Skip to content

claude-code

v2.1.143 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 19d Developer Productivity
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

auth rbac

ReleasePort's take

Light signal
editorial:auto 9d

The release fixes a corrupted `.credentials.json` that caused CLI startup failures and silent OAuth token refresh aborts.

Why it matters: If your `.credentials.json` contains a non‑array `scopes` value, the CLI will hang on launch or silently fail token renewal; updating to v2.1.143 resolves this issue.

Summary

AI summary

Fixed corrupt .credentials.json causing CLI startup failures and silent OAuth token refresh aborts.

Changes in this release

Feature Medium

Projected context cost estimates shown per-turn and per-invocation in /plugin marketplace browse pane.

Projected context cost estimates shown per-turn and per-invocation in /plugin marketplace browse pane.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

`worktree.bgIsolation: "none"` setting added for background sessions to edit working copy directly.

`worktree.bgIsolation: "none"` setting added for background sessions to edit working copy directly.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

PowerShell tool now passes `-ExecutionPolicy Bypass`; opt out with `CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY=1`.

PowerShell tool now passes `-ExecutionPolicy Bypass`; opt out with `CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY=1`.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Background sessions preserve model and effort level after waking from idle.

Background sessions preserve model and effort level after waking from idle.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Shift+Tab in attached agent sessions includes auto mode in the cycle.

Shift+Tab in attached agent sessions includes auto mode in the cycle.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

PowerShell tool enabled by default on Windows for Bedrock, Vertex, and Foundry users; opt out with `CLAUDE_CODE_USE_POWERSHELL_TOOL=0`.

PowerShell tool enabled by default on Windows for Bedrock, Vertex, and Foundry users; opt out with `CLAUDE_CODE_USE_POWERSHELL_TOOL=0`.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

`claude agents` now accepts `--add-dir`, `--settings`, `--mcp-config`, and `--plugin-dir`; applies to dashboard and background sessions.

`claude agents` now accepts `--add-dir`, `--settings`, `--mcp-config`, and `--plugin-dir`; applies to dashboard and background sessions.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

`claude agents` accepts `--permission-mode`, `--model`, `--effort`, and `--dangerously-skip-permissions` for session defaults.

`claude agents` accepts `--permission-mode`, `--model`, `--effort`, and `--dangerously-skip-permissions` for session defaults.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

`claude --bg --dangerously-skip-permissions` now persists across retire→wake cycles.

`claude --bg --dangerously-skip-permissions` now persists across retire→wake cycles.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

/bg now preserves `--mcp-config`, `--settings`, `--add-dir`, `--plugin-dir`, and `--strict-mcp-config` across respawn.

/bg now preserves `--mcp-config`, `--settings`, `--add-dir`, `--plugin-dir`, and `--strict-mcp-config` across respawn.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Background sessions launched from `claude agents` honor `permissions.defaultMode` from settings.json.

Background sessions launched from `claude agents` honor `permissions.defaultMode` from settings.json.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

/bg and detach now preserve `--fallback-model`; workers degrade to fallback model on overload instead of hard-failing.

/bg and detach now preserve `--fallback-model`; workers degrade to fallback model on overload instead of hard-failing.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Feature Medium

Plugin dependency enforcement added; disable/enable commands respect dependent plugins.

Plugin dependency enforcement added; disable/enable commands respect dependent plugins.

Source: granite4.1:30b@2026-05-22-audit

Confidence: high

 —
Feature Medium

Plugin dependency enforcement added; disables target plugin if another enabled plugin depends on it.

Plugin dependency enforcement added; disables target plugin if another enabled plugin depends on it.

Source: llm_adapter@2026-05-21

Confidence: low

 —
Performance Medium

Worktree cleanup no longer falls back to `rm -rf` when `git worktree remove` fails, protecting gitignored or in-progress files.

Worktree cleanup no longer falls back to `rm -rf` when `git worktree remove` fails, protecting gitignored or in-progress files.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Fixed corrupt `.credentials.json` with non-array `scopes` value that hung CLI on startup or aborted OAuth token refresh.

Fixed corrupt `.credentials.json` with non-array `scopes` value that hung CLI on startup or aborted OAuth token refresh.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Fixed right-click paste in `claude agents` on Windows Terminal and WSL.

Fixed right-click paste in `claude agents` on Windows Terminal and WSL.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Stopped stop hooks from looping forever; warns after 8 consecutive blocks (override via `CLAUDE_CODE_STOP_HOOK_BLOCK_CAP`).

Stopped stop hooks from looping forever; warns after 8 consecutive blocks (override via `CLAUDE_CODE_STOP_HOOK_BLOCK_CAP`).

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Fixed Esc/Ctrl+C cancelling pending `/loop` wakeup while Claude is idle between iterations.

Fixed Esc/Ctrl+C cancelling pending `/loop` wakeup while Claude is idle between iterations.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Prevented `/goal` evaluator from firing while background shells or delegated subagents are still running.

Prevented `/goal` evaluator from firing while background shells or delegated subagents are still running.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Ensured `NO_COLOR`/`FORCE_COLOR` in settings.json `env` applies only to subprocesses, not Claude UI colors.

Ensured `NO_COLOR`/`FORCE_COLOR` in settings.json `env` applies only to subprocesses, not Claude UI colors.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Stopped agent view from spawning repeated PowerShell processes on Windows when listing sessions.

Stopped agent view from spawning repeated PowerShell processes on Windows when listing sessions.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

/bg without a prompt no longer sends "continue" to the forked session; now waits for input.

/bg without a prompt no longer sends "continue" to the forked session; now waits for input.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Deleting a session from agent view now removes its transcript file.

Deleting a session from agent view now removes its transcript file.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Fixed stale-fragment rendering when scrolling in attached background sessions on Windows Terminal.

Fixed stale-fragment rendering when scrolling in attached background sessions on Windows Terminal.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Prevented false-positive worker-stall detection storm after host sleep or macOS App Nap for background agents.

Prevented false-positive worker-stall detection storm after host sleep or macOS App Nap for background agents.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Corrected 5xx error messages to reference configured gateway or cloud provider instead of status.claude.com.

Corrected 5xx error messages to reference configured gateway or cloud provider instead of status.claude.com.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Stopped background sessions from silently capturing IDE file references into the warm spare's input, preventing prepending to next prompt.

Stopped background sessions from silently capturing IDE file references into the warm spare's input, preventing prepending to next prompt.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Resolved "Operation not permitted" errors for background job sessions on macOS reading files under ~/Documents, ~/Desktop, or ~/Downloads despite Full Disk Access.

Resolved "Operation not permitted" errors for background job sessions on macOS reading files under ~/Documents, ~/Desktop, or ~/Downloads despite Full Disk Access.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Prevented unresponsiveness in `claude agents` on Windows when pressing ← while a response was streaming.

Prevented unresponsiveness in `claude agents` on Windows when pressing ← while a response was streaming.

Source: llm_adapter@2026-05-21

Confidence: high

 —
Bugfix Medium

Resolved issue where `--agent <name>` failed to find plugin-contributed agents lacking `plugin:` prefix.

Resolved issue where `--agent <name>` failed to find plugin-contributed agents lacking `plugin:` prefix.

Source: llm_adapter@2026-05-21

Confidence: low

 —
Bugfix Medium

Fixed `--agent <name>` lookup to find plugin‑contributed agents even without the `plugin:` prefix.

Fixed `--agent <name>` lookup to find plugin‑contributed agents even without the `plugin:` prefix.

Source: granite4.1:30b@2026-05-22-audit

Confidence: low

 —
Full changelog

What's changed

  • Added plugin dependency enforcement: claude plugin disable now refuses when another enabled plugin depends on the target (with a copy-pasteable disable-chain hint), and claude plugin enable force-enables transitive dependencies
  • Added projected context cost (per-turn and per-invocation token estimates) to the /plugin marketplace browse pane
  • Added worktree.bgIsolation: "none" setting to let background sessions edit the working copy directly without EnterWorktree, for repos where worktrees are impractical
  • PowerShell tool now passes -ExecutionPolicy Bypass. Opt out with CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY=1
  • Background sessions now preserve the model and effort level you set after waking from idle
  • Shift+Tab in attached agent sessions now includes auto mode in the cycle
  • Fixed a corrupt .credentials.json with a non-array scopes value hanging the CLI on startup or silently aborting OAuth token refresh
  • Fixed right-click paste in claude agents on Windows Terminal and WSL
  • Fixed stop hooks that block repeatedly looping forever — the turn now ends with a warning after 8 consecutive blocks (override via CLAUDE_CODE_STOP_HOOK_BLOCK_CAP)
  • Fixed Esc/Ctrl+C not cancelling a pending /loop wakeup while Claude is idle between iterations
  • Fixed /goal evaluator firing while background shells or delegated subagents are still running
  • Fixed NO_COLOR/FORCE_COLOR in settings.json env stripping Claude Code's own UI colors — they now apply to subprocesses only
  • Fixed agent view spawning repeated PowerShell processes on Windows when listing sessions
  • Fixed /bg without a prompt sending "continue" to the forked session — the fork now waits for input
  • Fixed --agent <name> not finding plugin-contributed agents without the plugin: prefix
  • Fixed deleting a session from agent view not removing its transcript file
  • Fixed stale-fragment rendering when scrolling in attached background sessions on Windows Terminal
  • Fixed background agents false-positive worker-stall detection storm after host sleep or macOS App Nap
  • Fixed 5xx error messages pointing at status.claude.com instead of naming the configured gateway or cloud provider
  • The PowerShell tool is now enabled by default on Windows for Bedrock, Vertex, and Foundry users. Opt out with CLAUDE_CODE_USE_POWERSHELL_TOOL=0.
  • claude agents now accepts --add-dir, --settings, --mcp-config, and --plugin-dir and applies them to the dashboard and to background sessions dispatched from it
  • claude agents accepts --permission-mode, --model, --effort, and --dangerously-skip-permissions to set defaults for sessions dispatched from the view
  • claude --bg --dangerously-skip-permissions now persists across retire→wake
  • Fixed background sessions silently capturing IDE file references into the warm spare's input, which caused the reference to be prepended to the next prompt dispatched from claude agents
  • Worktree cleanup no longer falls back to rm -rf when git worktree remove fails, preventing loss of gitignored or in-progress files
  • Fixed background-job sessions on macOS getting "Operation not permitted" errors when reading files under ~/Documents, ~/Desktop, or ~/Downloads, even with Full Disk Access granted.
  • /bg now preserves --mcp-config, --settings, --add-dir, --plugin-dir, and --strict-mcp-config, so backgrounded sessions keep their MCP servers and settings across respawn.
  • Background sessions launched from claude agents now honor permissions.defaultMode from settings.json (was previously overridden to auto mode)
  • Fixed: on Windows, pressing ← in claude agents while a response was streaming could leave the agents list unresponsive to all input
  • /bg and ←-detach now preserve --fallback-model, so backgrounded workers degrade to the fallback model on overload instead of hard-failing.
  • /bg and ←-detach now preserve --allow-dangerously-skip-permissions, so the forked worker keeps bypass-permissions available in its Shift+Tab cycle.
  • Fixed: background daemon spawn now falls back to the running binary when the ~/.local/bin/claude launcher is missing or non-executable
  • Fixed claude agents --allow-dangerously-skip-permissions defaulting dispatched sessions to bypass mode instead of making it available in the permission cycle
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track claude-code

Get notified when new releases ship.

Sign up free

About claude-code

All releases →

Related context

Earlier breaking changes

  • v2.1.160 Renames dynamic‑workflow trigger keyword from `workflow` to `ultracode`; `workflow` no longer triggers a run
  • v2.1.160 Deprecates and removes the `CLAUDE_CODE_OPUS_4_6_FAST_MODE_OVERRIDE` environment variable; it is now a no‑op
  • v2.1.147 Renames /simplify to /code-review; removes cleanup-and-fix behavior.

Beta — feedback welcome: [email protected]