Release archive

Claude Code v2.1.207: Auto Mode Without Opt-In on Bedrock, Vertex AI, and Foundry, Opus 4.8 Default, and Plugin Config Changes

Claude Code v2.1.207 makes auto mode available without opt-in on Bedrock, Vertex AI, and Foundry, defaults Bedrock, Vertex, and Claude Platform on AWS to Claude Opus 4.8, and tightens plugin config handling.

• 10 min read • By ClaudeWorld

Claude Code v2.1.207 centers on cloud provider setups, configuration safety, and a batch of fixes. Auto mode no longer requires an opt-in on Bedrock, Vertex AI, and Foundry, and Bedrock, Vertex, and Claude Platform on AWS now default to Claude Opus 4.8. Several changes narrow where settings are read from, including a shell-injection fix for plugin configuration.

What’s New

Auto Mode Without Opt-In on Bedrock, Vertex AI, and Foundry

Auto mode is now available on Bedrock, Vertex AI, and Foundry without opting in through CLAUDE_CODE_ENABLE_AUTO_MODE. To turn it off, use disableAutoMode in settings.

Claude Opus 4.8 Default on Bedrock, Vertex, and Claude Platform on AWS

Bedrock, Vertex, and Claude Platform on AWS now default to Claude Opus 4.8.

Auto Mode No Longer Reads Repo-Resident autoMode

Auto mode no longer reads autoMode from .claude/settings.local.json, which lives in the repository. Use ~/.claude/settings.json instead.

Plugin Configuration Changes

${user_config.*} in shell-form commands is now rejected for plugin hooks, monitors, and MCP headersHelper, as a shell-injection fix. Hooks should use the exec form (args array) or $CLAUDE_PLUGIN_OPTION_<KEY>, while monitors and headersHelper should read the value inside the script (from a config file or the server’s env block). Plugin option values (pluginConfigs) are also no longer read from project-level .claude/settings.json; only user, --settings, and managed settings are honored.

Agent View Improvements

Pasting the same text again now expands the collapsed [Pasted text #N] placeholder instead of adding a second one. Peeks for blocked sessions now lead with the question and show a worded staleness clock (waiting 3m) instead of the same timestamp twice.

Fixes and Improvements

  • Streaming and transcript: The terminal no longer freezes and keystrokes no longer lag while streaming responses that contain very long lists, tables, paragraphs, or code blocks. The transcript no longer jumps above the start of the answer when a response finishes streaming.
  • Security and permissions: Remote managed settings from a non-interactive run (claude -p, the SDK) are no longer permanently recorded as consented without the security consent dialog ever being shown. Benign system-generated conversation updates no longer trigger spurious prompt-injection warnings, and compound commands with cd no longer prompt for permission when the only output redirect is to /dev/null.
  • Auto-updater: The updater no longer overwrites a custom launcher script or symlink at ~/.local/bin/claude on every release, and /doctor now reports an externally managed launcher.
  • Git worktrees and file patterns: extensions.worktreeConfig is no longer left in the repo’s .git/config after the last worktree.sparsePaths worktree is removed (it had broken go-git tools like tea). Malformed bracket patterns in rules globs, skill paths, .ignore, and .worktreeinclude no longer break file reads, file suggestions, and worktree creation.
  • Agent teams: Fixed a crash loop where a malformed teammate mailbox message caused repeated errors every second until the mailbox file was manually deleted.
  • Background sessions: Sessions auto-named by accepting a plan now show that name on their agent-view row, and sessions that entered a git worktree no longer resume blank after a cold reopen from the agent list.
  • Remote Control: Task status updates are no longer lost when the connection recovers from a network interruption or credential refresh, and sessions hosted by the desktop app now show background agent and workflow progress on mobile and web.
  • Deep research: Runs no longer label every Fetch-phase agent “unknown”; chips now show the source hostname.
  • Bedrock and AWS: Bedrock no longer requests fresh AWS SSO credentials from IAM Identity Center on every API request. On Windows, a stalled AWS credential resolution (for example, a stuck credential_process) no longer hangs indefinitely, because the 60-second stall guard now fires.
  • Usage credits: /usage-credits amount inputs no longer silently strip malformed values (such as a pasted timestamp) down to digits. Malformed amounts are now rejected with an error, and amounts over $1,000 require a typed confirmation.

How to Update

  1. Check your installed version: claude --version
  2. Update in place: claude update
  3. Review your settings: auto mode no longer reads autoMode from .claude/settings.local.json (use ~/.claude/settings.json), plugin options (pluginConfigs) are no longer read from project-level .claude/settings.json, and on Bedrock, Vertex AI, or Foundry you can turn auto mode off with disableAutoMode.