TL;DR

• Four sandbox and permission gaps patched in one drop. PowerShell builtins (cd.., cd\, cd~, X:) changed directories undetected, worktree sandbox rules covered the entire main repo root, wildcard allow rules skipped native executables, and stale PWD/OLDPWD/DIRSTACK tracking let commands read outside the workspace (more below).

• /usage now shows a per-category cost breakdown. Skills, subagents, plugins, and each MCP server get their own line, so you can see exactly what is driving your limits.

• find in the Bash tool could crash macOS by exhausting the system vnode table. If you were hitting mysterious host crashes on large repos, this was the cause (more below).

New in 2.1.150, 2.1.149

2.1.150 (May 23, 2026)

• Internal infrastructure improvements (no user-facing changes)

2.1.149 (May 23, 2026)

• /usage now shows a per-category breakdown of what's driving your limits usage: skills, subagents, plugins, and per-MCP-server cost
• /diff detail view can now be scrolled with the keyboard (arrows, j/k, PgUp/PgDn, Space, Home/End)
• Markdown output now renders GFM task list checkboxes (- [ ] todo / - [x] done) instead of plain bullets
• Enterprise: added the allowAllClaudeAiMcps managed setting to load claude.ai cloud MCP connectors alongside managed-mcp.json
• Fixed a PowerShell permission bypass: built-in cd functions (cd.., cd\, cd~, X:) changed the working directory undetected, letting a later command read outside the workspace
• Fixed the sandbox write allowlist in git worktrees covering the entire main repository root instead of only the shared .git directory (with hooks/ and config denied)
• Fixed PowerShell prefix/wildcard allow rules (e.g. PowerShell(dotnet.exe build *)) not pre-approving native executables and scripts
• Fixed a permission-analysis gap where the parser trusted stale variable-tracking values for PWD/OLDPWD/DIRSTACK across cd/pushd/popd
• Fixed find in the Bash tool exhausting the macOS system file/vnode table and crashing the host on large directory trees
• Fixed the managed-settings approval dialog leaving the terminal frozen after accepting at startup
• Fixed /ultraplan and remote session creation failing with "Could not capture uncommitted changes" when the working tree has no real changes
• Fixed otelHeadersHelper failing silently when the script path contains spaces; helper failures are now reported in /doctor and the debug log
• Fixed the thinking spinner staying amber across tool calls and onto fresh thinking bursts
• Fixed collapsed Bash output reporting the wrong hidden-line count for outputs with many short lines
• Fixed slash-command argument-hint clipping trailing typed characters when the hint overflows the input box
• Fixed argument-hint and progressive arg suggestions not appearing after Tab-completing a skill whose frontmatter name: differs from its directory basename
• Fixed the status bar showing the user's baseline /effort setting instead of the effort level applied by skill/agent effort: frontmatter
• Fixed Ctrl+O transcript view freezing at the moment it was opened instead of tailing new messages
• Fixed editing a recalled prompt-history entry losing the edit when navigating further up/down with arrow keys
• Fixed /config exit summary reporting phantom changes to auto-compact and theme when toggling unrelated settings
• Fixed /insights crashing when cached session-meta files are missing optional fields
• Fixed malformed PowerShell and History tool calls with missing input being misclassified as reads in transcript collapsing
• Fixed renaming a Remote Control session from claude.ai or the Claude mobile app not updating the local session name for claude --resume
• Fixed a race where a just-submitted prompt could appear twice in the up-arrow history
• Fixed tapping the "Jump to bottom" pill in fullscreen mode not dismissing it immediately
• Improved /feedback reports to include the conversation that happened before context compaction, making issues from earlier in long sessions easier to triage

Notes