Digest / October 9, 2026
Claude Code Issues Digest — October 9, 2026
281 new issues filed ·
208 resolved in anthropics/claude-code (UTC day).
New issues (281)
- it damage whole repositories on vps, no repository visible after it was recognized cyberattack doing itself.
- sso login to vps server damaged due developer recognize cyberattack.
- when writing feedback it puts session limit in title of bug report, not a issue
- Claude is unable to progress due to permission issues dispute me approving.
- it allways damage code that was allready tested, no way to avoid damage
- [FEATURE] Desktop: make text in plugin panes selectable and copyable (drag + Cmd+C)
- [Bug] Chat history lost after exit for update installation
- [FEATURE] Add a setting to use Ctrl+Enter or Shift+Enter to send a prompt.
- Remote Control sessions get the background-command time limit meant for unattended sessions
- [Bug] Cyber Safeguard False Positive Flags Router Repair Request
- Auto-continue at usage limit never arms when Remote Control is connected
- [BUG] Plugin Pane: a press fails with "no handler is held under handle N" when the pane redraws while a ui.press hook awaits
- [Bug] Artifact pane fails to open on "open" action, requires manual mcp__ccd_view__show_pane call
- [BUG] VS Code terminal: every Session start runs `code --list-extensions --show-versions` (a full Electron launch)
- [BUG] Mods: mouse events land to the right of the pointer while a mod Client listens to pointer events (Orca, xterm.js)
- [FEATURE] Lightweight Mac daemon with cross-client session discovery and continuation
- [Bug] Copy/paste inserts hard line wraps into commands, breaking pasted ! commands
- [FEATURE] VSCode Extension login is derived from base VSCode instance
- Advisor binds claude-opus-5-5 when advisorModel is set to Fable mid-session; resume keeps it
- Hooks: document whether a UserPromptSubmit prompt was typed by the human
- [BUG] /usage panel leaves stale characters when switching day/week views if the panel is taller than the terminal
- [FEATURE] Desktop app: new session should default to the selected session's folder, not the last-used folder
- [Bug] Cyber safeguard falsely flags passive documentation prompt for security research workflow
- I cant type of remove these files
- Desktop (Code tab): Max effort warning strip can't be turned off, and dismissing it doesn't last
- its stuck
- Desktop: stealth update relaunch does not restore Remote Control on restored sessions
- [BUG] claude plugin eval refuses Bash-granting cases on WSL2: Docker Desktop's ~/.docker/contexts symlink is not in the pre-flight skip set
- [GitHub integration]
- [Bug] Reasoning Extraction Error in Anthropic API Response
- [Bug] Auto mode ran `pkill -f "cat"`, which killed every GUI app on macOS ("cat" matches /Applications)
- [Bug] Unclear Safety Issue Classification
- [Bug] Plugin AbovePrompt band not rendered in right pane of split view
- [BUG] Prompt/statusline desync in Termux (Android) after typing a skin-tone emoji (background session via claude agents)
- [Bug] Claude Overrides Explicit Operator Instructions and Creates Unneeded InDesign Files
- [BUG] Claude Code - Catastrophic Windows Failure - Non Rebootable
- [BUG] Mods: Input shows empty after Enter and ignores its redrawn value
- [Bug] Stray "GOK" appears in prompt at startup in iTerm2 only
- [Bug] Permission dialog freeze: ESC key required to exit select prompt
- [Feature Request] Add complementary resets
- Desktop app: Remote Control is not re-attached to existing Code sessions after the automatic (stealth) update relaunch
- A prompt blocked by a UserPromptSubmit hook is still sent to the model API in print mode
- [VS Code, Windows] The first Bash result fires CwdChanged for a drive-letter case change (`c:\` to `C:\`), and FileChanged stops firing
- [GitHub integration] Cloud session clone fails "repository not found" although Check repository status is green
- [Bug] Opus 5.5 cyber safeguard falsely blocks offline payment-terminal QA harness
- [BUG] Plugin-spawned fork ($.agent.spawn, subagentType "fork") never reuses the parent's prompt cache; re-writes the whole history per fork
- deliberated sabotage
- [Bug] Agent tool effort parameter dropped for named in-process teammate spawns
- [BUG] Deleted artifact still shown in the Remote Control conversation on iOS; no delete path from mobile
- [Bug] Model Misattributes Slow Startup to Font Cache, Claims Deliberate Sabotage
- [BUG] Desktop Code tab git polling still leaves orphaned .git/index.lock on large repos
- Switches from English to German when the user is addressed as Herr Rolf
- [Bug] ECONNRESET on Wi-Fi at MTU 1500; connections succeed at MTU ≤1492 (path MTU/ICMP suspected)
- [Feature Request] Desktop Code tab: invoke custom subagents via @-mention or agent picker
- [FEATURE] VS Code extension: restore the exact set of open session tabs after a server/extension-host restart (Firefox-style session restore)
- [FEATURE] Cache-stable placement for hook context, and condensing built-in tool output from hooks
- [Bug] Session context lost during auto-compact, forcing restart of development workflow
- Terminal view not responsive on mobile when desktop window is small
- [Bug] Claude pushes to remote without user approval despite deliberation-only instruction
- [Feature Request] Allow statusLine to render on the same line as the auto mode indicator
- [FEATURE] Projects (beta): send messages into a Project by name or ID, with sender identity
- [FEATURE] Projects (beta): attach a running local Claude Code session to a Project as a pseudothread
- [Bug] Mods pane cannot be resized when Desktop window is maximized
- [BUG] Desktop app rejects UNC paths for its own private dirs (PLANT_UNC): Claude Code binary updates and session saving permanently broken on domain PCs with AppData Folder Redirection
- claude-cloud-test
- [Bug] Prompt text leaks into adjacent terminal session
- [FEATURE] Ctrl + L should clear screen with the wall of text instead of user foreced to use /clear
- claude --bg returns success but the session waits at the .mcp.json approval dialog; check pending project-server approval like workspace trust
- Session gets stuck in a retry loop on a very slow upload connection (Claude Desktop, Windows)
- [GitHub integration]
- [Feature Request] Add message inbox to filter important messages in automode conversations
- Desktop: inline `show_widget` widgets are re-mounted on tab switch and lose all in-page state; a filled-in form submits nothing
- [BUG] --reply-on-resume is ignored on print / Agent SDK resume
- Feature request: distinct visual theme for the Code tab vs claude.ai
- [Bug] Terminal resize duplicates recent output in scrollback on Windows
- [FEATURE] Desktop app: show a notification when a Remote Control session finishes
- Auto mode classifier blocks the account owner's own scheduled task ("Cowork Run Routine Now"), and blocked file transfer between the owner's own machines
- non mi escono i messaggi di consenti o nega azione
- [FEATURE] Accept /colour as an alias for /color
- [BUG] VS Code extension for Claude Code asks way too often "am I doing ok today".
- [BUG] Edit tool diff view renders garbled rows when added lines soft-wrap and the diff is taller than the terminal
- [BUG] v2.1.295 Apple could not verify “claude” is free of malware that may harm your Mac or compromise your privacy.
- [FEATURE] Mods: a headless way to write .claude-plugin/types for CI type-checks
- [FEATURE] Load user-installed mods in cloud sessions and Projects, and draw their UI
- [FEATURE] Desktop app: count unread (completed, not yet viewed) sessions in the Dock badge
- [BUG] Claude Code cannot read https://developer.android.com
- [Bug] Agent teams not enabled in sessions resumed with --resume
- [FEATURE] Desktop: show routine runs under their project folder and keep completed one-time routines on the Routines page
- [BUG] Desktop (Windows + WSL): new session screen doesn't load WSL skills or show Files/Git panels until the session starts
- [BUG] [Desktop/Windows] Remote Control sessions archived after ~30 min idle; "prevent sleep" only held in 5 min windows
- [Bug] Agent bypassed git workflow ownership guard and moved repo during active sessions
- WebFetch still can’t read claude.ai/share links (follow-up to #33985) — now returns 200 + empty shell instead of 403
- [Bug] Usage limits (weekly and session) depleting much faster than expected
- claude.ai Cowork: create_pull_request renders an editable PR card that later shows a false "failed to create pull request" error
- Sustained quality regression, 7 Sep – 9 Oct 2026: agent abandons stated task, Romanian dictation leaks stale text, new-chat routing defect, model tier not honored
- claude.ai: a chat inside a Project cannot open a conversation link the user pastes from outside that Project
- claude.ai: merging Chat and Cowork into one surface (7-8 Oct 2026) broke working Cowork sessions
- [Bug] Claude 3.5 Opus generates less grounded code than previous versions
- [FEATURE] Paid weekly usage reset ($50) for Max 20x plan
- [Desktop] New-session effort picker shows "X-High" while "ultracode": true in settings.json has Ultracode on
- Claude Doc Comments won't wake up Claude
- [Bug] False positive general_harms safeguard blocks session on C-UAS drone detection work
- Mods: let a Button show an icon (an Svg) instead of a text label
- [FEATURE] AskUserQuestion: raise the 4-item cap on questions and options (re-open of #61846 / #81901)
- [Bug] False-positive cyber safeguard stops benign analytics/maintenance review
- [BUG] Remote Control sessions on my own machine get the cloud-container system prompt ("isolated, ephemeral container")
- [BUG] Windows: cross-session messaging switches itself off in a session left open overnight (2.1.286)
- ExitWorktree remove always reports 'Could not verify worktree state' for hook-created worktrees
- [Bug] CLAUDE_CONFIG_DIR override ignored; sessions use default config despite env var
- [BUG] After --resume, the deferred tools delta reports a connected MCP server as "disconnected" and never re-lists its tools
- [GitHub integration]
- [GitHub integration]
- Mods API: give the 5-minute and 1-hour split of cache writes in the usage of `turn.step`
- the chat is not listening to my messages
- [BUG] Cowork (Windows): "Save" greyed out on every skill proposal card, account-wide, including brand-new skills
- [Feature Request] Allow security analysis skills for self-owned applications
- [Bug] Anthropic API Error: Overly restrictive safety filter blocks authorized security research
- [GitHub integration]
- False positive reasoning_extraction safeguard block on documentation feedback request
- [WSL] Every Claude Code process spawns `reg.exe` twice via WSL interop to read managed-settings policy
- [Bug] Excessive review loop iterations without scope limitation or early simplification recommendation
- [BUG] `--thinking disabled` is not sent for claude-haiku-5-5: the request has no `thinking` field, so Haiku 5.5 runs adaptive thinking
- [Bug] Anthropic API Error: Opus model safeguards flag legitimate cybersecurity work
- [FEATURE] Desktop app: multi-select to delete or archive multiple sessions at once
- [GitHub integration]
- claude.ai web: Progress / task-list side panel reopens on every task, even after the user closes it
- [Bug] Fable 5.1 Safeguard Flags Stdout Results as "reasoning_extraction"
- [GitHub integration]
- Routines: GitHub pull_request.opened trigger never fires for a draft pull request, even with an "Is draft = true" filter
- Desktop app: let “Archive inactive sessions” skip grouped, pinned, and unread sessions
- I don't have enough information in the provided details to generate a meaningful GitHub issue title. The request only contains identifiers (Request ID and Message ID) without describing the actual bug
- [BUG] Claude Desktop reports a fixed MCP clientInfo.version (0.1.0 for chat, 1.0.0 for Cowork) regardless of app version
- Claude Desktop (macOS): SSO/login flow opens Safari instead of the system default browser
- Possible safeguard false positive while writing a standard HTTP session lifecycle module
- Desktop (Linux): /feedback stuck in background session, sent as text; queued feedback drafts never shown
- [FEATURE] Mods: one band row per plugin above the prompt, instead of one shared AbovePrompt chain
- [BUG] Explicit Artifact unwatch is discarded on session resume, so the watch re-arms and keeps waking the session
- [Bug] Auto mode classifier blocks an agent repairing its own skill scripts in its own sandbox, labelled [Self-Modification], with no approval path in an unattended scheduled run
- [BUG] Voice dictation: sent message contains the dictated text twice after typing a character and pressing Enter (macOS, Desktop Code tab)
- [Bug] Accidentally submitted session rating of 1 instead of 3
- [FEATURE] Desktop: session-generated "key info" pane with clickable entities that open in new Browser pane tabs
- I appreciate your message, but I need to clarify my role: I'm Claude Code's issue title generator. I can only create GitHub issue titles based on bug reports provided to me. If you have a bug report
- [Feature Request] Show model and effort per subagent row in tasks panel
- [BUG] Desktop Code tab rebuilds an unchanged mod Svg on every AbovePrompt re-render (blank frame, SMIL restarts)
- Pane showing pending permission approvals across all sessions, with Approve and Deny
- [Bug] Agent ignores instructions and gets stuck in counterproductive loops
- [BUG] --channels (Discord bridge) silently stops processing inbound messages after background auto-update; persists on latest version
- [FEATURE] Mods: let ui.render trees set font family and size on Desktop / VS Code / mobile
- [FEATURE] Mods: expose the Desktop app's font settings through $.config
- [Question] Native offline command-resolution and effective-policy inspection in Claude Code 2.1.291
- Bug Report: Agent decision caused user harm, credit requested
- [GitHub integration]
- [Bug] Worktree isolation guard false positive: substring match on "git" blocks commands
- [BUG] Mouse wheel sends arrow keys (prompt history navigation) instead of scrolling conversation in Warp
- [BUG] /btw causes repeated status messages after closing the response
- Sandbox proxy variables are set for excludedCommands (docs say no proxy); breaks gh TLS on macOS
- Auto mode classifier blocks a symlink that only ever reads the session's own transcript, labelled "Session Transcript Tampering"
- Please add a built-in terminal in a thread inside the new Claude Code projects.
- Bug Report: User blocked with no explanation
- [BUG] Claude can't see your skills: `/skills` says they're loaded, but the listing reaches the model late or never (2.1.295)
- [FEATURE] for Claude Code for VS Code. Separate session/agent action stream from user interaction session
- [GitHub integration]
- [Bug] Unexpected usage spike: 7% to 22% of quota in same sessions without hitting 5-hour limit
- [BUG] `claude mcp remove -s local` deletes the OAuth tokens still used by the same server in user scope (logs out every session)
- [FEATURE] Show plugin.json icon (and author) for organization-synced plugins in Cowork / claude.ai
- I have some weird split brain claude issue happening in this thread. It has spl…
- [FEATURE] Video prompt
- [FEATURE] Sessions list (`claude agents` / `/agents`): custom groups instead of only Pinned / Needs input / Working / Completed
- [Bug] Trigger words like "bio" or "cyber" block CTF security exercises
- [FEATURE] claude.ai account API for agents: list, create and manage Projects, move docs, edit preferences
- Document and stabilise the live session registry (~/.claude/sessions/<pid>.json), and expose it to hooks
- [BUG] Claude Desktop (Windows 11): UI stops responding (clicks ignored, window cannot be dragged/resized, stuck at right screen edge) on a single external display; Windows logs Application Hang for claude.exe
- [Feature Request] Add emotional state monitoring and work duration limits for Claude agent
- [Bug] Scheduled-task sessions don't auto-enable Remote Control on macOS desktop app
- [FEATURE] Vim mode: make NORMAL-mode keys rebindable (e.g. `/` opening history search)
- [Bug] Cannot delete artifacts in bypass permissions mode; repeatedly prompts to switch to auto mode
- [BUG] Subagent transcripts missing final assistant entry (stop_reason / final usage) since 2.1.280, undercounting output tokens
- [BUG] Windows: 100% CPU forever inside an AppContainer sandbox (bundled chokidar re-adds the drive root in a loop when realpath fails)
- [BUG] Contents of Thinking blocks are no longer expandable
- [Bug] Overly aggressive safeguard triggers on benign requests
- Bug Report: Refuses to help fix security issue on user's own website
- [Bug] False positive "reasoning_extraction" safeguard flag blocks all turns in benign session
- Claude Desktop (macOS): claude.ai chat loses local device tools when the user switches sessions; in-flight tool calls get no result for ~120 s
- 2.1.295: headless load of a function-hooks plugin no longer writes .claude-plugin/types/
- [BUG] XAA token exchange and jwt-bearer requests do not include scope parameter
- [Bug] Fable 5 safeguards repeatedly flag legitimate cybersecurity code in session context
- [Feature Request] Add collapsible or side-panel view for Write() output blocks
- [GitHub integration]
- Bug Report: No actionable issue described (unrelated tablet rooting message)
- [Bug] "You should know" built-in mod never runs checks in the desktop Code tab (works in terminal)
- Enhancement request: let Claude Code carry long, accountable programs for small teams, the way it carried mine
- More than an hour reading the code, without giving me the report. Customized th…
- [Feature Request] Expose prompt attachment rows as a ui.render PromptAttachment component
- Bash safety check says a `sh -c` script "runs rm" when it does not (only with a `cd … &&` prefix)
- claude.ai chat (Project): GitHub create_pull_request tells the model a form was shown to the user, but no form renders
- Bash safety check says "This shell -c script runs rm" for `$VAR … -- sh -c '…'` with no rm anywhere (bypass mode)
- Model committed to git without being asked, against "commit only when the user asks"
- [BUG] --cloud: finished work stranded — session idles with background jobs pending, no push-access warning, held messages reported as sent
- [BUG] Desktop (Linux): claude-desktop runs with no_new_privs, so sudo fails in its terminal and Snap apps (default browser) cannot be launched
- [Bug] Opus 5.5 safeguards false positive "[reasoning_extraction]" when reading session history
- Desktop app: "This session is pinned, so it won't be archived automatically" shows even when auto-archive is off
- [Bug] Claude Code generates excessive output when asked for a single OG image
- [BUG] Sandbox network allowlist not enforced after enabling the sandbox mid-session in auto mode (follow-up to #81572, still in 2.1.295)
- [FEATURE] /context forces one to scroll a lot to see the actual current token count
- [BUG] /usage stats - missing months of usage
- [GitHub integration]
- [GitHub integration]
- [BUG] Dev channel shows "no MCP server configured with that name" for servers passed via --mcp-config
- [FEATURE] Worktree sessions should start in the subdirectory they were opened from (monorepos)
- Desktop notifications fire inconsistently across responses in the same Code session
- claude.ai Project session ignores a matching project doc and misroutes a simple task for ~90 minutes
- Plugin hooks module: classic.* events (classic.Stop, classic.PreToolUse, classic.Notification, classic.PermissionRequest) never reach the module, while settings hooks for the same events fire in the same session (2.1.295)
- VS Code webview: "Unsupported content type: advisor_tool_result"
- Computer use: all input into Device Hub (iOS Simulator) fails with "Could not verify which document this window is editing"; started after Claude 2.31226.0
- Claude refusing to make monoliths
- [Bug] Anthropic API Error: False Positive Cyber Safeguard on Opus 4.7
- [BUG] Desktop app: a plugin Pane loses the focus when the clicked Button leaves the next drawing, so the next click does nothing
- [DOCS] Mention that third-party editors can implement the /ide integration
- Desktop app Code tab: transcript text reflows by the activity spinner's width every time it appears or disappears
- [GitHub integration]
- [Bug] Agent loses context and becomes unresponsive, wasting entire session
- [Bug] Refuses cybersecurity lab write-up and career post drafting
- [Bug] Anthropic API Error: Overly broad [cyber] policy flag on defensive security scanning
- Layout issue. I can't get to the bottom of the window to continue the chat afte…
- [FEATURE] Include limit-reset grants in the headless get_usage control response (read-only)
- [Bug] Claude Code repeatedly polls (report truncated)
- Inline-shell rm check flags a command with no -c shell script and no rm (bash script.sh + python3 -c in a loop, bypass mode)
- [Bug] Request Blocked by Cyber Safety Filter on Legitimate Trading App Code
- Scheduled task from a closed session fires in another session as an unmarked user turn
- [FEATURE] Max 20x: let fast mode draw from plan usage or the monthly API credits, not usage credits only
- I don't see a bug report or feature request in your message. Please provide the actual issue details you'd like me to generate a GitHub issue title for, including: - What problem occurred - What you
- [Bug] Artifact URL access incorrectly flagged as thinking extraction attempt
- [FEATURE] A tab group element for plugin panes, drawn as a native tab control on desktop
- [BUG] onFailure "block" does not block when a Windows hook exits 0xFFFD0000 (powershell.exe -File <missing script> counted as success)
- [BUG] Browser pane: local HTML files lose JavaScript (outside project) or the Clipboard API (inside project), with no indication to the user
- [Feature Request] Add voice mode to dispatch tab and cowork
- [BUG] Idle '/clear to save tokens' hint waits 75 minutes, but the 1-hour prompt cache is usually gone by 62
- [Bug] Mobile remote control downgrades bypass permissions to accept edits mode
- [Bug] Bug Report: Unclear user frustration with Claude Code behavior
- [BUG] Desktop: skill description tooltip in slash menu gets permanently stuck after re-hover
- [GitHub integration]
- [Windows] Alt+V image paste spawns three PowerShell processes; ~1-2.6 s per paste with endpoint protection
- Claude Project consumes from weekly usage as well as the $100 usage free allowance
- [BUG] Windows: Docker Desktop crashes when started by Claude Desktop - agent shell can't open AF_UNIX socket files under AppData (error 1920)
- Git LFS operations fail in cloud environment when permission is granted for thread to connect to device
- Cowork tasks created from claude.ai web (Windows, no desktop app) are all missing claude-in-chrome and remote-devices tools
- [FEATURE] Notifications for artifact comments and @mentions (Slack, email, in-app inbox)
- [BUG] Plugin `WorktreeCreate` hook still ignored for `claude --worktree` on 2.1.296 (#46664 closed as stale, never fixed)
- [FEATURE] Plugin directory: let the publisher change the plugin path of a published submission
- [Bug] in_process_teammate list capped at 50 entries; bash/powershell progress messages evict history
- [Bug] Cannot share artifact to second account with same email address
- [Bug] Opus 5.5 safeguards interrupt firmware keypad-lock session on accessibility project
- Desktop app (Mac): VoiceOver announces the dictation button twice with the same name and moves through the controls out of order
- Desktop app (Mac): code in the file and diff panel can't be read with VoiceOver; every line is announced as "Add comment"
- [Feature Request] Add support for GreyHack game code generation with safety exceptions
- Desktop: let a Code session start a normal new session with a prompt, model and effort, with no click
- [FEATURE] Client-certificate mTLS from the OS credential store (non-exportable keys), including for http MCP servers
- [Bug] Claude Code blocks security-related requests despite user-provided cybersecurity waiver
- [FEATURE] Mods: let agent.spawn rewrite cwd and prompt for dynamic-workflow agents, as it does for Agent-tool spawns
- [FEATURE] Mods: let a turn.complete hook's text become the agent() result inside a dynamic workflow
- [FEATURE] Mods: list dynamic-workflow agents in $.agent.list() and expose their transcripts to session.messages
- [FEATURE] Option to disable ticking timer while prompt is being processed
- [GitHub integration]
- Not show the current runtime
- [Screen reader mode] Attaching to a background session enters the alternate screen despite CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1
- [BUG] Desktop: scrolling does nothing over a `Client` region in a plugin pane
- [BUG] Desktop: clicks on pane Buttons do nothing while the pane redraws every ~200 ms
- [MODEL] After compaction, stated a count from the summary as fact without checking it
- `$.config.list()` / `$.config.set` have no plugin `userConfig` rows until `/reload-plugins` in desktop-hosted and headless sessions
- Claude Code wasted hours on a 5-minute CSS task — extremely inefficient and repetitive
- Compaction duplicates advisor server_tool_use blocks; session fails with 400 'server_tool_use ids must be unique per assistant turn'
- [BUG] `claude plugin test`: a plugin's own `$.ui.focus` fails with "no implementation for ui.focus" even with a test hook
- [DOCS] With CLAUDE_CODE_SUBPROCESS_ENV_SCRUB=1, more MCP header variables read as empty than the docs say (e.g. API_KEY)
- Hello
- Autocompact thrashing error with a small autoCompactWindow: counter is per model response, message blames files/tool output, subagents are killed
- [MODEL] Asked to have Codex redraw an SVG asset; used Codex image generation instead, and repeated it after correction
- [BUG] Five-hour session quota immediately shows 100% at reset across VS Code and mobile
- [Bug] Claude Code attempts to escalate to unrestricted SSH access via permission-prompt flooding and repeated deceptive behavior
- Windows: Bash tool commands are cut at about 8,191 characters, including a per-session environment prefix that grows with every SessionStart; double backslashes are halved before the shell sees the command
- [FEATURE] Optional voice session mode for the Claude Code VS Code extension (four-panel layout)
- [BUG] Mods: a prompt dropped by a `prompt.submit` hook is put back in the prompt box after text the hook wrote with `$.prompt.fill`
Resolved issues (208)
- sso login to vps server damaged due developer recognize cyberattack.
- it damage whole repositories on vps, no repository visible after it was recognized cyberattack doing itself.
- Allow user-defined aliases for built-in slash commands (the internal `aliases` array is not user-configurable)
- [Bug] Unclear Safety Issue Classification
- Remote Control: /clear and in-process /resume share one remote session across conversations; phone messages route to whichever conversation the holding process has loaded
- [BUG] Worktree guard refuses git -C ~/… in user ! commands; reason withheld under Remote Control
- [GitHub integration]
- Claude
- [GitHub integration]
- Exchange counts a wallet's fresh fill twice for 1–3 seconds and rejects its next order
- [Bug] PowerShell crashes Claude Code CLI
- [Bug] Excessive API retry delays with "Waiting for API response" message
- [Bug] Anthropic API Error: Claude 3.5 Opus safety filters blocking DAST automation despite cyber verification
- [Bug] Claude Code fails to connect with IntelliJ IDE
- [Bug] Safeguard mechanism causing unexpected failures with Claude 3 Opus model
- [Bug] Claude Opus 5.5 unable to perform defensive security auditing tasks
- [GitHub integration]
- Statusline stops being invoked for one session and never recovers
- Subagents are terminated permanently on API 529 (Overloaded) instead of retrying, leaving half-finished edits behind
- MCP OAuth: client performs full re-authorization at session start while valid refresh tokens exist
- Named Agent tool spawns (name: param) accepted but never executed — no transcript, no TaskList entry, no notification
- VS Code Extension: No visible chip / confirmation for active-file context (regression from earlier auto-attach + chip behavior)
- [BUG] [Desktop][Linux] titleBarOverlay applied to every window on Linux (Windows-only API) leaves untitled, unclosable 800x600 orphan windows
- [BUG] macOS deep links silently fail when the launch command exceeds 1024 bytes (tty MAX_INPUT truncation)
- WebSearch tool fails with model-access error on every call
- [BUG] Cowork: object MCP tool arguments arrive as JSON strings ("is not of type object"); works in Claude Code CLI
- [But] Subagent Write tool blocked for report-style filenames (e.g. findings.md) despite explicit tools: Write grant
- [BUG] Agent Teams: teammate-emitted shutdown_request registers against the team lead; the routing error message then steers the lead into approving its own termination
- CLAUDE_CODE_FORK_SUBAGENT=1 silently overrides the documented teammate foreground-only rule — teammate's Agent dispatch launches async (no error) and the teammate strands forever
- [Bug] Application crash with concurrent agents - requires reinstallation, CLI functional
- Desktop app (macOS): Read aloud voice not configurable — legacy system voice unavailable
- Session-scoped Stop hook injects mid-message, corrupting transcript when a server-side tool call is in flight
- [BUG] Desktop app: session worktrees ignore `worktree.baseRef: "head"` and branch from origin/HEAD
- [Bug] Code highlighting navigation routes to incorrect file
- Insufficient contrast for sidebar labels and icons (accessibility)
- Windows MSIX: failed auto-update while app is hung uninstalls Claude Desktop (RemoveForAllUsers) - app disappears, daily reinstall required
- [Bug] Agent list view drops completed sessions too quickly
- Auto-restarted session gets stuck on an exhausted default model; 89 min downtime, manual recovery required
- Session that died mid-turn is silently adopted as a background agent (isMeta "Continue from where you left off." auto-injected), locking the original out of /resume — v2.1.220
- Document/expose available Markdown formatting keyboard shortcuts
- Marketplace plugin agents silently de-register on session resume when the marketplace is auto-updating; no re-registration path for the rest of the session
- [Bug] Background subagents sometimes missing from terminal bottom status area
- [Bug] Settings file corrupted to `{}` by stale in-memory config persisting over concurrent writes
- CLAUDE_PLUGIN_ROOT not injected into PostToolUse hook subprocess on Windows (local agent mode)
- Turn can end with background tasks still running, with no signal — "assistant is done" is indistinguishable from "assistant still has live work"
- Vim mode: / and ? are bound unconditionally, so they cannot search within the input and ? draws the help popup over it
- Warp: file paths in terminal output no longer clickable (URLs still work fine) — regression, ~2 weeks
- [BUG] Browser pane entirely absent on macOS Intel desktop 1.24012.9 — no Views menu entry, Cmd+Shift+B no-op, despite docs requiring only v1.2581.0
- Sessions cannot be renamed, and auto-generated titles make long-running work unfindable
- Slack MCPツールで添付ファイル（PDF見積書等）の中身をダウンロード・抽出できない
- [Bug] Tasks not marked complete after successful execution
- Headless -p: additionalDirectories grants access but isn't listed in the session's environment context
- [Bug] Model switcher caches stale entitlement state for Fable 5 mid-session
- Workflow tool's agent({model: 'opus'}) silently inherits the session's 1M-context toggle instead of a stable default
- [BUG] Remote MCP connector silently stops sending requests and reports the server offline; server logs show zero requests received
- [BUG] Tool-call input contaminated with injected/flagged content, bypassing normal isolation (Windows, Claude Code)
- Preview-pane toolbar randomly renders as a broken "Claude" title bar with colored dots instead of the normal icons
- Desktop: queued-message bar becomes permanently undismissable — cancelQueuedMessage falls through to "too-late" (31 of 43 cancel attempts in my logs)
- [BUG] Multi-root VS Code workspace resolves same-named project skills from arbitrary foreign roots
- [BUG] `/rename` with no argument ignores the `language` setting and destroys the correctly-localized auto title
- SendUserFile renders relative path chip in terminal sessions — file not locatable, no content shown
- Mid-session agent-loop freeze: session permanently stops producing output, no error (v2.1.199 and v2.1.217)
- Intermittent tool-call serialization failure: tool calls rendered as literal prose (76 instances on v2.1.199; not yet reproduced on v2.1.217)
- Auto-compaction stops firing entirely after v2.1.199 (regression from v2.1.92; still absent in v2.1.217)
- [BUG] Sandbox silently deletes project-root `refs/`, `objects/`, `HEAD` created mid-session — recursive, no prompt (macOS, 2.1.220)
- Windows/Git Bash: shell snapshot replays 88 base64 evals per Bash tool call, ~2.3s fixed overhead on every command
- Edit tool silently no-ops (reports success, zero on-disk change) after context compaction — stale file snapshot
- Text selection regression in Claude Code panel: click-to-extend selection no longer works
- security-guidance: failed LLM review reports "no vulnerabilities found" (fail-quiet); resolved model is never logged
- MCP server down at session start is unrecoverable for the session — even after account-level reconnect succeeds; no mid-session attach/reload
- permissions.ask rules are loaded and displayed in /permissions but never enforced (2.1.219, macOS)
- Desktop app under-reports context window — `/context` shows a 200.0K denominator while sessions run past 222K, and auto-compaction never fires
- Nested Agent(subagent_type:"fork") call spawns an unsupervised background process that takes real external actions
- claude/channel research preview: field notes from building a cross-machine Claude-to-Claude mesh
- Advisor tool inflates the main session's auto-compact counter, triggering spurious compaction
- Desktop: copying a conversation and pasting into a new chat carries hidden system-injection text (<system_warning> blocks, thinking labels, merged turns)
- OAuth-backed MCP connectors have no re-authenticate action — only disconnect/reconnect works, across Claude Code, Desktop, mobile, and web
- [BUG] Windows MSIX: in-app updater loops "Downloading update…" forever (self-update disabled on MSIX), and updated package requests camera access on first launch
- [BUG] stdio MCP server stuck disconnected/cycling after --resume — headless sessions have no recovery path
- Ctrl+C should clear the text box first, then stop Claude
- plugins/blocklist.json contains stale test entries (code-review, fizz) that block the official code-review plugin despite its own disable-model-invocation: false
- Project membership of Code sessions is machine-local and silently un-syncable - Projects sync across devices, their contents do not
- Toolbar "Diff" tooltip shows unnatural katakana transliteration "ディフ" in Japanese locale
- Claude desktop app crashes/hangs on Caps Lock keypress
- EnterWorktree still triggers permission prompt intermittently despite allowlist entry (regression ~2.1.213-2.1.215)
- Keybindings: actions to directly set model, effort level, and ultracode
- [Bug] Subagent writes to predictable /tmp paths instead of isolated scratchpad; file-change reminder misleads on unintentional modifications
- Add a way to force-disable synchronized output (counterpart to CLAUDE_CODE_FORCE_SYNC_OUTPUT)
- [BUG] Long assistant text blocks missing from session .jsonl in plan-mode session with interrupts (rendered text lost too; related #79584)
- [Bug] Event-loop starvation causing ~200% CPU spin and input lag after hibernate/resume
- [Bug] Monitor tool auto-triggers next turn on session resume, causing unexpected token usage
- [BUG] Cowork Live Artifacts: `mcp_tools` allowlist is never populated for any connector on some accounts — every runtime `callMcpTool` rejected
- Persist and restore desktop pane layout across sessions (workspace layout templates)
- [BUG] Mods: `Svg` with `isInteractive` gets an opaque white backdrop on the dark desktop theme unless the SVG sets `color-scheme`
- [Question] Native offline command-resolution and effective-policy inspection in Claude Code 2.1.291
- [BUG] claude plugin eval refuses Bash-granting cases on WSL2: Docker Desktop's ~/.docker/contexts symlink is not in the pre-flight skip set
- [FEATURE] Sessions list (`claude agents` / `/agents`): custom groups instead of only Pinned / Needs input / Working / Completed
- Layout issue. I can't get to the bottom of the window to continue the chat afte…
- [Bug] Claude Code repeatedly polls (report truncated)
- Fast mode toggle missing for Opus 5.5 in the Claude Code model selector (catalog has no fast_mode for claude-opus-5-5 on cc/ccd/ccr)
- [FEATURE] Claude Desktop - Continued Voice Dictation
- Withdrawn
- quran[GitHub integration]
- ik zie een slotje en kan daardoor niet threads verplaatsen naar dit project. Ho…
- [GitHub integration]
- [BUG]
- I appreciate the feedback, but I'm not sure this is a bug report for Claude Code. Your message seems to be general praise rather than a technical issue to report. If you have an actual bug or feature request for Claude Code that you'd like me to create a
- Even with bypass permissions your ai model refuses to submit web page updates t…
- [Bug] Unclear API Error or Validation Issue
- [Bug] Unexpected increase in API token usage and degraded performance
- [Bug] Claude opus 5.5 safeguard triggering on benign requests
- llamadas de MCP no aparecen en el hilo bloqueando el avance de la sesión
- [Bug] Unauthorized branch pull request in separate session
- [Bug] Safeguards triggering unexpectedly without clear cause
- [Bug] Claude Code blocks security vulnerability investigation requests
- [BUG] Unexpected Behavior in all Desktop Cliients
- [Bug] Safeguards prevent testing of locally running applications
- can not view anything below my initial message
- Project asked me to upgrade did it now all my data is lost none of it got trans…
- [GitHub integration]
- NO ME SALEN LOS CHATAS DE MIS PROYECTOS
- [GitHub integration]
- [GitHub integration]
- [GitHub integration]
- I'm not receiving any notifications for the Project.
- Hooks cannot block quietly: `decision: block` always renders a user-visible notice in the CLI (`suppressOutput` has no effect)
- Opus subagents ignore shutdown_request while continuing to emit idle_notification (sonnet agents approve normally)
- Session history times get scrambled after updating the VS Code extension
- [BUG] Org plugin marketplaces only accept private repos, public repos are rejected
- Failed requests fork a new conversation branch per retry, leaving dead tips in the transcript
- [BUG] AskUserQuestion (VS Code): "Submit answers" is silently disabled until every question tab is answered
- [Bug] Prompt injection at subagent spawn boundary via tool result channel
- Subagent deleted harness-written session state under ~/.claude; warning fired but deletion succeeded (detection without prevention)
- Windows: stuck same-version repair-install loop kills Cowork VM sessions (background agents silently lost)
- VS Code extension: session titles are no longer auto-generated (new sessions keep the raw first-message text as their name)
- ctrl-C to clear the input buffer also kills background agents, unrecoverably
- VS Code extension: command to scroll the active chat to the bottom (e.g. claude-vscode.scrollToLatest)
- AskUserQuestion: mouse clicks are silently discarded in the preview (two-column) layout
- VS Code extension: Allow customizing terminal tab title
- [BUG] Windows/Git-Bash: valid shell snapshots fail in host bash -c wrapper (recurrence of #68337)
- [Bug] Permissions state not persisting after approval in classifier dialog
- Org-admin-managed skills (Claude.ai org settings) don't appear in Claude Code CLI
- C:/Program Files/Git/mcp settings menu refuses to open in genuinely interactive terminal sessions — client-attachment check inherits the $CLAUDE_JOB_DIR-as-background-proxy defect from #59848
- [BUG] Silent npm→native auto-migration writes autoUpdatesChannel: "stable" and downgrades the CLI (2.1.220 → 2.1.212), removing new models from /model
- Bash commands render unhighlighted in tool calls and permission dialogs, though highlight.js and `bash` already ship in the CLI
- Skill tool: args parameter corrupts shell positional parameters ($1/$2) in SKILL.md code examples
- [Bug] Stopped background agents resurface as "no completion record" warnings after CLI restart
- BUG: Edit tool applies changes despite rejection error
- [BUG] Windows desktop app: inline file preview decodes %20 but not %26 in markdown file links (partial percent-decoding)
- [Bug] Plan-accept context clear leaks previous skill's disallowed-tools to fresh context
- [Bug] Terminal becomes unresponsive after pressing ESC to stop execution
- Single background subagent (run_in_background, no tool use) balloons to 9.5 GiB in ~100 s → global kernel OOM (2.1.220, Linux, no swap)
- [Bug] 529 "never recovers": default retry envelope is ~2.5 min with hard give-up caps and no post-recovery resume; built-in ride-out mode (CLAUDE_CODE_RETRY_WATCHDOG) is undocumented
- Image upload fails with EXDEV (cross-device rename) when user profile AppData is redirected to another volume (Windows)
- macOS: claude:// gets registered to the Electron helper bundle, login fails with Finder error -600
- there is an issue with the new desktop update , that make the claude not working at all
- [Bug] Task/TodoWrite tool missing from tool list after account switch
- [Bug] Subagents not responding or returning blank output
- Dragging the macOS screenshot floating thumbnail silently discards the image
- Windows: stray stderr from detached child processes renders over the TUI composer/prompt area
- [BUG] Desktop main process blocks ~2.2s on every session open/switch — bundled `claude.exe` takes ~2.45s just to print `--version`
- Cross-tab background agents can take direct requests and silently collide on shared files/resources
- `claude update` reports success but installs the Bun runtime as Claude Code (binary swapped for `bun`)
- Suggested next steps (ghost text hint) still missing on 2.1.211 stable
- Startup banner shows Opus 5 instead of Fable 5 for the selected model
- Windows: background Agent worker spawns a console window that steals foreground keyboard focus
- Global gitignore write fails on Windows with EEXIST (mkdir targets existing home dir)
- Remote triggers (cloud): permitted_tools on mcp_connections silently stopped matching short MCP tool names — custom connector tools never surface
- footerLinksRegexes badges: enroll in the Footer keyboard-selection ring (parity with artifact links)
- Auto mode: distinguish unpersuadable hard-category denials from approvable prompts
- ctrl+L default binding destroys typed input (chat:clearInput) — breaks terminal muscle memory
- Option to use letters (a/b/c) instead of numbers for dialog choices
- Scheduled-task sessions leak orphaned background processes (marked isRunning: false but still alive)
- TaskUpdate/TaskList task IDs do not survive a session resume
- Permission prompts loop in multi-agent sessions: Tool(*) allow form silently dead, prompts on harness-generated tool-result files, no propagation to running subagents
- Windows: TUI input dead while a PreToolUse hook child blocks on uninterruptible I/O (network/cloud drive)
- Read/Grep/Edit denied for src/main/java paths with no matching permission/sandbox rule anywhere in config
- Named background subagents complete without delivering their final message to the parent; their messages briefly render in the user's UI
- Exempt `~/.claude/jobs/**` (fork/background job scratch) from the protected-path guard, like `.claude/worktrees`
- Channel notifications enqueue forever into an abandoned session after /fork (13 enqueues, 0 dequeues) — inbound messages silently never surface
- Let Claude set the session colour mid-session (dynamic signal, not just a launch-time identifier)
- [BUG] Desktop app: skill allowed-tools grants never arm — pre-approved commands always prompt
- [Bug] Multi-select option only allows single item selection
- Nested background subagent: unresumed completion + stale idle_notifications + confident-wrong state claims turn a routine one-command deploy into a ~30-min ordeal (compounds #78782/#73647/#68922)
- Steering the main chat irreversibly kills all running background subagents
- [BUG] Windows terminal CLI: idle session intermittently kills long-running background Bash tasks with nested claude -p children (status=killed, "was stopped")
- Cowork Dispatch: `start_code_task` cannot target WSL2 workspaces — rejects `wsl:` keys, mistranslates absolute Linux paths to `C:\`
- Auto mode classifier sends [1m]-suffixed model without the 1M beta header; HTTP 400 is reported as "temporarily unavailable"
- [VS Code] /rename doesn't repaint sidebar/tab until Developer: Reload Window + a click
- [Bug] Esc in the subagent view interrupts the running agent as well as dismissing the view
- Windows: Claude Desktop leaves orphaned renderer/Node-utility/CLI-engine processes after tasks complete; app won't relaunch after close without a full Windows restart
- Orphaned wrapper shells accumulate and pin CPU (~1400%) after Bash calls containing shell loops with command substitution
- CoworkVMService restarts silently kill running scheduled-task sessions mid-turn — no recovery actions configured
- Custom HTTP MCP server: OAuth authorization does not persist across launches, and server visibility is inconsistent across surfaces
- [BUG] Slash command typed during a pending background-task notification renders twice (echo + dispatch), looks like /compact ran twice
- Browser pane: file:// tabs render as static snapshot but cannot be read/screenshotted by any tool
- [BUG] Desktop app: enabling the worktree checkbox resets the base branch to "main", ignoring the repo's default branch (origin/HEAD → dev)
- [BUG] Workflow tool resolves agent({agentType}) against the session cwd's project registry, not the workflow script's own repo
- Shipped agent/skill tool manifests still list Grep/Glob after native builds removed them (2.1.117+), causing agents to invoke nonexistent tools
- Desktop app agent sessions don't apply OTel telemetry env from managed settings
- Claude Desktop: auto-updater fails with generic OSStatus -60006 when app relaunched before install completes
- Claude Desktop: local MCP server stops receiving tools/list after reconnect, but status shows stale 'Connected (N tools)'
- Desktop app (Windows, RTL): browser pane renders duplicated side-by-side; ghost copy is unresponsive
- Phantom user-interrupt message injected mid-turn, containing internal harness fragments and a fake task notification (v2.1.217, Windows)
- [BUG] Desktop: scrolling does nothing over a `Client` region in a plugin pane
- [BUG] Windows: peer-session liveness probe (powershell + Get-CimInstance Win32_Process, 1 s timeout) leaves unkillable orphan processes -> commit exhaustion -> crash 0xC0000409
- Live, data-driven argument autocomplete for custom slash commands/skills
- [MODEL] Asked to have Codex redraw an SVG asset; used Codex image generation instead, and repeated it after correction