What's changed

• Added terminalSequence field to hook JSON output so hooks can emit desktop notifications, window titles, and bells without a controlling terminal
• Added CLAUDE_CODE_PLUGIN_PREFER_HTTPS to clone GitHub plugin sources over HTTPS instead of SSH, for environments without a GitHub SSH key
• Added ANTHROPIC_WORKSPACE_ID environment variable for workload identity federation — scopes the minted token to a specific workspace when the federation rule covers more than one
• Added claude agents --cwd <path> to scope the session list to a directory
• /feedback can now include recent sessions (last 24 hours or 7 days) for issues spanning more than the current session
• Rewind menu: added "Summarize up to here" to compress earlier context while keeping recent turns intact
• Auto mode permission dialog now explains when a permissions.ask rule caused the prompt
• Restored the "view diff in your IDE" option on file-edit permission prompts when an IDE is connected
• Background agents launched via /bg or ←← now preserve the current permission mode instead of reverting to default
• claude agents: agents that finish work but leave a background shell running now move to Completed instead of staying under Working
• Improved spinner feedback during long thinking periods — the spinner now warms to amber after 10 seconds to signal Claude is still working
• Improved plugin menu navigation: →/Tab switch tabs, ↑ moves to the tab strip, and tab headers and search box are clickable in fullscreen mode
• Fixed background side-queries sending an unavailable Haiku model ID on Bedrock/Vertex/Foundry/gateway when no ANTHROPIC_SMALL_FAST_MODEL override is set — now falls back to the main-loop model
• Fixed claude daemon status and /doctor on Windows throwing when the daemon pipe key file is locked or unreadable — now shows the underlying error instead of an opaque failure
• Fixed claude agents showing the agent-type list instead of the dashboard when launched through a wrapper that adds flags
• Fixed claude agents opening a crashed session firing redundant dispatches when the working directory was deleted
• Fixed background jobs on a custom ANTHROPIC_BASE_URL gateway not getting auto-named — the namer now uses the main model when no Haiku model is configured
• Fixed /model in one session silently changing the autocompact threshold in other concurrent sessions
• Fixed switching permission mode while a tool-permission prompt is open not auto-dismissing the prompt when the new setting permits the tool
• Fixed pressing Enter while a permission/dialog prompt is open also submitting text in the input box
• Fixed hooks receiving a non-existent transcript_path after EnterWorktree switches the working directory
• Fixed markdown tables with cell wrapping falling back to the vertical key-value layout instead of rendering as a bordered grid (regression in 2.1.136)
• Fixed cancelled prompts being removed from Up-arrow history when auto-restored into the input box, avoiding duplicate entries
• Fixed prompts cancelled with Ctrl+C/Esc before any response being dropped from Up-arrow history
• Fixed Ctrl+C not interrupting a running turn while in vim INSERT/VISUAL mode
• Fixed alternative chat:submit keybindings (e.g. meta+enter, ctrl+enter) not working when enter is rebound to chat:newline
• Fixed prompt suggestions being silently disabled when an output style was configured
• Fixed spinnerVerbs setting not being honored in turn-completion messages
• Fixed AskUserQuestion popup hiding the last line of preceding chat content
• Fixed Web Search status showing "Did 0 searches" when searches returned errors
• Fixed multi-line statusline output dropping or corrupting rows when any line exceeds terminal width
• Fixed light-ansi theme using invisible white for diff context lines on light backgrounds — now uses black
• Fixed error overlay dumping minified bundle source that hid the original error message
• Fixed pressing Enter after typing a feedback survey rating digit submitting it as a chat message instead of the rating
• Fixed pressing x on a selected subagent in the agent panel typing into the prompt instead of stopping the agent
• Fixed session title being derived from plugin monitor notifications before the user's first prompt
• Fixed "Allowed by PermissionRequest hook" repeating once per tool call under a collapsed read/search group
• Fixed /tui silently dropping running background shells and subagents — now refuses and asks to wait for them to finish
• Fixed welcome banner showing "API Usage Billing" on Bedrock, Vertex, Foundry, and other third-party providers — now shows the provider name
• Fixed /mcp server list not keeping the focused server visible in short terminals in fullscreen mode
• Fixed redaction in /feedback bundles producing invalid JSON for quoted values like session IDs
• Fixed desktop and third-party provider sessions incorrectly inheriting apiKeyHelper/ANTHROPIC_AUTH_TOKEN from host managed-settings
• Fixed early analytics events being silently dropped when fired before logger initialization
• Fixed claude plugin install failing for plugins whose marketplace ref no longer exists upstream when a sha is also pinned
• Fixed plugin details pane showing 0 MCP servers for plugins that declare them via .mcp.json
• Fixed plugin MCP servers with unset config variables showing a generic connection failure instead of a "config issue" message with a fix-it hint; malformed .mcp.json entries no longer drop other MCP servers
• Fixed MCP server configs using POSIX shell parameter expansions (e.g. ${var%pattern}) being incorrectly flagged as missing environment variables
• Fixed MCP HTTP/SSE servers returning 403 on connect showing as "failed" instead of "needs auth"
• Fixed remote MCP servers disconnecting unnecessarily when the optional server-events stream failed to reconnect — tool calls continue over POST
• Fixed Remote Control MCP connectors all failing with 401 when the worker session token rotated mid-session
• Fixed Remote Control automatically re-enrolling a trusted device when the server rejects a stale token, instead of looping through /login
• Fixed a race where early OTel spans could be silently dropped in SDK/headless mode with beta tracing enabled
• Fixed custom voice:pushToTalk keybindings and "space": null unbinds being silently ignored
• Fixed Windows Alt+V image paste reporting "no image found" when the clipboard contains a screenshot
• Fixed SDK "Claude Code native binary not found" on Linux when both glibc and musl platform packages are installed
• Bedrock: awsCredentialExport now always runs when configured instead of being skipped when ambient AWS credentials resolve, fixing auth for cross-account access
• [VSCode] Fixed in-chat mic showing no feedback when the microphone produced only silence — now shows "No audio detected"
• [VSCode] Voice mode: the WSL error now suggests installing sox libsox-fmt-pulse for WSLg users
• claude agents: launching a session no longer fails when the pre-warmed background worker is unhealthy — now falls back to a fresh launch
• claude agents no longer shows empty placeholder sessions left over from backgrounding a fresh REPL, and shows onboarding text when entered via ← with no other agents
• Empty idle background sessions left over from ← are now automatically retired by the daemon after 5 minutes