s on by default on these providers; disable it via disableAutoMode in settings.
  • Re-check hardened plugin settings — ${user_config.*} in shell-form commands is rejected, and pluginConfigs in project-level .claude/settings.json is ignored. If a plugin relied on either path, re-verify its behavior.