← Claude Code changelog

Claude Code 2.1.289

This release introduces new agent spawning capabilities for teammates, alongside expanded agent lifecycle states and unified agent IDs across plugin events for better collaboration and management. Significant improvements include faster opening of large files in plugin code panes and more informative error messages for plugin and mod failures. A wide array of fixes address terminal freezing, plugin and mod loading, rendering issues, and critical security vulnerabilities related to deny/ask rules and plugin integrity, ensuring a more stable, secure, and performant environment for all users.

Added

  • Added `agent.spawn` for teammates, one agent id across plugin hook events, and idle and waiting states in `$.agent.list()`

Improved

  • Improved how quickly large files open in a plugin code pane by laying the highlighted view out once at its final width
  • Improved the line a mod's author sees when its band or pane fails to draw: it names the mod and says nothing was drawn

Changed

  • Reverted a 2.1.288 change to `claude auth status` that may have made sign-outs more frequent

Fixed

  • Fixed a deny or ask rule on a nested part of a compound shell command not holding over a user-installed mod's approval on managed machines
  • Fixed the terminal freezing on short code blocks with many unclosed `<script>` tags or deeply nested `${` substitutions
  • Fixed `Read` deny rules not applying to files @-mentioned, changed, or selected in the IDE through a symlink
  • Fixed `plugin list`, `plugin eval` and `plugin update` showing a stale copy of a plugin installed from a local folder marketplace, and hot reload for a symlinked `--plugin-dir`
  • Fixed installed mods not loading in the first session after an upgrade
  • Fixed a plugin's rows above the prompt showing a stale row while the Background tasks dialog was open in fullscreen
  • Fixed plugin panes drawing nothing when a link used a localhost address, an `@` in its path, an uppercase host or a `file:` path
  • Fixed a user-installed plugin being able to rewrite the descriptions of an organization-managed MCP server's sign-in tools
  • Fixed a freeze or forced quit at launch when a plugin drew a Box with a border style the terminal does not know
  • Fixed supervised and background sessions ending when a plugin's on-screen handler threw asynchronously
  • Fixed sessions ending with an interface error when a plugin region with no height kept growing
  • Fixed Bash deny and ask rules missing a command behind an environment variable prefix with an expanded value (e.g. `TZ="$HOME" rm -rf build`) when the sandbox auto-allows commands
  • Fixed a Bash deny or ask rule being skipped under sandbox auto-allow when a bare variable assignment came before the command
  • Fixed `claude plugin validate` skipping the plugin when the folder also holds a marketplace manifest
  • Fixed sessions ending with "unrecoverable interface error" when a value a mod's `ui.render` hook wrote made a row throw while drawn; the engine now draws its own row instead
  • Fixed text with a tab, a stray escape and a C1 control, or a short text with a tab and CRLF line endings, drawing over the rows below it
  • Fixed right-aligned content in a mod's pane or band drawing under the close mark or `[-]`, which now also keep one column in from the terminal's edge
  • Fixed a mod's `Client` that fails while drawn taking down everything the mod drew around it; it now fails alone and raises `ui.fault`
  • Fixed `claude plugin validate` failing an Anthropic marketplace's own plugin and listing a clean `plugin.json` in `--json`
  • Fixed a mod's band that fails to draw briefly telling the cards under it to step aside
  • Fixed a failed plugin component showing `Error` or nothing as its reason when the failure carried no message
  • Fixed published artifact pages freezing or crashing the reader's browser tab on short code blocks with many unclosed `<script>` tags
  • Fixed a mod's Client region staying failed for the whole session after the terminal threw while drawing it