GitHub Release: anthropics/claude-code v2.1.289 (04.10.2026)

What's changed

• Fixed a deny or ask rule on a nested part of a compound shell command not holding over a user-installed mod's approval on managed machines


• Fixed the terminal freezing on short code blocks with many unclosed <script> tags or deeply nested ${ substitutions


• Fixed Read deny rules not applying to files @-mentioned, changed, or selected in the IDE through a symlink


• [VSCode] Reverted a 2.1.288 change to claude auth status that may have made sign-outs more frequent


• Improved how quickly large files open in a plugin code pane by laying the highlighted view out once at its final width


• Fixed plugin list, plugin eval and plugin update showing a stale copy of a plugin installed from a local folder marketplace, and hot reload for a symlinked --plugin-dir


• Fixed installed mods not loading in the first session after an upgrade


• Fixed a plugin's rows above the prompt showing a stale row while the Background tasks dialog was open in fullscreen


• Fixed plugin panes drawing nothing when a link used a localhost address, an @ in its path, an uppercase host or a file: path


• Fixed a user-installed plugin being able to rewrite the descriptions of an organization-managed MCP server's sign-in tools


• Fixed a freeze or forced quit at launch when a plugin drew a Box with a border style the terminal does not know


• Fixed supervised and background sessions ending when a plugin's on-screen handler threw asynchronously


• Fixed sessions ending with an interface error when a plugin region with no height kept growing


• Fixed Bash deny and ask rules missing a command behind an environment variable prefix with an expanded value (e.g. TZ="$HOME" rm -rf build) when the sandbox auto-allows commands


• Fixed a Bash deny or ask rule being skipped under sandbox auto-allow when a bare variable assignment came before the command


• Fixed claude plugin validate skipping the plugin when the folder also holds a marketplace manifest


• Added agent.spawn for teammates, one agent id across plugin hook events, and idle and waiting states in $.agent.list()


• Fixed sessions ending with "unrecoverable interface error" when a value a mod's ui.render hook wrote made a row throw while drawn; the engine now draws its own row instead


• Fixed text with a tab, a stray escape and a C1 control, or a short text with a tab and CRLF line endings, drawing over the rows below it


• Fixed right-aligned content in a mod's pane or band drawing under the close mark or [-], which now also keep one column in from the terminal's edge


• Fixed a mod's Client that fails while drawn taking down everything the mod drew around it; it now fails alone and raises ui.fault


• Fixed claude plugin validate failing an Anthropic marketplace's own plugin and listing a clean plugin.json in --json


• Fixed a mod's band that fails to draw briefly telling the cards under it to step aside


• Fixed a failed plugin component showing Error or nothing as its reason when the failure carried no message


• Improved the line a mod's author sees when its band or pane fails to draw: it names the mod and says nothing was drawn


• Fixed published artifact pages freezing or crashing the reader's browser tab on short code blocks with many unclosed <script> tags


• Fixed a mod's Client region staying failed for the whole session after the terminal threw while drawing it