Claude Code 发布 v2.1.319：MCP 任务后台化与网关多项更新

v2.1.319

What's changed Changed auto mode with telemetry or feature flags off, including behind LLM gateways: calls the server can't check are asked about or denied, with no fallback to the built-in classifier; set CLAUDE_CODE_AUTO_MODE_SERVER=0 to keep using it (Bedrock, Vertex and Foundry are unchanged) Changed auto mode behind an LLM gateway: CLAUDE_CODE_AUTO_MODE_SERVER=1 turns on the server-side check even with CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS set; if managed settings set the latter, they must set the 1 too Added support for MCP tasks in the terminal: when an MCP server runs a tool call as a task, Claude Code moves it to the background right away and tells Claude the result when it finishes Added the CLAUDE_CODE_DISABLE_MCP_TASK_BACKGROUND environment variable to make Claude Code wait for an MCP task inside its tool call instead of moving it to the background right away Added permissions.denyInsteadOfPrompting setting: a tool call that would wait on a permission prompt is denied and the turn continues, in terminal sessions, subagents and teammates Added /claude-api latency-optimize to find where your Claude API code makes people wait and try faster settings against your eval Added the CLAUDE_CODE_DISABLE_FEATURE_FLAGS environment variable, which stops feature-flag fetching without turning off telemetry; every flag then uses its built-in default Added spend for today, this week and this month to /usage for developers behind a Claude apps gateway who have no spend limit, when the gateway runs this version or later Added admin.pooled_conflict_rule and admin.pooled_priority_order to the Claude apps gateway, to set which pooled group budget pays first for a developer in several groups Added an optional login_notice setting to the Claude apps gateway that shows an operator-defined message on the gateway's browser verification page and on Claude Code's sign-in screen Added CLAUDE_GATEWAY_LOG_FORMAT=json to the Claude apps gateway: operational log lines become JSON with severity , time and message , for log collectors that read the level from a field Added a Claude apps gateway boot warning for a case where another policy's availableModels also allows a custom model id that one policy lists by name Added start-up warnings to the Claude apps gateway for policies with no desktopHome that rely on coworkTabEnabled: false or chatSessionRetentionDays , ahead of Claude Desktop's November 10 change Added a warning when your claude.ai login ends and Claude Code continues on the sign-in from ant auth login , which bills usage to your Claude Console organization Added a line at startup naming the Claude Console organization that is billed in a case where Claude Code uses the sign-in from ant auth login Added an "Earlier in this session" row to /tasks that lists finished subagents, so you can reopen one and message it even after it leaves the list or you restart Added a note to /loop confirmations in cloud sessions that a timer stops with its container, with an offer of a loop that survives Fixed MCP servers on the older handshake failing to connect, or returning empty results, because Claude Code declared an extension that it only uses with newer servers Fixed a long-running MCP tool call on a claude.ai connector sometimes never reporting its result after --resume Fixed a session's diff failing to load on claude.ai and the mobile apps when the folder Claude Code runs in has a file or folder named HEAD Fixed /diff showing "Diff unavailable" when a git repository has a file or folder named HEAD at its top level Fixed the /diff pane opening blank in sessions where 64 or more turns edited files Fixed slash commands typed after a leading space, tab or newline being sent to Claude as plain text instead of running Fixed a request that kept failing with a 401 refreshing your login on every retry and causing 401s in your other sessions Fixed /context sending its full visual grid to Claude on every later turn; Claude now reads only the table Fixed claude -p exiting 0 in auto mode when its actions were refused because no safety check was available: text and JSON output now exit 1 Fixed a case where Claude Code listed every project file at start on Linux for projects on a network file system (NFS, SMB, Lustre and similar) Fixed a case where auto mode was wrongly refused when a client sent a model change and a request for auto mode back to back Fixed /status showing "Auto mode server: Enabled" when the server-side review isn't reaching the session, for example behind an LLM gateway that drops it Fixed Claude-drafted feedback, surveys and /feedback continuing to appear after the server refused feedback for your organization Fixed Claude drafting feedback on third-party gateways, where it can't be sent Fixed auto mode refusing actions without saying why when permission rules or autoMode settings are very large: it now explains and, unless autoMode deny rules are set, asks you in the terminal Fixed a case where Bash deny and ask rules missed commands written with quoted words Fixed subagent hand-back reports showing an internal marker and provenance note when expanded outside verbose mode Fixed claude -p --resume with a prompt losing a deferred tool call when its MCP server is missing: the run now exits 1, keeps the call and refuses later input Fixed a case where text was dropped from informational messages sent to SDK clients Fixed a case where Agent SDK hosts got a generic exit-code error instead of a failed run's own error message when the disk was full Fixed CLAUDE_CODE_RESUME_INTERRUPTED_TURN re-running a turn that was interrupted in plan mode when the session resumes in another permission mode Fixed edits to a settings file being ignored when made within a few seconds of Claude Code writing that file Fixed a config file left at the legacy name hiding your setup with no warning: Claude Code now says on stderr when a home holds two config files, and which is in use Fixed ~/.claude.json , settings and edited files ending up empty or cut off when the disk fills during a save in a read-only folder or to a bind-mounted file (one session saving at a time) Fixed Write ending the turn as a refusal when it couldn't read the file to overwrite Fixed background Bash commands that finish almost instantly losing their output while being reported as completed Fixed the Bash tool's diff of changed files missing a file that the command wrote just before it ended Fixed a mistyped model name, such as opus-5-5 , telling you to update Claude Code instead of suggesting the model you meant Fixed a case where NotebookEdit changed the wrong cell when the notebook changed while a permission prompt was open Fixed a ~0.5s hang after pressing Enter on the /login success screen: the dialog now dismisses immediately and the post-login refresh runs in the background Fixed Ctrl+G not opening the external editor while typing an "Other" answer to a question in screen reader mode Fixed Monitor's WebSocket watch failing with "could not resolve" behind a proxy when CLAUDE_CODE_PROXY_RESOLVES_HOSTS is set and the machine has no DNS of its own Fixed claude plugin eval warnings suggesting max: 0 for a tool that must not be called, which could never pass Fixed background plugin auto-update not installing a dependency added by the updated plugin version Fixed Cmd+click not opening links in Ghostty over tmux in sessions opened from the agents view Fixed a mod's hot reload in .claude/skills missing a file that was deleted just after it appeared, and missing its return Fixed /rewind failing with "No files were restored" when restoring code to a checkpoint from before /branch Fixed the /claude-api skill saying Console web settings don't apply to Managed Agents sessions, and tightened its credential and permission examples Fixed needless permission prompts for read-only commands wrapped in a plain timeout DURATION , such as timeout 30 rg foo Fixed WebFetch describing claude.ai shared-chat links as empty pages; it now says shared chats can't be read and to paste the conversation instead Fixed Artifact database calls being re-sent to artifacts without a database; errors now say whether republishing helps Fixed a case where artifact database reads that save to a folder ( out_dir ) were refused Fixed detailed beta tracing not presenting CLAUDE_CODE_CLIENT_CERT to collectors that require a client certificate Fixed the OpenTelemetry claude_code.session.count metric counting Agent SDK prewarm() processes that were never claimed; a pre-started process now counts once, when it is claimed Fixed /clear killing running commands of background agents, teammates and workflows that keep running, and foreground subagents of background agents and teammates Fixed a terminal whose Claude apps gateway sign-in had expired sending telemetry and managed-settings requests that the gateway refused and logged as invalid_token Fixed the agents view appearing to send a reply to a background session waiting on a permission prompt; the reply now stays in the box with a hint to open the session and answer Fixed agent view removing a draft saved by another agent view in the same directory when exiting Fixed a case where agent view came back with another agent view's input text after restarting itself for an update Fixed the agents view preview cutting off long commands, results and status lines without an ellipsis, and dropping ** , backticks and tags from commands waiting for approval Fixed Claude in Chrome reporting the extension as not connected when the connection dropped mid-action; Claude now checks the page before repeating an action that may have run Fixed Remote Control sessions still showing "Limit reached" on other devices after a usage limit was lifted outside the session Fixed the file card sometimes missing in the Claude iOS app when Claude sent a single file Fixed self-hosted runner sessions failing with no explanation when the server keeps refusing to renew model access: the runner now retries sooner and posts a warning in the session Fixed /permissions in cloud sessions replying only that it isn't available; it now says where the session's rules live and how to change them Fixed cloud sessions losing session-scoped deny and ask permission rules, such as those a PermissionRequest hook adds, when the session moves to a new worker Fixed mod hot-reloading turning off for the session when you typed three messages instead of answering its question in a cloud session Fixed background tasks that keep running after /clear disappearing from the task list in Claude Code on the web until another task started or ended Fixed hidden commands appearing in the slash command menu of cloud sessions on mobile and web Fixed a case where /rewind could restore or delete a file through a directory symlink Fixed a case where a sed command could skip the permission check in accept-edits and auto mode Fixed a case where CLAUDE_CODE_AUTO_MODE_SERVER=1 in managed settings was ignored behind an LLM gateway when the gateway's URL is set only there and server-managed settings can't be fetched Fixed a Bash permission bypass where a crafted environment prefix could hide part of a command from permission checks Fixed a case where deny and ask rules, hook matchers and disallowedTools entries written with a claude.ai connector's terminal name ( mcp__claude_ai_Slack ) were ignored in Claude Desktop (takes effect once Claude Desktop includes this version) Fixed a sandbox escape when creating a worktree Fixed self-hosted runners: --trust-workspace false now also stops hooks in the repository's settings files and skills from running Fixed a case where idle background sessions started through a shell-exported LLM gateway left the gateway after an update Fixed help links in /status and the auto mode billing notice opening only part of the address when they wrap Fixed a case where certificate errors behind a TLS-inspecting proxy persisted when CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC was set. With it set, Claude Code now makes a TLS handshake with the configured API host after a certificate failure, through your http:// proxy if one is set; it sends no API request Fixed claude remote-control exiting silently with status 0 when a first-run question gets no answer (scripts, services, batch jobs, Ctrl+C); it now says why and exits 1 Fixed claude remote-control ignoring a piped y that has no newline after it at the first-run question; it now counts as a yes Fixed /rename reporting plain success when the new name could not be saved to the session transcript; it now warns that the new name may not last Fixed ${CLAUDE_PLUGIN_ROOT} not being substituted in a plugin-provided subagentStatusLine command, which can now reference the plugin's own scripts Fixed claude plugin update and /plugin "Update now" not installing dependencies added by the new plugin version Fixed subagents being told after compaction to expect a completion notice for background agents they neither started nor took over Fixed a case where a background agent's later report was lost silently: the notification now says it was refused and how to ask for it Improved config saves on Windows: Claude Code waits longer for a file another program has open, so a kill during a save is less likely to leave ~/.claude.json empty Improved Claude in Chrome after a brief disconnect: it waits up to 6 seconds for the session's own browser to return before picking another Improved Claude in Chrome: javascript_tool results of up to 60,000 characters now stay in the conversation instead of being saved to a file Improved claude purge and the clean-up of old sessions to retry a folder that could not be fully deleted, and to report it as an error if it remains Improved the refusal for a path outside the working directories on macOS and Windows: when only its letter case differs from a path inside them, the message names that spelling Improved the contrast of faint gray secondary text, such as hints, details in /stats , /model and /sandbox , and rejected-action messages Improved the artifact database error when an update targets a document that does not exist, and when the service pauses repeated refused writes Improved the Claude apps gateway's warnings about a failed upstream call: each now names the upstream, not only its provider Improved the Claude apps gateway's spend limit error: it reads "spend limit reached · resets Dec 1", then admin.blocked_message if one is set Improved the /model picker: older models are now grouped under a "More models" row instead of being listed after the current ones Improved /context at the terminal so the table Claude reads stays short: each list keeps its 10 largest rows, and MCP tools that load on demand share one row per server until they're called Improved /usage in cloud sessions: it now links to Settings → Usage on claude.ai in a case where plan limits can't be shown [VSCode] Improved the confirmation for removing a plugin marketplace: it now checks which of its plugins are installed at that moment Changed MCP tasks to work in the terminal without feature-flag fetching (Bedrock, Vertex, Foundry, LLM gateways, DISABLE_TELEMETRY ); set CLAUDE_CODE_DISABLE_MCP_TASKS=1 to turn them off Changed auto mode so that a project's settings files or a plugin can no longer switch its server-side check back on once you have switched it off outside the project Changed Monitor's WebSocket watch to follow a rule on every Bash command: a deny refuses it, and under an ask rule an allow on Monitor, bypass mode or auto mode no longer skips the prompt Changed CLAUDE_CODE_PROXY_RESOLVES_HOSTS so that settings files can no longer set it where the host manages the network; set it in the process environment Changed a session's exact Bash or PowerShell ask rule to be refused, not asked about, when a broader deny rule covers the command Changed the Bash tool to ask for permission before running which with flags outside a lookup/display set Changed --add-dir directories to register plugin marketplaces only once that directory's own trust dialog has been accepted Changed nested skill loading: with the Bash sandbox on, skills in .claude/skills folders below the starting folder load only if you start Claude Code there or /cd there Changed self-paced /loop to end when a turn finishes without rescheduling, instead of scheduling a fallback wakeup; set CLAUDE_CODE_LOOP_KEEPALIVE=1 to keep the old behavior Changed PostToolUse hooks to run, with up to 10 seconds to finish, on tool calls that finish after a new message interrupts the turn Changed what Claude is told after safeguards stop a subagent: retry with a narrower prompt or tell you, instead of doing the work itself Changed cloud sessions to drop session-scoped allow rules at a move to a new worker when their deny and ask rules can't all be kept, so you may be asked again Changed the automatic certificate repair behind a TLS-inspecting proxy: it no longer runs when ALL_PROXY is the only proxy variable set. Set HTTPS_PROXY to the proxy's http:// URL instead Changed artifact database saves of rows others may have written: each file gets a hidden marker file, and existing files without one, earlier versions' exports among them, are left alone and reported Updated /claude-api managed-agents-onboard templates to match the Claude Console: removed Performance tuner, renamed two, and turned off web search and fetch in five whose prompts don't use them Removed shortcuts_list and shortcuts_execute , which listed and started shortcuts saved in the extension, from Claude Code's built-in Claude in Chrome tools Gateway: Added startup warnings for upstreams that mix AWS GovCloud with other upstreams, and for base URL variables in the gateway's environment Gateway: Added a start-up log warning when managed settings name an Amazon Bedrock guardrail in a header, which the gateway doesn't forward, and no bedrock upstream sets a guardrail Gateway: Fixed Claude Desktop offering a web search tool that always failed when every upstream is Amazon Bedrock Self-hosted runner: Fixed a runner started with --use-anthropic-git-proxy or --configure-git registering before a failed startup check made it exit; it now exits first Self-hosted runner: Changed CLAUDE_RUNNER_CHECKOUT_PATH so that each repository in a session gets its own folder: a folder name already taken in the session gets -2 , -3 , … at the end Self-hosted runner: Removed the end-of-session upload of a session's debug log; a failed session's log stays on the runner host unless --remove-session-state is set [VSCode] Fixed prompts over 50,000 characters being cut off silently: the prompt now stays in the chat box with a notice, and a paste over the limit is refused with a notice [VSCode] Fixed a click on the survey or "Report a problem" buttons sending the unfinished prompt [VSCode] Fixed cloud sessions opened from the extension's Web tab bringing back turns that /clear , or Retry or Edit of a typed prompt, had removed [VSCode] Fixed a deleted session's file coming back when that session was renamed in the extension [VSCode] Fixed Claude carrying out an unapproved plan after a window reload: a step interrupted in plan mode now stops with a notice when the session comes back in another permission mode [VSCode] Improved the "not signed in" message behind a Claude apps gateway: it now looks like an error and has a Sign in link [VSCode] Changed links in Claude's replies that point at Claude sign-in, connector or API addresses to show as text with the address, instead of opening in the browser [VSCode] Fixed a possible chat panel freeze when a dropped item's path contains a very long run of "/" characters [VSCode] Fixed the claude-vscode.toggleDictation command starting dictation in every open Claude view at once; it now acts only in the view you are using, and a second press stops it [VSCode] Fixed the chat panel slowing down while a reply with many unclosed $$ math fences, each shorter than the last, streams in [VSCode] Improved the chat panel's diagnostics tool for large workspaces: it leaves out files with no problems, returns compact JSON, and accepts an optional minimum severity [Cloud sessions] Fixed scheduled tasks silently dropping a connector named memory: runs now keep it, mounted under that name plus a short suffix [Cloud sessions] Fixed Send now on a waiting message in cloud sessions ending running background agents; they now keep running [Cloud sessions] Improved the stalled-setup warning on self-hosted environments: its link now prefers your organization's default or an environment with a live runner, and names it [Code Review] Changed unlinking a GitHub organization to also turn off its All repositories setting in Code Review; it stays off after you relink until you turn it back on [Claude Tag] Fixed Claude Tag setup blocking launch when the channel list couldn't fully load; admins can now launch without picking a channel [Claude Tag] Added a Claude Tag row to the Models admin page for Enterprise orgs with Claude Tag connected, linking to where its model defaults are managed [Claude Tag] Fixed saving auto mode allow rules in Claude Tag admin settings overwriting another admin's changes; the save is now refused with a message