Digest / August 9, 2026
Claude Code Issues Digest — August 9, 2026
264 new issues filed ·
124 resolved in anthropics/claude-code (UTC day).
New issues (264)
- Claude in Chrome extension shows "Browser extension is not connected" — persists after restart, extension update, and connector retoggle
- (withdrawn by author)
- Skills need a frontmatter opt-out from post-compaction replay (stale $ARGUMENTS re-executed; real-world unintended git push)
- [Bug] Unexpected redirect to legal page on API error
- [BUG] `claude-in-chrome` `file_upload` regressed in Claude Code 2.1.221 — two distinct failure modes in Cowork scheduled-task sessions (Windows)
- I appreciate you reaching out, but I'm not able to process this request. Your message appears to be in Chinese and doesn't contain a bug report or feature request for Claude Code. To help you create a GitHub issue, please provide: 1. A clear description
- [BUG] Switching to the background-conversation list (Left Arrow) truncates session scrollback to one page; only recoverable by relaunching with `--fork-session`
- I appreciate you reaching out, but I need to clarify a few things: 1. This appears to be a message in Chinese about HackerOne authorization scope and being downgraded, which doesn't relate to Claude Code (Anthropic's CLI tool). 2. I'm specifically design
- I appreciate you reaching out, but this appears to be a personal concern about account status or permissions that isn't related to Claude Code (Anthropic's CLI tool). This message seems to be in Chinese and discusses authorization/CVP issues, which falls
- [BUG] Claude Desktop (Windows) exits and won't relaunch after Google OAuth login inside Browser pane Steps to reproduce: Open Claude Desktop'
- VS Code extension: input focus outline in red/terracotta reads as an error state
- [Feature Request] Add network configuration audit and VLAN setup assistance
- Desktop (Windows): file links are not clickable when the file is on a different drive than the session cwd
- [BUG] macOS DarkWake: transient DNS failure during OAuth refresh loses login
- Cross-device session continuity for Claude Code (Max customer, business use).
- [FEATURE] Add /queue-permissions for async permission queuing with intelligent task switching for productivity optimization
- [BUG] Claude in Chrome: Chrome browser process self-terminates (EXC_BREAKPOINT on Chrome_IOThread / CrBrowserMain) during automation — macOS arm64, Chrome 151
- [RETRACTED — local hook confound] EnterWorktree branches from local branch instead of origin/<default-branch>
- [BUG] npm global update leaves a stub binary and no bin/claude symlink — no rollback, and the error message is unreachable
- [Feature Request] Remove safeguard gating for agent harness and memory project implementation
- Bash tool: unrelated stale check.py/pytest output bleeds into tool_result for `for` loops with command substitution
- [Bug] Anthropic API Error: Overly broad content safety filter blocks legitimate security testing workflows
- [FEATURE] Desktop file pane: send the current text selection to the prompt, like Option+K in the VS Code extension
- No way to sign out / switch accounts in Claude in Chrome extension
- [FEATURE] ListAgents: expose session IDs; SendMessage: accept a session ID as address
- Feature request: background/network activity panel for long-running shell commands
- [BUG] Dispatch idle-pause triggers accelerating "no visible output" retry loop (not a duplicate of #70422 or #71303)
- [BUG] security-guidance 2.0.6 registers five indistinguishable Bash handlers
- [Bug] Claude Haiku 4 safeguards overly broad, blocking legitimate requests
- [Feature Request] Default to per-project vertical execution instead of cross-project horizontal batch execution for multi-module tasks
- [FEATURE] ExitWorktree: condition the ask-only rule on who created the worktree
- [BUG] Claude Code / Opus 5 Reliability Report: Repeated Small Errors, Rework Loops, and Excessive Time-to-Completion in Long Engineering Sessions
- PushNotification returns success but the phone push arrives ~23% of the time
- [FEATURE] : Tunable Context Retention / MCP Tool-Result Eviction
- [Bug] Claude Code prefers shell commands over Edit tool for file mutations, hiding changes from transcript
- Notification:permission_prompt hook does not fire in v2.1.226
- Feature request: auto-expand tool call details in permission approval prompt
- [Bug] Agent proceeds with implementation without confirming user intent or showing reasoning
- [BUG] Windows desktop app (MSIX) uninstalls itself and wipes all local data during silent auto-update when background sessions are running
- Cowork mode blocked — "Missing HCS services: HNS, vmcompute" on Pro plan
- [FEATURE] Fullscreen mode: workflow detail view is clipped when the todo/task list panel is open — should render full size as when the panel is closed
- Add `statusLine.hidePermissionModeIndicator` and expose `permission_mode` in the status line payload
- [BUG]file_upload (Claude in Chrome) always fails with 'expected array, received undefined
- Session transcript forks duplicate ~90% of content — 580 MB accumulated in ~/.claude/projects
- [Bug] Session model incorrectly downgraded from Claude 3 Fable to Opus during normal usage
- [BUG] Session process restarts orphaning background tasks + lost tool results + MCP disconnect cycles
- [BUG] /goal stalls indefinitely when the model enters plan mode — the Stop hook cannot fire on a plan-approval prompt
- [BUG] Usage limit does not reset to 0 after 5-hour/weekly reset — shows already-consumed usage with no activity
- [BUG]
- [FEATURE] Routines sidebar shows humanized taskId — non-ASCII (e.g. Japanese) routine titles are impossible
- [FEATURE]
- Remote Control: messages from the mobile app are silently lost, and /remote-control opens a modal that blocks the input box
- [Bug] Claude generates fabricated errors that don't exist in actual execution
- [BUG] Remote control do not show errors
- [Bug] Anthropic API Error: Content Safety Policy Violation on Legitimate Code Analysis
- [FEATURE] Add a setting to suppress plan usage-limit warnings (5-hour / weekly)
- [FEATURE] Expose "waiting for user input" session state in `claude agents --json` and/or the statusline payload
- [BUG] Windows desktop: main.log stops writing at ~10 MiB with no rotation - main-process logs are permanently lost on long-lived installs (1.26832.0.0)
- [BUG] "Failed to approve tool call" when a permission prompt is answered after a network drop (web/mobile session), or if I just dont answer promptly.
- Repo/branch/worktree status bar disappears mid-conversation after renaming git branch
- [Bug] Claude hallucinating on UI implementation with provided mockups and HTML context
- [Bug] Overly aggressive safeguards triggering on valid code operations
- [BUG] Cowork: `stable` channel points to a VM runtime that rejects the desktop app's bundled SDK wrapper — surfaced as "Download failed"
- [BUG]Claude Desktop repeatedly crashes and requires “Advanced Options → Repair” on Windows
- [BUG] TaskStop does not kill the process tree — orphaned `rm -rf /c` deleted user data for 20 minutes after stop
- [Bug] Anthropic API Error: Opus 5 Safeguards False Positive on Defensive Security Code
- Workflow subagent unset session-identity env vars (CLAUDE_CODE_CHILD_SESSION et al.) unprompted to make a spawned `claude` present as a fresh top-level session
- [Feature Request] Add capability to retrieve and filter flagged Instagram accounts
- [BUG] False "Fable 5 requires usage credits" gate when session starts with expired OAuth token (VS Code WSL)
- Auto-compact fires at 150k on claude-opus-5[1m]; /context reports "Auto-compact window: 150k tokens" while another session on the same model id shows the full 1M
- Workflow tool: stall watchdog kills actively-working subagents every ~8-9 min; identical-key retry loop burned ~580k tokens with zero progress
- [BUG] User skills listing silently absent from system prompt for an entire session — prose skill triggers fail, slash commands still work (one-off, v2.1.226)
- [Bug] Unintended fallback to Claude 3 Opus in model selection
- [BUG] Claude Code project/session sidebar empty after reinstalling Claude Desktop, despite intact local session history
- Feature request: allow a message typed mid-turn to be queued for the next turn instead of injected immediately
- /permissions dialog: keyboard focus can't enter the rule list (can't add allow rules); no Shift+Tab bypass — auto-denied commands become a dead end
- [BUG] Crashes and freezes are concentrated during operations like "searching for literature
- Artifact tool uploads user content to claude.ai without consent; "publish proactively" is the wrong default
- Flagged when Fable write promt for subagent with QA role
- [BUG] Model self-generates a fake "user" turn inside a single response, then executes it (commit → merge → push ran autonomously)
- You've hit your session limit · resets 3:50pm (America/Buenos_Aires)
- [Feature Request] Add local environment trust mode to bypass security classifier for local-only operations
- [BUG] Claude Desktop - Plugin uninstall does not persist: account-scoped marketplace plugins are silently re-downloaded on next launch, and server-disabled plugins are never removed from disk
- [Feature Request] Security-hardened code generation should not trigger model fallback
- [Bug] CVP enrollment not recognized for Request ID req_011Cds1im49UhkkcrXAYkdAi
- Feedback zur Claude Code VS Code Erweiterung (v2.1.226)
- [BUG] CVP-approved personal account still hit by cyber-safeguard false positives in Claude Code (Sonnet 5)
- [Bug] Anthropic API Error: Overly broad security flag on legitimate prompt injection prevention
- AskUserQuestion: attaching a note (n) to a selected option drops the selection, result says (no option selected)
- [BUG] LSP stale index: files created mid-session never send workspace/didChangeWatchedFiles (Created)
- AskUserQuestion silently discards model-supplied content in its result fields (answers, annotations)
- [Feature Request] Implement automatic context optimization and token usage tracking
- [FEATURE] Deep link / CLI flag to open Claude Desktop directly to the Dispatch panel
- [BUG] Background subagents lose ListMcpResourcesTool/ReadMcpResourceTool - MCP resources unreachable from subagents by default
- CoworkVMService DACL blocks its own crash-recovery config; after a crash nothing restarts it and Dispatch hangs silently
- [BUG] Claude Code + Cowork fail with ECONNRESET on every network and client — chat works fine
- [BUG]#78858
- [BUG] Windows: isolation-worktree guard compares paths case-sensitively, so IDE-started worktree sessions cannot be resumed (regression in 2.1.222)
- [FEATURE] Routines with connectors get permanently blocked on tool-call approval, even in "Auto mode"
- MCP OAuth: per-process refresh lock lets concurrent sessions race token refresh; rotation-strict servers revoke the token family, forcing manual re-auth
- Multiple concurrent Claude Code CLI sessions correlate with Windows Explorer shell crashes
- Vietnamese IME (UniKey) typing causes keyboard focus to jump between concurrent Claude Code CLI windows
- [BUG] Read Aloud: poor German voice quality overall, and the male voice reads German with an English accent (Windows)
- Remote Control: responses never render in browser until manual page refresh (iPad Safari/Chrome, macOS Safari)
- file_upload replays stale error on identical-argument retries
- [Bug] Code review cycle creates cascading defects instead of reducing them
- [BUG] Windows: passkey/2FA step in the built-in browser hangs the entire app; it then hung on every launch until the profile was recreated
- [BUG] Native updater on Windows silently skips the binary swap when consecutive releases have identical file sizes, and reports success
- [BUG] /config outputStyle picker lists only the 4 built-in styles — a custom style from ~/.claude/output-styles is active but never selectable (2.1.226)
- PIECE OF SHIT TOOL CANT EVEN FOLLWO SCRIPTS WHEN CONTENT IS GIVEN- EIVL TOKEN SUCKING FRAUD ACHINE
- Desktop app: option to expand tool-call groups ("Ran N commands") by default
- [BUG] Repo picker search only filters already-loaded repos, so repos past the pagination boundary appear missing
- Declared hook `timeout` is not enforced parent-side; a hook subprocess wedged during Node startup freezes the session permanently
- [BUG] VSCode extension: image processing unavailable on macOS 26 (Tahoe)
- [Bug] Model fallback to Opus despite safe Fable compatibility
- [MODEL] Supporting claims are presented as observed facts when they are inferred, sampled, or unobservable
- [MODEL] Silently expands delegated tasks into self-authored work that displaces requested deliverables
- [MODEL] Silently omits parts of multi-part requests while presenting the response as complete
- [MODEL] Private drafting deliberation leaks into public-facing GitHub text
- I need to provide a response, but the bug report provided is in Korean and lacks technical details about Claude Code. The message translates roughly to "Why does it stop midway? This keeps happening while running paper experiments. Why is this happening?
- Plan slug persists in input-box corner after ExitPlanMode (and after deleting the plan file)
- [BUG] Weekly usage counters not reset after scheduled weekly reset (Max 20x)
- [Feature Request] Improve dependabot-security-fix skill: CI detection, Newman safety, GAR token docs, dependency strategy
- [Bug] macOS sleep inhibitor ignores power source: caffeinate re-asserts on battery until hard shutdown
- OAuth refresh persists credentials without expiresAt/scopes, forcing /login after every affected refresh
- [BUG] All login codes not accepted, now unable to send email verifications.
- [BUG] fork subagents spawn unauthorized nested sub-agents; at least one fabricated a completion report and wrote false claims into persistent memory/project files
- [Bug] Async agent stall watchdog kills healthy long-running requests at 600s timeout
- EnterWorktree(path) into a sibling worktree reports success, but Bash then refuses every command there
- [BUG] Restored desktop sessions keep a dead env_* id: 404 "Environment not found" blocks input after app restart
- [BUG] Sonnet 5 / Claude Code hält sich nicht zuverlässig an explizite, schriftlich fixierte Nutzerregeln (CLAUDE.md / persistente Memory)
- Remote Control: supervisor exits 5s after last client detaches, so it can't be left available overnight
- Remote Control: stale environment stays green/online in mobile app after server exits; sessions hang at "Allocating sandbox"
- [Feature Request] Add context override or exemption mechanism for financial domain safeguards
- [BUG] Archiving a local Cowork project removes it from the UI with no way to view or restore it (Chat projects unaffected)
- [BUG] Title: PDF preview pane doesn't refresh when a file is overwritten at the same path
- PreToolUse Bash guard & permission prompt are string-level: model-authored destructive commands inside a script bypass the approval gate
- code-review plugin silently exits in claude-code-action: eligibility check launches as background agent, run terminates at end-of-turn
- [Bug] Unclear issue report - please provide details
- [BUG] Cowork Live Artifacts sidebar entry missing on Windows 1.26832.0 — no reachable surface on any platform (repro of #51426)
- Plugin install/uninstall state gets corrupted across git worktrees (duplicate installed_plugins.json entries, contradictory uninstall/disable errors)
- Monitor: notification stream delivers lines that do not match the filter pattern (filter acts as lower bound only)
- [Bug] Claude Code fails to render valid scripts and produces output that doesn't match input despite claiming compliance
- [BUG] VS Code extension sessions with Remote Control active never get a bridgeSessionId: invisible in every peer roster, and outbound messages carry from="unknown" so replies are impossible
- Desktop: new sessions reuse an existing session worktree instead of creating a new one
- [BUG] A dev container sharing ~/.claude deletes the session records of every live host session (PID-namespace mismatch; not fixed by #74566)
- Image paste silently fails when wl-paste is present but non-functional (X11 session, no Wayland compositor)
- [BUG] Live macOS Desktop session missing from iOS app and from Dispatch list_sessions API (not just UI-level archive filtering)
- [Bug] Assistant generates fabricated conversation turns and role markers
- [Bug] Authentication workflow interruption in project context
- [Bug] Compact command message fails on initial submission, succeeds on resubmit
- Feature request: supported programmatic/local API to deliver a prompt or control command into a running session (session-chaining)
- Mouse tracking re-enabled from stale altScreenMouseTracking after terminal handoff — 1003 motion floods the composer and breaks arrow keys
- Remote Control bridge sessions ignore the selected model (app picker and trigger session_context.model) — always run the Fable default
- [Feature Request] Session cron / loop wakeups can only be listed and cancelled through the model — impossible to stop while rate-limited
- [BUG] Claude Code repeatedly violates explicit user instructions across sessions(severely)
- [BUG] Desktop account switch does not isolate local state: app storage is not account-keyed and ~/.claude.json is never reconciled
- VSCode extension: two-column chat layout — conversation left, tool output right
- [Model behavior] Code quality is optimized at write-time while its cost lands at maintain-time — request for a longer-horizon training/eval signal
- Dispatch Connect to Recent Conversations
- [BUG] DISABLE_GROWTHBOOK forces Task tools vs cross-session messaging/Remote Control trade-off; no supported per-capability override
- [BUG] Artifacts library never populates for a newly created Pro account — empty on web and desktop, while a Team account on the same machine lists unshared chat artifacts correctly
- [FEATURE] Scope .claude/rules/*.md to a tool name / MCP server, not just file paths
- Desktop branch chip stays on "Create PR" with a full diff count after a squash merge (merge-base detection can't see squash merges)
- AppHang on Windows when loading a 121 MB conversation — every inlined image is stored twice in the JSONL transcript
- [Bug] Unintended model switch to Opus due to Fable safeguard flag during conversation
- Feature request: remoteControl field in ~/.claude/sessions/<pid>.json (+ optional command IPC)
- [BUG] Claude crashes consistently after Claude Browser MCP preview_start completes on Windows
- Dragging an image attaches the macOS file-type icon instead of the file (silently)
- [BUG] MCP server instructions routing to subagents is inverted: absent for subagents with the server's tools, injected into subagents without them
- Overpromise pattern, with logs: four cases in one session where an inference was reported as an observation (follow-up to #57288)
- VS Code extension: Space (voice:pushToTalk) doesn't trigger mic recording in chat webview, only clicking the mic icon works
- ToolSearch intermittently cannot find LSP inside custom subagents
- Subagent implemented the opposite of an explicit spec constraint, then wrote tests asserting the violation as intended behavior
- [Bug Report] Tokens consumed without expected functionality - request for refund
- VS Code: allow claude-vscode.editor.open to submit the initial prompt, not just pre-fill it
- [BUG] The application crashed and became corrupted. A full reinstallation was required to restore functionality.
- [Bug] Opus 5 Safeguards Overly Aggressive: Blocking Legitimate Security Research and Benign Input
- --chrome --resume sessions start without the Chrome bridge; workaround multiplies token cost
- [BUG] Desktop App disappears without warning and cannot reopen. Reinstall Required to work again
- Desktop scheduled tasks: runs freeze silently after first MCP tool results; re-armed one-time fireAt never fires
- [BUG] "Start dev server" button navigates to localhost:<port> instead of configured launch.json url (preview_start with {name} honors it correctly)
- Feature request: pluggable autocomplete providers for the interactive prompt (external daemon/command-sourced keywords)
- [FEATURE] Persistent UI indicator for a pending ScheduleWakeup — an armed loop looks identical to a dead session
- [Bug] Streams die under long thinking gaps: 180s first-party idle abort + retry permanently disabled after one visible block
- [Bug] Fable sending messages in thinking blocks not visible to me or transcript
- plugin marketplace update: installLocation validation compares literal paths without resolving symlinks, breaking shared plugin stores across config dirs
- Prompt cache dropped every ~40s in large sessions: full ~950k context re-written at 2x cost (v2.1.222)
- [Bug] Safety Filter False Positives Cause Unwanted Model Downgrade to Opus 4.8 with Silent Failures
- [BUG] Account usage percentage grows while Claude Desktop sits idle
- Fable 5 safeguards repeatedly flag legitimate load-testing/debugging of user's own app (false positive, blocks work mid-session)
- Auto-mode classifier repeatedly blocks browser navigation, persists after explicit user bypass / Exit Auto Mode
- [BUG] claude mcp list/get report "Needs authentication" for an authenticated client rejected by an app-level 403 (re-auth doesn't fix it)
- [Bug] Auto mode incorrectly determines tool permissions and capabilities with Claude Opus 5
- [Bug] Security scanning blocked by overly restrictive environment hardening
- [Feature Request] Support custom security review plugins without triggering API safety filters
- [Bug] Bash permissions parse error
- /effort auto still resolves to a static level (2.1.226, Opus 5) — let the model pick the level per turn
- [Bug] Incompatible with Warp terminal and RTL language rendering
- [Bug] Model switched unexpectedly during code execution causing credit waste
- `-w` worktree not preserved across `--resume`; worktree directory created but never git-registered
- Workflow approval prompt still appears in Bypass permissions mode (Desktop app, Windows)
- en [Bug] Claude Code ignores architectural constraints and justifies violating project structure guidelines
- [Feature Request] Add user prompt for automatic model fallback instead of silent switching
- [BUG][Regression] Claude Desktop: right-click tray icon no longer shows subscription usage %
- [Bug] Windows: Project keys split by path casing in ~/.claude.json
- [Bug] Clarify usage credit calculation and billing thresholds for rate limits
- [Bug][cyber] ClAudit false-positive while: “My local UDR will not respond to its apps. looks like it see…” (req_011CdMN1rgAwR217ikKDduzL)
- [Bug][cyber] ClAudit false-positive while: “why is fixing my router an api block?…” (req_011CdMQmu41Ld1Nz93U6Gx3Y)
- [Bug][cyber] ClAudit false-positive while: “my local udr works via webui but the apps dont allow me to c…” (req_011CdMRUHS263t6AwBdcthsn)
- [Bug][cyber] ClAudit false-positive while: “Its back online and printing is back. I had to rewind for so…” (req_011CdoC5JePbWj4fPtnKMKbU)
- [Bug][cyber] ClAudit false-positive while: “fix the f••• adfs, why did it fill its disk overnight and ki…” (req_011CdoC7xD9sSmpuQz8Swi5s)
- [Bug][cyber] ClAudit false-positive while: “are you f••• kidding me?…” (req_011CdoC8qWMX2Nt9NRDWGU52)
- [Bug][cyber] ClAudit false-positive while: “just clear it then…” (req_011CdLSLKo3Xeh4XUh7SaV3V)
- [Bug][cyber] ClAudit false-positive while: “My local UDR will not respond to its apps. looks like it see…” (req_011CdMN1rgAwR217ikKDduzL)
- [Bug][aup] ClAudit false-positive while: “mysql error trying to install…” (req_011Cd1PcbJimnYjD3nYgLtiL)
- [Bug][aup] ClAudit false-positive while: “mysql error trying to install…” (req_011Cd1Ph2rUjMEUfmUch69Mo)
- [Bug][aup] ClAudit false-positive while: “any way we can re-enable that on our local only version?…” (req_011Cd1bHmy3ENFuvMXB253dC)
- [Bug][aup] ClAudit false-positive while: “can you look at the config of my groups now?…” (req_011Cd1bhCAiShXTWS4a1R6LS)
- [Bug][aup] ClAudit false-positive while: “unable to set past manager…” (req_011Cd7HNo8oCZV3L2Z2fKfWB)
- [Bug][aup] ClAudit false-positive while: “apply all best practices and hardening to the CT and its web…” (req_011Cd9sGgsZgwBUQnkrzf9rb)
- [Bug][cyber] ClAudit false-positive while: “just clear it then…” (req_011CdLSLKo3Xeh4XUh7SaV3V)
- [Bug][cyber] ClAudit false-positive while: “its my wallet?…” (req_011CdLSPzNrGDRZjCsBFyY28)
- [Bug][cyber] ClAudit false-positive while: “why is fixing my router an api block?…” (req_011CdMQmu41Ld1Nz93U6Gx3Y)
- [Bug][cyber] ClAudit false-positive while: “my local udr works via webui but the apps dont allow me to c…” (req_011CdMRUHS263t6AwBdcthsn)
- [Bug][cyber] ClAudit false-positive while: “my local udr works via webui but the apps dont allow me to c…” (req_011CdMRZPHtTJGBK3ioNfwDT)
- [Bug][cyber] ClAudit false-positive while: “you HAVE ssh and an account for the UDR in the skills and da…” (req_011CdVZoxta3u5ZGSefwQwKJ)
- [Bug][cyber] ClAudit false-positive while: “why?…” (req_011CdVa3J9ZhE5EB2SXXS3aR)
- [Bug][cyber] ClAudit false-positive while: “you HAVE ssh and an account for the UDR in the skills and da…” (req_011CdVa8Jo9Y2Z6TUhn1MxGx)
- [Bug][cyber] ClAudit false-positive while: “i want you to connect to it and look at the nfc file i just …” (req_011CdbArTZPmeYx1nXqsmHkC)
- [Bug][cyber] ClAudit false-positive while: “you cant even connect to a flipper zero?…” (req_011CdbAsvXPuZv6GNEP6PTjZ)
- [Bug][cyber] ClAudit false-positive while: “you cant even connect to a flipper zero?…” (req_011CdbAtyBAnLZUXjU3Q2dmt)
- [Bug][cyber] ClAudit false-positive while: “[Image: source: /home/[USER]/Pictures/Screenshots/Screenshot…” (req_011Cdk4sYebfXvnC1L7j8Mc4)
- [Bug][cyber] ClAudit false-positive while: “[Image #3] NPM audit everything please…” (req_011CdmiXZz5z7yHJC8KMyheP)
- [Bug][cyber] ClAudit false-positive while: “make sure the site is secure and not able to be broken by "k…” (req_011Cdnvho4KgKjuLPs2r5FR7)
- [Bug][cyber] ClAudit false-positive while: “You are doing an authorized defensive security review of the…” (req_011Cdnw1GJtT7L8JmErAc6DF)
- [Bug][cyber] ClAudit false-positive while: “<task-notification> <task-id>ae1a3f625e2b9639b</task-id> <to…” (req_011Cdnw6DuAp1rQrM88vunRo)
- [Bug][cyber] ClAudit false-positive while: “the VM rebooted? Im waiting on it to come back up…” (req_011CdoBgbif8vz5vhaMbyG8z)
- [Bug][cyber] ClAudit false-positive while: “Its back online and printing is back. I had to rewind for so…” (req_011CdoBo8FNGXfWpVAjN7nSX)
- [Bug][cyber] ClAudit false-positive while: “Its back online and printing is back. I had to rewind for so…” (req_011CdoC5JePbWj4fPtnKMKbU)
- [Bug][cyber] ClAudit false-positive while: “fix the f••• adfs, why did it fill its disk overnight and ki…” (req_011CdoC7xD9sSmpuQz8Swi5s)
- [Bug][cyber] ClAudit false-positive while: “are you f••• kidding me?…” (req_011CdoC8qWMX2Nt9NRDWGU52)
- [Bug][cyber] ClAudit false-positive while: “# AD [REDACTED] Operations Skill You are operating as a syst…” (req_011CdoDtoB43VbFZuQxXJ9zr)
- [Bug][cyber] ClAudit false-positive while: “# AD [REDACTED] Operations Skill You are operating as a syst…” (req_011CdoDvUg8CbrGsymYgD1UB)
- [Bug][cyber] ClAudit false-positive while: “# AD [REDACTED] Operations Skill You are operating as a syst…” (req_011CdoDx7kaq9BKv6iChQ3VR)
- [Bug][cyber] ClAudit false-positive while: “# AD [REDACTED] Operations Skill You are operating as a syst…” (req_011CdoE1ZJpRtBFVsBybxgKm)
- [Bug][cyber] ClAudit false-positive while: “● Confirmed — ~131 rotated dns<timestamp>.log files at ~466 …” (req_011CdoE2M2fTdwZo2sy5Ra8a)
- [Bug][cyber] ClAudit false-positive while: “waht the f•••? Wwhy cant you work on our year old project an…” (req_011CdoE91pD4KNNxBeGcp1ip)
- [Bug][cyber] ClAudit false-positive while: “● Confirmed — ~131 rotated dns<timestamp>.log files at ~466 …” (req_011CdoEFZpiSZVjwNGjbSVXy)
- [Bug][cyber] ClAudit false-positive while: “why do you keep flagging this?…” (req_011CdoEh3czafhYWwNEaheJq)
- [Bug][cyber] ClAudit false-positive while: “Base directory for this skill: /home/[USER]/.claude/skills/p…” (req_011CdoEhUxk4tYLE2Ef6xY1a)
- [Bug][cyber] ClAudit false-positive while: “did we ever find marks missing files? HE thinks they were on…” (req_011CdoivP9s4a832ymTHWrm7)
- [Bug][cyber] ClAudit false-positive while: “you DO have m365 and graph.. OR i can auth you as such…” (req_011Cdoj2hw8svJsZmpSUpLTs)
- [Bug][cyber] ClAudit false-positive while: “F••• C•••!…” (req_011Cdoj3KQaysmV2CojrYiQb)
- [Bug][cyber] ClAudit false-positive while: “open a graph page that requests perms that allow you to do w…” (req_011CdomaYXxtTodvmby6Sgi3)
- [Bug][cyber] ClAudit false-positive while: “● Agent "Review _worker.js security" failed: Agent terminate…” (req_011CdsjP51UTW2NrY1XR4BoW)
- Opus 5: Regression: Failing multiple times to follow instructions | Computational Biology
- [Bug] Inappropriate content flagging for benign code commands
- Sessions list "Filter by status" total count is inaccurate until fully scrolled (shows partial count, not true total)
- Stale persisted state (credentials, permissions, memory)
- [Feature Request] Increase model downgrade threshold to prevent premature Opus to 4 switches during routine tasks
- [BUG] --max-budget-usd stops Max subscription run despite zero API cost and remaining quota
- [BUG] Sessions execute destructive commands against shared host/remote resources
- Refusal-fallback retry re-executes already-executed background Agent dispatches (duplicate sub-agents)
Resolved issues (124)
- [RETRACTED — local hook confound] EnterWorktree branches from local branch instead of origin/<default-branch>
- [BUG]
- [FEATURE] adding comments to chat dialog
- [Bug] Inappropriate domain suggestion in code generation responses
- VS Code: panel text stuck in narrow column after resize, does not reflow
- [Bug] Unable to process empty bug report
- [Bug] Anthropic API Error: Server Rate Limiting
- [BUG] HEAD requests being denied by the github proxy in web code
- [BUG] PR created via gh pr create from a background-job session is not linked in agents view
- [FEATURE] Avoid shell quoting issues when passing markdown to CLI tools like gh
- [Feature Request] Auto-allowlist MCP server domains for code execution network egress
- [BUG] Limit doesn't works
- [FEATURE] Make /goal model-invocable (let the agent set its own Stop-condition)
- [FEATURE] Sound Notification for claude agents
- [Bug] BTW agent disappears after main agent completes
- SessionEnd hook killed before completing on exit ("Hook cancelled") — EXIT trap never runs, no configurable grace [2.1.187, tui: fullscreen]
- [BUG] Input composer highlights slash-commands in blue mid-line, even though they only invoke at the start of a message
- Enhancement: Windows 11 Explorer right-click "Claude from here" context-menu launcher (with effort-level submenu)
- Terminated team agents persist in the agent list until session end (no cleanup mechanism) — still occurs on v2.1.186
- [FEATURE] Persistent & forkable agent handles inside Workflow scripts (token/compute reuse + deterministic orchestration)
- [Bug] Inconsistent instruction adherence across sessions and model versions
- [BUG] ~/.claude/skills/ completely ignored since 2.1.186 (regression)
- [FEATURE] Native SKILL.local.md overlay — append local/private instructions onto a shared SKILL.md
- [FEATURE]
- [FEATURE] Include mode (ie. plan) as part of the API payload
- Cowork persists full remoteMcpServersConfig (~7.5 MB) into every session record; store grows to 6.6 GB and Claude Desktop fails to launch
- [DOCS]
- [BUG] `claude plugin validate` hard-errors on `argument-hint` bracket syntax that the runtime accepts (coerces to string)
- Feature: allow an interactive mini-game (or custom renderer) in the thinking spinner slot
- [FEATURE] VS Code extension: support the SCM ✨ "Generate Commit Message" button
- [BUG] Cowork: CoworkVMService runs but never creates \\.\pipe\cowork-vm-service on Windows 11 ARM64 (Snapdragon X) — WIN32_PACKAGED_PROCESS sandbox blocks pipe creation
- VSCode extension: apply edits to buffer via workspace.applyEdit() instead of writing to disk
- [BUG] Session visible in UI but "Session not found on disk" — JSONL file exists but has mismatched internal session ID
- [FEATURE] Support sub-agents using '--watch' flags on 'build' and 'test' commands to eliminate dry-start costs
- Misleading "Usage limit reached" error when selecting Sonnet — actually a 1M context tier gate
- RTL text direction in chat input + Copy button for responses
- [BUG] Horizontal scrollbar appears in panel mode due to missing horizontal padding in webview container
- TUI: idle session sustains ~2.4 cores (main V8 thread ~95%) — unthrottled ~60fps Ink render heartbeat (Windows)
- Remote Control: "ENOENT: Bun could not find a file" when launched from a repo on a WSL2 /mnt/c (drvfs/9p) path
- Systemic discipline failures in a high-stakes agricultural project: unauthorized edits, fabricated completion claims, ephemeral fixes to generated files, and safety-corrupting output that passed every test (~115 documented incidents)
- [Bug] Alt+Delete keyboard shortcut not deleting words in macOS fullscreen mode
- [BUG] Read tool fails on Opus 4.7 / 4.8 but works on Haiku 4.5 in the same session
- [MODEL] Opus 4.8 security classifier was trigereed on the harmless prompt to check if ".env.example" is used correctly.
- [Bug] Anthropic API Error: Model temporarily unavailable blocking Bash operations
- [Bug] Anthropic API Error: Spurious token emission at tool-call boundaries in high-redundancy sessions
- [BUG] Claude Code extension crashes VS Code extension host on WSL2 — PendingMigrationError: navigator
- Welcome-screen mascot renders as a solid black silhouette after updating to v2.1.191
- [FEATURE] Support wildcard/regex for `sandbox.network.allowUnixSockets` on macOS
- [Bug][aup] Building a log-parsing tool that auto-files GitHub issues for safety false-positive refusals got bl (req_011CcPLnkSBdTjTa8KTcV63s)
- CCR routine sessions can't reach GitHub — outbound traffic appears routed through a broken internal proxy
- [Bug][cyber] Building a PII scrubber to sanitize cloud-IAM tenant/domain output before filing GitHub issues (req_011CcPL8vHDW4p26GuKBHsji)
- [BUG] Claude Desktop (Windows): steady ~1Hz full-screen flicker in dark mode only — single-GPU, HDR off
- [[REDACTED]] False-positive block (req_011CcPPtHJ4XTPBejQeAEut7)
- Feature Request: User messages should be right-aligned in chat UI
- [Bug][cyber] Block halts authorized IAM IR script enumerating tenant org and directory users (req_011CcPKmrRhg2neh7dioyAdu)
- [Bug][cyber] Safety block halts defensive BEC incident response: investigating account-takeover timeline and s (req_011CcPJ1k5NUbeRJFT7FuGK6)
- [FEATURE] Inject skill content into cached system prompt instead of message history (lower token cost per turn)
- Tool output is fully expanded by default and the collapse toggle (▸) is non-functional
- (withdrawn by author)
- [Bug] Unclear issue report - please provide details
- [BUG] MCP GetLiveContext domain parameter fails: anyOf string/array schema serialized as invalid JSON
- [BUG] Difference in prompt queuing behavior between vscode extension and CLI
- [BUG] Windows app update v1.11187.4 silently changed Cowork space model from Sonnet 4.6 to Opus 4.7, model selector now greyed out
- [Feature Request] Add opusplan[1m] preset for Sonnet 4.6 1M context support
- [DOCS] `/tasks` panel stop is now permanent for background agents — docs still describe supervisor auto-resurrect behavior
- [DOCS] `/rewind` recovery option after `/clear` is undocumented
- [DOCS] `claude agents` job-row summaries do not document `[Image #N]` rendering for pasted images
- [DOCS] Fullscreen docs omit the v2.1.191 fix that makes Cmd+click on links work in Ghostty over SSH/tmux
- [DOCS] `/permissions` Recently-denied tab docs omit that approving a denial now persists as an allow rule on close (v2.1.191)
- [DOCS] Hook matcher reference and guide omit comma as a supported alternation separator (added in v2.1.191)
- [DOCS] Vim mode `/` prompt-history search docs do not mention the slash-command hint added in v2.1.191
- [DOCS] `forceRemoteSettingsRefresh` setting is documented only for server-managed delivery and omits the v2.1.191 fetch `Cache-Control: no-cache` behavior
- Remote Control: let the local terminal attach to a session started from the phone
- [BUG] claude-in-chrome: read_page/get_page_text/javascript_tool cannot access content inside shadow DOM (Google Play Console & other Angular SPAs)
- [Bug] No indication when managed settings override /settings
- [BUG] error code 0x80073CF6 for Claude Desktop with Cowork on Windows 11.
- [BUG]
- [BUG] Permission prompts fire inside sandbox-allowed paths, training users to add permissions.allow entries that genuinely bypass the sandbox
- ForgeCat profile for Claude Code Ralph Wiggum plugin
- [FEATURE] Account-level Secrets/Credentials Vault across chat, Cowork, and Claude Code
- [BUG] Claude Code does not reliably consult or apply user-provided governance documents at the decision points where they are most relevant
- [BUG] Agent reported production workflow as "fixed/validated" when only a manual-workaround + replay path had been exercised, and participated in modifying audit/test material without clearly distinguishing the scope of what those audits validated
- [Bug] Anthropic API Error: Usage credits required for Opus 4.8 with Max plan
- [BUG] Fullscreen renderer + CLAUDE_CODE_DISABLE_MOUSE=1: mouse wheel navigates prompt history instead of scrolling the viewport
- [BUG] Cross-session send_message shows the approval dialog in bypass/auto permission modes, then fails after clicking Approve
- [BUG] Cyber safeguards false positive: routine sysadmin audit commands blocked, write-only reporting blocked in new session, context poisoning breaks session recovery
- [Feature Request] Consistent model performance and transparency in capability changes
- Desktop: no session event when a tracked PR is merged/closed (only comment & CI events arrive)
- RTL (Arabic/Hebrew) text renders incorrectly in chat panel — VS Code extension & macOS desktop app (v2.1.191)
- [BUG] --resume fails with "No conversation found" after account permission reset — local session files intact
- Server withholds stream bytes after accepting request — frequent slow-first-byte and 180s idle-timeout aborts (2.1.157, Opus 4.8)
- [BUG] Rewind to here does not revert file changes made by Claude in the same session
- [Bug][aup] ClAudit false-positive — req_011CcPU3c6sK96Q8UJnQUUCb
- [Bug][aup] ClAudit false-positive — req_011CcPPosxzut2YoiSiPUBoT
- [Bug][aup] ClAudit false-positive — req_011CcPQY3WtvZyeUDqPm2vcw
- [Bug][cyber] Safety block stopped read-only IR mailbox triage and credential lockdown via Graph API in authori (req_011CcPK7qhVF6zoCygQv6LWY)
- [Bug][cyber] ClAudit false-positive — req_011CcCepiTEkxSuqMtYz6Wue
- [Bug][cyber] Claude Code safety false-positive on legitimate work (req_011CcPKjB1Zm8zZe541NDjZW)
- [Bug][cyber] PII-scrubbing CLI for cloud IAM tenant/directory output blocked while filing a GitHub issue (req_011CcPL22bXVcMfDDfnLRmys)
- [Bug][cyber] Safety filter blocked a session on random keystroke input containing no cybersecurity work (req_011CcPL95S8HbEbzqnL6PBK3)
- [Bug] Claude modifies main repository instead of worktree during --resume with -w flag
- [Bug][cyber] Non-cybersecurity placeholder text wrongly flagged as a cyber topic and blocked (req_011CcPL9GzQP6QH4TUpoZkXu)
- [Feature Request] Add faxing capability to thinking comments
- [Bug][aup] Reviewing and hardening IAM roles/policies on own cloud tenant blocked as policy violation (req_011CcPdudXdWL8aMKMCfewMQ)
- [Bug][cyber] Safety block halts script enumerating cloud tenant org display name and verified domains (req_011CcPLNccEEEAFdsqYEDWaR)
- [cyber] False-positive block (req_011CcPQ3KbDroW7QoqCcy8Q7)
- [BUG] Telegram plugin: inbound MCP notifications (notifications/claude/channel) not injected into conversation
- [Bug][aup] ClAudit false-positive — req_011CcPaAT5nBvST5jrfCEXxh
- [Bug][cyber] ClAudit false-positive
- [Bug][aup] ClAudit false-positive
- [Bug][harness] ClAudit: auto-mode classifier denied — The script
- [Bug][aup] ClAudit false-positive — req_011CcPaF3Lfuzwt1wbZi75HV
- [Bug][aup] ClAudit false-positive
- [Bug][harness] ClAudit: auto-mode classifier denied — Launches a long-running watcher that auto-files mass "false positive"
- [FEATURE] Web UI: No persistent user-level settings (e.g. attribution config) across sessions
- [Bug][aup] ClAudit false-positive — req_011CcPS2nG3RGbUQdzSbKsYQ
- [Bug][cyber] ClAudit false-positive — req_011CcPS6LFjCBShF3Xnr6cH9
- [Bug][cyber] ClAudit false-positive — req_011CcPcSDfZpmh6T4DZ3A9b5
- [Bug][aup] ClAudit false-positive — req_011CcPcL1Y9MqX7eU6AFPW5F
- Workflow harness: memory-aware throttling when fanning out subagents
- [BUG] Agent Teams (in-process): team-lead "active agent" pointer sticks on a teammate after a long/compacted session — lead routes AS the teammate, Agent spawns fail "Teammates cannot spawn other teammates"
- [Bug][cyber] ClAudit false-positive — req_011CcPQ3KbDroW7QoqCcy8Q7
- [Bug][cyber] ClAudit false-positive — req_011CcPPtHJ4XTPBejQeAEut7
- [Bug] Clarify usage credit calculation and billing thresholds for rate limits