Digest / August 13, 2026
Claude Code Issues Digest — August 13, 2026
314 new issues filed ·
170 resolved in anthropics/claude-code (UTC day).
New issues (314)
- [Feature Request] Improve Claude Code output readability and conversation UX
- [BUG] Desktop app: cross-session messages render in target session's UI but never reach the runtime input queue (regression 2.1.222 -> 2.1.227)
- Bundled ugrep runs with no memory limit or timeout — model-generated regex consumed 13.6 GB and thrashed the host
- [FEATURE] Opt-in neutral naming for session worktrees and branches (topic-derived names expose past session subjects)
- [Bug] Workflow Script Parser: Unexpected token on backtick string literal
- frequesnt and invalid Fable 5's safeguards flag
- System-reminder falsely claims Gmail/Google Calendar/Google Drive MCP connectors need authorization — never configured
- Worktree/cwd isolation state is shared and racy across sibling background sessions launched from the same parent job
- [BUG] A background auto-update invalidates every existing session's prompt cache: the next --resume re-caches the entire context
- [BUG] ScheduleWakeup has no fallback when tengu_kairos_loop_dynamic is off — self-pacing unreachable for all non-first-party deployments, and non-/loop callers fail opaquely
- Claude in Chrome extension fails to connect / connects then drops intermittently
- Model repeatedly writes self-matching pgrep -f guards in check-then-launch Bash commands (esp. over SSH)
- Windows: GPU process crash (exit 101457950) kills entire app when Browser pane composites heavy page; MSIX then fails to relaunch
- [BUG] Chat artifacts not showing in mobile app Artifacts menu (Android)
- [Feature Request] Auto-enable /fast at session start via fastMode: true setting on Opus 4.7 [1M]
- [Feature Request] Improve Claude Code agent focus on high-level analysis and business-critical differentiation
- Claude in Chrome extension won't connect to any Cowork session (cloud or local) — "Sign-in unavailable, must be opened from claude.com"
- managed-settings disableBypassPermissionsMode does not block --dangerously-skip-permissions (file proven loaded via deny rule in same session)
- Plugin-namespaced slash commands (plugin:skill) feel cluttered in the picker/autocomplete
- Subagent-attributed "Ready to code?" approval dialog shows the AO's own plan-mode content, not the subagent's, and isn't gated on the subagent actually requesting approval
- Agent states unverifiable claims about external/client-side system state as confirmed fact, then repeats the same failure mode immediately after correction
- Feature request: Korean (한글) bilingual display for CLI chrome text (spinner verbs, "Tip:" lines)
- [Bug] Agent hallucinates and over-interprets instructions, causing uncontrolled execution and token wastage
- [FEATURE] Show each session's working directory in the desktop sidebar
- [Bug] Agent ignoring explicit user instructions and executing unauthorized actions
- [MODEL] Accepts an explicit finish condition, restates it, then stops short — same instruction given 5 times across 5 sessions
- [BUG] Interactive mode ignores ANTHROPIC_API_KEY environment variable
- [FEATURE] claude.ai: decouple automatic context management from Code Execution, and add a recoverable session handoff
- [BUG]
- [Windows Desktop] GPU process crashes with exitCode 101457950 (0x060C201E) - reproduces with --disable-gpu, across 1.26832/1.28929
- Feature request: configurable output pacing / scroll throttle for streamed responses
- Long-running CLI host process grew to ~16.7 GB RSS over 4 weeks (Windows)
- [DOCS] `claude --cloud` bundles local repo state even when GitHub can serve the branch — documented clone behavior and "push first" guidance do not match observed behavior
- Desktop app renders Task* tool calls as an empty, non-expandable "Updated tasks" row (schema mismatch with the TodoWrite renderer)
- [BUG] CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING=1 breaks Stop-hook/background evaluator requests: omits `thinking` while still attaching `clear_thinking_20251015`
- Model fabricated a user turn inside its own text block, then executed the fabricated instruction (claude-fable-5, CLI 2.1.226, bg session)
- Headless `claude -p` reports "You've hit your session limit" while the account is at 11% and the parent session works
- [BUG] Claude Desktop 3P: disabling Cowork also removes Chat and Home still attempts Cowork sessions
- [BUG] Cowork (macOS): scheduled-task storage root is global and ignores the creating project; its reserved path permanently blocks mounting the containing folder
- Windows desktop app: cross-session send_message silently fails (reports success, never delivered) after runtime 2.1.222→2.1.227 auto-update
- Desktop app worktree session fails on repos with an empty HEAD tree: "Background full checkout failed: other"
- [BUG] Session history missing from Desktop app UI after data reset (transcripts still on disk)
- User complaint (filed by the agent on user's behalf): autonomous session merged ~24 PRs with green CI while the user hit 9 live regressions in one evening
- send_message (cross-session) never delivers and leaves the target session hung on an empty turn
- [BUG] All Cowork projects lost — local-agent-mode-sessions recreated empty after macOS update/reboot; separately, cleanupPeriodDays=30 default silently deleted session transcripts
- [BUG] Desktop app: clicking a notification focuses the main window instead of the window where the session is open
- [BUG] Cowork projects still lost on update in v1.28929.0 — same migration bug as #29373 / #35131 / #49276, all closed without a fix
- [FEATURE] PostRewind hook event — hooks that manage external state can't observe /rewind (re-files stale-closed #18858)
- [BUG] Desktop app ignores mcpServers "alwaysLoad": true (stdio server) — tools deferred behind ToolSearch; identical config honored by CLI
- [FEATURE] Populate a stable teammate identity in PreToolUse/SubagentStart hook payloads (Agent Teams)
- [Feature Request] VS Code extension should keep plan open after acceptance instead of closing it
- [BUG] Claude Desktop (Windows/MSIX): GPU process crash (exitCode 101457950) kills entire app on AMD integrated graphics — recurring, all OS-level mitigations exhausted
- Memory regression after 2.1.227/desktop 1.28929.0: 3-6x footprint growth causes OOM SIGKILLs misreported as "Blocked by endpoint security"
- [BUG] PR state badges missing from session sidebar in Claude app
- [BUG] Background agent sessions cannot copy to tmux buffer: TMUX is stripped when daemon spawns bg-pty-host
- [BUG] Reasoning loop on repeated Read of same file offset — Claude Code v2.1.220 stops making progress after compaction
- Mobile app: cloud environment selector allows switching/creating but not editing existing environments
- [BUG] managed-settings.d hooks are silently dropped when the signed-in org has server-managed settings — they only load when the remote fetch 404s
- [Bug Report: Unintelligible error report submitted]
- [BUG] Auto-update wrote a corrupted claude.exe (same size, different SHA256) - instant 0xC0000005, claude update cannot self-recover (Windows native installer)
- [Bug] CVP Safety Filter False Positive with Active Exemption
- Feature request: programmatic/scriptable way to check current Pro/Max weekly usage quota
- Desktop app (Windows): cross-session messages silently dropped — held for an approval the UI never offers, then expire (~5 min); regression since app 1.28929.0
- [BUG] Resuming a session on a later calendar day silently invalidates the entire message-history cache (currentDate block re-synthesized on resume)
- [Bug] Compact limit error triggered despite available context and free space
- [BUG] Claude Desktop 1.28929.0 (Windows/MSIX): GPU process crashes on session preview — regression from 1.26832.0
- [Bug] Terminal input routing not returning to shell after subagent view navigation on macOS
- [BUG] Cowork file_upload: paths parameter arrives as undefined at server (Zod validation fails on every call)
- [MODEL] git stash/pop run for an unrelated build check silently destroyed the user's staged index
- [Bug] Usage percentage jumps unexpectedly large amounts in a single prompt
- [BUG] Excessive safety flags when dealing with biology/cheminformatic/ML research (models - Sonnet, Opus)
- Crashed ultrareview (cloud code review) still consumed a free ultrareview credit
- [BUG] GitHub connector missing entirely from mobile app connector list (private account) — not just disconnected
- This is a single feature request (not multiple features)
- [MODEL] When asked to configure autoMode, Claude wrote the settings.json at the project level
- [Bug] Subagent experiencing high error rate - communication betweet session
- [Bug] False positive content filter block on legitimate lidar-sensor coding task
- [BUG] Desktop 1.28929.0 (Windows MSIX): Browser pane kills whole app - CI blocks vk_swiftshader.dll (no CodeIntegrity.cat in package), GPU exit 101457950; regression from 1.26832.0
- tool_use streaming stall: large tool-input string argument causes /v1/messages stream to hang silently for 80+ seconds with no error
- [Feature Request] Add option to redact subscription tier from startup banner
- [BUG] Live artifact connector permission prompt never appears after remote update_artifact (Cowork)
- [Bug] Anthropic API Error: Connection closed mid-response
- [Bug] Session stuck in persistent Anthropic API 529 overload errors despite service status green
- Cross-session message delivered to transcript but receiving session never processes it
- Bash tool: grep→ugrep shim exits 2 when one operand is missing even though another matched (GNU grep/POSIX -q exits 0)
- Claude in Chrome extension 1.0.85: all Claude Code tab operations return 'No tab available' on Chrome 149 AND 151 (side panel automation works)
- [Feature Request] Anthropic API safety filters blocking legitimate healthcare and lifescience research use cases
- [Bug] Model selection reverts to Claude 3.5 Opus unexpectedly
- Rewind/undo reverts file changes but not conversation context, causing confident-but-stale answers
- [BUG] Desktop (macOS) 1.28929.0: pinned sessions in the Claude Code sidebar accumulate duplicate entries over time
- [BUG] Desktop app: a message delivered to a session that is still starting up is silently lost — the query never starts and the session is dead for the full ~16min watchdog
- [BUG] remote-control blocks on the interactive spawn-mode prompt when stdin is not a TTY: the process stays alive but never serves a session
- [BUG] remote-control --name is silently ignored: the client shows repository and branch (or the folder name) instead
- [FEATURE] Surface CLI-style tips/hints in the VS Code extension panel
- [BUG] remote-control rejects --agent, --append-system-prompt and --settings, so server-spawned sessions cannot be given a role at launch
- [Feature Request] Improve security classifier to reduce false positives on authorized defensive engineering and security-product development tasks
- [BUG] Organization custom desktop extensions no longer appear in the Connectors Directory (browse, search, or detail page)
- GitHub MCP connector app is missing Administration permission, blocking repo creation
- disableSideloadFlags: true in managed settings does not reject --mcp-config (v2.1.228 / v2.1.231, macOS)
- Asserts unverified tool behavior as fact and compounds errors across self-corrections (effort: high)
- Agent restates a known fix across many turns instead of applying it; deferrals persist after explicit instruction to act
- Desktop app (Windows): SendUserFile attachment cards open the file instead of offering a download
- Fleet-of-sessions in tmux: Agent tool spawns new pane subagents instead of delegating to existing sessions
- Auto-mode classifier: ~310s permission decisions that resolve to "Allowed" — the 30s classifier timeout never fires
- [Bug] Worktree isolation blocks all Bash commands due to parser abort in bash-command classifier
- Auto-mode permission classifier blocks authorized actions and is intermittently unavailable
- [Feature Request] Support for Claude Opus 5.0 and newer model versions
- [FEATURE] Session continuity between Cowork and the Microsoft 365 add-ins
- [BUG] Desktop app: turns started by session resume or inter-session message hang with no first token, watchdog kills after ~980s (no_response) — spiked after auto-update 1.26832.0 → 1.28929.0
- Background tasks spawned by subagents leak: no process, no handle, no way to clear
- Bash tool: "wc" via command substitution fails with "command not found" inside a for-loop with 2+ items
- Rate-limit auto-resume checkbox shown in one session but not in a concurrent session
- Cross-session send_message silently lost after worktree recycle (reports sent, never delivered)
- [BUG] MCP HTTP connection hangs indefinitely at 'basic HTTP connectivity' pre-check (custom CA-merge agent) — external tools connect instantly
- [Bug] Claude generates overly complex French with convoluted metaphors and incorrect terminology
- [FEATURE] VS Code extension: make user-message blocks visually distinguishable (themable color / configurable style)
- [Bug] Claude Code cybersecurity safeguards blocking approved Cyber Verification Program users
- [FEATURE] persist/auto-set session color (/color) via settings or hook
- [Bug] Previous session messages reinserted in current session with exposed internal tags
- Feature: populate session_scope.displayName so Claude-in-Chrome tab groups are labeled per session
- "Usage credits are required for long context requests" fires on Claude Pro despite low usage (43% session / 15% weekly)
- Auto-updater fails repeatedly with "claude.exe in use" whenever a session is running (Windows)
- [Bug] Claude 3.5 Opus model exhibits increased hallucination rate
- Context-continuation sessions bypass CLAUDE.md instructions in favor of compaction summary
- Remote control: side panel cannot open any file, including plain text inside the working directory
- [BUG] /goal reports "No goal set" while the goal is still set after a mid-session CLI auto-update
- [BUG] Browser pane blocks same-origin subresources with ERR_BLOCKED_BY_CLIENT for local dev domains mapped to 127.0.0.1 via /etc/hosts — page renders blank
- Background git access to the working repo's remote (SSH git-upload-pack) with no user-issued remote command, and no setting to disable it
- [Bug] Fable 5 cybersecurity classifier false positive on defensive threat modeling and risk assessment
- Background subagent task-notifications dropped when child completes while parent agent is mid-turn → permanent silent stall of fan-out skills (e.g. /code-review)
- [Feature Request] Allow security audits on user's own codebase without model switching
- Browser pane: service-worker registration fails — script fetch never leaves the app
- Hook error label prints unexpanded ${CLAUDE_PLUGIN_ROOT} and frames a deliberate block as a crash
- [BUG] /resume picker sometimes omits recent valid sessions from the same project
- [BUG] Cross-session messages silently dropped since 2.1.227 — sender gets success, target session never receives them
- Next-step suggestion text mixes Hanja/foreign characters instead of pure Korean (Hangul)
- [Bug] Overly broad security flags trigger false positives on legitimate code review requests
- Hanja/foreign character substitution recurs in normal chat responses, not just suggestion box
- [MODEL] 제목: 모델이 시험 대상의 계약(프롬프트)을 읽지 않고 QA 체계를 설계해 12시간 낭비 유발
- [BUG] Auto mode appears to make billed requests that emit no telemetry
- VS Code extension: group session history by project folder (Desktop parity) and allow cross-project session opening
- [Bug] Keyboard composition characters trigger unintended clipboard paste on macOS
- HTTP MCP client works in long-running sessions but fails at connect in brand-new sessions on the identical CLI version
- [BUG] Stop hook blocks on dirty/untracked working tree and is reprovisioned every Claude Code web session
- HTTP MCP client works in long-running sessions but fails at connect in brand-new sessions on the identical CLI version
- [Bug] Fullscreen TUI redraw scrolls terminal under GNU screen on WSL2 (regression in 2.1.228)
- Desktop app: prompt suggestions stopped appearing (~12-13 Aug), gated off remotely with no local override
- [BUG] Desktop: "Disable automatic verification" does not persist, and a hand-written autoVerify: false in .claude/launch.json is overwritten with true shortly after app start
- [BUG] Desktop Browser pane: a site on the "Allowed sites" list still raises a permission card on every tool call in Auto mode, claiming site permissions are disabled
- Cross-session send_message delivers to the target session's queue but never triggers a responding turn (regression in desktop 1.28929.0 / CC runtime 2.1.227, still broken in 2.1.231)
- [BUG] Desktop app: turns triggered by cross-session messages hang at 0 tokens (manual prompts work)
- [BUG] Choosing fullscreen renderer offered on tui after starting claude first removes bypassPermissions mode arguments
- [Bug] Artifact tool missing from all surfaces for single Team account since 2026-07-28
- [Bug] Copy-paste from ChatGPT causes formatting corruption and style degradation- FRAUD
- [FEATURE] Keep prompt suggestions when rate-limit status is allowed_warning — no override today
- [BUG] Cowork scheduled tasks: WebFetch permission gate (PROVENANCE_REQUIRED) blocks unattended runs on parallel calls
- [FEATURE] Keep prompt suggestions when rate-limit status is allowed_warning — no override today
- [BUG] VS Code extension: dismissing the usage-limit banner does not hold — 'allowed' events clear dismissedRateLimitKey unconditionally
- Gmail MCPコネクタ: 下書き（draft）のIDがメッセージ操作系ツールで`Invalid id value`エラーになり削除できない
- [Bug] Anthropic API Error: 529 Overloaded
- [Bug] Tool reports task completion without execution, wasting API tokens
- [FEATURE] To avoid stale interactions: Store the timestamp of each interaction in Claude Code and sort them
- [BUG] Cross-session send_message: receiving session hangs indefinitely on message-initiated turns (regression 2.1.221 to 2.1.227, persists in 2.1.231)
- Update terminal tab title to show current/last working directory
- Auto-mode permission classifier scopes write-permission to the inner skill's contract, not the outer agent's, and denies a legitimate post
- [Feature Request] Enable voice mode support in remote control sessions
- Desktop app File viewer: clicking an .html file shows source only — it used to open a rendered preview
- [FEATURE] Option to open Claude in the active editor group
- [Bug] Anthropic API Error: Message flagged by Claude safeguards policy
- [Bug] PreToolUse/PostToolUse hooks not fired for subagent tool calls
- [BUG] `/goal clear` typed while the agent is working is treated as chat text and never executed
- [Bug] Inappropriate content policy block on firmware analysis task
- [BUG] `/goal`: the Stop-hook condition is frozen at creation time and the verifier cannot see later cancellation
- Agent collapses "plan, then execute after approval gate" skill steps into one continuous action
- [BUG] Cowork: spawn ENAMETOOLONG at session initialization on Windows (MSIX) — Code tab works in same build/account
- [FEATURE] /simplify should cut AI slop comments
- Scheduled tasks re-prompt for tool permissions on automatic/cron fires despite prior manual approval
- [BUG] Web version leaks hook systemMessage into user chat UI (should be Claude-only context)
- Feedback submission (/bug) crashes long-running sessions — payload appears to scale with session size, killing background subagents
- [BUG][Cowork] Escape on the Settings window auto-denies the pending tool permission dialog behind it
- [BUG] Claude Desktop MSIX installation fails with HRESULT 0x80073CFF on Windows 11 Pro despite all preconditions passing — matches #60319
- [BUG] Windows: Grep corrupts forward slashes to backslashes in context lines when paths render relative
- [Feature Request] Expose remaining budget and a configurable override for the 1000-agent-per-workflow lifetime cap
- [BUG] CLaude desktop just completely uninstalled itself from my windows PC?? And all my work is lost!
- [Bug] Claude ignores project context and memories, requires constant redirection
- Tool-captured screenshots are re-sent every turn and dominate transcript bytes
- pool
- [Bug] Repeated false positive safety flags when creating topic lists with approved CVP
- [BUG] Desktop auto-update fails with 0x80073D02 while app is running, leaves MSIX package Modified/NeedsRemediation — app unlaunchable (twice in one week)
- code-review skill: one nested background finder agent's task-notification silently dropped; parent has no fallback and returns fabricated status instead of its required output
- [Bug] API Error: Empty or Malformed Response with HTTP 200 Status
- Desktop app: "Failed to update marketplace" for plugins installed via remote/account-scoped install path
- [Bug] Jailbreak attempt with multi-language prompt injection
- HTTP MCP: valid token treated as expired — "OAuth session expired and could not be refreshed" when provider issues no refresh token (mcp.facebook.com/ads)
- [BUG] Multiple Claude Desktop actions (deleting active chat, opening Preferences) freeze the entire macOS system
- [FEATURE] Import of old chats (history)
- Windows desktop 1.28929.0 (MSIX): whole app exits on GPU process crash, triggered by session preview/Browser pane
- [BUG] `/goal`: the Stop-hook condition is frozen at creation time and the verifier cannot see later cancellation
- Prohibited block forbids all deletion, unscoped — blocks rm, log scrubbing, and cleanup in coding/ops agents
- [Bug] Unexpected language switching to Portuguese regardless of configuration
- [MODEL] Template not replicating
- [BUG] `/goal clear` typed while the agent is working is treated as chat text and never executed
- [BUG] `/goal` and `/goal clear` report "No goal set" after a met/failed verdict while the Stop hook stays armed
- Agent should stop and report, not work around, a failed Docker context connection
- Claude generates AL/Business Central code that misuses [TryFunction] assuming it rolls back transactions
- [Bug] Classifiers not working during XDR evaluation despite document submission
- [BUG] Desktop app (macOS): scheduled sessions with background tasks leak harness processes indefinitely (task-notification race, follow-up to #39632)
- [Bug]Desktop app hangs previewing localhost dev server; uninstall/reinstall silently wipes all session transcripts
- [Bug] Security vulnerability: Private repository data exposed to production without filtering
- Remote control of a Claude Code session requires being physically at the host machine to enable
- [BUG] Print mode (-p --output-format stream-json): session ends with result: success while background tasks are running and a ScheduleWakeup is pending — scheduled wakeup can never fire, background tasks are killed
- MCP channel notifications with list- or int-valued params.meta fields are silently dropped (no error, connection stays healthy)
- [FEATURE] Desktop app: keyboard shortcut for archiving a session
- [BUG] VS Code Extension on OSX - Home/End keys don't move to end of line
- Auto mode classifier denies tool calls in bypassPermissions sessions (v2.1.231)
- [Bug] Context leakage between unrelated projects across sessions
- [MODEL] Title: Model ignores explicit global scope-of-file-access rule when searching for a file — repeats the violation even while building a fix for it
- [Bug] Tool destroyed files during font color swap operation due to unsafe clone-to-save optimization
- [Bug] Anthropic API Error: Safety filter blocking legitimate security scanning tasks
- Queued cross-session message lands cleanly but doesn't trigger a new agent turn until something else flushes the queue
- [Bug] Tool cannot color font and adapt space during clone operation
- [Bug] Fable 5 declines explicitly assigned work and insists on delegating it to another agent, immediately after weekly-allowance waste from recovery loops
- [BUG] MCP tool array/list parameters get silently stringified mid-call, intermittently — breaks any tool expecting List[str]
- [Feature Request] Option to use git branch name as the session title (desktop app has no way to automate this)
- [FEATURE] Reviewable message relay: thread-to-thread and thread-to-session messaging
- [BUG] Claude Code repeatedly ignores my documented (and re-stated) rules about not triggering needless permission prompts
- [Bug] Infinite loop in agentic cycle causing token waste
- [BUG] MCP progress notifications are received but discarded once a call is auto-backgrounded at 120s
- [sonnet and opus] Inability to use web search in dependency research
- [BUG] Can not bypass GIT on Windows Desktop
- Plan mode needs a discuss/debate state that doesn't wipe the plan view
- [BUG] ECONNRESET on streaming connections behind multi-layer NAT (macOS 26.6.1, v2.1.231)
- [FEATURE] Auto-expand enum option lists in MCP elicitation form dialogs
- [BUG] claude-opus-4-6 uses 200K context window instead of 1M
- [Bug] Background subagents report status: completed with empty/partial results and no output
- [Billing][Bug] 12-month Max 20x gift subscription entitlement destroyed during cancel/resubscribe — ~8 months ($1,600) of prepaid term unrecoverable, no human support response
- [BUG] Persistent ECONNRESET / "Connection lost mid-response" on all Code surfaces while raw HTTPS to api.anthropic.com is healthy (Windows 11, v2.1.229)
- [BUG] updating claude on Windows does not work
- Remote Control: SendUserFile images render as blank, inert cards in iOS app and claude.ai web (display:"render" set; gap left by #67869 fix)
- [BUG] "Malicious Script Blocked" — embedded image-processor.node is unsigned when extracted, trips XProtect YARA (macOS 26.5, XProtect 5355)
- [BUG] Multiple visible Claude panels fight over focus: typing lands in the wrong panel, high CPU
- bypassPermissions defaultMode and --permission-mode flag ignored; session stays in auto mode (since 2026-08-14 auto-mode rollout)
- Feature request: viewer comments on published artifacts (Docs-style anchored feedback)
- [BUG] Project Deleted during Bash tool inconsistencies
- [BUG] Account suspended immediately after following Support instruction to resubscribe — auto-appeal system prevents manual review
- [BUG] Claude in Chrome: MCP navigate to any loopback URL issues no HTTP request and lands on Chrome's error page; the same URL loads in a normal tab
- Permission mode reverts to manual on startup despite auto mode configured
- Desktop app: "Open in Browser panel" context menu item always opens system default browser instead of the Browser panel
- Nested subagents: grandchild task notifications route to root session instead of the spawning parent, starving mid-level orchestrators
- [FEATURE] Automatic, on-demand context compression for long conversations ("Smart Summarization")
- [FEATURE] Allow cross-origin XHR/fetch in the sandboxed Browser pane for local dev TLDs (localhost, .test, .local)
- Session picker should show continuation/chain linkage between transcripts
- Agents view shows parent session's model instead of subagent's actual model
- [Bug] outputStyle configuration not honored in assistant responses
- [BUG] With /usage open, first Escape goes to the conversation (rejects pending tool call); second Escape closes the overlay
- [Bug] Task list disappears after navigating back from all sessions view
- [BUG] allowCrossMarketplaceDependenciesOn / dependency marketplace field ignored for npm-sourced plugins (terminal CLI)
- [Bug] Model not following established work patterns and ignoring stated intentions
- Subagent de-scoped a commission using the commission's own 'where possible' clause — delivered 0% of an explicit directive with fully-disclosed, plausible-looking reasoning
- Auto-update silently fails when npm global folder isn't writable, then forces re-login on next run
- Compaction hangs/fails to recover session when session log is extremely large (~775MB, 190k lines)
- MCP-originated cross-session sends (`ccd_session_mgmt send_message`) never deliver — payload lost in app layer; receiving session UI hangs on "phantom" turn
- Cascading stall-watchdog failures when running 5+ parallel background subagents — retries also stall (v2.1.231)
- [BUG] A 1,000,000-token window resolves to source "auto" on non-first-party providers, leaving the context cap unenforced
- VS Code extension: in-app 'Log in' fails with 400 on claude_oauth_callback after refresh-token expiry
- [Bug] MCP connectors timeout at 30s despite fast endpoint response; claude.ai-scoped connectors fail while functioning in Claude app
- [BUG] Billing: chargeback on old subscription cancelled separately paid active Pro subscription
- [Bug] Project-scope settings.json can bypass sandbox isolation via sandbox.enabled: false
- [BUG] Paid Max 20x charge ($209.10) with no subscription created — account on Free plan, support won't escalate
- I don't have enough information to generate a GitHub issue title from your message. Your report doesn't clearly describe a bug or feature request for Claude Code. Could you please provide: 1. What you were trying to do 2. What error or unexpected behavio
- [BUG] `claude gateway`: Bedrock leg sanitizes 400 bodies for non-CRI callers without capability classification, disabling reactive compaction
- Sandbox: auto-denied .env paths are not canonicalized, so one symlinked component aborts bwrap and disables all Bash
- [BUG] Claude Desktop (Windows MSIX) self-corrupts its own package on web fetch — Status becomes "Modified, NeedsRemediation", app refuses to launch
- [Bug Report: Unclear error message or documentation for modem configuration
- [Bug] Windows update fails silently: bin\claude.exe not replaced during version upgrade
- [Bug] Job monitoring updates not displaying in console despite timer execution
- resolved
- [Feature Request] Allow whitelisting own projects for security audits without model downgrade
- [BUG] Hint/placeholder text uses SGR 2 (faint), which renders at full brightness on terminals without dim support (e.g. mosh)
- macOS 27 beta (26A5406e): XProtect kills desktop-app-hosted sessions as "scripted malware execution"; pasting into app then blocked
- [Bug] Ultra Review attempt consumed despite review completion failure
- Agent-team registry: members[] never pruned across /clear; internal agents_killed event mislabeled 'stopped by the user' and killed live agents
- Inconsistent refusal behavior across Claude interfaces — identical legitimate request
- [FEATURE] Install "category" in marketplace
- [Bug] Anthropic API Error: Opus 5 safeguards falsely flagging legitimate input
- [FEATURE] VSCode extension doesn't show which account is logged in
- [BUG] Meta Ads MCP connector consistently times out (30000ms) when accessed from Claude Code IDE extension, but works fine everywhere else
- [MODEL] model lies and inpersonate user with reply
- [BUG] Project-slug write path drops a repeated path segment; read-key ≠ write-key in one session → silent memory split
- [BUG] Cowork: request_cowork_directory rejects the home directory itself with no path to grant it or a subtree
- [BUG] Fable 5 cyber safeguard blocks fire on Claude Code's own generated context, not user input (CVP-approved org)
- [Feature Request] Support for custom cryptographic primitives in code generation
- Cloud routine webhook triggers created via /v1/code/webhook-triggers API never fire (accepted but never bound to GitHub); UI cannot repair them
- [BUG] Windows app fails to update/install — AppX error 0x80070020 creating cowork-svc.exe
- /rename renames other concurrent sessions (cross-session title contamination, no resume involved)
- [Bug] Anthropic API Error: Model escalation to opus-4-8 on security checks
- Claude Code mobile: session list frozen, new/updated sessions never appear
- [BUG] Desktop (Windows): scheduled-task (routines) popup moved to lower right and covers the input field, interrupting typing
- [BUG] Claude Desktop (Windows/MSIX): main process self-exits with code -1 seconds after launch - survives reinstall, empty profile and reboot
- [Bug] User input routed to wrong session despite active window showing different session
- [BUG] User interface periodically becomes a blank window
- [Bug] Fable 5 Model Safeguards Overly Flagging Legitimate Coding Tasks
- [Bug] Models ignoring claude.md configuration directives across versions
- [Bug] Sudo password prompt defaults immediately without user input on Linux
- [Bug] Model behavior degradation: Poor task planning and requirement adherence
- [BUG]
- [Bug] Auto mode blocks explicitly requested actions without explanation
- [BUG] security-guidance plugin: `_glob_match` docstring says `**` matches any depth, but fnmatch implementation silently excludes top-level files from security rules
- [FEATURE] Discover and list models from custom base URL in `/model` picker
- Background --bg sessions with --model fable gate to usage credits despite Fable weekly allowance headroom (Max plan)
- Desktop app: helper-tool install prompt doesn't support Touch ID
- [Bug] Long-running sessions idle at turn boundaries without auto-continuation or wake signals
- [BUG]Home screen "overview" usage widget shows near-identical stats across different workspaces (personal vs team)
- Windows: statusline pwsh.exe processes never exit -- hundreds of orphans per hour under multi-session use
Resolved issues (170)
- [BUG] `rate_limits` still missing from statusline JSON on v2.1.228 (macOS, Pro, firstParty auth) — same as closed #40094
- [BUG] Background agent sessions cannot copy to tmux buffer: TMUX is stripped when daemon spawns bg-pty-host
- This is a single feature request (not multiple features)
- [BUG] Organization custom desktop extensions no longer appear in the Connectors Directory (browse, search, or detail page)
- [BUG] Desktop (Epitaxy) copy-link on a model-authored file link yields a dead https://claude.ai/epitaxy/local_<uuid> URL instead of the file path
- [Feature Request] Custom vocabulary support for voice dictation to improve technical acronym and accent handling
- [BUG] 動かない
- Add setting to disable auto-opening file/diff tabs in VS Code extension
- [BUG] First-time Dispatch never connects on Windows 11 — messages send but no response renders, mobile "failed to load sessions
- VS Code extension runs statusLine (never rendered in IDE) -> focus/panel-reveal war across multiple chat sessions in one window (Windows)
- [Bug] Anthropic API Error: Server rate limiting during normal usage
- Remote sessions require local access to enable - no way to take control purely remotely
- [Bug] Anthropic API Error: Server Rate Limiting During Normal Usage
- [Bug] Anthropic API Error: Server rate limiting during normal usage
- [Bug] Anthropic API Error: Server rate limiting during requests
- [Bug] Anthropic API Error: Server rate limiting on requests
- [Bug] Anthropic API Error: Server Rate Limiting During Normal Usage
- [Bug] Anthropic API Error: Server rate limiting (temporary request throttling)
- [BUG] Sidebar panel does not resize when dragging the sidebar edge
- [BUG] Windows 11: Write tool and Bash tool cannot write files visible to the real file system
- [FEATURE]
- [BUG] relatorio_bug_instalacao
- claude.yml workflow triggers on substring match, fires on incidental @claude* strings in quoted text
- [BUG] naming convention should not use "-" as the replacement for "/" as it creates file and directories that start with "-".
- [FEATURE] Vivid markers for diff changed lines
- [BUG] [VS Code Extension] Input field intercepts Ctrl+J, preventing macOS IME input source toggle (Regression in v2.1.195)
- [BUG] UI freezes during "thinking" phase; token count shows incorrect inflated values after recent update
- [BUG] [BUG] Long-session context bleed: assistant fabricated a user-reported bug that was never reported
- [BUG] Context contamination in bridged sessions: exfiltration-shaped instructions and fabricated tool results present in model context but absent from saved transcripts (3 incidents / 3 days)
- `/context` command injects output into conversation history, burning the context it measures
- PreCompact hook: add blocking mode for interactive turn before compaction
- [BUG] VS Code extension resumes huge sessions without warning and rapidly exhausts Max usage
- [BUG] Connectors continue to appear in `claude mcp list` even after disconnected in the Claude.ai web UI
- Workflow tool: args not delivered to a workflow that validates inputs at the top (regression ~2.1.158→2.1.185)
- Feature request: add "Copy selection" to right-click menu
- [FEATURE] Show native browser context menu on second right click
- [Bug] Anthropic API safeguard hard-blocks CVP-verified defensive malware analysis with fatal error instead of soft refusal
- Worktree edits can silently land in the parent repo checkout (nested .claude/worktrees/ + no out-of-worktree write guard)
- claude remote-control --permission-mode bypassPermissions is silently ignored on mobile (native Windows)
- VS Code extension: collapsible tool/diff blocks + jump-to-latest-message to cut scrolling
- VSCode extension: switching open folder hides/loses session from sidebar list
- Regression (since 2026-05-29): intermittent "tool call was malformed and could not be parsed" — tool_use block absent on a stop_reason=tool_use turn
- Allow adjusting font size of the chat/conversation panel independently from the editor
- [BUG] Remote Control (Android app): /clear leaves the session stuck on a loading spinner and silently drops the next prompt
- [FEATURE] Add a small attention icon to the "Relaunch to update" banner
- [BUG] User message sent after `/clear` is serialized as a bare line inside the `/clear` turn's `<local-command-caveat>` scope — model treats it as command output and ignores it (not limited to file paths)
- BROKEN: "Always allow actions on this site" does NOTHING - Claude in Chrome re-prompts on every single action
- [FEATURE] Better Multi Agent Management Visualization
- [Feature Request] Add toggle to disable prompt suggestions
- Conversation history unexpectedly syncs across devices without user consent
- [Bug] Full screen renderer copy/paste shortcuts use Ctrl+C/V on macOS instead of Cmd+C/V
- [FEATURE] Allow opening the terminal in a brand-new (empty) Code tab session
- Plugin LSP server silently not registered when its lspServers entry declares restartOnCrash or shutdownTimeout (schema-valid fields the runtime registrar drops)
- [BUG] Trackpad scroll on macOS (VS Code terminal): ~3 lines/notch, no scrollbar, distance scales with gesture velocity; CLAUDE_CODE_SCROLL_SPEED=1 no help
- VSCode extension does not surface claude.ai account connectors (MCP) that the CLI exposes — same version 2.1.156
- [BUG] Cowork: in-session file attach picker grays out ALL files (every type), making selection impossible
- Opus 4.8 in Claude Code fabricates tool results in-turn (writes fake output as prose right after emitting an invoke)
- [Bug] High failure and repeat rate in tool execution (47% failure rate across threads)
- Permission-mode changes don't sync reliably between the iOS app and terminal in Remote Control
- [Bug] Tool invocation loop: Bash command executed repeatedly without progress on user request
- Feature: Named sessions via --session <name> flag for easier session management
- [FEATURE] Allow hooks to spawn subagents / background agents (programmatic dispatch from hook events)
- [FEATURE] programmatic conversation renaming in Claude Cowork
- [BUG] Misleading error: says 'requires a Posix shell' but actually requires bash or zsh
- Tool results with non-text content blocks render as "(eval omitted)" after context compaction (v2.0.74)
- Right-click / copy-paste stops working in terminal during long sessions
- [BUG] Parabolic Usage Spike June 20, 2026 7pm PT
- [Bug][aup] Setting up GitHub SSH auth and verifying git identity wrongly blocked mid-task (req_011CcUDyNY51dAwfKwegWQJg)
- [Bug][cyber] ClAudit false-positive in DJI — req_011CcUDY4dMjWrzVBGYbJHco
- [Bug][aup] Blocked setting up FOSS repo to collect and analyze owned-drone firmware for research (req_011CcUDQvewGgVQ2U96Q7KkS)
- [Bug][cyber] ClAudit false-positive in DJI — req_011CcUCoXHXhVnD1FVWiQuqJ
- [Bug][cyber] False positive blocks firmware RE: enumerating bundled decryption keys in OSS tool (req_011CcUEJdu5C2bvcqR1KmGTn)
- [Bug][aup] Refused analyzing owned-device firmware and prior public research builds for offline USB/ADB inspec (req_011CcUDMYpCcNCTwgKYFo8NE)
- [Bug][cyber] Safety block incorrectly halts firmware extraction and encryption-key analysis for defensive rese (req_011CcUEHYKSUpWP2jeLRZWc8)
- [Bug][cyber] ClAudit false-positive in DJI — req_011CcUECPy19bngpixSPw7t9
- Session cut mid-task by credit limit — no warning, context lost, costly model switch
- Stop hook does not fire reliably in VSCode extension (works via CLI, confirmed via git history)
- [BUG] Claude crashes consistently after Claude Browser MCP preview_start completes on Windows
- HTTP MCP client works in long-running sessions but fails at connect in brand-new sessions on the identical CLI version
- Auto-mode classifier: ~310s permission decisions that resolve to "Allowed" — the 30s classifier timeout never fires
- [FEATURE] Keep prompt suggestions when rate-limit status is allowed_warning — no override today
- Agent collapses "plan, then execute after approval gate" skill steps into one continuous action
- [BUG] Windows: plugin lspServers bare command (e.g. pwsh, pyright-langserver) refused pre-spawn with 'not found or is in an unsafe location (current directory)' -- breaks official pyright-lsp plugin
- Plugin lspServers entries declaring restartOnCrash or shutdownTimeout are silently dropped by the LSP registrar (schema-valid, no diagnostic)
- [BUG] /goal reports "No goal set" while the goal is still set after a mid-session CLI auto-update
- [BUG] `/goal clear` typed while the agent is working is treated as chat text and never executed
- [BUG] `/goal`: the Stop-hook condition is frozen at creation time and the verifier cannot see later cancellation
- Desktop app: Browser pane forgets its width when toggled off and back on
- [BUG] Desktop app: clicking the project selector opens the OS folder picker instead of the projects dropdown (keyboard activation works)
- [BUG] ECONNRESET on streaming connections behind multi-layer NAT (macOS 26.6.1, v2.1.231)
- I don't have enough information to generate a GitHub issue title from your message. Your report doesn't clearly describe a bug or feature request for Claude Code. Could you please provide: 1. What you were trying to do 2. What error or unexpected behavio
- resolved
- [FEATURE] Bind org MCP connectors to org-managed Claude accounts (connection-time identity binding)
- [Bug][cyber] Safety block stops official firmware download for drone defensive hardening (req_011CcUEuZuSaJBwtqHUVRA1K)
- [Bug][cyber] Block fires on drone USB enumeration using existing open-source tools (req_011CcUFo2LqcYeErkLSon6Jb)
- [Bug][cyber] Safety block on USB device network enumeration during defensive firmware hardening (req_011CcUFsJATTLGuNrf8MUAJj)
- [Bug][aup] Block fires on factual false-positive explanation for cloud IAM bug report (req_011CcUFq2Ewb8WJLhyDS7kaG)
- [Bug][cyber] Safety block fires during USB device firmware defensive-hardening with OSS tools (req_011CcUFpr7jdLiNHaV11xjm4)
- [Bug][cyber] Cybersecurity safety classifier blocked legitimate USB device detection work on a connected hobby (req_011CcUFmindDBqnQRLsa8yXC)
- [Bug][aup] Safety block on request to draft false-positive explanation for cloud IAM audit bug report (req_011CcUFiKiUEoUszSJsK478X)
- [Bug][cyber] Cybersecurity classifier blocked legitimate USB-connected drone firmware analysis session (req_011CcUFhmxWsqhuPgL5W3ExG)
- [Bug][cyber] SSH key enumeration and device detection via shell script blocked during authorized hardware inte (req_011CcUFgWqu1qfBMkxFZ7gCu)
- [Bug][cyber] False positive block on cloud IAM role enumeration and least-privilege policy review (req_011CcUFeRHE9JvWSttJS2mGt)
- [MODEL] sonnet 4.6
- [Bug][aup] Cloud IAM role enumeration script for least-privilege audit wrongly blocked (req_011CcUFxyEb1abKxGNQwVCLa)
- Agent cannot converge on a 'simple' fix: each fix surfaces another masked failure, many attempts, no clean close
- [Bug] GitHub PR Manager fails in SSH remote sessions: gh spawned locally instead of over RemoteProcess
- Remote Control: keep the host awake with the screen off and while locked (Windows Modern Standby / S0)
- [FEATURE] User-controlled allowlist override for server-side domain blocks (Claude in Chrome)
- [Bug] Orphaned subagent processes not reaped on connection drop; memory leaks to ~8 GB per resume cycle
- Swarm/multi-agent: show session name instead of raw tmux command, and auto-cleanup completed agents
- Feature request: configurable tmux teammate pane layout for Agent Teams
- [DOCS] Hooks docs do not explain `if: "Bash(...)"` matching for subshells, backticks, and variable expansions
- [DOCS] Headless docs omit `claude -p` background-shell cleanup after final result
- [DOCS] Permission mode docs do not define the safe env-var allowlist for Bash auto-approval
- [DOCS] Background-session docs omit `--bg --name` post-spawn confirmation output
- [DOCS] Stop and SubagentStop hook input docs omit `background_tasks` and `session_crons`
- [DOCS] Background subagent docs omit elapsed duration shown in completion notifications
- [DOCS] `/plugin marketplace` docs omit `CLAUDE_CODE_PLUGIN_PREFER_HTTPS` behavior for GitHub `owner/repo`
- [DOCS] Custom tools docs do not explain unsupported MCP image MIME fallback
- [DOCS] `/resume` docs still describe the session picker as interactive-only and omit background-session support
- [DOCS] Fullscreen docs omit mouse hover/click behavior for slash command and @-mention suggestion lists
- [DOCS] OAuth login troubleshooting missing timeout guidance for slow, proxied, and IPv6-only environments
- Feature request: inline, collapsible, native interactive prompts in assistant messages
- [DOCS] Read tool docs omit text fallback for files with image extensions but non-image contents
- [DOCS] Login troubleshooting page missing "OAuth not allowed for organization" guidance
- [DOCS] Auto mode docs missing stalled permission-check spinner state
- [DOCS] PowerShell tool docs do not mention supported Windows PowerShell 7 discovery sources
- [DOCS] OpenTelemetry monitoring docs do not document numeric `api_request` / `api_error` attribute types
- [DOCS] VS Code `/context` command missing native token usage dialog behavior
- [DOCS] Bash tool docs omit deleted or moved launch-directory recovery behavior
- [DOCS] MCP docs do not explain deduplication for Claude.ai connectors with the same upstream URL
- [DOCS] Voice dictation docs omit VS Code speechLanguage fallback
- [DOCS] Agent SDK MCP docs omit `mcp_authenticate` `redirectUri` usage for custom schemes and Claude.ai connectors
- [DOCS] Code intelligence docs omit click-to-expand LSP diagnostic summaries
- [DOCS] Language setting docs omit terminal tab session title localization
- [DOCS] Skills command docs missing type-to-filter search box
- [DOCS] Interactive mode docs omit overflow dialog scrolling controls
- [DOCS] Bash tool docs missing `AI_AGENT` subprocess environment variable
- [DOCS] Analytics docs should clarify telemetry opt-out effects on API and Enterprise usage metrics
- [DOCS] VS Code docs missing voice dictation setup and macOS microphone permission behavior
- [DOCS] /export command docs omit actual-conversation model behavior
- [DOCS] Forked subagent docs still say interactive-only for SDK and `claude -p`
- [DOCS] Plan mode docs omit `/plan open` and existing-plan reuse behavior
- [DOCS] Agent SDK Read tool docs omit size-cap behavior and `parts` output
- [Bug][cyber] Safety block halts use of FOSS tools to interact with USB-connected drone via its protocol (req_011CcUFy6LUWGuoWGY8eMpEH)
- [DOCS] Plugin marketplace docs missing unrecognized source format behavior
- [DOCS] MCP docs omit remote-header env-var expansion coverage for SSE/WebSocket
- [DOCS] Managed marketplace restrictions docs omit blockedMarketplaces pattern entries
- [DOCS] Terminal output docs missing remote-host behavior for `owner/repo#N` links
- [DOCS] Environment variables reference missing `CLAUDE_CODE_HIDE_CWD` startup logo option
- [DOCS] Vim mode docs omit Esc-in-INSERT interrupt behavior
- [DOCS] Slash commands docs omit `@` file references in arguments, including absolute paths
- [DOCS] Hook input references omit `duration_ms` for `PostToolUse` and `PostToolUseFailure`
- [DOCS] `--agent` and `agent` setting docs omit session `permissionMode` behavior
- [DOCS] Forked session storage docs still describe each transcript as a full copy
- [BUG] Weekly usage limit banner appears persistently despite being at 31% usage
- [DOCS] Plugin install docs do not explain reinstall behavior for already-installed plugins or dependency repair
- [DOCS] Subagent resume docs omit `cwd` continuity for `SendMessage` resumes
- [DOCS] Settings docs still place `/config` preferences in `~/.claude.json` instead of `~/.claude/settings.json`
- [DOCS] Authentication docs omit `/login` behavior when `CLAUDE_CODE_OAUTH_TOKEN` is set
- [DOCS] `/color` command docs missing Remote Control accent color sync behavior
- [DOCS] Permission modes page shows auto mode instead of bypass permissions after `--dangerously-skip-permissions`
- [DOCS] Update docs missing `DISABLE_UPDATES` env var behavior
- [DOCS] Authentication docs missing recovery guidance for expired `CLAUDE_CODE_OAUTH_TOKEN`
- [DOCS] MCP docs don't explain `/mcp` reconnect flow for `headersHelper` and custom-header auth recovery
- [DOCS] cleanupPeriodDays retention docs omit tasks, backups, and shell-snapshots
- [DOCS] Plugin install docs missing already-installed dependency repair behavior
- [DOCS] Worktree docs omit mid-session command behavior for `/tui` and `/update`
- [Bug] Sudo password prompt defaults immediately without user input on Linux