docs: Claude Code v2.1.260 - security fixes, /diff panel, revert of Read() deny regression

content/CHANGELOG.md

@@ -1,5 +1,74 @@
 # Changelog
 
+## 2.1.260
+
+- Added a diff panel that opens beside the conversation in fullscreen mode and shows your uncommitted changes as Claude edits; toggle it with `/diff`
+- Added a likely cause for prompt-cache misses (e.g. tool definitions or system prompt changed, idle past the TTL) to `/cost` and the status line's `prompt_cache` field
+- Added `/reload-plugins` to headless sessions, so it appears in the Claude Code Desktop and SDK command lists
+- Added a text form of `/advisor` (`/advisor`, `/advisor <model>`, `/advisor off`) for the desktop app, Remote Control, and other headless (`-p`/Agent SDK) sessions
+- Added `oidc.scope_on_refresh` to the Claude apps gateway for IdPs that return an id_token on refresh only when asked for `openid` again
+- Added Claude apps gateway support for newer Claude Desktop keys in `desktop` policy blocks, including `userPluginMarketplacesEnabled` and `userPluginUploadsEnabled`
+- Fixed `Edit`/`Write`/`Read` permission rules whose path contains parentheses being dropped as invalid or ignored by the Bash sandbox, which left "read-only" folders writable
+- Fixed one file permission rule with an uncompilable pattern (e.g. an unclosed `[`) making every file edit fail with `Invalid regular expression`; such a deny rule now guards the literal path it spells
+- Fixed Bash permission checks auto-approving zsh commands that hide a command substitution in a REPORTTIME, REPORTMEMORY or DIRSTACKSIZE assignment; these now prompt for approval
+- Fixed Bedrock model discovery, token counting and AWS SSO/STS credential calls failing with "unable to get local issuer certificate" when the corporate root CA is only in the OS certificate store
+- Fixed `permissions.blockReadsOutsideWorkingDirectories` on macOS hiding the user's git config from sandboxed git and hiding a worktree-isolated sub-agent's own checkout
+- Fixed managed settings not loading for claude.ai Enterprise/Team users who also had a leftover API key from an earlier `/login`
+- Fixed `/status` listing a signed-in claude.ai account and a configured API key as if both were in effect; the credential not in use is now marked
+- Fixed managed `skillOverrides` entries keyed on a bundled skill's alias (e.g. `checkup` for `/doctor`) not applying, and `Skill(name)` deny rules not covering a nested skill listed as `<dir>:name`
+- Fixed `model: fable` agents ignoring the `[1m]` tag on an `ANTHROPIC_DEFAULT_FABLE_MODEL` pin and silently running with a 200K context window
+- Fixed the `/model` picker not showing Fable 5.1 for organizations that can use it, which was only accepted when typed as `/model claude-fable-5-1`
+- Fixed prompt caching on Claude Fable 5.1 not covering the context attached after tool results, so it was re-sent as uncached input on every tool-call turn
+- Fixed model switching staying blocked for the rest of the session after a plugin hook load failure; each switch now re-checks and the refusal names the cause
+- Fixed model switching being blocked for the session when an organization-managed plugin's marketplace could not be loaded
+- Fixed SDK-provided MCP servers (e.g. Desktop connectors) sometimes missing from the first turn and only appearing on the next one
+- Fixed Claude in Chrome tools failing with "Not connected" mid-task in cloud-hosted claude.ai sessions when a connector was added or removed
+- Fixed flags, joined emoji and accented letters splitting across wrapped lines, and stale text staying on screen when a flag or joined emoji falls in the terminal's last two columns (now shown as `…`)
+- Fixed Remote Control accepting a model pick that is not a valid model name; it is now refused with an error instead of failing on the next message
+- Fixed `/rewind` and `--rewind-files` reporting success when checkpoint backup files were missing and nothing was actually restored
+- Fixed `/rewind` leaving stale file-read tracking from the rewound-away turns, which caused "File unchanged since last read" stubs and full-file re-injection after external edits
+- Fixed `-p --resume`/`--continue` (as used by the desktop app) failing on every retry once a session's worktree directory lost its git metadata; it now fails once, then resumes without the worktree
+- Fixed a subagent that resumed another agent via SendMessage never being woken by that agent's completion (the notification went to the main conversation instead)
+- Fixed agent teams: an in-process teammate's transcript losing messages, or going blank, during long API retry waits (e.g. under `CLAUDE_CODE_RETRY_WATCHDOG`) as retry notices evicted real messages
+- Fixed a session that moved to the background appearing twice in ListAgents (once as a phantom "interactive" twin with the same name) and receiving SendMessage deliveries in the viewer
+- Fixed intermittent "task output swap refused" errors when many sessions share a project directory
+- Fixed Ctrl+Z in fullscreen leaving the shell on the alternate screen, drawn over the paused interface
+- Fixed Workflow tool subagents being restarted as stalled while a long context compaction was still in progress
+- Fixed plugins from a URL marketplace failing to install with "marketplace entry path does not stay inside the marketplace directory" when a host app (e.g. Claude Desktop) stores it as a directory
+- Fixed an extra browser tab opening when an artifact is published in a session you're driving from claude.ai, the desktop app, or mobile (Remote Control)
+- Fixed the Artifact tool's first call failing with an "Invalid tool parameters" validation error in some Cowork sessions
+- Fixed IDE line selections being dropped when running a skill or slash command (the "N lines selected" context now reaches Claude)
+- Fixed repository detection for GitLab projects in nested subgroups (e.g. `gitlab.com/group/subgroup/project`)
+- Fixed `owner/repo#123` issue references in rendered output linking to github.com when working in a GitLab repository; they now link to the gitlab.com issue
+- Glob/Grep: Fixed the search path being probed on disk before the permission check; a missing path is now reported after permission is decided, as Read does
+- Reverted the 2.1.259 change applying `Read()` deny rules to Bash arguments; it denied `npm run build` under a `Read(./**/build/**)` rule in every mode and made `cd … && grep` prompt even in auto mode
+- Improved structured output: Workflow `agent({schema})` rejects a JSON Schema that can never be satisfied up front, and retry-cap errors now include the last validation failure
+- Improved deleting a background session whose worktree has unpushed commits: the message now names the branch and commit count, and deleting again discards the worktree
+- Improved the Claude apps gateway's refresh-failure log to name the step that failed
+- Improved idle CPU usage of non-interactive (`-p` / SDK) sessions
+- Improved the Claude apps gateway on Amazon Bedrock: input tokens for an aborted request are now counted with AWS's free CountTokens API (grant `bedrock:CountTokens`) instead of a one-token request
+- Improved the settings error for rules such as `Edit(C:\dir\(name)\**)`, where `\(` is read as an escaped parenthesis rather than a path separator, to suggest an unambiguous spelling
+- Improved auto-compact for 1M-context models: Opus and Fable sessions now compact shortly before the 1M-token limit, and recovery compaction on very large contexts no longer times out at 10 minutes
+- Improved `/ultrareview` and `claude ultrareview` to wait up to 45 minutes (previously 30) for long-running cloud reviews
+- Improved `/effort` on Claude Fable 5.1 so changing effort mid-session no longer invalidates the prompt cache
+- Updated the bundled `claude-api` skill so its Go, Java, and C# samples use current-generation model IDs, and clarified that cheaper worker or sub-agent models should be current-generation too
+- Changed `ctrl+l` / `cmd+k` in fullscreen mode to clear the transcript view like a terminal `clear`; scroll up to see earlier messages
+- Changed permission rules with text after the closing parenthesis (e.g. `Bash(ls) x`), which never matched anything, to be reported as invalid settings instead of being silently ignored
+- Changed server-managed settings so a managed CLAUDE.md (`claudeMd`) no longer triggers the security approval dialog; hooks, shell-command, sandbox, and unsafe `env` settings still require approval
+- Changed Claude in Chrome to follow your organization's Claude in Chrome admin setting; when an admin turns it off, `--chrome`, `/chrome` and the browser tools are unavailable
+- Changed Claude apps gateway to send `orgPluginSettings` in the list form read by Claude Desktop 1.15200.0 and later; older desktops ignore it
+- Changed Claude apps gateway to also refuse to start, naming the field, when a `desktop` policy misspells a field in a nested object of a `managedMcpServers` or `orgPluginSettings` entry
+- Changed commands typed at the `!` bash-mode prompt to run outside the sandbox even when strict sandbox mode (`sandbox.allowUnsandboxedCommands: false`) is on, like typing into your own terminal
+- Changed self-hosted runner `--kill-session-after-min` to release a session that is only waiting on its user (paused, resumable on the next message) instead of killing it and reporting a failure
+- Removed the one-hour time limit on background commands started by subagents; they now run until they exit or are stopped, matching the main session
+- [VSCode] Added the selected effort level to the footer model pill, fixed a stale effort level after switching models, and returned the footer pills to their earlier compact size
+- [VSCode] Added Open and Closed to the session list's status filter menu
+- [VSCode] Fixed the welcome screen disappearing in a new session when Remote Control turns on automatically
+- [VSCode] Fixed the session history picker loading a session a second time when it is already open in another tab; it now switches to that tab
+- [VSCode] Fixed the session tab's Rename command silently doing nothing while the tab's view was reloading; it now always applies
+- [VSCode] Fixed a half-finished message, an empty tool card or an extra "Thought for" line staying on screen after Claude Code retried a dropped response
+- [VSCode] Fixed "Enable Remote Control for all sessions" not applying to a session tab that was still starting when the toggle was flipped
+
 ## 2.1.259
 
 - Added `managedMcpServers` managed setting: organizations can provide HTTP/SSE MCP servers to every user (same entry shape as `.mcp.json`); entries that name a command to run are skipped

content/claude-code-manifest.json

@@ -6,25 +6,25 @@
     "url": "https://github.com/anthropics/claude-code/issues"
   },
   "dist": {
-    "shasum": "98ffba9e70047120136ae937218b2407164c323a",
-    "tarball": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-2.1.259.tgz",
+    "shasum": "50a77d223c3bd945455abd35ac757a7c57324ee6",
+    "tarball": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-2.1.260.tgz",
     "fileCount": 7,
-    "integrity": "sha512-kzhz+R36GgL5aouAkeMO9nI1BEIVaRx1NGu0wTTn/H315l61uiLRo13yvva7H10Pfv0PGgzqJ4m+EKv9BzIRXQ==",
+    "integrity": "sha512-Arqg8BvlOehmC3QdACN2WKshqqWQVMo+5NwG22aiJbw7M6S1LM7E2pA2MjD8BS5P5EwZVkh2eKUmC6k7pVUqSQ==",
     "signatures": [
       {
-        "sig": "MEUCIQDN7r3dGf7abmOHFq1zmcWnZq3V469SKdvnlpEaN2PoowIgNMz4rZnwvxGokMZEeveHsNJXNKvFx72ZiGKtKhVYqQc=",
+        "sig": "MEUCIBvIArzkMvHRlthhAPxUm6bApApdSivf8NtPSHUTCpM6AiEApWn7bkGYH1Rs/f5HZG0vlmz+avfcwqK53lYTbhTgMAc=",
         "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"
       },
       {
-        "sig": "MEYCIQCCy/WJiG51+Bf5xqrKcJJqz6uyLqgWAOoCnSewyzENSQIhAMYHpS3gnXLHi4vdCpx+sm1/lTDDChGwH/Yoj/woYd/D",
+        "sig": "MEQCIFxY1+CcMaS/XFS2qpY1Cgp6ZmizMvnpS6pl7+9PcWDbAiBVFMQVvGFlphNXjQW1XWpo41UW9n+8+w5uMK3sS2vNBQ==",
         "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"
       }
     ],
-    "unpackedSize": 182773
+    "unpackedSize": 182844
   },
   "name": "@anthropic-ai/claude-code",
   "type": "module",
-  "_from": "file:staged-npm/anthropic-ai-claude-code-2.1.259.tgz",
+  "_from": "file:staged-npm/anthropic-ai-claude-code-2.1.260.tgz",
   "author": {
     "name": "Anthropic",
     "email": "support@anthropic.com"
@@ -42,8 +42,8 @@
     "email": "wolffiex@anthropic.com"
   },
   "homepage": "https://github.com/anthropics/claude-code",
-  "_resolved": "/home/runner/work/claude-cli-internal/claude-cli-internal/staged-npm/anthropic-ai-claude-code-2.1.259.tgz",
-  "_integrity": "sha512-kzhz+R36GgL5aouAkeMO9nI1BEIVaRx1NGu0wTTn/H315l61uiLRo13yvva7H10Pfv0PGgzqJ4m+EKv9BzIRXQ==",
+  "_resolved": "/home/runner/work/claude-cli-internal/claude-cli-internal/staged-npm/anthropic-ai-claude-code-2.1.260.tgz",
+  "_integrity": "sha512-Arqg8BvlOehmC3QdACN2WKshqqWQVMo+5NwG22aiJbw7M6S1LM7E2pA2MjD8BS5P5EwZVkh2eKUmC6k7pVUqSQ==",
   "_npmVersion": "11.17.0",
   "description": "Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "directories": {},
@@ -106,19 +106,19 @@
   "_hasShrinkwrap": false,
   "readmeFilename": "README.md",
   "optionalDependencies": {
-    "@anthropic-ai/claude-code-linux-x64": "2.1.259",
-    "@anthropic-ai/claude-code-win32-x64": "2.1.259",
-    "@anthropic-ai/claude-code-darwin-x64": "2.1.259",
-    "@anthropic-ai/claude-code-linux-arm64": "2.1.259",
-    "@anthropic-ai/claude-code-win32-arm64": "2.1.259",
-    "@anthropic-ai/claude-code-darwin-arm64": "2.1.259",
-    "@anthropic-ai/claude-code-linux-x64-musl": "2.1.259",
-    "@anthropic-ai/claude-code-linux-arm64-musl": "2.1.259"
+    "@anthropic-ai/claude-code-linux-x64": "2.1.260",
+    "@anthropic-ai/claude-code-win32-x64": "2.1.260",
+    "@anthropic-ai/claude-code-darwin-x64": "2.1.260",
+    "@anthropic-ai/claude-code-linux-arm64": "2.1.260",
+    "@anthropic-ai/claude-code-win32-arm64": "2.1.260",
+    "@anthropic-ai/claude-code-darwin-arm64": "2.1.260",
+    "@anthropic-ai/claude-code-linux-x64-musl": "2.1.260",
+    "@anthropic-ai/claude-code-linux-arm64-musl": "2.1.260"
   },
   "_npmOperationalInternal": {
-    "tmp": "tmp/claude-code_2.1.259_1788384102028_0.03746517436129704",
+    "tmp": "tmp/claude-code_2.1.260_1788474722006_0.7624845032002834",
     "host": "s3://npm-registry-packages-npm-production"
   },
-  "_id": "@anthropic-ai/claude-code@2.1.259",
-  "version": "2.1.259"
+  "_id": "@anthropic-ai/claude-code@2.1.260",
+  "version": "2.1.260"
 }

content/claude/claude-tag/overview.md

@@ -13,7 +13,7 @@
     <p className="tm-hero-lede">Anyone in a channel can tag Claude into a problem and hand it work: reproduce a bug and open a pull request, turn a decision thread into a doc, assemble the state of a project. It posts a checklist in the thread as it goes, and the whole exchange stays visible to the channel.</p>
 
     <div className="tm-hero-ctas">
-      <a className="tm-btn tm-btn-dark" href="/docs/docs/claude-tag/admins/setup-overview">I'm setting it up →</a>
+      <a className="tm-btn tm-btn-dark" href="/docs/claude-tag/admins/setup-overview">I'm setting it up →</a>
       <a className="tm-btn tm-btn-light" href="#put-claude-tag-to-work">Use it in your channel ↓</a>
     </div>
   </div>
@@ -80,7 +80,7 @@ You extend what Claude can reach, like your repositories, ticketing systems, dat
 
 <div className="tm-route-grid">
   <div className="tm-card">
-    <a className="tm-band tm-band-admins" href="/docs/docs/claude-tag/admins/setup-overview">
+    <a className="tm-band tm-band-admins" href="/docs/claude-tag/admins/setup-overview">
       <span className="tm-band-text">
         <span className="tm-band-label">For administrators</span>
         <span className="tm-band-title">Set up Claude Tag</span>
@@ -90,21 +90,21 @@ You extend what Claude can reach, like your repositories, ticketing systems, dat
     </a>
 
     <div className="tm-qrows">
-      <a className="tm-qrow" href="/docs/docs/claude-tag/admins/setup-overview">
+      <a className="tm-qrow" href="/docs/claude-tag/admins/setup-overview">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">Where do I start?</span>
           <span className="tm-qrow-sub">Pair your Slack workspace, connect the services Claude will work in, launch, and test that it works</span>
         </span>
       </a>
 
-      <a className="tm-qrow" href="/docs/docs/claude-tag/concepts/agent-identity">
+      <a className="tm-qrow" href="/docs/claude-tag/concepts/agent-identity">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">What can Claude Tag access?</span>
           <span className="tm-qrow-sub">How admins set access per channel, and where credentials are stored</span>
         </span>
       </a>
 
-      <a className="tm-qrow" href="/docs/docs/claude-tag/admins/add-connections">
+      <a className="tm-qrow" href="/docs/claude-tag/admins/add-connections">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">How do I connect each service?</span>
           <span className="tm-qrow-sub">Credential types, allowed hosts, and what each connection lets Claude reach</span>
@@ -124,35 +124,35 @@ You extend what Claude can reach, like your repositories, ticketing systems, dat
     </a>
 
     <div className="tm-qrows">
-      <a className="tm-qrow" href="/docs/docs/claude-tag/users/getting-started">
+      <a className="tm-qrow" href="/docs/claude-tag/users/getting-started">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">How do I hand Claude Tag a task?</span>
           <span className="tm-qrow-sub">Mention Claude in any channel it's in, with nothing to install</span>
         </span>
       </a>
 
-      <a className="tm-qrow" href="/docs/docs/claude-tag/users/use-cases">
+      <a className="tm-qrow" href="/docs/claude-tag/users/use-cases">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">What is Claude Tag good at?</span>
           <span className="tm-qrow-sub">Use cases for coding, data, incidents, and go-to-market</span>
         </span>
       </a>
 
-      <a className="tm-qrow" href="/docs/docs/claude-tag/users/good-habits">
+      <a className="tm-qrow" href="/docs/claude-tag/users/good-habits">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">How do I get good results?</span>
           <span className="tm-qrow-sub">Good habits for scoping and reviewing work</span>
         </span>
       </a>
 
-      <a className="tm-qrow" href="/docs/docs/claude-tag/users/memory">
+      <a className="tm-qrow" href="/docs/claude-tag/users/memory">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">What does Claude Tag remember?</span>
           <span className="tm-qrow-sub">Channel memory, what's shared across the workspace, and who can see what</span>
         </span>
       </a>
 
-      <a className="tm-qrow" href="/docs/docs/claude-tag/users/proactivity">
+      <a className="tm-qrow" href="/docs/claude-tag/users/proactivity">
         <span className="tm-qrow-text">
           <span className="tm-qrow-q">Can Claude Tag run tasks on a schedule?</span>
           <span className="tm-qrow-sub">Scheduled jobs, channel watching, and triggers</span>
@@ -215,7 +215,7 @@ Claude Tag starts with no access to your external systems. The services you conn
 <div className="tm-strip">
   <div className="tm-strip-head">
     <p className="tm-strip-title">Security review</p>
-    <a className="tm-strip-all" href="/docs/docs/claude-tag/concepts/security-and-data">Security and data handling</a>
+    <a className="tm-strip-all" href="/docs/claude-tag/concepts/security-and-data">Security and data handling</a>
   </div>
 
   <p>The security model, what admins can and can't restrict, audit trails, and network requirements.</p>