Agents issues on macOS — page 3
Issues the maintainers labelled both platform:macos and area:agents.
882 issues · 268 open · 614 resolved (70%) · first seen Jul 25, 2025
Is this getting better or worse?
This class of problem is holding steady. 415 new reports in the last 90 days vs 429 in the 90 before — -3%. The open backlog peaked at 268 in 2026-08 and sits at 268 today.
Derived by counting each matching issue from its creation date until it closed. First-party
computation over the anthropics/claude-code tracker — the trend is not published
anywhere upstream.
Which builds report this
634 of these reports name the Claude Code build they were running, spanning 146 releases. Heaviest reporters:
- Claude Code v2.1.119
- Claude Code v2.1.233
- Claude Code v2.1.201
- Claude Code v2.1.198
- Claude Code v2.1.197
- Claude Code v2.1.126
- Claude Code v2.1.207
- Claude Code v2.1.139
Report volume, not a defect count: an issue can mention a build without that build having caused the failure. Versions come from the version string in the bug-report template, matched against real published tags.
Do these get fixed?
Median time to close is 32 days across 614 closures. Of the 614 closures with a recorded reason, 24% were closed as completed and 466 as not-planned or duplicate. The most recent completed fix landed in 2026-08.
Workarounds reported by the community
267 of these issues post a workaround someone says worked. The highest-engagement ones:
- Built-in Plan agent ignores parent settings.json permissions and repeatedly prompts for pre-approved tools
- …agent permissions (e.g., ) 3. Option C : Add a setting like Workarounds Attempted None available. Cannot modify built-in agent configurations. Impact - Interrupts workflow with repeated permission prompts - Makes Plan mo…
Found in the description of #10906 · still open - [BUG] Sub-agents claim successful file creation but files don't persist to filesystem
- …nsparency issues - 3408 - Task tool crash scenarios Current Workarounds - Use direct tool calls instead of Task tool for file operations - Always verify file creation externally after sub-agent operations - Avoid sub-age…
Found in the description of #4462 · still open - [Bug] Regression: malware reminder on every Read still causes subagent refusals in v2.1.111 (fix from #47027 / v2.1.92 did not hold)
- …ain to the subagent that it's misreading" is not a reliable workaround — it can increase suspicion, mirroring the OP's subagent-2/3 reasoning chain. Per-agent inconsistency, same repo, same reminder, same session: two ot…
Found in the thread of #49363 · resolved - [CRITICAL] Subagent spawning and subagent pattern bugs trigger infinite recursion, infinite token usage, grossly inefficient token usage, and lost accumulated subagent work.
- …The agent ignores this and instead spawns a child agent to work around the denial. That child hits the same wall and spawns another. This repeats indefinitely. The permission denial is functioning as a recursive agent l…
Found in the description of #68619 · still open - [Bug] Plan agent uses main branch path instead of git worktree directory
- …an agent should use the current working directory Temporary Workaround In the meantime, when the Plan agent gives you a plan, you may need to: - Review the plan carefully for any incorrect path assumptions - Manually cor…
Found in the description of #11239 · still open
Excerpts are quoted from the linked issue so you can judge relevance before opening it. Threads that only ask for a workaround, or report that there is none, are excluded. These are community suggestions, not official guidance from Anthropic — read the full thread before applying one.
Matching issues 201–300
Ranked by community engagement (reactions weighted over comments). Listing the top 300 of 882 matches; the statistics above cover all 882.
- [BUG] origin remote URL corruption via GIT_COMMON_DIR + rbs/ruby-lsp in devcontainer
- [BUG] TypeError: toolUseContext.getAppState is not a function when rendering permission prompt
- [BUG] Lead agent crashes with "toolUseContext.getAppState is not a function" when a teammate requests permission (regression in 2.1.93–2.1.112)
- Agent tool not available at runtime for plugin-defined agent types despite tools: frontmatter declaration
- Claude Code node process deletes user-managed agent files from ~/.claude/agents/
- Worktree path corrupted by hook stdout — JSON output concatenated into path
- [BUG] Spawning subagents with isolation: "worktree" immediately fails auth
- [BUG] CLAUDE_CODE_DISABLE_BACKGROUND_TASKS ignored when spawning multiple subagents
- [Bug] Background agent resume creates retry loop — model doesn't wait for completion notification
- [Bug] Agent teammates stuck in indefinite plan-mode approval loops
- Background Bash task completion never resumes in-process subagents — they idle forever while finished work sits on disk
- [Bug] Session limit warning not surfaced to agent; background workflows continue consuming quota after threshold
- Workflow tool: args object delivered to script as JSON string (schema's untyped `args` → model emits string; dup of #72248) — bug 2 in original report retracted
- Nested code-review fan-out spawned 877 agents despite 5-level depth limit
- Native worktree GC (worktree.cleanupPeriodDays) deletes DIRTY and UNPUSHED agent-* worktrees, contradicting the documented clean+pushed-only cleanup behavior
- Nested subagents remain stuck as "Running" in Background tasks panel after parent subagent completes
- [BUG] Background sub-agents stay "In esecuzione" in the Activity panel after they've completed
- macOS: background agent workers reaped mid-work (reapedMidWorkAt), never respawn — refines #72221
- [BUG] Subagents going idle
- [Bug] Multi-agent workflows terminate on transient server errors instead of retrying with backoff
- Subagent sessions spawned by multi-agent tasks remain active after parent session exits
- [Bug] Background general-purpose sub-agents recursively self-spawn causing exponential fan-out and usage limit exhaustion
- [bug] [area:agents] [platform:macos] Agent(isolation: "worktree") post-creation setup silently rewrites...
- [Bug] Auto-mode spawns infinite monitor loops on batch classifier denial, causing runaway API usage
- [Bug] Excessive agent spawning causes token bloat for simple code analysis tasks
- Babysit agents stop with 'socket connection closed unexpectedly' API error
- [BUG] Excessive token consumption in web search workflows - exponential token usage growth
- Behavioral drift away from user-granted autonomy in long sessions despite memory rules
- OAuth re-auth for `claude agents` fails with ECONNREFUSED on `org:create_api_key` scope
- Worktree virtual-overlay evaporation: Edit/Write operations silently target ghost files when worktree disappears mid-run
- [BUG] Edit tool silently no-ops on disk while Read returns the edited content (sub-agent worktrees + main session)
- macOS: background agent binary lacks bundle ID, causing TCC permission churn on upgrades
- Bug: LSP tool (jdtls-lsp plugin) not propagated to spawned subagents
- Agent teams: teammates die immediately — harness spawns claude without a pty, causing stdin/print mode failure
- Model carries imperative actions from earlier system-reminder payloads past an explicit plan-scope narrowing
- [Bug] Agent pauses indefinitely when hiring team agents, requires manual trigger to resume
- [BUG] Agent View not enabled for Claude API users despite having required version (2.1.140)
- DISABLE_TELEMETRY silently disables GrowthBook — which also gates preview features (Agent View) and remote killswitches
- [BUG] Startup launches many headless sdk-cli sessions in Ghostty, causing macOS memory pressure/freeze (v2.1.126)
- SendMessage concurrent writes lose messages via array rewrite
- [BUG] Team-mode teammate crashes with "<Box> can't be nested inside <Text>" when inbox contains permission_request / permission_response JSON
- Concurrent subagent dispatch: child re-prompts on Edit / Write even when parent has explicit allow entries
- [BUG] API returns thinking-only response with no text block — tokens consumed but response lost
- Agent teams permission routing crashes CLI on teammate tool approval (regression in 2.1.111)
- Agent Teams: teammate spawn fails after brew upgrade due to hardcoded Caskroom version path
- Stop hook false-positive: stale subagent IDs block session end
- [BUG] Remote session (ultraplan) receives wrong project context
- Remote triggers: 90% MCP tool failure rate + destructive file deletion
- [BUG] worktrees in javascripts, defaulting to `.claude/<worktree>` clash with node's resolve, resulting incorrectly resolved dependencies, types, etc
- [BUG] --resume crashes with JSON Parse error when session contains Agent Teams artifacts (queue-operation, SendMessage, Agent)
- Agent destroyed 2 days of uncommitted work via destructive git operation in main worktree
- Agent worktrees created in /tmp cause data loss on reboot
- Subagent (Agent tool) does not fire Stop hook on completion
- Sub-agent shows "(running)" in status bar after conversation compaction even though it's no longer active
- [BUG] Agent subagents are forced to use isolation: "worktree" in non-Git directories, even with tengu_worktree_mode=false
- [BUG] Background agent IDs lost on context compaction
- [Bug] Agent iterations lost or destroyed during multi-day workflows
- send_message (ccd_session_mgmt) silently stops delivering and wedges the recipient session — regression since CLI 2.1.227
- Receiver is never notified when a held cross-session message expires — the message is abandoned, not denied, and nobody downstream learns it existed
- Held-then-approved cross-session messages arrive with no marker — receiver cannot tell it was gated, and reports the hold never happened
- [Bug] Main session persists and executes autonomously after /exit, ignoring CLAUDE.md directives
- Background subagent never re-woken when its tracked background Bash child exits (child survives, wake event lost)
- [Bug] macOS arm64: Second background agent spawn fails with "fork failed: Device not configured" in 2.1.207
- Esc interrupt kills all background agents and marks them permanently unresumable
- [BUG] Opus 4.8 subagents die on turn 1 emitting fabricated System:/Assistant: scaffolding (0 tool calls, <br>+System: prefix) — 13x in one session, JSONL-verified, spawn-time variant of #68367
- Resumed subagent (SendMessage) detail panel renders garbled transcript: turns inverted, and raw SendMessage envelope shown on reopen
- [Bug] Sub-agent backgrounded processes orphaned/SIGHUP'd on turn-end; no auto-resume on background exit
- [Bug] SendMessage(to: "main") from background subagent silently dropped instead of reaching spawner
- Agent tool: subagents fabricate a "waiting for background agent" stall with no real background agent ever spawned
- [Bug] agent autonomously changed directory and began to write code unprompted and committed unprompted
- [Feature Request] Restore "/agent" command wizard for interactive agent setup
- Agent-mode sessions on unattended Mac: silent mid-turn drops after tool_result + UI stream detaching from healthy sessions (WarmLifecycle idle_timeout suspected)
- [BUG] Ultra workflow auto-scales agents (up to ~130) and triggers Rate Limit / IP Block without user-specified count
- [BUG] Subagent (Task/Agent) spawns fail with 400 "thinking.disabled.display: Extra inputs are not permitted"
- Built-in dynamic workflows (deep-research) have no model routing — all sub-agents inherit the main-loop model, burning Opus on grunt work
- [BUG] Workflow parallel() sub-agent loops forever emitting empty StructuredOutput calls; no retry cap and no per-agent timeout stalls the whole workflow
- Usage-limit gating is invisible to unattended sessions — agent-team orchestrator froze 5h with zero signal in transcript or terminal
- Subagents return fully hallucinated results with zero tool calls; leaked tool-call XML in text; two fabricated 'prompt injection detected' reports
- Bash tool results silently lost — agent waits forever (no timeout fires); correlates with Remote Control sessions
- [Bug] Silent model fallback from Fable 5 to Opus 4.8 overrides explicit model pinning
- [BUG] Claude Code DevOps subagent runbook missed an 8.5-day AWS cost anomaly despite explicit daily monitoring requests — $80 burn, structural gap
- MCP tools inaccessible in --agent mode even with explicit --mcp-config flag
- [Bug] Agent dispatch consumes excessive tokens without course-correction mechanism
- [BUG] Workflow subagent: one stall is retried 6× at full token cost (no across-retry progress check); the no-progress signal can't tell slow-but-alive from hung
- [Bug] High-effort session tier not propagated to sub-agents with pinned models
- [BUG] [AGENT_TEAMS] Teammate spawn amplification: 1 spawn intent produces N (2-8) independent teammates racing on the same task
- [BUG] Sub-agent frontmatter `tools:` array silently drops first and last positions at spawn time
- [Bug] Agent Teams auto-approve plans in CLI mode without user confirmation
- [BUG] --agent mode ignores explicit permissions.allow rules for built-in read-only commands
- Agent View falls back to static agent list on direct Anthropic backend (no provider env vars, disableAgentView unset, v2.1.140)
- [BUG] FleetView dispatched agents doesn't properly use the correct version when dispatching an agent with an up to date version while an existing previous version is running on the background
- `claude agents` banner hints "list sessions" but cmd only lists definitions (v2.1.139)
- [BUG] Attaching an interactive session to Agent View can interfere with the session progress
- Built-in worker and quick subagent types never receive tool definitions (0% tool access across 150 invocations)
- [BUG] Agent tool spawn crashes with K.length on first invocation in v2.1.136
- Subagent MCP tool result not delivered after WorktreeCreate hook in non-git workspace
- [BUG] Agent teams crash on spawn with --model opus teammates (2.1.119, Bun stack trace)
- [BUG] Stop-hook "callback" injects a synthesised user turn (isMeta:true) when a paused subagent expects SendMessage but parent has no such tool
- [BUG] Orchestrator lead context never auto-releases after teammate exits — sticky status bar + blocked TeamCreate
- After compaction and subagent return, Main agent set's itself from Sonnet 4.6 to Opus 4.7 without user interaction