Claude Code v2.1.292

What's changed

• Added --marketplace <source> to claude plugin install: adds the marketplace if needed, under the same policy checks as claude plugin marketplace add, then installs the plugin from it
• Added an effort parameter to the Agent tool, so Claude runs a sub-agent at the effort level you ask for
• Added CLAUDE_CODE_OVERLOADED_RETRY_BASE_DELAY_MS environment variable to set a longer base delay for the backoff when retrying an overloaded (529) request
• Added prompt.autocomplete, an event a mod hooks to add its own rows to the prompt box's autocomplete list
• Added prompt caching to $.model.complete for mods: prompt and system take blocks of text, and cache: true on a block caches the request up to it
• Added workflow agents to the agent.spawn mod hook, with their run and index, so a mod can refuse them
• Fixed subagent definitions with permissionMode: auto entering auto mode when auto mode is unavailable (disabled by settings, circuit breaker, or a model that doesn't support it)
• Fixed sandboxed commands being able to read the staged file copies of /ultrareview uploads under ~/.claude/seed-admin
• Fixed a managed sandbox read-deny path (and user ones beside it) that appears or re-points mid-session not dropping project grants inside it or ending credential injection from files it covers
• Fixed a notebook or PDF read on macOS and Windows being able to return a file outside what was approved, through a link swapped in mid-read
• Fixed a tampered on-disk cache of server-managed settings being able to switch off or unseat the built-in policy plugin while the settings fetch failed
• Fixed rm -rf on the 8.3 short name or another alternate Windows spelling of the home folder or a drive not being treated as removing it
• Security: Fixed PreToolUse hook approvals and auto mode bypassing the permission prompt for file reads from network (UNC) paths
• Fixed a skill's or slash command's allowed-tools rule coming back in a later turn when you leave auto mode or plan mode partway through that turn
• Fixed NO_PROXY being ignored for Claude Code's own API requests (sign-in, policy, feedback, artifacts) when HTTPS_PROXY is set
• Fixed an MCP tool with a name longer than 128 characters making every request fail; that tool is now left out and an MCP error names it
• Fixed claude plugin commands such as marketplace add and install running before an organization's managed settings had loaded on a first run
• Fixed one-shot claude -p and Agent SDK runs stopping a background command 5 seconds after the final result, and one-shot claude -p runs dropping a scheduled wakeup; both are now waited for
• Fixed plan mode not being restored when resuming a session from the claude --resume session picker or with /resume
• Fixed saved scheduled tasks created after /resume, /branch or /clear never firing, and saved tasks ignoring later creates and deletes after two writes to the tasks file milliseconds apart
• Fixed a background session's /loop silently stopping when the session's process restarted (for example after a crash), because its pending wakeup was lost
• Fixed Grep and Glob reporting no matches when the file or folder they were given could not be read; Claude now retries once or tells you
• Fixed the Read tool returning only the first entry, with no error, when a PDF's pages was a list such as "6,9,15"; it now returns an error saying to read each page or range separately
• Fixed @-mentioned text files over 256KB being left out silently: Claude is now told the file's size and to read it in portions
• Fixed the usage limit alert repeating once per background agent when agents failed on a limit that had already stopped the main conversation
• Fixed Remote Control viewers seeing an empty subagent pane for background subagents in sessions hosted by the desktop app or an IDE
• Fixed cross-session delivery notices showing two sessions with similar names as one recipient, and the expiry