Release archive

Claude Code v2.1.246: Auto Mode Rules in /permissions, Wildcard Bash Rule Warnings, and a /cd That Loads Project Settings

Claude Code v2.1.246 adds an Auto mode tab to /permissions, warns about wildcard Bash allow rules, applies project settings right after /cd, and stops sending gateway API keys with telemetry to Anthropic.

• 10 min read • By ClaudeWorld

Claude Code v2.1.246 is a large release with 61 changelog entries. It adds an Auto mode tab to /permissions, a startup warning for Bash allow rules with a wildcard before the subcommand, and a completion time on the end-of-turn line, and makes /cd apply the new directory’s project configuration immediately. It also stops telemetry requests to Anthropic from carrying an API key configured for a third-party gateway, and fixes a long list of background session, plugin, fullscreen, and MCP issues.

What’s New

Warning for Wildcard Bash Allow Rules

Claude Code now shows a startup warning for Bash allow rules with a wildcard before the subcommand, such as Bash(git * main), because such rules also match options inserted before the subcommand.

Auto Mode Tab in /permissions

/permissions has a new Auto mode tab for viewing and editing auto mode classifier rules.

Completion Time on the End-of-Turn Line

The end-of-turn duration line now includes the time the turn completed, for example ✻ Sautéed for 23s · done 6:05 PM.

/cd Applies the New Directory’s Configuration

After /cd, the new directory’s project settings, hooks, .mcp.json servers (behind the usual approval prompt), skills, and agents now take effect right after the move instead of on --resume.

Partial Results From Subagents at maxTurns

A subagent that stops at its maxTurns limit now returns its output marked as partial, with a hint to continue it via SendMessage, instead of appearing finished.

Non-Interactive Sessions Continue Cut-Off Responses

Non-interactive sessions (-p, SDK, cloud sessions) now automatically continue a response that was cut off mid-stream by a server error, connection loss, or stall, instead of ending with an error.

/code-review on More Setups

Claude can now also start /code-review on its own on Bedrock, Vertex AI, and Foundry, through the Claude apps gateway, and when telemetry or non-essential traffic is disabled.

/goal Check-In Limit

Idle sessions now start at most three check-ins on long-running background work per goal; your next message allows three more.

Fixes and Improvements

  • Credentials and permissions: Telemetry and metrics requests to Anthropic no longer carry the API key configured for a third-party gateway (ANTHROPIC_BASE_URL); a credential is now only sent to its own host. Bash permission checks now always require approval for malformed commands with a dangling && or || operator.
  • MCP permissions: MCP tools marked requiresUserInteraction no longer offer “Yes, and don’t ask again” in their permission prompt, an option that wrote an allow rule the tool then ignored. --strict-mcp-config sessions no longer prompt to approve .mcp.json servers they would never load, which had left background sessions waiting at startup.
  • Background sessions: Background sessions no longer fail to open after 45 seconds when Claude Code’s starting directory had been deleted, the machine had slept, or the host is slow to start processes, and no longer fail with “Couldn’t start the background service … EACCES” while another Claude Code process is re-installing the npm package. The background retention sweep no longer removes git worktrees under .claude/worktrees/ that you created yourself when an old background-session record pointed at them.
  • Workflows and auto mode: Pressing ← or running /background during a dynamic workflow no longer restarts its finished subagents; it now asks first and says how many subagents would restart. Auto mode tool calls are no longer denied as “temporarily unavailable” on very large sessions, because the safety-check deadline now scales with prompt size.
  • Fullscreen and transcript: Memory no longer grows with session length in the fullscreen and Ctrl+O transcript views. A diff containing a very long single line (e.g. a base64 string) no longer causes a severe transcript slowdown; such lines now render truncated with a marker.
  • Markdown rendering: Markdown rendering is no longer disabled for a whole message when its first 500 characters contain no markdown, or for +/N) lists and setext headings.
  • MCP tools: MCP tool calls interrupted by an incoming message in headless/remote sessions are now reported to the model as an explicit interrupted error instead of “completed with no output”.
  • Plugins: claude plugin update now works when given an installed plugin’s bare name, not only its fully-qualified name. claude plugin install <name> now reports an error instead of exiting silently (or hanging in a terminal) when ~/.claude/plugins/known_marketplaces.json is empty or corrupted.
  • Third-party endpoints and resume: The UI no longer stops with a render error on the first tool call when a third-party Anthropic-compatible endpoint (ANTHROPIC_BASE_URL) streams a tool_use block without an id. Resumed sessions no longer fail every turn with a 400 when the saved history contains tool blocks the Anthropic API does not accept, typically written by a third-party API proxy.
  • Plan mode: Sessions that ended in plan mode no longer resume outside plan mode in the VS Code extension, or in claude -p --continue/--resume with a permission prompt tool, when no permission mode was set.
  • Installation: curl -fsSL https://claude.ai/install.sh | bash no longer fails with “Raw mode is not supported” for some Team/Enterprise users with server-managed settings. claude install and claude update now defer a pending managed-settings consent prompt to the next interactive session instead of prompting mid-command.
  • Write tool: The Write tool no longer reports “Out of memory” or freezes for a long time after overwriting a very large existing file.
  • Self-hosted runner: A malformed work-poll response, such as an intercepting proxy’s HTML page, no longer makes the self-hosted runner end its live sessions or exit; it now retries the poll.

This release contains 61 changes in total; see the official changelog linked below for the complete list.

How to Update

  1. Check your installed version: claude --version
  2. Update in place: claude update
  3. If the new startup warning flags a Bash allow rule with a wildcard before the subcommand (such as Bash(git * main)), review that rule, since it also matches options inserted before the subcommand.