v2.1.143

What's changed

• Added plugin dependency enforcement: claude plugin disable now refuses when another enabled plugin depends on the target (with a copy-pasteable disable-chain hint), and claude plugin enable force-enables transitive dependencies


• Added projected context cost (per-turn and per-invocation token estimates) to the /plugin marketplace browse pane


• Added worktree.bgIsolation: "none" setting to let background sessions edit the working copy directly without EnterWorktree, for repos where worktrees are impractical


• PowerShell tool now passes -ExecutionPolicy Bypass. Opt out with CLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY=1


• Background sessions now preserve the model and effort level you set after waking from idle


• Shift+Tab in attached agent sessions now includes auto mode in the cycle


• Fixed a corrupt .credentials.json with a non-array scopes value hanging the CLI on startup or silently aborting OAuth token refresh


• Fixed right-click paste in claude agents on Windows Terminal and WSL


• Fixed stop hooks that block repeatedly looping forever — the turn now ends with a warning after 8 consecutive blocks (override via CLAUDE_CODE_STOP_HOOK_BLOCK_CAP)


• Fixed Esc/Ctrl+C not cancelling a pending /loop wakeup while Claude is idle between iterations


• Fixed /goal evaluator firing while background shells or delegated subagents are still running


• Fixed NO_COLOR/FORCE_COLOR in settings.json env stripping Claude Code's own UI colors — they now apply to subprocesses only


• Fixed agent view spawning repeated PowerShell processes on Windows when listing sessions


• Fixed /bg without a prompt sending "continue" to the forked session — the fork now waits for input


• Fixed --agent <name> not finding plugin-contributed agents without the plugin: prefix


• Fixed deleting a session from agent view not removing its transcript file


• Fixed stale-fragment rendering when scrolling in attached background sessions on Windows Terminal


• Fixed background agents false-positive worker-stall detection storm after host sleep or macOS App Nap


• Fixed 5xx error messages pointing at status.claude.com instead of naming the configured gateway or cloud provider


• The PowerShell tool is now enabled by default on Windows for Bedrock, Vertex, and Foundry users. Opt out with CLAUDE_CODE_USE_POWERSHELL_TOOL=0.


• claude agents now accepts --add-dir, --settings, --mcp-config, and --plugin-dir and applies them to the dashboard and to background sessions dispatched from it


• claude agents accepts --permission-mode, --model, --effort, and --dangerously-skip-permissions to set defaults for sessions dispatched from the view


• claude --bg --dangerously-skip-permissions now persists across retire→wake


• Fixed background sessions silently capturing IDE file references into the warm spare's input, which caused the reference to be prepended to the next prompt dispatched from claude agents


• Worktree cleanup no longer falls back to rm -rf when git worktree remove fails, preventing loss of gitignored or in-progress files


• Fixed background-job sessions on macOS getting "Operation not permitted" errors when reading files under ~/Documents, ~/Desktop, or ~/Downloads, even with Full Disk Access granted.


• /bg now preserves --mcp-config, --settings, --add-dir, --plugin-dir, and --strict-mcp-config, so backgrounded sessions keep their MCP servers and settings across respawn.


• Background sessions launched from claude agents now honor permissions.defaultMode from settings.json (was previously overridden to auto mode)


• Fixed: on Windows, pressing ← in claude agents while a response was streaming could leave the agents list unresponsive to all input


• /bg and ←-detach now preserve --fallback-model, so backgrounded workers degrade to the fallback model on overload instead of hard-failing.


• /bg and ←-detach now preserve --allow-dangerously-skip-permissions, so the forked worker keeps bypass-permissions available in its Shift+Tab cycle.


• Fixed: background daemon spawn now falls back to the running binary when the ~/.local/bin/claude launcher is missing or non-executable


• Fixed claude agents --allow-dangerously-skip-permissions defaulting dispatched sessions to bypass mode instead of making it available in the permission cycle