Claude Code v2.1.196: Organization Default Models and Background Session Reliability

Claude Code v2.1.196 introduces organization default models, readable session names, clickable file attachments, an MCP security hardening, and major background session reliability improvements.

June 29, 2026 • 10 min read • By ClaudeWorld

The Claude Code development team has released version 2.1.196, introducing organization-level default models, more identifiable sessions, and clickable file attachments in chat. This update also ships an important MCP security fix, a streaming idle watchdog enabled by default, and a long list of fixes that make background sessions and the claude agents view significantly more reliable.

What’s New

Organization Default Models

Admins can now set a default model for their organization in the org console. When you haven’t picked a model yourself, /model shows it as “Org default” (or “Role default”), making it easy for teams to standardize on a model without per-user configuration.

Better Session Identification

Sessions now start with readable default names, making them easier to identify and message. File attachments in chat are now clickable — Cmd/Ctrl-click reveals the file in Finder or Explorer.

MCP Security Hardening

claude mcp list and claude mcp get no longer spawn .mcp.json servers that a repository self-approved via a committed .claude/settings.json. In untrusted workspaces, these servers now show as ⏸ Pending approval, preventing repos from silently launching MCP servers on your machine.

Streaming Idle Watchdog Enabled by Default

The streaming idle watchdog is now on for all providers: if a response stream produces no events for 5 minutes, the request is aborted and retried automatically. Set CLAUDE_ENABLE_STREAM_WATCHDOG=0 to disable it. Additionally, Remote Control is now disabled when ANTHROPIC_BASE_URL points at a non-Anthropic host, matching the existing behavior under CLAUDE_CODE_USE_BEDROCK/_VERTEX/_FOUNDRY.

Background Session and Agent Reliability

Background work is now much more durable:

  • Long-running commands and workflows survive the session’s process being stopped, restarted, or updated — including on Windows, where background shells are handed off instead of being killed
  • Workers killed by a daemon restart are automatically resumed from where they left off the next time the agents view opens
  • Remote sessions interrupted by a server restart now auto-resume on the next worker
  • Waking a background job no longer permanently deletes its conversation and re-runs the original prompt when the transcript probe misreads a real transcript — the file is set aside, never deleted

claude agents View Fixes

Several issues in the agents side panel were resolved: keyboard focus no longer gets stuck when opening an agent, background jobs no longer lose their subagent types on every open, and session status is now accurate — completed rows no longer flip between “Done” and “Needs your input”, stalled agents are labeled “Needs attention”, and results mentioning a PR show a clickable link. claude agents --dangerously-skip-permissions also no longer silently falls back to auto mode; it now shows the bypass disclaimer and applies bypass mode to spawned agents. Opening the agents view from a foreground session now requires a single ← press instead of two.

Comprehensive Bug Fixes

This release also addresses:

  • Rate-limit warning flickering off and over-counted rate-limit telemetry when parallel requests hit a usage limit simultaneously
  • Duplicate recap lines after a background session’s turn from schema-rejected StructuredOutput retries
  • PowerShell git diff/git grep, egrep/fgrep, and quoted search patterns containing | being reported as failures on exit code 1, now matching Bash behavior
  • Sessions moved with /cd reappearing in the old directory’s resume list after a non-graceful exit when the old path contained special characters
  • claude plugin validate skipping local plugins whose source is ”.” and stopping after the first error class
  • Esc Esc at an idle prompt not opening the rewind menu (regression); use Ctrl+C or Ctrl+X Ctrl+K to stop background agents
  • MCP OAuth requesting the authorization server’s full scopes_supported catalog when no scope is specified, causing invalid_scope failures on GitLab self-hosted and other enterprise IdPs
  • /context showing 0 tokens for all tool groups on Bedrock
  • /deep-research misreporting verifier failures as “all claims refuted” instead of unverified
  • Plugin dependency version pins not being honored when the marketplace was added as a local folder path backed by a git repo
  • Voice dictation swallowing spaces and spuriously starting a recording during very fast typing

Performance Improvements

The /code-review workflow merged five cleanup finders into one, cutting token usage by roughly 25%. Per-frame rendering work in the terminal UI was also reduced by skipping no-op subtree walks during streaming.

How to Update

To update to Claude Code v2.1.196:

  1. Check your current version: claude --version
  2. Update using your preferred method:
    • Package manager: Follow your distribution’s update process
    • Direct download: Visit the release page for platform-specific binaries
  3. Restart any active background sessions to benefit from the reliability improvements
  4. If you’re an org admin, consider setting an organization default model in the org console