Release Archive
This page keeps the sections that What Changed had for 2.1.300 to 2.1.311, newest first.
Each section stays as it was written for its release. The other pages of this site cover the current release. A later release may have changed a row here.
Version 2.1.311
Released October 26, 2026. Source: release notes.
Rows marked with the program come from a comparison of the 2.1.310 and 2.1.311 programs. The flags, settings, hooks, and commands did not change.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
ultrathink | Documented: An official docs page names this item. | In the interactive terminal on the Anthropic API, the word runs its turn at xhigh effort on Opus 5.5, Sonnet 5.5, Haiku 5.5, and Fable 5.1. Typed during a turn, it raises the rest of that turn (the program). | Models and Providers |
[1m] suffix | Documented: An official docs page names this item. | Names and IDs drop the suffix and the (1 label where the suffix has no effect. Claude Code still accepts the suffix (the program). | Models and Providers |
| Compact and continue | Undocumented: Only the program shows this item. It can change without notice. | A standard-window session that exceeds 200K tokens and gets "Usage credits required for 1M context" now compacts and continues (the program). | Context and Compaction |
| Summary asked again | Undocumented: Only the program shows this item. It can change without notice. | When a compaction reply has no summary, Claude Code usually asks once more before it replaces the conversation (the program). | Context and Compaction |
| No retry when the API says so | Undocumented: Only the program shows this item. It can change without notice. | Claude Code does not retry a 429 or 529 marked x-. This also applies with CLAUDE_ (the program). | Models |
| Shell timeout output | Undocumented: Only the program shows this item. It can change without notice. | A Bash command that reaches its timeout returns the output so far. The command keeps running in the background (the program). | Shell, Web, and Background Tasks |
self- hold flags | Undocumented: Only the program shows this item. It can change without notice. | -- and -- keep an idle session while your host reports processes it left running (the program). | Subcommands |
| Permission rule warnings | Undocumented: Only the program shows this item. It can change without notice. | A startup warning about a rule in a settings file shows once per user until the rule changes (the program). | Permission Flow |
| Pro and Max startup | Undocumented: Only the program shows this item. It can change without notice. | Within an hour of the last Consumer Terms check, startup skips two requests. A refused subscription now points to billing settings (the program). | Account and Access |
| Model catalog on cloud providers | Undocumented: Only the program shows this item. It can change without notice. | On Bedrock, Mantle, Vertex, and Foundry, Claude Code can load model settings from a signed file. CLAUDE_ turns this off (the program). | Models and Effort |
DISABLE_ in settings | Documented: An official docs page names this item. | Set in a settings file or by a mod's $., it can only turn compaction off (the program). | Context and Compaction Variables |
$. | Documented: An official docs page names this item. | A mod can paint styled runs over the draft in the prompt box without changing it (the program). | Turn and Prompt |
plugin | Documented: An official docs page names this item. Managed Only: Works only in managed (organization policy) settings. | Managed settings can name the digests of the plugin releases that the organization delivers (the program). | Marketplaces |
| New result fields | Undocumented: Only the program shows this item. It can change without notice. | Agent results can carry tools, and Bash and Power results can carry subagent (the program). | Agents and Tasks, Shell, Web, and Background Tasks |
| New environment variables | Undocumented: Only the program shows this item. It can change without notice. | 36 names are new, such as CLAUDE_ and CLAUDE_. CLAUDE_ is gone (the program). | Environment Variables |
The print and interactive probes matched 2.1.310, apart from these: the longer /code-review listing, the shell name in the environment block, the new result fields, a new store file of the built-in cc-plugin-agents-md plugin, and a new order of the same beta headers. With CLAUDE_CODE_DISABLE_1M_CONTEXT set, the skill listing in the first request now gives skill names without their descriptions. With 1M off, Opus 5.5 gets a 6,000-character listing budget (200,000 tokens × 3 characters × 1%, the program), and the longer 2.1.311 listing no longer fits; 2.1.310's still did. See Skill Listing Budget. The CLAUDE_CODE_USE_BEDROCK sweep case changed only because the probe could reach the AWS instance metadata address on that network. With that lookup off, both versions retry twice and stop with "Could not load AWS credentials".
Version 2.1.310
Released October 23, 2026. Source: release notes.
Rows marked with the program come from a comparison of the 2.1.309 and 2.1.310 programs. The flags, settings, hooks, and commands did not change.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
Monitor and plugin monitors | Documented: An official docs page names this item. | They no longer wait for a server flag. So they also work on Bedrock, Vertex, and Foundry, and with telemetry or nonessential traffic off (the program). | Shell, Web, and Background Tasks, Plugin Manifest |
Long leading sleep | Undocumented: Only the program shows this item. It can change without notice. | Where Monitor is newly on, Bash now also refuses a command that starts with a sleep of 25 seconds or more, and points Claude to Monitor (the program). | Shell, Web, and Background Tasks |
| Effort refused | Undocumented: Only the program shows this item. It can change without notice. | When the server refuses the effort setting, Claude Code sends the request again without it and without the effort- beta (the program). | Betas, Models and Providers |
| Sandbox warnings | Documented: An official docs page names this item. | On Ubuntu, the warning names the AppArmor limit that stops bubblewrap. A new warning says when deny paths on another computer are not enforced (the program). | Sandbox |
Mod Image in tmux | Documented: An official docs page names this item. | An Image draws inside tmux when allow- and focus- are on. $. gives fix: when they are off. | UI Types |
/ retired models | Undocumented: Only the program shows this item. It can change without notice. Gated: Works only behind a flag or a server gate. Server flags decide | It can list the deprecated or retired model IDs that it finds in the project (the program). | Bundled Skills |
| New environment variables | Undocumented: Only the program shows this item. It can change without notice. | CLAUDE_, CLAUDE_, and CLAUDE_. CLAUDE_ is on by default now (the program). | Features and Toggles, Network and Proxy, Plugins and MCP |
The print and interactive probes matched 2.1.309, apart from Monitor in the tool list and the sizes that follow from it, and run-to-run noise.
Version 2.1.309
Released October 22, 2026. Source: release notes.
Rows marked with the program come from a comparison of the 2.1.308 and 2.1.309 programs. The settings, hooks, and commands did not change.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
claude ultrareview trust | Documented: An official docs page names this item. | The command needs a trusted folder. It asks on a terminal. In a script, pass -- or set CLAUDE_ (the program). | Subcommands |
Dangerous rm in bypass mode | Undocumented: Only the program shows this item. It can change without notice. | In the desktop app and VS Code, Claude Code denies a dangerous rm or rmdir at once, with a hint to rewrite it. | Permission Modes |
sandbox. | Documented: An official docs page names this item. | While the sandbox is on but cannot run, these commands ask before they write to the sandbox's write paths. | Sandbox |
Large nested CLAUDE. | Documented: An official docs page names this item. | A nested file over the size limit loads only its start. So it no longer makes the session compact again and again. | Memory and Rules |
-- skill names | Documented: An official docs page names this item. | Claude Code offers a skill whose name another skill has as <folder>:. | Skills and Commands |
Mod API cursor and model alias | Documented: An official docs page names this item. | $. and the prompt. event take cursor, which places the caret. A turn. hook can name the model by an alias such as haiku (the program). | Turn and Prompt Types |
mcp_ live | Undocumented: Only the program shows this item. It can change without notice. | A control request can ask for a reply sent only to the clients attached at that moment (the program). | Control Protocol |
result model_ | Undocumented: Only the program shows this item. It can change without notice. | Each result line of stream- output also gives the usage and cost of only the calls since the previous result, per model and shaped like model. Add it up over the results instead of subtracting model totals (the program). | Stream JSON |
| Bedrock tool streaming | Documented: An official docs page names this item. | A Bedrock base URL on Amazon's own bedrock- host no longer counts as custom. So fine-grained tool streaming works with it (the program). | Network and Proxy |
Bash tool text | Undocumented: Only the program shows this item. It can change without notice. | The description grew from 1,406 to 1,688 characters, with a new line on GitHub @name mentions (the program). | Tool Descriptions |
| New environment variables | Undocumented: Only the program shows this item. It can change without notice. | Six more new variables for cloud sessions, the self-hosted runner, resumed sessions, plugin sync, and artifact sharing (the program). | Remote and Cloud Sessions, Plugins and MCP, Features and Toggles |
The print and interactive probes matched 2.1.308, apart from the Bash text, the new environment variables, and the new result field above, and run-to-run noise.
Version 2.1.308
Released October 22, 2026. Source: release notes. The notes list only bug fixes and reliability improvements.
A comparison of the 2.1.307 and 2.1.308 programs found no change to environment variables, flags, commands, settings, hooks, or gates. The Mod API type file is the same except for the version in its header (the program).
The print, interactive, managed folder, and live login probes matched 2.1.307, apart from run-to-run noise: a warm-cache live run moved by up to 3 tokens, and MCP servers started in another order.
Version 2.1.307
Released October 21, 2026. Source: release notes.
Rows marked with the program come from a comparison of the 2.1.306 and 2.1.307 programs.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
set_ reply | Undocumented: Only the program shows this item. It can change without notice. | A set_ control reply now has response., the model the session uses. An alias comes back as the full ID. Probe print. saw the new field. The release notes say the Agent SDK's set now waits up to 15 seconds, not 5. | Control Protocol |
prompt- beta | Documented: An official docs page names this item. | Claude Code does not send it behind a custom ANTHROPIC_ gateway or on Foundry. A stub run sent 9 betas, not 10. | Betas |
| Bad tool calls | Documented: An official docs page names this item. | Claude Code retries a tool call it cannot parse up to twice before it ends the turn. | Agent Loop |
| Fork subagents | Documented: An official docs page names this item. | Claude Code tells each fork in a group of forks started together which launch is its own. | Subagent Runtime |
Agent tool text | Undocumented: Only the program shows this item. It can change without notice. | The description grew from 1,989 to 3,227 characters. It now lists the costs of a subagent and how to brief one (the program). | Tool Descriptions |
| Web-reading agent | Undocumented: Only the program shows this item. It can change without notice. | Its prompt has one new line. The line says to give the date of a stored copy of a page and not to fetch it again (the program). | Subagent, Web Fetch |
Transcript sandboxed key | Undocumented: Only the program shows this item. It can change without notice. | A shell tool result line can carry sandboxed (the program). | Transcript Format |
/ | Documented: An official docs page names this item. | Moves Claude API code to API version 2026-. | Bundled Skills |
claude_ | Documented: An official docs page names this item. | A new OpenTelemetry event. It covers each tool call that a rule, auto mode, a safety check, a hook, or the sandbox stopped, prompted, or sent back. | Telemetry and Debug Variables |
| Checkout hook time limit | Documented: An official docs page names this item. | A self-hosted runner stops a checkout hook after 30 minutes by default, and the setup fails. -- raises it. 0 turns it off. | Remote and Cloud Sessions |
-- | Undocumented: Only the program shows this item. It can change without notice. | A self-hosted runner flag. The web Changes pane can show a repository cloned in a subfolder (the program). | Remote and Cloud Sessions |
ax | Documented: An official docs page names this item. | The setting and CLAUDE_ in a settings env block apply only from user, managed, or -- settings. The program already did this in 2.. | UI and Terminal Variables |
ssh | Undocumented: Only the program shows this item. It can change without notice. | A new setting for the desktop app. It covers SSH connections whose host comes from a command. Claude Code itself does not use it (the settings schema). | Agents and Remote Settings |
Mod API tool. | Documented: An official docs page names this item. | The input carries approver, who answers an ask. Every ask a hook makes goes to a person. The engine marks it with plugin. The type file drops decider. A test's $. takes agent (the type file). | Tool and Command Config Types |
| New variables | Undocumented: Only the program shows this item. It can change without notice. | CLAUDE_, CLAUDE_, CLAUDE_, and CLAUDE_ (the program). CLAUDE_ is gone. | Environment Variables |
The release also fixes MCP servers after a computer sleeps or the macOS keychain is locked. It fixes HTTP MCP tool calls that Claude Code sent twice. It fixes CLAUDE_CODE_DISABLE_1M_CONTEXT with a [1m] alias such as opus[1m]. It also fixes many cloud session, self-hosted runner, and VS Code issues.
Read the release notes for the full list.
A comparison of the 2.1.306 and 2.1.307 programs also found runner-internal names (--runner-declares, CLAUDE_CODE_DIFF_COPY_ROOT, CLAUDE_CODE_FOUND_REPOSITORY_GIT, CLAUDE_RUNNER_UPDATE_BIN) that you do not set, so this site does not list them (the program).
Version 2.1.306
Released October 21, 2026. Source: release notes.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
claude - in cloud sessions | Documented: An official docs page names this item. | claude - no longer reports "Not logged in" when you start it without the session's environment variables. | Remote and Cloud Sessions |
| "Prompt is too long" with many MCP tools | Documented: An official docs page names this item. | In a session with many MCP tools, "prompt is too long" no longer replaces an API error. Claude Code also no longer runs a compaction it does not need. | Context and Compaction |
A comparison of the 2.1.305 and 2.1.306 programs found no change to environment variables, flags, commands, settings, hooks, or gates (the program).
Live runs on 2.1.306 with a subscription login found these (see Probes):
/artifactssaidUnknown command: /artifactsin the interactive screen, and no panel opened. This differs from2.1.305. The cause is not known./usagewith proxy faults (a429, a429withRetry-After: 1800, and a200error envelope): Claude Code again never called the usage endpoint. So the rate-limit texts still show only against the stub.- The main request of a login run and a fake-key run had the same body keys and tools. The login sent two more betas. See Betas.
The managed folder probe on 2.1.306 (stub and fake key, no login) matched what the docs say. Cases mcp-*, outputstyle, skill-*, claudemd-order, excludes-*, agent-mcp, and auto-mode-config matched every row in Managed Folder Probe. Cases classify-* matched autoMode.classifyAllShell.
Version 2.1.305
Released October 20, 2026. Source: release notes.
Rows marked with the program come from a comparison of the 2.1.304 and 2.1.305 programs.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
plugin validate -- | Undocumented: Only the program shows this item. It can change without notice. | -- also checks a plugin against the plugin directory's submission rules, with checks such as README, LICENSE, icon, and privacy. It is not in the release notes (the program). | Plugin CLI |
/ fixes | Documented: An official docs page names this item. | Each warning is a one-line fix that names its source. f applies the fixes. The same fixes appear in VS Code and /. | Slash Commands |
/ delete | Documented: An official docs page names this item. | 1 or Enter keeps, 2 deletes, Esc cancels. y and n no longer answer. | Slash Commands |
| Tool search retry | Documented: An official docs page names this item. | Claude Code retries without tool search when the endpoint or a gateway rejects it, or when Tool is disallowed or left out of --. This fixes a 2. regression. | MCP Runtime |
| Mod API | Documented: An official docs page names this item. | A docked pane stays within 45% of the terminal's width. Image draws in iTerm2 3.5 and later with fullscreen rendering. | Mod API UI Types |
| Bash on a full disk | Documented: An official docs page names this item. | The error says the disk is full and that nothing ran. | Shell and Web Tools |
Remote Control ! commands | Undocumented: Only the program shows this item. It can change without notice. | Claude Code does not run a ! command sent over Remote Control. The message tells you to run it on the computer itself (the program). | Slash Commands |
The release also adds sandbox.allowNestedUserNamespaces, CLAUDE_CODE_RETRY_WATCHDOG_USAGE_LIMIT_RECHECK_MS, and many fixes.
Read the release notes for the full list.
Version 2.1.304
Released October 19, 2026. Source: release notes.
Rows marked with the program come from a comparison of the 2.1.303 and 2.1.304 programs.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
| Tool search on by default | Documented: An official docs page names this item. | Tool search is on behind a custom ANTHROPIC_. Claude Code retries a 400 or 422 from the gateway without it. The site's captures use a local stub as ANTHROPIC_. So the main prompt there now lists 12 tools, not 20. | Tools Reference and Tools per Variant |
/ | Documented: An official docs page names this item. | A guided setup that reads your project and recent sessions. It is now on Bedrock, Vertex, Foundry, a Claude apps gateway, and with telemetry off. | Auto Mode |
/ | Documented: An official docs page names this item. | Compares a Managed Agents agent's settings with Anthropic's security guide. It changes nothing. | Bundled Skills |
/ delete | Documented: An official docs page names this item. | The confirmation shows numbered choices: 1 or Enter keeps, 2 deletes. | Slash Commands |
-- | Documented: An official docs page names this item. | The help text now says it disables skills and commands. | Skills and Commands |
Mounted drive rm - prompt | Documented: An official docs page names this item. | rm - of a mounted drive or a folder at its top level (/, /, /) gets a safety prompt. The program has an env var CLAUDE_ that skips this check. | Tools and Bash Variables |
deny brackets on Linux | Documented: An official docs page names this item. | A sandbox. glob such as [user- no longer stops sandboxed commands from starting. | Sandbox |
CLAUDE_ | Documented: An official docs page names this item. | Accepts k and M suffixes, and warns when a value is out of range or ignored. | Context and Compaction Variables |
| Plugin MCP switches | Undocumented: Only the program shows this item. It can change without notice. | The program has CLAUDE_ (only sse, http, and ws plugin servers load) and CLAUDE_. | Plugins and MCP Variables |
| Low disk and memory warnings | Undocumented: Only the program shows this item. It can change without notice. | The program reads CLAUDE_ and CLAUDE_, both 0 by default. | Remote and Cloud Sessions |
| Mod API changes | Documented: An official docs page names this item. | decider: on tool., e., and settings. hooks that get each settings layer. | Mod API |
| Fixes | Documented: An official docs page names this item. | / names when a rate limit ends. / no longer guesses for auto or unset. Self-paced / wakeups at the 1-hour maximum no longer miss the prompt cache. | Slash Commands |
The release also changes the claude --help text, adds a resume warning on Pro and Max plans, and has many more fixes.
Read the release notes for the full list.
Version 2.1.303
Released October 18, 2026. Source: Changelog.
The release notes say only "Bug fixes and reliability improvements."
A comparison of the 2.1.302 and 2.1.303 programs found one change in the code: how Claude Code treats NODE_EXTRA_CA_CERTS.
Source: the program.
| Change | Status | What it means for you |
|---|---|---|
| Root certificate deny list | Undocumented: Only the program shows this item. It can change without notice. | Claude Code now has a deny list of root certificates. It drops a listed certificate from the NODE_ file and prints a message that says so. |
| New CA messages | Undocumented: Only the program shows this item. It can change without notice. | New texts say that Claude Code ignored a block or the whole file, or that no root certificates remain to trust. The last one asks you to update Claude Code. |
| CA store fallback | Undocumented: Only the program shows this item. It can change without notice. | When the system CA API is not available, the debug line now says Claude Code uses the bundled roots. |
The counts of settings keys, hook events, tools, slash commands, CLI flags, and models did not change. The Mod API type file did not change. See Network and Proxy Variables for the certificate variables.
Version 2.1.302
Released October 16, 2026. Source: Changelog.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
CLAUDE_ added | Documented: An official docs page names this item. | Picks the model of the client-side auto mode classifier. It does not change server-side auto mode. | Auto Mode |
Idle compaction row in / | Documented: An official docs page names this item. | You can turn idle compaction off or on from /. | Context and Compaction |
| Print mode default permission mode | Documented: An official docs page names this item. | claude - and Agent SDK sessions with no permission mode start in default mode on third-party providers, with telemetry off, or on a fresh install. -- keeps auto. | Permission Modes |
| Fork subagents on by default | Documented: An official docs page names this item. | subagent_ is on in claude -, the Agent SDK, the desktop app, and VS Code, as in the terminal. CLAUDE_ turns it off. | Subagent Runtime |
| Subagents run in the background | Documented: An official docs page names this item. | The desktop app and VS Code always run the main conversation's subagents in the background. | Subagent Runtime |
| Hook limit | Documented: An official docs page names this item. | At most 12 prompt or agent hooks of one event run at a time. The rest wait. | Hook Handlers |
| Read tool image limit | Documented: An official docs page names this item. | Claude Code refuses image sources over 128 MB. | Read tool in the Tools reference. |
| Faster plugin startup | Documented: An official docs page names this item. | Plugin command and agent files take fewer file system calls to load. | Plugin Loading |
| Auto mode with a long conversation | Documented: An official docs page names this item. | The server-side classifier now compacts a conversation that is too long for the check, instead of denying every checked call. | Auto Mode |
OpenTelemetry tool_ fixes | Documented: An official docs page names this item. | Claude Code sets classifier_ for most auto mode blocks. New attributes no longer displace tool_, tool_, and tool_. | Telemetry and Debug Variables |
The release also fixes errors when you switch to Vertex or Bedrock in the middle of a session. It fixes a prompt cache miss after ToolSearch. It fixes plugin marketplaces that cloned again on every refresh.
Version 2.1.301
Released October 15, 2026. Source: Changelog.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
CLAUDE_ added | Documented: An official docs page names this item. | Unattended retry mode ends a request at a usage limit that resets too far away. | Environment Variables |
Vim % motion | Documented: An official docs page names this item. | Jumps to the matching bracket, alone or with d, c, or y. | Changelog (the changelog entry for 2.1.301) |
Mod Input gets rows | Documented: An official docs page names this item. | A text field of several lines. Enter submits. | Mod API UI |
Mod hook . runs less often | Documented: An official docs page names this item. | It runs only when the hook throws or times out. | Mod API Hooks |
Mod $. result | Documented: An official docs page names this item. | It resolves with {} once set, or with { deny } and a reason. | Clock, HTTP, Process, Env, and Settings |
OpenTelemetry tool_ | Documented: An official docs page names this item. | New classifier_ and permission_ attributes. | Telemetry and Debug Variables |
| Model with a smaller context window | Documented: An official docs page names this item. | The previous model summarizes a conversation that is too long for the new model. | Context and Compaction |
Version 2.1.300
Released October 14, 2026. Source: Changelog.
| Change | Status | What it means for you | Where to read more |
|---|---|---|---|
| Local transcripts record the request | Documented: An official docs page names this item. | Each API request's system prompt, tools, and parameters now go into the local transcript. A transcript you share can reproduce a request. | Transcript Format |
| Gzip for large requests | Documented: An official docs page names this item. | Large requests to api.anthropic.com use gzip even when telemetry is off. CLAUDE_ turns it off. | Network and Proxy Variables |
updated is checked | Documented: An official docs page names this item. | Claude Code checks input from Pre and Permission hooks like Claude's own input. It drops unknown keys. Input that the tool rejects denies the call. | Hook Input and Output |
| Exit stops background commands | Documented: An official docs page names this item. | Exit force-kills background commands still running 1.5 seconds after the stop request. | Tools and Bash Variables |
prompt. mod hook | Documented: An official docs page names this item. | It fires when the prompt text changes without a typed edit. | Mod API Hooks |
virtual in prompt decorations | Documented: An official docs page names this item. | Text drawn in the prompt box that never enters the draft. | Mod API UI |
$. | Documented: An official docs page names this item. | Shows an agent's transcript in the main view. | Mod API UI |
CLAUDE_ | Documented: An official docs page names this item. | Turns off the advisor tool and the / command. | Tools and Bash Variables |
Older Releases
This site does not cover versions before 2.1.300 in detail.
The official Changelog lists them. The weekly What's New digest covers the larger features.
The rows for 2.1.300 to 2.1.302 match the changelog text that the program itself stores. The 2.1.304 rows come from the official release notes and from a comparison of the 2.1.303 and 2.1.304 programs.
We ran these 2.1.304 rows again on 2.1.305, and they held: the print-mode permission default (init shows default, and --permission-mode auto keeps auto), the transcript request lines (api-request, api-request-shape, and api-request-blob), the tool search tool list behind a custom base URL, and the CLAUDE_CODE_AUTO_COMPACT_WINDOW warnings.
We also ran these against a local stub with a fake key:
/auto-mode-setupopens its screen ("Teach auto mode about your environment?") behind a custom base URL./effort statusprintsEffort level: auto (currently medium)forauto./effort unsetsetsauto. For a set level it printsCurrent effort level: high (...).- The tool clamped a
/loopScheduleWakeupof 7200 seconds. The tool result saidclamped to 3600s from your requested value. A stub cannot show the cache fix itself. - The Mod API items:
tool.checkgotisReadOnly: trueforRead. An ask withdecider: "person"showed a dialog in the default mode. In-p, Claude Code refused it asPermission to use Bash denied by plugin <name>: <reason>. An ask without it saidBash needs approval (asked by plugin <name>: <reason>). Thesettings.readhook gotlayers, such as[{"source":"user","settings":{...}}]. denyReadbrackets are a Linux fix. On macOS a sandboxedechowithdenyReadglobs holding[user-id]ran fine. This does not show the Linux fix.
The /artifacts delete confirmation was seen live on 2.1.305, with a throwaway artifact that the run published and deleted. The panel asks Delete <title>? This cannot be undone. It offers 1. No, keep it and 2. Yes, delete it, with the first one selected, and the footer says Esc to go back. Pressing y did nothing. Down then Enter chose yes, the list showed Deleting…, then Artifact deleted, and a refresh showed an empty list. 2.1.304 added the numbered choices and kept y, n, and Esc; 2.1.305 dropped y and n. With an API key and no login, /artifacts says Unknown command. In print mode with CLAUDE_CODE_OAUTH_TOKEN it says /artifacts isn't available in this environment. In the interactive screen with that token it opens a panel with the tabs All, Mine, and Shared, and an empty list says No artifacts yet. Publish one with the Artifact tool.
On 2.1.305, /usage with an API key shows only session cost and tokens. With CLAUDE_CODE_OAUTH_TOKEN it also shows the rate-limit rows (Current session, Current week (all models), their Resets lines) and then What's contributing to your limits usage? with Scanning local sessions…. With the token the program did not call the usage endpoint in a 35 second run. The rows came from the rate-limit headers of a model reply. A fuller panel needs a claude.ai login with the user:inference and user:profile scopes (the program). A local stub with fake subscriber credentials showed the Resets lines too. The rate limited until <time> text is new in 2.1.304. It appears only when the usage endpoint is rate limited (the program). A stub that answered 429 showed it, in four forms. See Slash Commands. With CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC set, /usage shows Failed to load usage data and sends no request.
For the /artifacts and /usage rows,
Example
You update from 2.1.301 to 2.1.303 and your claude -p job asks for no permission changes.
Check the 2.1.302 row for print mode. If your job used a third-party provider, set the mode on purpose.
claude --version
claude -p --permission-mode auto "summarize the diff"