# Claude Code v2.1.113 发布

- 来源：Claude Code：GitHub Releases（RSS）
- 作者：ashwin-ant
- 发布时间：2026-04-18 03:34
- AIHOT 链接：https://aihot.virxact.com/items/cmo3bfuxu003asl24xo0ecnmk
- 原文链接：https://github.com/anthropics/claude-code/releases/tag/v2.1.113

## AI 摘要

Claude Code v2.1.113 将CLI改为通过原生二进制文件运行，替代原有JavaScript捆绑包。新增 deniedDomains 设置实现域名精确拦截，并强化Bash工具安全策略，将macOS系统路径列为危险删除目标，修复命令包装器绕过限制的问题。交互方面优化全屏选择、多行输入快捷键及长URL点击体验，改进/loop和/ultrareview命令性能。此外修复30余项Bug，涵盖MCP调用超时、表格渲染、远程控制会话及插件安装冲突等问题。

## 正文

What's changed

Changed the CLI to spawn a native Claude Code binary (via a per-platform optional dependency) instead of bundled JavaScript

Added sandbox.network.deniedDomains setting to block specific domains even when a broader allowedDomains wildcard would otherwise permit them

Fullscreen mode: Shift+↑/↓ now scrolls the viewport when extending a selection past the visible edge

Ctrl+A and Ctrl+E now move to the start/end of the current logical line in multiline input, matching readline behavior

Windows: Ctrl+Backspace now deletes the previous word

Long URLs in responses and bash output stay clickable when they wrap across lines (in terminals with OSC 8 hyperlinks)

Improved /loop: pressing Esc now cancels pending wakeups, and wakeups display as "Claude resuming /loop wakeup" for clarity

/extra-usage now works from Remote Control (mobile/web) clients

Remote Control clients can now query @-file autocomplete suggestions

Improved /ultrareview: faster launch with parallelized checks, diffstat in the launch dialog, and animated launching state

Subagents that stall mid-stream now fail with a clear error after 10 minutes instead of hanging silently

Bash tool: multi-line commands whose first line is a comment now show the full command in the transcript, closing a UI-spoofing vector

Running cd && git … no longer triggers a permission prompt when the cd is a no-op

Security: on macOS, /private/{etc,var,tmp,home} paths are now treated as dangerous removal targets under Bash(rm:*) allow rules

Security: Bash deny rules now match commands wrapped in env/sudo/watch/ionice/setsid and similar exec wrappers

Security: Bash(find:*) allow rules no longer auto-approve find -exec/-delete

Fixed MCP concurrent-call timeout handling where a message for one tool call could silently disarm another call's watchdog

Fixed Cmd-backspace / Ctrl+U to once again delete from the cursor to the start of the line

Fixed markdown tables breaking when a cell contains an inline code span with a pipe character

Fixed session recap auto-firing while composing unsent text in the prompt

Fixed /copy "Full response" not aligning markdown table columns for pasting into GitHub, Notion, or Slack

Fixed messages typed while viewing a running subagent being hidden from its transcript and misattributed to the parent AI

Fixed Bash dangerouslyDisableSandbox running commands outside the sandbox without a permission prompt

Fixed /effort auto confirmation — now says "Effort level set to max" to match the status bar label

Fixed the "copied N chars" toast overcounting emoji and other multi-code-unit characters

Fixed /insights crashing with EBUSY on Windows

Fixed exit confirmation dialog mislabeling one-shot scheduled tasks as recurring — now shows a countdown

Fixed slash/@ completion menu not sitting flush against the prompt border in fullscreen mode

Fixed CLAUDE_CODE_EXTRA_BODY output_config.effort causing 400 errors on subagent calls to models that don't support effort and on Vertex AI

Fixed prompt cursor disappearing when NO_COLOR is set

Fixed ToolSearch ranking so pasted MCP tool names surface the actual tool instead of description-matching siblings

Fixed compacting a resumed long-context session failing with "Extra usage is required for long context requests"

Fixed plugin install succeeding when a dependency version conflicts with an already-installed plugin — now reports range-conflict

Fixed "Refine with Ultraplan" not showing the remote session URL in the transcript

Fixed SDK image content blocks that fail to process crashing the session — now degrade to a text placeholder

Fixed Remote Control sessions not streaming subagent transcripts

Fixed Remote Control sessions not being archived when Claude Code exits

Fixed thinking.type.enabled is not supported 400 error when using Opus 4.7 via a Bedrock Application Inference Profile ARN