• Fixed a crash in the permission dialog when an agent teams teammate requested tool permission

+ [config-env] sandbox.network.deniedDomains: Block domains even when allowedDomains wildcard permits
+ [keyboard-shortcuts] Ctrl+E: Move to end of line (multiline input)
- [config-env] autoScrollEnabled
- [keyboard-shortcuts] B

Full changelog

• Changed the CLI to spawn a native Claude Code binary (via a per-platform optional dependency) instead of bundled JavaScript
• Added `sandbox.network.deniedDomains` setting to block specific domains even when a broader `allowedDomains` wildcard would otherwise permit them
• Fullscreen mode: Shift+↑/↓ now scrolls the viewport when extending a selection past the visible edge
• `Ctrl+A` and `Ctrl+E` now move to the start/end of the current logical line in multiline input, matching readline behavior
• Windows: `Ctrl+Backspace` now deletes the previous word
• Long URLs in responses and bash output stay clickable when they wrap across lines (in terminals with OSC 8 hyperlinks)
• Improved `/loop`: pressing Esc now cancels pending wakeups, and wakeups display as "Claude resuming /loop wakeup" for clarity
• `/extra-usage` now works from Remote Control (mobile/web) clients
• Remote Control clients can now query `@`-file autocomplete suggestions
• Improved `/ultrareview`: faster launch with parallelized checks, diffstat in the launch dialog, and animated launching state
• Subagents that stall mid-stream now fail with a clear error after 10 minutes instead of hanging silently
• Bash tool: multi-line commands whose first line is a comment now show the full command in the transcript, closing a UI-spoofing vector
• Running `cd <current-directory> && git …` no longer triggers a permission prompt when the `cd` is a no-op
• Security: on macOS, `/private/{etc,var,tmp,home}` paths are now treated as dangerous removal targets under `Bash(rm:*)` allow rules
• Security: Bash deny rules now match commands wrapped in `env`/`sudo`/`watch`/`ionice`/`setsid` and similar exec wrappers
• Security: `Bash(find:*)` allow rules no longer auto-approve `find -exec`/`-delete`
• Fixed MCP concurrent-call timeout handling where a message for one tool call could silently disarm another call's watchdog
• Fixed Cmd-backspace / `Ctrl+U` to once again delete from the cursor to the start of the line
• Fixed markdown tables breaking when a cell contains an inline code span with a pipe character
• Fixed session recap auto-firing while composing unsent text in the prompt
• Fixed `/copy` "Full response" not aligning markdown table columns for pasting into GitHub, Notion, or Slack
• Fixed messages typed while viewing a running subagent being hidden from its transcript and misattributed to the parent AI
• Fixed Bash `dangerouslyDisableSandbox` running commands outside the sandbox without a permission prompt
• Fixed `/effort auto` confirmation — now says "Effort level set to max" to match the status bar label
• Fixed the "copied N chars" toast overcounting emoji and other multi-code-unit characters
• Fixed `/insights` crashing with `EBUSY` on Windows
• Fixed exit confirmation dialog mislabeling one-shot scheduled tasks as recurring — now shows a countdown
• Fixed slash/@ completion menu not sitting flush against the prompt border in fullscreen mode
• Fixed `CLAUDE_CODE_EXTRA_BODY` `output_config.effort` causing 400 errors on subagent calls to models that don't support effort and on Vertex AI
• Fixed prompt cursor disappearing when `NO_COLOR` is set
• Fixed `ToolSearch` ranking so pasted MCP tool names surface the actual tool instead of description-matching siblings
• Fixed compacting a resumed long-context session failing with "Extra usage is required for long context requests"
• Fixed `plugin install` succeeding when a dependency version conflicts with an already-installed plugin — now reports `range-conflict`
• Fixed "Refine with Ultraplan" not showing the remote session URL in the transcript
• Fixed SDK image content blocks that fail to process crashing the session — now degrade to a text placeholder
• Fixed Remote Control sessions not streaming subagent transcripts
• Fixed Remote Control sessions not being archived when Claude Code exits
• Fixed `thinking.type.enabled is not supported` 400 error when using Opus 4.7 via a Bedrock Application Inference Profile ARN

• Fixed "claude-opus-4-7 is temporarily unavailable" for auto mode

+ [skills-agents] /ultrareview [PR#]: Cloud code review (parallel multi-agent)
+ [skills-agents] /less-permission-prompts: Scan transcripts for allowlist proposals
+ [config-env] CLAUDE_CODE_USE_POWERSHELL_TOOL: Opt in/out of PowerShell tool on Windows
+ [keyboard-shortcuts] Ctrl+U: Clear input buffer (Ctrl+Y to restore)
+ [workflows-tips] Auto mode: Built-in for Max subscribers
~ [slash-commands] /effort [level]: Set effort; interactive slider (low/med/xhigh/high/max/auto)
~ [keyboard-shortcuts] Ctrl+L: Clear screen + force full redraw
~ [cli-flags] --effort: low/med/xhigh/high/max
~ [workflows-tips] /effort: ○ low · ◐ med · ◑ xhigh · ● high/max
~ [workflows-tips] 1M context: Opus 4.7 (Max/Team/Ent)
- [keyboard-shortcuts] A
- [config-env] FORCE_PROMPT_CACHING_5M

Full changelog

• Claude Opus 4.7 xhigh is now available! Use /effort to tune speed vs. intelligence
• Auto mode is now available for Max subscribers when using Opus 4.7
• Added xhigh effort level for Opus 4.7
• /effort now opens an interactive slider when called without arguments
• Added Auto (match terminal) theme option
• Added /less-permission-prompts skill
• Added /ultrareview for running comprehensive code review
• Auto mode no longer requires --enable-auto-mode
• Windows: PowerShell tool is progressively rolling out
• Read-only bash commands with glob patterns no longer trigger a permission prompt

+ [slash-commands] /tui [fullscreen]: Switch to flicker-free TUI rendering
+ [slash-commands] /focus: Toggle focus view
+ [config-env] autoScrollEnabled: Disable auto-scroll in fullscreen
+ [workflows-tips] Push notifications: Mobile push via Remote Control
~ [keyboard-shortcuts] Ctrl O: Toggle verbose transcript
~ [workflows-tips] Ctrl O: Toggle verbose transcript
~ [config-env] CLAUDE_CODE_ENABLE_AWAY_SUMMARY: Opt out of auto-recap (set to 0)
- [slash-commands] /insights
- [slash-commands] /stats
- [config-env] CLAUDECODE

Full changelog

• Added /tui command and tui setting
• Added push notification tool
• Changed Ctrl+O to toggle verbose transcript only
• Added autoScrollEnabled config
• Added option to show Claude's last response as commented context in Ctrl+G external editor
• Improved /plugin Installed tab
• Improved /doctor to warn when MCP server defined in multiple config scopes
• --resume/--continue now resurrects unexpired scheduled tasks
• /autocompact, /context, /exit, and /reload-plugins now work from Remote Control clients
• Session recap now enabled for users with telemetry disabled

• Improved the extended-thinking indicator with a rotating progress hint

+ [slash-commands] /recap: Context summary when returning to session
+ [keyboard-shortcuts] Ctrl+A: Show all projects (in /resume)
+ [config-env] ENABLE_PROMPT_CACHING_1H: Opt into 1-hour prompt cache TTL
+ [config-env] FORCE_PROMPT_CACHING_5M: Force 5-minute prompt cache TTL
+ [config-env] CLAUDE_CODE_ENABLE_AWAY_SUMMARY: Force /recap when telemetry disabled
+ [skills-agents] slash commands (Skill): Model discovers/invokes built-in commands
~ [slash-commands] /rewind: Rewind conv / code checkpoint (/undo alias)
- [keyboard-shortcuts] Ctrl+X Ctrl+E
- [slash-commands] /copy [N]
- [config-env] CLAUDE_CODE_SUBPROCESS_ENV_SCRUB
- [config-env] workspace.git_worktree
- [config-env] CLAUDE_CODE_CERT_STORE

• Show thinking hints sooner during long operations

+ [config-env] PreCompact: Block compaction (exit 2 or decision:block)
+ [skills-agents] monitors: Plugin background monitors (auto-arm on session/skill)
~ [slash-commands] /loop [interval]: Recurring task (/proactive alias)
- [config-env] CLAUDE_CODE_SCRIPT_CAPS

+ [slash-commands] /team-onboarding: Generate teammate ramp-up guide from usage
+ [config-env] CLAUDE_CODE_CERT_STORE: Set to bundled to use only bundled CAs
~ [slash-commands] /desktop: removed (replaced by /team-onboarding)
- [slash-commands] /desktop

+ [config-env] CLAUDE_CODE_PERFORCE_MODE: Fail read-only files with p4 edit hint
+ [config-env] CLAUDE_CODE_SUBPROCESS_ENV_SCRUB: Enable PID namespace sandboxing on Linux
+ [config-env] CLAUDE_CODE_SCRIPT_CAPS: Limit per-session script invocations
+ [cli-flags] --exclude-dynamic-system-prompt-sections: Print mode cross-user prompt caching

+ [keyboard-shortcuts] Ctrl O: Focus view (NO_FLICKER mode)
+ [config-env] refreshInterval: Auto-refresh status line every N seconds
+ [config-env] workspace.git_worktree: Status line JSON for worktree detection
~ [keyboard-shortcuts] Ctrl O: Focus view (NO_FLICKER mode)

+ [config-env] CLAUDE_CODE_USE_MANTLE: Enable Amazon Bedrock via Mantle
+ [config-env] hookSpecificOutput.sessionTitle: Set session title in UserPromptSubmit hooks
+ [skills-agents] keep-coding-instructions: Frontmatter for plugin output styles

+ [config-env] forceRemoteSettingsRefresh: Fail-closed remote settings fetch
~ [slash-commands] /release-notes: Interactive version picker
- [slash-commands] /vim

+ [config-env] disableSkillShellExecution: Disable shell exec in skills/commands
+ [mcp-servers] _meta maxResultSizeChars: Override result size up to 500K
+ [skills-agents] bin/: Plugin ships executables