v2.1.147

What's changed

• Added the Workflow tool for deterministic multi-agent orchestration. It is off by default — set CLAUDE_CODE_WORKFLOWS=1 to enable


• Pinned background sessions (Ctrl+T in claude agents) now stay alive when idle, are restarted in place to apply Claude Code updates, and are shed under memory pressure only after non-pinned sessions


• Renamed /simplify to /code-review. It now reports correctness bugs at a chosen effort level (e.g., /code-review high); pass --comment to post findings as inline GitHub PR comments. The old cleanup-and-fix behavior has been removed


• Hardened REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes


• Improved auto-updater: retries transient network failures, reports specific error categories and OS error codes on failure, and shows the current version when an update fails


• Improved diff rendering performance for large file edits


• Prompt history no longer records consecutive duplicate entries — recalling a prompt with arrow-up and submitting it again won't add another copy


• Fixed enterprise login restrictions (forceLoginOrgUUID and forceLoginMethod managed-settings) not being enforced against third-party-provider and API-key sessions


• Fixed & in ! command output displaying as &, which broke copy-pasting URLs from commands like gcloud auth login on headless machines


• Fixed unknown slash commands silently doing nothing in headless/SDK mode — they now show an error message


• Fixed /help rendering a broken tab header and showing only one command per page on small terminals when not in fullscreen mode


• Fixed shell snapshot dropping user functions whose names start with a single underscore, which broke aliases referencing them


• Fixed plugin agents that declare multiple Agent(...) types in tools: frontmatter dropping all but the last entry


• Fixed hook if conditions like PowerShell(git push*) never matching — only PowerShell(*) worked


• Fixed PowerShell tool dropping output for commands that rely on the default formatter


• Fixed: on Windows, "Yes, and don't ask again" for a PowerShell script invocation now writes a rule that actually matches on subsequent runs


• Fixed PowerShell tool failing on Windows with exit code 1 when pwsh is installed via winget or the Microsoft Store


• Fixed /effort opening with the slider on the wrong level — it now starts at your current effort


• Fixed paginating MCP servers dropping resources, templates, and prompts past page 1


• Fixed full-screen strobing in attached background sessions on Windows Terminal while Claude is streaming


• Fixed: on Windows, removing a background-job worktree no longer follows NTFS junctions into the main repo


• Fixed /background refusing sessions whose only typed input was a skill or custom slash command


• Fixed auto mode suppressing AskUserQuestion when the user or a skill explicitly relies on it; the auto-mode classifier now sees the user's answers as intent signal


• Fixed /theme "New custom theme" and color editor dialogs not responding to Esc


• Fixed an uncaught exception at the end of streaming sessions when running via the Agent SDK


• Fixed a rare hang when waiting for scroll to settle on Windows


• Fixed stale and doubled rows in the agent view list on Windows when background session results contain wide (CJK) characters


• Fixed pasted text being delivered to agents as an unreadable [Pasted text #N] placeholder instead of the actual content


• Fixed plugin component counts in claude plugin details and /plugin being doubled when a plugin's manifest listed paths overlapping its default directories


• Fixed backgrounded sessions re-prompting for tool permissions you already granted with "don't ask again"


• Fixed GNOME Terminal right-click and middle-click paste not inserting text


• Fixed CLAUDE_CODE_SUBAGENT_MODEL not applying to teammate processes spawned by agent teams


• Fixed slash commands followed by a tab or newline being treated as an unknown command


• Fixed several spacing and layout glitches in the /plugin, /status, /mobile, /sandbox, and /permissions menus


• Fixed stripped images prompting the model to repeatedly re-read media that was no longer present