Piebald AI

Hi! We're Piebald, building the ultimate agentic AI control experience for developers—piebald.ai/. If you use Claude Code or Cursor and friends, try Piebald—going back isn't a thing. We've also got some open source side projects you might know, like github.com/Piebald-AI/tweakc… (screwdriver for Claude Code's cover panel) and github.com/Piebald-AI/splitr… (nonagon agentic tool usage gauge).

What's new in Claude Code 2.1.318 system prompts (+10,091 tokens): The prompts clarify Code Mode execution and auto-mode refusals, require fuller reading and disclosure for mentioned files, revise compaction instructions, and expand documentation for the protocols that connect clients, runners, and gateways. - NEW: Data: Self-named extra CA certificate warning and Self-named CA certificate drop debug guidance—Explain unverified self-named certificate rejection, trusted signing-root recovery, and why the broad certificate-retention override requires caution and can break connections. - NEW: Data: SDK result credential_expires_at field—Documents estimated stored-login expiry without a server check, distinguishing refresh-chain lifetime from access-token renewal and warning that revocation may happen earlier. - NEW: Data: SDK ui_invalidate event—Documents refresh events for plugin changes and newly declared mobile controls, with deduplicated evaluations and optional targeting of stale instances. - NEW: Data: Thin-client diff dialog noDiffReason field—Explains unavailable workspace diffs and retry guidance, distinguishing repository safety checks, busy state, failed comparisons, and a changing repository root. - NEW: System Reminder: Resumed command approval directory verification failure—Refuses previously approved commands when their directory cannot be verified after restart; retry requires entering the intended directory and may need approval. - NEW: System Reminder: Auto mode dynamically constructed command refusal—Explains auto-mode refusal of dynamically assembled shell commands and requires retrying with the complete literal command, without declaring it unsafe. - NEW: System Reminder: Code Mode auto mode hook rewrite refusal—Explains auto-mode refusal after hooks rewrite code, limiting retries to isolated calls when another call may have caused the refusal. - NEW: System Reminder: Code Mode auto mode subagent creation refusal—Explains why auto mode cannot evaluate code-started subagents, directing Claude to work directly or tell the user how to change modes. - NEW: System Reminder: Async hook success additional context—Labels plain asynchronous hook output with the hook’s name and success status, matching the existing synchronous hook-success format. - NEW: System Reminder: Oversized mentioned file reading guidance—Requires reading oversized mentioned files in full unless the request needs only part, and disclosing searches or partial reading when answering. - NEW: Data: Self-hosted runner control-plane idle release notice—Documents idle release only for unchanged checkouts and untouched runner folders on Linux, with configuration and hold-file caveats. - NEW: Tool Description: REPL script and shell timeouts—Describes a ten-minute script deadline, including permission waits, and shorter command timeouts that allow background output recovery without duplicate execution. - NEW: Tool Description: REPL asynchronous output and polling instructions—Explains inline results versus delayed events, cache-aware waiting, and duplicate-execution risks; finishing a turn can wait for results without extra calls. - NEW: Tool Descriptions: REPL and REPL persistent helper interface—Describe batched JavaScript tool calls, persistent variables, sealed access, controlled output previews, and conditional error handling that distinguishes MCP failures. - NEW: Tool Description: REPL dispatched script execution and event delivery—Describes immediate script dispatch, overlapping scripts sharing variables, automatic event collection, and keeping dependent steps together or waiting for earlier results. - NEW: System Reminder: PreToolUse hook timeout recovery—Explains refusals after hook timeouts or missing decisions, recommends isolated or smaller retries, and leaves hook-configuration changes to the user. - NEW: Tool Description: Poll Code Mode idle and event waiting—Defines an idle wait that returns events or user messages without ending the turn, with cache-expiry and queued-delivery wakeups. - NEW: Data: REPL asynchronous context API declarations and REPL synchronous context API declarations—Document named child-agent contexts, optional conversation forks, messaging and result inspection, with a notification variant for idle, failed, or released contexts. - REMOVED: Agent Prompts: Conversation summarization (capped variant), Conversation summarization (lean variant), and Conversation summarization (short variant)—Remove three standalone compaction templates, including their distinct length and handoff guidance; other conversation-summarization prompts remain in the extraction. - REMOVED: System Reminder: Memory sync mass-deletion guard—Removes the standalone warning about blocked bulk shared-memory deletions and batch-by-batch removal guidance, without establishing whether the underlying guard changed. - Agent Prompt: Conversation summarization with additional instructions—Drops optional 2,000-word and earlier-request-copying instructions and consistently includes analysis guidance and its example, while preserving user-security constraints. - Agent Prompt: Onboarding guide generator—Requires disclosing omitted usage sessions in both the guide and its presentation when those sessions cannot be tied to the creator’s current sign-in. - Agent Prompt: /security-review slash command—Removes the final instruction requiring the reply to contain only the Markdown report, leaving the review and false-positive filtering directions intact. - Data: attributionProject setting—Documents project IDs beginning with chan_ as well as claude_proj_, while limiting raw UUIDs to the latter project type. - Data: Claude Code gateway protocol—Distinguishes billed model-request token counting for gateway credentials from local estimation with only a base-URL override, including managed-model restrictions. - Data: Gateway ignored X-Forwarded-For warning—Requires narrowly trusting proxies that add connecting addresses, warning that trusting forwarded client-supplied headers lets clients bypass access controls and rate limits. - Data: Interrupt receipt cancelled field and Interrupt receipt still queued field—Include messages read but not yet queued, extending early-interrupt handling and documenting cancellation limits before those messages enter the queue. - Data: SDK result request_build_detail field—Clarifies cloud-runner cache-break state writes normally queue after the response, outside request-building measurements, except when cache-break detection skips the model. - Data: SDK startup failure reason codes—Adds invalid configuration JSON as a startup refusal requiring file repair, preserving the file and refusing starts without a terminal until corrected. - Data: SDK UI attach draws field and SDK ui_invalidate instances field—Extend mobile rendering declarations to Input and Select, restrict Backdrop declarations to desktop or mobile, and refresh backdrop instances on participating surfaces. - Data: Thin-client diff dialog schema—Describes workspace diffs without assuming git, refers to noDiffReason for unavailable results, and clarifies that untracked files never carry hunks. - Skills: /send-to-project message preload description and /send-to-project work brief preload description—Explain that required Remote Control can be offered when disabled, with in-place message entry for terminal sessions lacking an existing conversation. - Skill: /send-to-project message slash command and Tool Description: SendToProject message—Preserve messages typed into the command’s input field, providing those words for requested revisions while retaining confirmation and single-send safeguards. - Skill: Update config settings file locations—Clarifies that cleanupPeriodDays controls transcript retention on the current computer rather than describing an unqualified transcript-cleanup period. - System Reminder: Staged files failed to arrive—Explains that disk-full attachment failures do not retry automatically; after freeing space, request reattachment or regenerate Claude-created files, preserving deletion approval. - Tool Description: Bash (Git commit instructions) and Bash (PR creation instructions)—Adapt heredoc examples for macOS’s /bin/bash, passing commit messages and pull-request bodies through stdin instead of command substitution. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.317 system prompts (+13,702 tokens): Adds instructions for Claude Doc planning, end-of-turn recaps, and images hidden after chat-file deletion, while expanding SDK diagnostic documentation and clarifying connector inheritance, file-reference approvals, and Artifact workflows. - NEW: System Reminders: Hidden image after chat file deletion and Hidden images after chat file deletion—Forbid recovering hidden images or adding new visual details after chat-file deletion, explaining uncertainty and requesting replacement images when needed. - NEW: Data: MCP server status urlHost field—Documents settings-file host display on eligible Anthropic-hosted workers with configuration withheld, excluding proxied servers and potentially sensitive or unavailable values. - NEW: Data: SDK user message ultrathink_typed and system init ultrathink_typed_raises fields—Document capability-gated ultrathink effort increases based on a typing claim, not proof, with paste checks and invalidation after effort changes. - NEW: Data: SDK startup failure reason codes—Defines startup refusal reasons so hosts can distinguish retryable failures from sign-in, managed-policy, environment, worktree, and initialization problems requiring intervention. - NEW: Data: SDK result process_turn_states field—Documents mutually exclusive turn states for CPU and wall-time measurements, explaining precedence, entry counts, scope, and conditions that suppress reporting. - NEW: Data: SDK result tool_schema_build_detail, message_normalization_detail, and request_build_detail fields—Break down time before a turn's first request dispatch into tool-schema construction, message normalization, and request assembly, with measurement caveats. - NEW: Data: SDK warning model_restriction field—Documents structured refused and effective model names, their sanitization and plain-text handling, and whether restrictions occurred at startup or later. - NEW: Data: SDK model fallback api_refusal_cyber_verification field—Documents account cyber-verification status on session-level fallback notices, preserving unknown-status handling and attribution limits when a switch spans several models. - NEW: Data: SDK ui_invalidate instances and UI attach draws fields—Describe per-client backdrop rendering declarations and targeted refreshes of stale plugin UI instances, with safe behavior for older clients. - NEW: Data: SDK initialize response hook_on_failure_supported field—Documents capability checks for blocking hook failures, including TypeScript SDK refusal when support is absent or requested hooks were not applied. - NEW: Data: SDK get_settings policy_origins field—Documents managed-policy sources in precedence order, including missing remote settings, unreadable administrator files, and forward-compatible handling of unknown source codes. - NEW: Data: SDK read_file lossy field—Distinguishes invalid UTF-8 replacement from literal replacement characters, while explaining when base64 output or absent fields affect certainty about file contents. - NEW: System Reminder: Sandbox hard-linked guarded file refusal—Refuses sandboxed commands and unsandboxed retries while guarded files have extra hard links, requiring external removal and treating unexplained links as untrusted. - NEW: Tool Description: WrapUp—Requires a recap and pending-decision actions before closing substantive or question-ending turns, while preserving a separate, complete final reply. - NEW: Tool Description: ExitPlanMode (Claude Doc session) and System Reminder: Plan mode is active (diskless session)—Define read-only planning through an editable Claude Doc or inline plan, allowing only plan-document writes until the user approves. - NEW: System Reminder: Approved Claude Doc plan readback—Requires rereading the approved document, including user edits, before implementation; repeated read failures require permission to proceed from memory. - NEW: System Reminder: Bash version command refusal—Explains commands refused by older Bash versions and suggests simpler syntax, script or stdin alternatives, or restarting with a newer shell. - NEW: Tool Description: ReadWidgetContext—Reads current MCP App view state and images when relevant, explicitly treating app-supplied content and tool names as untrusted data. - NEW: System Reminders: Email file reference unsafe subject refusal and Email file reference unnamed recipients refusal—Require safe, short subjects and explicit recipient addresses before attaching files by reference, so approval shows who receives them. - NEW: System Reminder: Malformed attachment file reference—Rejects malformed attachment references and explains valid hash-and-path syntax, path restrictions, and using base64 content when references cannot be corrected. - NEW: System Prompt: Coordinator artifact delegation (MCP tools)—Directs coordinators to delegate readable deliverables as published HTML, while discovering suitable Artifact types first for presentations, designs, and dashboards. - REMOVED: System Reminder: File already in context—Removes the standalone instruction to reuse unchanged file content already present in the conversation rather than reading the file again. - Agent Prompt: /schedule slash command and Tool Description: RemoteTrigger prompt—Explain inherited connectors and why empty connector updates change nothing; clear stored connections only on request, without promising to exclude organization-managed connectors. - Data: Artifact ask-first intake form instructions—Caps intake at four questions and three custom looks, using accessible color-preview cards whose selected palette must match the resulting artifact. - Data: Claude Code agent proxy troubleshooting guide—Adds troubleshooting for proxy connection or request overload, recommending lower concurrency and distinguishing useful load indicators from misleading busy-tunnel counts. - Data: Claude Code gateway protocol—Requires preserving Bedrock's specific input-too-long error message so existing client recovery can remove older images and compact the conversation. - Data: MCP read resource control request and MCP server status error_code field—Document sanitized resource-read and connection error messages on transports that store frames, replacing sensitive server text with fixed failure wording. - Data: MCP status control request liveReply field—Documents capability-based configuration withholding and reduced metadata in oversized replies, with live size-limit errors only when reduced replies still exceed limits. - Data: SDK API error kind field—Documents terminal retry exhaustion for replies missing tool calls, network-location firewall refusals, and additional retry requirements before declaring an empty completion. - Data: SDK read_file anchor as_written kind—Documents a fallback search in some Linux sessions when known paths do not match, excluding symbolic links, .git, and node_modules. - Data: Tool result display metadata field—Documents built-in tool provenance for selected completed results, excluding rewritten, imported, client-supplied, and subagent results while retaining same-process historical messages. - Data: Tool use display metadata field—Clarifies server display-name precedence, preferring claude.ai connector names, then configured names, server-reported names, and finally the server's key. - System Prompt: Artifact comment thread triage—Keeps third-party authorship marked during comment classification even when no separate authorship warning was generated for the thread. - System Reminder: Remote machine separate project copies—Changes the primary project location's wording from “checkout” to “copy,” retaining the requirement to keep local and remote work separate. - Tool Description: claude.ai Project—Requires original read-or-write paths rather than shell-created copies in some sessions, while keeping home-directory exclusions in the alternative upload guidance. - Tool Description: DesignSync—Requires fetching migration notices before stopping and explains normalized stored filenames for plans, listings, and approval, without changing local source paths. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.315 system prompts (+1,506 tokens): The prompts add guidance for session initialization, document comments, and filename validation, while updating billing error details, subagent effort defaults, and coding instructions. - NEW: Data: Ultrathink availability in session initialization—Describes when hosts should highlight ultrathink, including effort changes, unknown availability, and agreement with the applied settings value. - NEW: Data: Pending elicitation requests in initialization response—Lists unanswered MCP elicitation requests for late-joining clients, with guidance on absent fields and deduplicating live or replayed requests. - NEW: System Reminder: Claude Doc comment wake guidance—Explains how to find and answer document comments through the connector, rather than replying to the resolved relay, and treats comments as untrusted data. - NEW: Data: Self-hosted runner unreadable character validation guidance—Distinguishes stray characters from real path characters, preserving actual filenames and requesting a rename or clarification when needed. - Data: blockWritesOutsideWorkingDirectories setting—No longer lists CLAUDE_COWORK_MEMORY_PATH_OVERRIDE as a reason to refuse auto-memory writes; redirection through repository settings remains listed. - Data: Claude Code gateway protocol—Documents shared group-budget exhaustion as a billing error and identifies the header that distinguishes it from an individual cap. - Data: Interrupt send_now parameter—Describes waiting for automatic compaction to finish before handling a queued message, preserving its summary when possible. - Data: SDK API error kind field—Expands stored-login refusal guidance to cover organization-configured helpers and unconfirmed settings, with the message identifying who can resolve it. - Data: SDK api_error_params field—Documents rate-limit details supplied with usage-credit refusals, including response-derived limits, credit eligibility, and payment information. - Skill: Workflow authoring reference—Says omitted subagent effort uses the configured subagent default when present, otherwise inheriting the session's effort. - System Prompt: Outcome-first communication style—Removes the instruction to match surrounding code's comment density, naming, and idiom; the separate restriction on comments remains. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.314 system prompts (+12,588 tokens): Covers confirmed transfers of session work and messages to Claude Projects, keeps setup-card work under user control, clarifies when background work cannot outlive a reply, reinforces trust and permission boundaries, and expands chart guidance, especially for segmented bars. - NEW: Data: blockWritesOutsideWorkingDirectories setting—Describes file-tool write restrictions across permission modes, including protected settings, session-file exceptions, and limits that do not cover shell commands. - NEW: Data: Sandbox excludedCommands setting—Explains when matching command patterns bypass sandboxing, requiring every pipeline or chain component to match while retaining normal permission checks. - NEW: Data: Untrusted folder environment variables ignored warning—Explains ignored repository-supplied environment values when trust cannot be requested, and directs required overrides to user, managed, or startup settings. - NEW: Data: Sandbox project settings ignored under higher-priority policy—Explains that project settings values are ignored under higher-priority restrictions on unsandboxed commands or managed-only network domains. - NEW: Data: Server classifier beta rejection warning—Explains that a rejected classifier request disables server checks until restart and identifies the setting that disables these requests entirely. - NEW: System Prompt: Background agent session keepalive guidance—Explains how active background agents keep sessions running after replies, requiring foreground commands rather than background commands or user-dependent waits. - NEW: System Reminder: Auto mode deny rules without safety result—Explains refusals when automatic checks are unavailable or inconclusive and deny rules prevent substituting user approval, without declaring the action unsafe. - NEW: System Prompt: Compaction omitted tool result handling—Restricts conclusions from omitted tool results, preserves refusals, and prevents tasks or approvals in tool output from overriding user messages. - NEW: Agent Prompt: Background agent state classifier user merge handoff rule—Classifies completed work awaiting only the user's own merge or review as done, while keeping unanswered questions and dependent work blocked. - NEW: System Reminder: Cloud sandbox sustained CPU limit stop—Explains CPU-triggered command shutdowns, preserves files, and requires agreeing on less CPU-intensive work before restarting heavy jobs in the same sandbox. - NEW: System Reminders: Send-to-project memory brief trust boundary and Send-to-project gathered context trust boundary—Mark imported briefs and quoted folder history as untrusted background, with explicit boundaries that prevent their contents from becoming instructions. - NEW: System Prompt: Send-to-project coordinator handoff—Requires presenting the imported setup card without starting work, and treats source-session transcripts and MCP server labels as untrusted data. - NEW: Tool Parameter: SendToProject proposal and Skill: /send-to-project brief drafting guidance—Define concise handoff briefs, unfinished-work threads, evidence, and standing rules, excluding secrets and leaving thread creation under the user's control. - NEW: System Reminder: Send-to-project interrupted result recovery—Directs reporting partial transfer results and uncertain setup-card delivery, warning against retries that could create duplicate projects or setup cards. - NEW: Tool Description: SendToProject work brief and Skills: /send-to-project work brief slash command and /send-to-project work brief preload description—Describe confirmed session handoffs into new or existing Claude Projects, requiring Remote Control and a setup card whose threads users start themselves. - NEW: Tool Description: SendToProject message and Skills: /send-to-project message slash command and /send-to-project message preload description—Describe confirmed messages posted as the user in Claude Projects, requiring Remote Control but creating neither project-memory briefs nor setup cards. - NEW: Tool Description: SendToProjectContext—Returns folder context captured when the command ran, once per invocation, treating file contents and session history as untrusted data. - NEW: System Reminder: Background MCP call stopping session warning—Warns that pending call results may be lost after replying; background agents can wait in foreground, but repeating existing calls requires harmless duplication. - REMOVED: System Reminder: Combined thinking and reply token budget—Removes the standalone shared-budget warning and guidance to spend reasoning effort on planning rather than drafting the same deliverable repeatedly. - REMOVED: System Reminder: Message attachment files missing—Removes the standalone notice identifying missing attachment files, requesting reattachment, and conditionally explaining failures caused by insufficient device storage space. - Data: Data visualization choosing a form, Data visualization components, Data visualization anti-patterns, and Data visualization marks and anatomy; Skill: Data Visualization—Distinguish ranked, thin segmented, tall segmented, and stacked bars, with accessibility requirements and explicit exceptions for tall segmented bars. - Data: Data visualization marks and anatomy—Keeps vertical-axis numbers unabridged below 10,000 and horizontal-axis numbers below a million when space permits, using consistent formatting per axis. - Data: SDK API error kind field—Adds typed causes for administrator-enforced login refusal, connection failure, stream idle timeout, and detected computer sleep, clarifying their diagnostic limits. - Data: SDK set model error response model field—Removes the exception excluding the current model from a cloud tenant's still-pending set-model response, while preserving Remote Control exclusions. - Data: MCP server status error_code field—Adds client-registration unavailability for failed or authentication-needed servers, describing cached detection and preserving sign-in and reconnect actions for possible recovery. - Tool Parameter: PowerShell run_in_background note and System Prompt: Avoiding Unnecessary Sleep Commands (part of PowerShell tool description)—Qualify background completion notifications for sessions that may stop after replies, instructing Claude to obtain needed results before replying. - Tool Description: Agent (usage notes) and Tool Parameter: Bash run_in_background guidance—Add post-reply lifetime guidance alongside existing background execution instructions, explaining when work must stay active in an agent's foreground. - Tool Description: Background monitor (streaming events)—Extends turn-limited monitoring guidance to additional session types, recommending foreground waits in background agents or explicit instructions for the user. - NEW: Tool Descriptions: GetTask default completion guidance and GetTask stopping-session completion guidance—Preserve both completion variants, requiring needed results before replying in stopping sessions while retaining later notifications in the default variant. - System Reminder: Output token limit continuation—Shortens continuation instructions to finish the interrupted response and reopen code fences or table headers, dropping detailed repetition and formatting directions. - System Reminders: Staged file still copying and Staged files still copying—Specify foreground waits that finish when the file arrives or one minute elapses, before checking whether copying is still underway. - Tool Description: Computer use enable stub guidance—Replaces the specific Settings navigation path with the Computer use section of Settings when explaining where unavailable computer access may be diagnosed. - Tool Description: DesignSync—Explains that confirmation may omit paths that do not fit, requiring full disclosure on request and renewed confirmation after agreement. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.312 system prompts (-12,704 tokens): The prompts add guidance for pending file copies, idle machine disconnects, and safe retries after hook changes, while updating connector recommendations and removing several Artifact and planning prompts from the extracted collection. - NEW: Data: Windows protected path resolution denial—Explains refused writes when a Windows path may reach protected Claude Code files but cannot be resolved safely. - NEW: System Reminder: Attached machine idle disconnect notice—Explains idle disconnection and how to request the folder again, without polling or using the wrong machine. - NEW: System Reminder: Auto mode no verdict after another hook rewrite—Instructs Claude to retry the affected call alone after other results, and stop if it is denied again. - NEW: System Reminders: Staged file still copying and Staged files still copying—Explain that pending copies have not failed and guide waiting before reporting a delay. - REMOVED: Agent Prompt: Session title and branch generation—Removes the prompt for generating a short session title and Git branch name from the extracted collection. - REMOVED: Data: Artifact decision component HTML skeleton and Skill: Artifact components—Remove the decision component skeleton and its authoring instructions from the extracted collection. - REMOVED: Skills: Artifact data table, Artifact document, Artifact explainer, and Artifact report—Remove these artifact authoring instructions from the extracted collection. - REMOVED: Skills: Prototype description and Prototype runtime capabilities guidance—Remove prototype creation and real-data integration instructions from the extracted collection. - REMOVED: System Prompt: Plan mode interactive workshop offer and System Reminder: Plan mode prototype artifact option—Remove the instructions to offer these activities during planning. - Agent Prompt: Status line setup—Changes the five-hour usage limit wording from “session limit” to “limit” in the input description and example. - System Reminder: Plan mode approval tool enforcement—Removes the conditional third reason to end a planning turn associated with the interactive workshop. - Tool Descriptions: Artifact design skill loading guidance and Artifact page authoring and HTML skeleton—Remove the workshop document exception to the design-skill requirement. - Tool Description: Artifact line diff reading legend—Removes the note that document-page diff lines carry published block IDs that the local file may lack. - Tool Description: ListConnectors—Directs recommendations for uninstalled connectors to SearchMcpRegistry and SuggestConnectors, and clarifies that listing does not connect them. - Tool Descriptions: SearchMcpRegistry and SuggestConnectors—Tell Claude to suggest connecting relevant uninstalled results through claude.ai, while clarifying that neither tool connects them. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.311 system prompts (+4,096 tokens): Adds SDK documentation for session measurements, rewind-dependent handoffs, and plugin UI requests; strengthens reminders about consent and connection retries; and updates artifact publishing, file access, and platform guidance. - NEW: Data: SDK result process model-request turn count field—Documents the per-session count of earlier process turns that sent main-conversation model requests, including its error-result behavior. - NEW: Data: SDK result process streaming CPU time field—Documents process CPU time used while main-response streams are open, including concurrent work and measurement limits. - NEW: Data: SDK result main stream chunk count field—Describes how streamed response-body chunks are counted and when the count is unavailable. - NEW: Data: SDK result runtime tuning environment bitmask field—Documents a startup-time bitmask of runtime tuning variables set, without exposing their values. - NEW: Data: SDK result startup garbage collection counts field—Describes opt-in startup garbage-collection measurements on eligible hosted cloud workers. - NEW: Data: SDK turn handoff required rewind request ID field—Documents conditional handoff after a specific rewind, compatibility requirements, rejection cases, and retry precautions. - NEW: Data: SDK UI attach client request capabilities field—Describes how clients opt into plugin UI requests and replace or withdraw advertised capabilities. - NEW: Data: SDK UI prompt paint request schema—Documents plugin composer overlays, client opt-in, timeout behavior, and remote-session authorization restrictions. - NEW: System Reminder: Conversation activity awareness and authority warning—Treats conversation activity as awareness, not a fresh user instruction or approval, including when an edited message claims consent. - NEW: System Reminder: MCP server connection retry guidance—Identifies failed server connections and explains that searching for a server by name retries connection, subject to a cooldown. - REMOVED: Tool Description: Bash (working directory)—Removes the standalone note that the working directory persists between commands while shell state does not. - Tool Description: Project local_file read-only workflow—Adds long-line search and byte-range reading workarounds for oversized project files that cannot be paged normally. - Data: Claude API reference—PHP—Updates credential initialization examples and adds Bedrock SDK-version guidance for models older than Claude 4.7. - Data: Claude Platform on AWS reference—Updates the Go SDK installation and import paths to the v2 module. - Data: Files API reference—Java—Uses the beta file metadata type and revises the explanation of beta message types. - Data: OpenTelemetry tracing reference—Python—Updates the example Anthropic API version to 2026-10-21. - Data: SDK API error kind field—Documents unattended cloud-session start limits and unconfirmed checks, including their different replay and retry implications. - Data: SDK message_stop abandoned_blocks field—Extends abandoned-block guidance to responses stopped because the turn was interrupted. - Data: Streaming reference and Tool use reference—C#—Updates message examples to use explicit user and assistant message parameter types. - Data: Streaming reference—PHP—Removes the pinned SDK version from the Composer upgrade command. - Data: Turn handoff available event schema—Adds capability advertisement for handoffs that depend on a rewind request. - System Reminder: Message attachment files missing—Adds a conditional notice when an attachment could not be saved because the device has no space. - System Prompt: Windows sandbox localhost workarounds (local binding off)—Clarifies administrator-controlled managed settings and limits the project-settings caveat to the other settings path. - Tool Description: Artifact publishing and update guidance—Revises hash-routing and link behavior, adds hash-change handling, and warns against putting private values in URLs. - Tool Description: Artifact type discovery guidance—Removes “page” from examples of editable text documents in the type-discovery guidance. - Tool Description: Background monitor (streaming events)—Removes the diskless-session-specific stderr notice and describes stderr as going to the readable output file. - Tool Description: Code review command—Specifies that the effort level must precede any review target and tightens the command wording. - Tool Description: Publish audience-facing deliverables (app wording)—Distinguishes editable text documents from visual or interactive artifacts when choosing a publishing destination. - Tool Description: Skill proposal rendering—Allows updates to the user's own uploaded skills even when listed as plugin skills, while retaining restrictions on other plugins. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.310 system prompts (+3,227 tokens): Adds Artifact intake questions, sandbox worktree and Git Bash hook warnings, deprecated-model notices, and a project-document rewrite refusal, while updating Claude Test, rate-limit, SDK, and CronCreate wording and dropping connector-recommendation guidance. - NEW: Data: Artifact ask-first intake form instructions—Before creating a slides or design Artifact, Claude asks a few audience, scope and look questions in the Visualizer form, skipping when answers are already known. - NEW: Data: Sandbox worktrees directory listing failure warning—Warns that the sandbox cannot list a repository's worktrees folder, and whether sandboxed commands are write-denied there or can alter linked worktrees' files until the sandbox is rebuilt. - NEW: Skill: Claude API deprecated or retired models notice—Lists deprecated or retired Claude models found in the project with dates and replacements; Claude mentions them once and leaves existing model IDs unchanged unprompted. - NEW: Skill: Claude API Managed Agents onboarding from URL unavailable—When the skill's reference files couldn't be saved, Claude says setting up an agent from a URL is unavailable, that rerunning /claude-api retries, then stops. - NEW: System Reminder: Artifact comment wakes stopped by user—Tells Claude the user stopped Artifact comment watches or auto-replies, lists discarded pending notices, and says wakes stay off until Claude Code restarts and the artifact is republished. - NEW: System Reminder: Hook blocking reason (Git Bash not found, exit code 127)—Explains a hook blocks because Git Bash wasn't found and exited 127, how the user can fix it, and that Claude must not change the hook. - NEW: System Reminder: Project document rewrite without current text refusal—Refuses a project doc write when its current text isn't in context, requiring a project_read first and forbidding delete-and-rewrite. - REMOVED: Tool Description: CronCreate (durability note)—Removes the standalone durability section; its guidance now sits inline in CronCreate, shown only when durable cron is enabled. - Agent Prompt: Claude Test author and Agent Prompt: Claude Test explorer—Add the Claude Test browser plugin's claude_test_pane_note tool to their disallowed-tools lists. - Data: Artifact connector server naming guidance—The example connector segment is now slack_example_com instead of the fixed claude_ai_Slack_beta when a server-key naming feature flag is on. - Data: Claude Test spec file format—Adds an optional area front-matter key, one lower-case word naming the part of the app a test covers, which Claude Test's panel groups tests by. - Data: Rate limit unified windows—Adds per-window status and surpassedThreshold fields, and says events now also fire when a window's status or threshold changes. - Data: SDK set max thinking tokens request schema—Narrows when a highlights thinking display is refused: now on Bedrock, Vertex or gateway models older than Claude Opus 4.7, not every non-first-party provider. - Skill: Claude guide unavailable reference fallback—The inlined shared/live-sources.md tables now drop their third "Extraction prompt" column, leaving only topic and URL. - Tool Description: CronCreate—Durability guidance is now inline, with a short "Session-only" notice when durable cron is off; the "Not for live watching" section now always appears instead of only when Monitor is enabled. - Tool Description: ListConnectors, Tool Description: SearchMcpRegistry, and Tool Description: SuggestConnectors—Drop the guidance to recommend not-yet-installed connectors (pointing to SearchMcpRegistry → SuggestConnectors, or telling the user to connect via claude.ai). Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.307 system prompts (+5,273 tokens): Adds Windows sandbox guidance for HTTPS blocked in programs using Windows' own TLS and for hanging pytest runs, a feature-flagged auto mode reminder to finish the whole job, per-run values for Claude Test specs, and SDK documentation for interrupted prompts, model reporting, and copied file paths. - NEW: Data: SDK command_lifecycle scheduled_for field—Gives the time a fired /loop wakeup was set for, so a host keeping an idle session alive can tell it from a newer pending wakeup. - NEW: Data: SDK read_file anchor as_written kind—Resolves a path copied from Claude's replies against the cwd, git root, and files the session has read or written, reading only an unambiguous match. - NEW: Data: SDK set model error response model field and SDK set model success payload model field—Internal fields, sent by claude -p and claude-code-server, reporting the model the next turn runs after set_model succeeds or fails, with aliases resolved to IDs. - NEW: Data: SDK user message requeue_if_interrupted_within_ms field—Internal input that puts a person's typed prompt back at the front of the queue, instead of losing it, when an interrupt crosses the turn taking it in. - NEW: Data: Self-hosted runner diff-finds-nested-repository exec path notice—At startup, notes that with --diff-finds-nested-repository on, a custom session launcher must put the runner's arguments first and start a Claude Code release no older than the runner. - NEW: Data: sshHostCommands setting—Documents a Claude Desktop setting, read only from user or managed settings, for macOS and Linux SSH connections whose host comes from a local command; Claude Code ignores it. - NEW: System Prompt: Windows sandbox pytest cache hang—Warns that a recent pytest in a project without .pytest_cache can hang after printing results in the Windows sandbox; Claude kills it and reruns it with -p no:cacheprovider. - NEW: System Prompt: Windows sandbox Schannel TLS retry guidance and Windows sandbox Schannel TLS user alternatives—Explain that programs using Windows' own TLS, like curl.exe and dotnet restore, cannot make HTTPS connections in the sandbox; Claude retries unsandboxed with a warning where allowed, otherwise leaves that to the user, never disabling certificate checks. - NEW: System Reminder: Auto mode finish exposed work—Behind a feature flag, auto mode has Claude finish the intended job, minimally fixing check failures and clearly exposed bugs, asking only for user-only values or destructive steps, and not ending on offers. - NEW: System Reminder: Cloud session device tools not yet available—When a cloud session has not yet confirmed that tools may run on the user's connected computer, Claude works in the cloud and, if asked, says it cannot reach that computer yet. - NEW: System Reminder: Message attachment files missing—Tells Claude which attached files could not be fetched or saved to the uploads folder, or how many may be missing, and to ask the user to reattach any it cannot find. - REMOVED: Data: SDK safeguard_results field and SDK safeguard_tool_use field—Remove the internal fields through which a worker could take a server-side classifier's dangerous_tool_use verdict on one tool call; auto mode still reads safeguard_results from API responses. - REMOVED: System Prompt: Subagent delegation when-to-use guidance—Removes the variant that pointed to matching agent types and optionally suggested effort: "lower" for parallel lookups; Subagent delegation cost guidance keeps its own advice on when to delegate. - Agent Prompt: Claude Test author—Writes its spec drafts with the Claude Test plugin's write tool instead of Write, quotes only the stable part of dynamic headings, and stamps created or edited records with {run}. - Agent Prompt: Claude Test explorer—Adds the Claude Test plugin's write tool to its explicit tool denials. - Agent Prompt: Web reading specialist—When WebFetch says a page came from a stored copy, the agent reports that copy's date instead of fetching the page again in hope of a newer one. - Data: Claude Test spec file format—Adds the {run} placeholder, a per-run stamp for values in journeys that create or edit records, and "reads" versus "contains" wording for whole or partial text. - Data: SDK API error kind field—Documents empty_completion: when a reply and its one retry are both empty on a person's own prompt, the turn ends as an error instead of a blank reply. - Data: SDK read_file anchor field—Extends anchors to as_written, which names no directory and carries its own contract; an anchor the session does not serve is now refused. - Data: Self-hosted runner orchestrator command help—Documents --agent-proxy-url, an agent proxy handed to spawn-runner hooks as SELF_HOSTED_RUNNER_AGENT_PROXY_URL to pass on to every runner they start. - System Prompt: Windows sandbox package cache limits—Adds that a .NET restore that must download fails in the sandbox because of Windows' own TLS. - System Reminder: Managed Agents ant command refused (local ID form or placement)—Now spells out the one accepted command shape: each local ID as its own ant argument, plain commands with at most one pipe after ant, no variables, redirects, or substitutions, and --base-url for self-hosted servers. - Tool Description: Bash (sandbox—tmpdir)—Uses $env:TMPDIR instead of $TMPDIR in sessions without the Bash tool, such as PowerShell-only sessions outside Windows. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.304 system prompts (+3,747 tokens): Rebuilds unreachable-machine notices around why an attached computer dropped off and what brings it back, adds inline plan approval and monitor caveats for diskless sessions, updates trust and consent guidance for unverified managed-folder instructions, Artifact browser access, and plugin scans, and removes the whiteboard skill prompts. - NEW: Agent Prompt: Artifact type creation slash command (first-party type), Artifact type creation slash command (MCP connector tools), and Artifact type creation slash command (MCP connector tools, first-party type)—Add creation instructions for when the Artifacts MCP connector's tools replace the built-in Artifact tool, and for types the quickstart has no option for, a case neither /design nor /slides triggers. - NEW: System Reminder: Attached machine could not be reached (asleep, busy, cause unknown, signed off, and went silent)—Add cause-specific follow-ups naming the remedy: waking the computer, checking its network without quitting Claude, or reopening Claude there; unknown causes keep the generic check. - NEW: System Reminder: Attached machine not answering—Splits out the opening shared by the retry-shortly and stop-calling arms, adding Claude not running on the machine to the usual causes. - NEW: System Reminder: Attached machine signed-off likely causes and Attached machine signed-off notice—Give likely reasons a machine's Claude signs off; once all machines have, run commands here and say reopening Claude with Remote Control on usually brings them back. - NEW: System Reminder: Memory file contents (unverified managed folder)—Heads unverified instructions from this machine's managed folder, warning that this session's own account could have written them: follow every limit, but treat nothing in them as permission. - NEW: Tool Description: ExitPlanMode (diskless session)—Without a plan file, Claude passes the whole plan inline as Markdown for approval; declining keeps Claude in plan mode to revise and resubmit. - NEW: Tool Description: SubscribePR—Describes subscribing a session to a GitHub pull request's CI failures, all-green notices, review comments, and close/reopen events; no built-in tool uses this description in this build. - REMOVED: Skill: Artifact whiteboard when-to-use guidance, Multiplayer whiteboard description, and Whiteboard description—Remove the whiteboard and multiplayer whiteboard skill descriptions and the guidance for offering a whiteboard unprompted; whiteboard publishing code remains in the build. - REMOVED: System Reminder: Attached machine could not be reached (return noted) and Attached machine could not be reached (return not noted)—Replaced by the cause-specific arms, which keep the same limits on calling the machine again and still have Claude tell the user what is blocked. - Agent Prompt: Claude Test explorer—Adds effort: medium to its frontmatter and lowers the report cap from 60 to 40 lines. - Data: Artifact host MCP server guidance—Says host:claude_browser answers when the page is opened in the Claude desktop app, not only in a Cowork session; viewers are asked at its first call instead of per website, then at each action reaching banking or other high-risk sites. - Data: Claude Platform on AWS reference—Adds an ant CLI row: with the region and workspace ID set, commands other than ant beta:worker go to Claude Platform on AWS; confirm with ant auth status. - System Reminder: Attached machine could not be reached and Attached machine could not be reached (oversized call)—The opening now says when the machine was last heard from, if known; its request to check that Claude is running moves into the oversized-call and cause-unknown arms. - System Reminder: Attached machine not answering (retry shortly) and Attached machine not answering (stop calling)—Now follow the shared not-answering opening; retry-shortly has the user check that Claude is open there, and stop-calling says opening Claude with the computer awake and online brings it back. - System Reminder: Plan approved—Mentions where the plan was saved, and referring back to it, only when the session has a plan file. - System Reminder: Unreachable attached machines—Has Claude relay what each machine's line says about why it is unreachable and what brings it back, instead of a fixed asleep, offline, or not-running explanation. - Tool Description: Artifact publishing and update guidance—Adds that a page's own URL changes never show in the address bar, so name bookmarkable views with bare, non-reserved hash tokens and give users each view's link. - Tool Description: Background monitor (streaming events)—In diskless sessions, adds a note that monitors are dependable only while Claude is working, and scopes per-occurrence monitors to the current turn. - Tool Description: Bash (sleep—no polling background tasks) and Tool Parameter: Bash run_in_background guidance—When background shells are kept elsewhere, say Claude is notified of a background command only if it finishes while Claude is still working. - Tool Description: Plugin organization submission and replacement—No longer says claude.ai scans every upload; whether it scans depends on the organization, so Claude reports a scan only as the result states. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.302 system prompts (+1,759 tokens): Adds a feature-gated Easel tool for charting data already in the conversation, restructures Artifact resubmission refusals with a recovery path for publishes that carry edits, makes fork guidance conditional on whether forks run in the background, routes data dashboards to the Dashboard type, and notes standalone Claude Design's December 14, 2026 closure. - NEW: Tool Description: Easel chart—Draws charts from small tables already in context without guessing ambiguous columns; feature-gated, off by default, Linux/macOS only, and unavailable to HIPAA/ZDR organizations. - NEW: Tool Description: Artifact publish-edits resubmission merge guidance and Artifact publish-edits resend clause—Require merging newer content into the file with Edit or Write before resending, omitting edit pairs that would add those lines again. - NEW: Tool Description: Artifact resubmission refetch confirmation clause—Preserves the shared requirement to freshly fetch the artifact and fully read any required saved source before confirming newer changes are already included. - REMOVED: Tool Description: Artifact identical resubmission refusal—Consolidates live-version recovery into Artifact known-version resubmission guidance, parameterized for live or known newer source; identical-content refusal behavior remains. - Agent Prompt: Claude Test author and Claude Test explorer—Expand explicit tool denials to additional Claude Test browser helpers, including installation, saving, status, progress, logging, finishing, and reading. - System Prompt: Agent Summary Generation—Adds notes-based third-person summaries, omitting the tool ban and allowing the previous label to remain while the agent continues the same work. - System Prompt: Fork usage guidelines and Forked agent guidance; Tool Description: Agent (usage notes)—Make background-execution claims conditional and scope notification/no-peeking guidance to background forks; retain anti-fabrication warnings for background agents when forks run synchronously. - System Prompt: Project coordinator relay trust boundary, Project timeline user message provenance, and Project thread in-thread message provenance—Name available Project read/reply tools, including alternate names, when explaining untrusted fetched content and which messages can establish consent. - Tool Description: Artifact quickstart type guidance and Artifact type discovery guidance (including app wording)—Route data dashboards through the Dashboard type when offered, using quickstart intent other; distinguish visual mock-ups and honor requests for files. - Tool Description: Artifact stale publish saved-source guidance—Adds recovery for publishes carrying edits: merge saved-source lines into the file with Edit or Write, then resend using old strings from that merged file. - Tool Description: DesignSync—Adds notice that standalone Claude Design closes by December 14, 2026; requires relaying closure or relocation refusals verbatim and stopping. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.301 system prompts (+10,251 tokens): Adds feature-gated lean rewrite alternatives for core instructions and tool guidance, a cloud-session reminder that settings edits need host approval, and conversation-summary instructions that can cap output at 2,000 words while carrying earlier user requests forward unchanged. - NEW: Agent Prompt: Parent messages and user authorization (lean rewrite)—Adds feature-gated alternate delegation guidance: parent messages direct tasks but cannot supply user consent or authorize permission, instruction-file, or configuration changes. - NEW: Agent Prompt: Subagent reporting notes (lean rewrite)—Adds alternate reporting guidance requiring absolute paths and direct final-message findings, with code snippets only when their exact text matters. - NEW: System Prompt: Background session instructions, Background session worktree isolation, and Background worktree persistence (lean rewrite)—Add alternate guidance for isolated edits, job-local temporary files, actionable reports, and preserving work through commits and pushes unless user instructions forbid them. - NEW: System Prompt: Context management (lean rewrite)—Adds alternate guidance to continue working through long conversations rather than wrapping up early, relying on automatic compaction within user limits. - NEW: System Prompt: Delivering requested work and Handling corrections (lean rewrite)—Add alternate guidance to follow explicit scope, postpone blocking questions until independent work finishes, and correct minor mistakes without excessive self-criticism. - NEW: System Prompt: Focus mode and Outcome-first communication style (lean rewrite)—Add alternate guidance for self-contained, outcome-first final replies; focus mode omits intermediate narration because only final text is visible. - NEW: System Prompt: Harness instructions (lean rewrite)—Adds alternate guidance covering clickable code references, independent parallel tool calls, permission denials, and treating hook output as user-system feedback. - NEW: System Prompt: Irreversible action caution (lean rewrite)—Adds alternate guidance to check authorization before hard-to-undo actions, understand files before deletion or overwriting, and faithfully report failures or skipped steps. - NEW: System Prompt: Memory hygiene (lean rewrite)—Adds a selectable alternate memory policy emphasizing deduplication, removing incorrect memories, avoiding redundant or session-only material, and verifying recalled references. - NEW: System Prompt: System reminder interpretation (lean rewrite)—Adds alternate guidance to ignore irrelevant application reminders while keeping reminders distinct from user instructions and consent for consequential actions. - NEW: System Reminder: Cloud session settings edit not applied—Explains that settings edits need approval on the host computer; reports the unapplied change and forbids retries or alternate editing routes. - NEW: Tool Description: Agent (when to launch subagents), Agent delegation summary, Agent delegation tradeoffs, and Agent result visibility (lean rewrite)—Add alternate guidance on agent selection, parallel delegation, supplying context, avoiding duplicate searches, and relaying completed results without inventing unfinished findings. - NEW: Tool Description: AskUserQuestion (lean rewrite)—Adds alternate guidance to ask only for genuinely blocking user decisions, place recommended choices first, and support custom or multiple answers. - NEW: Tool Description: Grep compact (lean rewrite)—Adds alternate ripgrep guidance favoring the integrated search tool for permission handling and file links, with regex, filtering, and multiline options. - NEW: Tool Description: Invoke skill (lean rewrite)—Adds alternate skill-loading guidance covering explicit requests, directory-specific selection, already-loaded instructions, and waiting for background skill results without invoking them again. - NEW: Tool Description: ToolSearch (lean rewrite)—Adds an alternate description explaining that tool search loads deferred tool schemas and that the system announces available deferred tools by name. - NEW: Tool Description: Workflow (lean rewrite)—Adds alternate workflow guidance retaining explicit user opt-in for large-scale orchestration, background completion notifications, inline scripts, and required literal workflow metadata. - Agent Prompt: Conversation summarization with additional instructions—Adds optional 2,000-word limits and unchanged carryover of earlier user requests; makes analysis conditional while preserving security constraints without it. - Agent Prompt: Workflow script plain text return note, Workflow script structured return note, Workflow subagent plain text output, and Workflow subagent structured output—Clarify that script-computed task text lacking user authority still assigns a workflow step; perform only that step rather than skipping it. - Data: Cloud session unverified remote branch push notice—Makes push-and-restart advice conditional, while still explaining when the remote branch or detached checkout could not be verified for session startup. - System Reminder: Plan file reference—Handles plans without a file path by announcing that a plan exists, rather than always displaying a plan-file location. - Tool Description: Artifact HTML document skeleton—Adds a fixed pseudo-element to paint the top safe-area band above sticky headers, using the header or page background as appropriate. - Tool Description: claude.ai Project—In main-conversation upload mode, limits local paths to unchanged, fully read text files up to 1 MiB in upload, output, or non-home working directories. - Tool Description: Claude in Chrome switched-off and unlinked chat guidance and Computer use unlinked chat guidance—Recognize tools appearing later despite earlier unavailable results; add desktop folder attachment as a linking remedy and avoid repeating exhausted setup steps. - Tool Description: Plugin organization submission and replacement—Directs users to make an outdated plugin version current and publish it on claude.ai, rather than asking the agent to retry publication. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.300 system prompts (+10,545 tokens): Sharpens pasted-content trust boundaries and sharing consent, reinforces edit-before-republish rules for Artifacts, and clarifies file handling, unavailable tools, and retry limits, alongside new tracing examples and guidance on managing the shared reasoning-and-reply token budget. - NEW: Data: Managed settings x-whenUnreadable field—Defines fallback and unusable states for invalid managed values; an unusable MCP server list keeps plugin-provided server tools blocked. - NEW: Data: OpenTelemetry tracing reference (C#, Go, Java, PHP, Python, Ruby, TypeScript)—Adds SDK tracing examples for registering providers, configuring content recording, and propagating context to connect application, SDK, and API spans. - NEW: System Prompt: Pasted content instruction trust boundary—Treats paste-only messages as requests without confirmation, checks pasted commands before execution, and keeps embedded document instructions separate from user intent. - NEW: System Prompt: Published artifact inline edits and large-change republish and Published artifact same-response edit and republish—Prefer inline publish edits when supported; otherwise edit before republishing in the same response, preserving the published artifact when edits fail. - NEW: System Prompt: Session scratchpad temporary-file guidance—Requires session scratchpad use instead of system temporary directories unless explicitly requested, and complete absolute paths when naming scratchpad files. - NEW: System Reminder: App tool server retrying connection failure—Continues work while app tools reconnect automatically; avoids user-side repair requests and describes blocking failures only as something wrong on our end. - NEW: System Reminder: Combined thinking and reply token budget—Warns that reasoning and reply share one token limit; directs effort toward planning long deliverables rather than drafting the output twice. - NEW: System Reminder: Staged files failed to arrive—Warns that failed transfers can leave missing or older files; identifies disk-space and filename-length remedies, requiring consent before deleting user files. - NEW: Tool Description: Artifact multi-file edit and republish guidance and Artifact small-change edit and republish guidance—Require edits before republishing the same path in one response, avoid unnecessary reads, and preserve publication when an edit fails. - NEW: Tool Description: Claude in Chrome switched-off chat guidance and Claude in Chrome switched-off and unlinked chat guidance—Explain disabled access and optional computer linking, restrict troubleshooting to supported setup steps, and continue with available tools instead of guessing causes. - NEW: Tool Description: Claude in Chrome unavailable stub result—Explains that the stub enables nothing; reports unavailable Chrome access without guessing causes or suggesting setup, and uses available alternatives. - NEW: Tool Description: Plugin organization submission and replacement—Describes consented uploads and organization review, requires fresh consent for replacement, and waits for user action before retrying an outdated version. - NEW: Tool Description: Project local_file read-only workflow—Requires copying read-only project files into a new working file before editing; saving an uploaded document creates text without replacing the upload. - REMOVED: Tool Description: Existing Claude Docs artifact content—Drops the standalone instructions to edit the document bound to an artifact and create a replacement only when that document is absent. - Agent Prompt: Agent Hook—Removes the instruction to ignore transcript_path in hook input when no transcript file exists; still states that no transcript is available. - Agent Prompt: Web fetch agent usage guidance and Web reading specialist—Limit retries to timeouts, dropped connections, or Retry-After responses; warn against resending permanently failed URLs and sites refusing automated fetches. - Data: Claude Code agent proxy troubleshooting guide—No longer attributes proxy denials specifically to organization policy; describes disallowed hosts as the usual cause and removes named escalation destinations. - Skill: Mod GitHub sharing consent—Requires scanning files for keys before reading them, leaves flagged files unopened, and checks remaining files for secrets, internal URLs, or others' data. - Tool Description: Artifact HTML document skeleton—Requires side-viewport metadata and both gutter paddings together; leaves older pages lacking both unchanged unless the request reworks their layout. - Tool Description: Computer use enable stub guidance—Requires loading all deferred computer tools in one tool-search call and waiting for its result before using them; no separate enable step exists. - Tool Description: Updating existing artifacts (app wording)—Adds same-response edit-and-republish guidance selected by inline-edit support, requiring edits before publication and preserving the artifact when an edit fails. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.299 system prompts (+6,453 tokens): Tightens consent boundaries for sharing and delegated work, spells out Windows sandbox recovery limits, and refines shared-document editing and conflict handling. Runner and SDK guidance also gets more precise about interrupted work, replayed messages, and scheduling, without treating metadata as permission or approval as a mode change. - NEW: Skill: Mod GitHub sharing consent—Offers sharing only after a working mod is demonstrated; requires separate sharing and visibility decisions and a pre-commit sensitive-data review. - NEW: System Prompt: Project coordinator relay trust boundary and Project coordinator reply consent—Treat coordinator relays as external content; replies approve only one explicitly proposed action and target, never menu options or vague retries. - NEW: System Prompt: Subagent carried user consent history—Credits parent-session user messages without letting delegation invent consent; bare replies apply only to preceding assistant messages, and trimmed history stays partial. - NEW: System Prompt: Windows sandbox certificate recovery—Requires a user-side HTTPS connection before retrying certificate failures, forbids weakening certificate checks, and stops after one unsuccessful retry. - NEW: System Prompt: Windows sandbox localhost retry guidance and Windows sandbox localhost user alternatives—Explain localhost failures and proxy exceptions; require port-scoped allowances and disclose lost sandbox protection, with user-directed alternatives where retries are unavailable. - NEW: System Prompt: Windows sandbox package cache limits—Documents read-only Maven cache access and warns that .NET builds using --no-restore after an outside restore can delete package DLLs. - NEW: System Prompt: Windows sandbox placeholder file protection—Protects sandbox-created empty configuration files from staging, moving, deletion, and ignore rules; tells the user when they block Git operations. - NEW: System Prompt: Windows sandbox profile tool retry guidance and Windows sandbox profile tool user guidance—Diagnose profile-installed tool failures as sandbox restrictions; reserve narrow read grants for the user and warn that large grants can impede startup. - NEW: System Reminder: Artifact capabilities contract unavailable—Explains refused capability declarations and permits omitting them only when needed capabilities are already stored or the user requests it, disclosing missing grants. - NEW: System Reminder: Artifact published source edit guidance—Directs exact small replacements through publish-call edits, updating local source and publication together; larger rewrites still use file edits. - Tool Description: Updating existing artifacts (app wording)—Adds conditional guidance to send small changes as exact replacements on the publish call instead of editing the local file first. - NEW: System Reminder: Project document version conflict recovery—Requires rereading and merging after a version conflict, allows two retries, and forbids dropping the version guard or deleting the document. - Tool Description: claude.ai Project—Requires replacing shared documents with the version read; conflicting writes change nothing and must be merged into the latest version. - NEW: System Reminder: Reserved-address MCP server refusal—Explains that reserved server addresses are refused by Claude Code, not connection failures or administrator policy, and that retrying cannot help. - NEW: System Reminder: Resume agents interrupted by container restart—Directs resuming interrupted agents from saved transcripts rather than duplicating them; relaunch only if resuming fails and the result is still needed. - NEW: System Reminder: User-controlled plan mode exit—In sessions without a plan file, presents the plan in the reply and requires a user mode change; approval alone leaves planning read-only. - NEW: Tool Description: Existing Claude Docs artifact content—Directs editing the already-bound Claude Docs document instead of creating another; create and bind a replacement only when that document is absent. - REMOVED: Tool Description: Artifact stale publish line diff guidance—Drops the standalone live-page line-diff merge instructions; saved-source recovery guidance remains, so this does not remove stale-publish protection. - Data: Interrupt receipt cancelled field and Interrupt receipt still queued field—Clarify cancellation of interrupted-turn reruns and associated client messages: associated UUIDs appear once under cancelled, though never queued or listed as survivors. - Data: SDK safeguard_results field—Accepts only blocking verdicts for repeated message IDs; clients must send clearing verdicts only for the first call of a response. - Data: Self-hosted runner orchestrator command help—Adds optional SIGTERM draining for in-flight polling and hooks, with immediate-stop escalation and process-manager timing guidance; the default remains immediate stop. - Data: Tool use display metadata field—Adds connector identity, dynamic-server identity claims, and unprefixed tool names for display; dynamic claims are not verified identities or permission grants. - Data: Turn handoff available event schema—Reports shared_message_id, letting clients discover whether the worker accepts assistant messages in the same turn sharing an ID. - Data: Turn handoff hydrates_carried_lines field—Requires storage confirmation for every message before echoing replayed turns; explains refusal cleanup and the limit of retained refusal history. - System Prompt: Coordinator mode orchestration—Adds an agent-result status for waiting on its own background work, warning that its result may be interim and another notification may follow. - System Prompt: Self-hosted runner doctor—Adds safe noninteractive Git credential diagnosis and fixes, warns that the git proxy erases global configuration, and clarifies startup-timeout wording. - System Prompt: Self-hosted runner setup—Warns that repository cloning needs noninteractive HTTPS credentials and explains clearing a failed session before restarting the local runner, without altering Git settings. - System Reminder: Attached machine untrusted attachments refusal—Adds fallback guidance when neither folder-trust tool is available: explain the block and suggest a fresh session without attached repositories or files. - Tool Description: Artifact HTML document skeleton and Artifact responsive page contract—Require side safe-area gutters and a matching viewport-fit metadata tag; extend inset handling to fixed, floating, and absolutely positioned controls. - Tool Description: claude.ai Project—Adds conditional original-file downloads for document uploads whose extracted text misses layout or figures, and uses the session's read-tool name. - Tool Description: CronCreate—Describes fixed per-job schedule offsets and requires reporting actual next-run timestamps returned by scheduling tools, rather than the cron expression's nominal minute. - Tool Description: WebFetch (concise) and WebFetch private URL warning—Add conditional guidance to fetch URLs already seen in conversation; use search or linking pages instead of inventing paths or recalling URLs. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.296 system prompts (+560 tokens): Adds Managed Agents quickstart templates and subagent delegation guidance, drops terminal-wording Artifact publishing variants, Bash cost advice, and the PHP and Managed Agents outcomes references, and revises self-hosted runner, gateway, and summarization instructions. - NEW: Data: Managed Agents quickstart (Bug hunter, Explainer video maker, Watchlist scanner)—Three bundled templates, each with agent.md, environment and session definitions, built on parallel workflow runs with an independent review step. - NEW: System Prompt: Subagent delegation when-to-use guidance—Delegate when an agent type matches, work is independent and parallel, or answers span several files; search directly for single-fact lookups. - NEW: Data: Self-hosted runner disabled-by-organization fatal message—Explains that registration was refused because self-hosted environments are off for the organization, and that the accepted environment secret should not be rotated. - NEW: Data: SDK set model only_if_model_is_current field—Internal flag making a set_model request a system-prompt-only update that succeeds only when the named model is already current. - NEW: Data: Turn handoff hydrates_carried_lines field—Internal field marking workers that rebuilt their conversation from the stored transcript, and describing how resent handoffs are re-accepted, echoed, or refused. - REMOVED: Tool Description: Artifact publishing introduction, Artifact runtime capabilities guidance (including optional marker), Artifact browser storage guidance (v2 page contract and capabilities-skill variants), Updating existing artifacts, Prohibited artifact publishing, Publish audience-facing deliverables, and Artifact gallery and publish response guidance—Terminal-wording variants dropped; app-wording counterparts remain, but the gallery and publish-response note has no replacement. - REMOVED: System Prompt: Bash call cost guidance—Drops the advice to batch a decision's work into one command, keep printed output small, and recheck every requirement before finishing. - REMOVED: Data: Managed Agents outcomes—Drops the standalone outcomes reference covering user.define_outcome, rubrics, grader iterations, and deliverables. - REMOVED: Data: Tool use reference (PHP)—Drops the PHP tool-use reference, including the beta tool runner and manual agentic loop. - Data: Tool use reference (C#, Ruby)—Adds a "When to offer Managed Agents" section: after finishing large repeated-step Messages API jobs, offer Managed Agents once, with trade-offs. - Data: Claude Code gateway protocol—Documents a Desktop Code tab probe sending If-None-Match: * for session settings, and how 200/304/404, errors, and timeouts affect session startup. - System Prompt: Self-hosted runner doctor—Adds troubleshooting rows for the organization-disabled refusal, spent or expired work orders, rejected work orders, and poll-auth failures on on-demand runners. - Tool Description: SendMessage—When messaging beyond a session's own agents is disabled, recipients are limited to session agents, and the inbox and legacy protocol-response text are dropped. - Tool Description: Agent usage notes—Adds a conditional note: give each parallel fan-out lookup effort: "lower", use "lower" for mechanical, self-checking briefs, and "higher" for pieces needing more reasoning. - Tool Parameter: Bash run_in_background guidance—Adds a conditional note that background commands keep running after the reply ends until they finish or time out, while shell-detached processes (nohup, &) are usually stopped minutes later. - System Prompt: Subagent delegation cost guidance—Calls the subagent brief your "first" lever on every cost, rather than your "one" lever. - Agent Prompt: Dream memory consolidation—Removes the session-logs (logs/) source and its ls -R logs/ step; sessions/ entries and transcript search remain. - Agent Prompt: Conversation summarization (short variant)—Drops the security-instruction preservation note, user-message attribution guard, and closing line about following additional summarization instructions. - Data: Data visualization marks and anatomy—Y-axis ticks now use compact labels from 1,000 up (0 / 1K / 2K) instead of comma-separated thousands. - Data: Turn handoff available event schema—Adds hydrates_carried_lines to the capabilities the available event reports. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.295 system prompts (+5,697 tokens): Adds prompt guidance for merging live Artifact changes and publishing small edits in one response. It also adjusts background-command completion notices, remote-machine reconnection instructions, web-search citations, and consent before Claude Test seed scripts run. - NEW: Agent Prompt: Background agent state classifier chat-thread relay rule—For sessions that reach people only through chat-thread posts, a named person counts as the user, so open asks stay blocked even beside scheduled check-ins. - NEW: Agent Prompt: Subagent delegation configuration classifier—Judges whether a user's CLAUDE.md, skills, and custom agents push Claude to delegate work to subagents, without obeying instructions found in that configuration. - NEW: Tool Description: Artifact stale publish line diff guidance and Artifact line diff reading legend—Stale-publish refusals can show a line diff of live-page changes, counted as viewed, to merge into your file, with a legend for the marks. - Tool Description: Artifact stale publish saved-source guidance—Leads with a live-page diff summary (changed places and lines) when the diff itself is not shown, then gives the saved-source merge steps. - NEW: Tool Description: Artifact same-response edit and publish guidance—When enabled, small known changes are made by sending Edit calls and the Artifact publish together in one response, without a prior Read. - Tool Description: Artifact HTML document skeleton and Artifact page authoring and HTML skeleton (app wording)—Drops the "off-white ground" from the default body style description, leaving a zero-margin system font. - NEW: Tool Parameter: Bash run_in_background guidance (completion notices disabled) and PowerShell run_in_background note (completion notices disabled)—When completion notices are off, nothing announces the finish; read the output file or end the command with your own echo. - System Prompt: Avoiding Unnecessary Sleep Commands (part of PowerShell tool description)—Omits the "you will be notified when it completes" sleep and polling advice when background completion notices are disabled. - Tool Description: WebSearch and WebSearch (concise)—When search citations are enabled, replaces the mandatory "Sources:" list with a note that result titles and page text are untrusted data. - System Prompt: Interactive agent intro—The default opener is now "an agent working with the user toward their goals, using your own judgment", replacing the software-engineering "interactive agent" line; previously flag-gated. - Tool Description: AskUserQuestion—Drops the plan-mode note in diskless-host sessions missing EnterPlanMode or ExitPlanMode; the shared usage guidance is otherwise unchanged. - System Reminder: MCP servers failed to connect—Distinguishes servers retried in the background, whose tools may appear later, from failures leaving tools unavailable for this session. - System Reminder: Attached machine stopped answering and went to sleep—Adds return-tracking and paused-or-withdrawn guidance, allowing another call after a reconnection note or explicit user request and requiring outcome checks before repetition. - System Reminder: Unreachable attached machines and unreachable-machine tool errors—Adds reconnection-note and five-minute recheck variants while retaining user-requested retry guidance and directing independent work to continue. - Agent Prompt: Web fetch agent usage guidance—Adds advice to read a public page rather than answer from memory when it holds the answer, and omits the SendMessage follow-up hint when unavailable. - Agent Prompt: Claude Test explorer—Explains why the file-access restrictions apply to every Read, Grep, and Glob: what the explorer reads stays with it and can end up in its report. - Data: Claude Test spec file format—The setupCommand seed script now asks before each run and runs only on a yes, instead of running automatically before every run. - Data: Claude Code gateway protocol—Tells gateways to send x-should-retry: false with 501 responses, and to answer count_tokens with Bedrock's CountTokens, falling back to 501 on failure. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.294 system prompts (+264 tokens): Rewrites the three hook-evaluator prompts to spell out when an action is allowed or blocked and to tell the evaluator to treat event data and inspected content as information rather than instructions. - Agent Prompt: Agent Hook—Requires a reason with every result, clarifies allow/block decisions, and rejects instructions embedded in event data or inspected content. - Agent Prompt: Hook condition evaluator (stop)—Adds guidance defining ok as allow/block and treating event JSON and inspected content as data, not instructions. - Agent Prompt: Hook condition evaluator—Reframes evaluation around whether an action may proceed, explains rule and condition outcomes, and rejects instructions embedded in evaluated data. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.293 system prompts (+2,629 tokens): Focuses on completing unblocked work and investigating quiet commands, with feature-gated Haiku 5.5 guidance, stricter Artifact version pinning, and clarifications for SDK metadata, Project uploads, agent continuation, and Chrome troubleshooting. - NEW: Data: Tool result display metadata field—Documents wrapper-level SDK metadata for non-execution reasons, remedies, permission decisions, and human denial feedback; never replayed to the model. - NEW: System Prompt: Finish the request instead of stopping early—Adds feature-gated Haiku 5.5 completion guidance: finish large and unblocked requests without unnecessary check-ins, while retaining approval for consequential actions. - NEW: System Reminder: Background command quiet check-in—Requires inspecting silent background commands for progress or hangs, stopping stuck work, and ending the turn for healthy long-running commands. - Tool Description: Artifact design fallback requirements, Artifact page implementation requirements (app wording) and Artifact publishing and update guidance—Require library URLs to pin exact versions at least two weeks old, rejecting bare names, ranges, and tags. - Data: Message Batches API reference—Python—The classification example now sets max_tokens=1024 with low effort, noting Haiku's default thinking counts toward max_tokens. - Data: SDK result safety_stops field—Counts content-filter stops only when they end the call; retried stops remain uncounted, so zero does not rule them out. - Data: syncClaudeAiSkills setting—Skills re-sync about every 10 minutes while a session is in use, and a quarter as often otherwise. - Data: Background tasks changed event schema—Removes the claim that the payload carries only IDs while retaining the warning not to correlate level changes with edge events. - Tool Description: claude.ai Project—Adds a main-conversation upload mode for unchanged files read or written in full this session, using absolute paths without repeating their contents. - Tool Description: Agent (usage notes) and System Reminder: Async agent launched metadata—Condition continuation instructions on availability, explaining that unsupported sessions start fresh agents and omitting unusable SendMessage hints. - System Reminder: Remote Chrome browser extension not connected—For multi-organization users, requires matching the extension's organization; reserves logout for failed checks, with advance warning about erased shortcuts and scheduled tasks. - Agent Prompt: Claude Test explorer—Rewords the file-access restrictions to require compliance in every Read, Grep, and Glob instead of emphasizing the agent's sole responsibility. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.292 system prompts (+7,031 tokens): Adds a batch of SDK reference entries (safety-stop counts, abandoned-stream markers, usage-limit errors, permission-check status), a consent-first PublishPlugin file listing, an Artifact preview in the real viewer, and smaller wording changes to queued notifications, computer use, web fetch, and Artifact guidance. - NEW: Data: SDK result safety_stops field—Reports a running per-session total of model calls stopped by a safety system, including refusals and content-filter stops; resets on resume or /clear. - NEW: Data: SDK MCP server disableAutoBackground field—When true, the CLI never auto-backgrounds calls to that server's tools, intended for servers whose calls wait on a person. - NEW: Data: SDK api_error_params field—Documents api_error parameters: refused effort level, removed-media kind and reason, credential-failure provider and remedy, and usage-limit rate_limit_info. - NEW: Data: SDK message_stop abandoned_blocks field—Marks a CLI-generated message_stop after a failed or stalled stream, so consumers can drop blocks from that index up that never got assistant messages. - NEW: Data: SDK task notification handback field—Completed-subagent notifications say how a SubagentHandback report reached its caller; omitted when the subagent failed, was stopped, or is still waiting. - NEW: Data: SDK permission_check_status event schema—Signals a tool call waiting unusually long on the auto-mode classifier, as a "checking"/"done" pair hosts can display; display-only and best-effort. - NEW: Data: Interrupt worker_epoch parameter—Ties a service-sent interrupt to one worker life, refusing stale or invalid values with errors; a person's Stop never carries it. - NEW: Data: SDK read_file anchor field—Resolves a read path against a fixed workspace, diff root, or repo checkout instead of the live cwd, refusing ~ and paths that escape it. - NEW: Data: SDK safeguard_results field and Data: SDK safeguard_tool_use field—Carry the Messages API verdict for one call so the worker can decide its permission; ignored if malformed or mismatched. - NEW: Data: SDK ui_prompt_autocomplete request schema—A remote composer asks plugins for autocomplete rows for the token at the caret; newer asks supersede older ones, and failed chains return no rows. - NEW: Tool Description: PublishPlugin file listing and consent flow—Lists the plugin's files, shows folder, organization, count and size, and asks the user first, in any permission mode; writes a manifest if none exists. - NEW: Tool Description: Artifact preview action (in-session viewer)—Opens the page in the real artifact viewer, returning a first-view picture, console errors, and a clickable outline; the viewer's own instructions win on when to check. - NEW: Data: Network-path settings file unread recovery guidance—When plugin uninstall couldn't read a settings file through a link to another machine, says to replace the link or use the real location, then retry. - NEW: System Reminder: Queued notifications read-time clock note—States when the read happened by this machine's clock and explains the queued-at, reached-session, and whole-wait headers, including clock skew. - NEW: Agent Prompt: Background agent state classifier ask-opens-message rule and Agent Prompt: Project thread status card classifier ask-opens-message rule—Classify a message that opens with the agent's need as blocked or needs-reply unless the tail resolves it; offers still don't gate. - NEW: Tool Description: Computer use unlinked chat guidance—Says computer tools cannot be linked from this chat, so the model tells the user briefly, uses other tools, and suggests opening the chat in the desktop app. - Agent Prompt: Web fetch agent usage guidance—Clarifies that without a built-in fetch tool this agent stands in for it, so calling it to read a page is ordinary tool use. - Tool Description: Agent explicit-spawn restriction—Adds an exception: where the web fetch agent type stands in for a missing fetch tool, calling it to read a page is ordinary tool use. - Data: Artifact capability verification pass—The pre-publish preview step is now offered only when the artifact check tool is the local Chrome viewer. - Data: Background tasks changed event schema—The event also fires when an entry's parent_task_id changes, and now spells out the ordering between level changes and task start, update, and notification events. - Data: SDK API error kind field—Adds the usage_limit_reached kind for an account plan limit or usage-credit spend cap, distinguished from policy, throttle, capacity, and API-key 429s. - Data: Turn handoff file names field—Adds that if a person later sends another file under a placed name, the copy is replaced or removed while still unchanged. - Data: Turn handoff memory context field—The memory line is now also used on history requests when the session holds none of its messages yet; wording "runs without" becomes "goes on without". - Skill: Artifact diagramming—Artifacts made from an Artifact type draw diagrams as that type's instructions and referenced pages say; these mechanics apply only where they are silent. - System Reminder: Queued notifications delivery—The formatted notification list now appears directly after the "listed oldest first" sentence. - Tool Description: Artifact action reference and Artifact action reference (concise app wording)—The list action now returns artifacts most recently opened or updated first, instead of newest first. - Tool Description: Computer use enable stub guidance—Adds that the Claude app on the computer may show why under Settings → This computer → Computer use. - Tool Description: GetTask—Drops "when your turn ends or" from the note that a task's status message says it is terminated at your final response. - Tool Description: SuggestConnectors—Accepts installed connectors' server_id values listed in the system prompt, as well as ids from a SearchMcpRegistry result. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.292 system prompts (+7,031 tokens): Adds a batch of SDK reference entries (safety-stop counts, abandoned-stream markers, usage-limit errors, permission-check status), a consent-first PublishPlugin file listing, an Artifact preview in the real viewer, and smaller wording changes to queued notifications, computer use, web fetch, and Artifact guidance. - NEW: Data: SDK result safety_stops field—Reports a running per-session total of model calls stopped by a safety system, including refusals and content-filter stops; resets on resume or /clear. - NEW: Data: SDK MCP server disableAutoBackground field—When true, the CLI never auto-backgrounds calls to that server's tools, intended for servers whose calls wait on a person. - NEW: Data: SDK api_error_params field—Documents api_error parameters: refused effort level, removed-media kind and reason, credential-failure provider and remedy, and usage-limit rate_limit_info. - NEW: Data: SDK message_stop abandoned_blocks field—Marks a CLI-generated message_stop after a failed or stalled stream, so consumers can drop blocks from that index up that never got assistant messages. - NEW: Data: SDK task notification handback field—Completed-subagent notifications say how a SubagentHandback report reached its caller; omitted when the subagent failed, was stopped, or is still waiting. - NEW: Data: SDK permission_check_status event schema—Signals a tool call waiting unusually long on the auto-mode classifier, as a "checking"/"done" pair hosts can display; display-only and best-effort. - NEW: Data: Interrupt worker_epoch parameter—Ties a service-sent interrupt to one worker life, refusing stale or invalid values with errors; a person's Stop never carries it. - NEW: Data: SDK read_file anchor field—Resolves a read path against a fixed workspace, diff root, or repo checkout instead of the live cwd, refusing ~ and paths that escape it. - NEW: Data: SDK safeguard_results field and Data: SDK safeguard_tool_use field—Carry the Messages API verdict for one call so the worker can decide its permission; ignored if malformed or mismatched. - NEW: Data: SDK ui_prompt_autocomplete request schema—A remote composer asks plugins for autocomplete rows for the token at the caret; newer asks supersede older ones, and failed chains return no rows. - NEW: Tool Description: PublishPlugin file listing and consent flow—Lists the plugin's files, shows folder, organization, count and size, and asks the user first, in any permission mode; writes a manifest if none exists. - NEW: Tool Description: Artifact preview action (in-session viewer)—Opens the page in the real artifact viewer, returning a first-view picture, console errors, and a clickable outline; the viewer's own instructions win on when to check. - NEW: Data: Network-path settings file unread recovery guidance—When plugin uninstall couldn't read a settings file through a link to another machine, says to replace the link or use the real location, then retry. - NEW: System Reminder: Queued notifications read-time clock note—States when the read happened by this machine's clock and explains the queued-at, reached-session, and whole-wait headers, including clock skew. - NEW: Agent Prompt: Background agent state classifier ask-opens-message rule and Agent Prompt: Project thread status card classifier ask-opens-message rule—Classify a message that opens with the agent's need as blocked or needs-reply unless the tail resolves it; offers still don't gate. - NEW: Tool Description: Computer use unlinked chat guidance—Says computer tools cannot be linked from this chat, so the model tells the user briefly, uses other tools, and suggests opening the chat in the desktop app. - Agent Prompt: Web fetch agent usage guidance—Clarifies that without a built-in fetch tool this agent stands in for it, so calling it to read a page is ordinary tool use. - Tool Description: Agent explicit-spawn restriction—Adds an exception: where the web fetch agent type stands in for a missing fetch tool, calling it to read a page is ordinary tool use. - Data: Artifact capability verification pass—The pre-publish preview step is now offered only when the artifact check tool is the local Chrome viewer. - Data: Background tasks changed event schema—The event also fires when an entry's parent_task_id changes, and now spells out the ordering between level changes and task start, update, and notification events. - Data: SDK API error kind field—Adds the usage_limit_reached kind for an account plan limit or usage-credit spend cap, distinguished from policy, throttle, capacity, and API-key 429s. - Data: Turn handoff file names field—Adds that if a person later sends another file under a placed name, the copy is replaced or removed while still unchanged. - Data: Turn handoff memory context field—The memory line is now also used on history requests when the session holds none of its messages yet; wording "runs without" becomes "goes on without". - Skill: Artifact diagramming—Artifacts made from an Artifact type draw diagrams as that type's instructions and referenced pages say; these mechanics apply only where they are silent. - System Reminder: Queued notifications delivery—The formatted notification list now appears directly after the "listed oldest first" sentence. - Tool Description: Artifact action reference and Artifact action reference (concise app wording)—The list action now returns artifacts most recently opened or updated first, instead of newest first. - Tool Description: Computer use enable stub guidance—Adds that the Claude app on the computer may show why under Settings → This computer → Computer use. - Tool Description: GetTask—Drops "when your turn ends or" from the note that a task's status message says it is terminated at your final response. - Tool Description: SuggestConnectors—Accepts installed connectors' server_id values listed in the system prompt, as well as ids from a SearchMcpRegistry result. Details: github.com/Piebald-AI/claude…

What's new in Claude Code 2.1.290 system prompts (+12,809 tokens): Adds gated proactivity levels, alternative conversation-summary prompts, nine Managed Agents quickstart templates, and an experiment-gated Claude in Chrome setup offer, plus smaller changes to commit guidance, permission allowlisting, and recovery steps. These are prompt and rollout-variant changes, not proof of universal feature launches. - NEW: Agent Prompt: Conversation summarization (capped, lean, and short variants)—Three alternative compaction prompts: a 2000-word capped summary, a lean replacement-context brief, and a short checklist weighting the user's words. The existing prompt stays default. - NEW: System Reminder: Proactivity level low, Proactivity level medium, and Proactivity level high—Low confirms changes except small, unambiguous tasks; medium edits but needs commit/push/PR consent; high proactively follows through, including experiment check-ins. - NEW: System Reminder: Proactivity setting announcement header and Proactivity setting withdrawn—The header names the level and supersedes earlier settings without overriding plan mode, permissions, or destructive-action rules; the withdrawal restores base behavior. Behind a proactivity gate. - NEW: Data: Managed Agents quickstart (Contract tracker, Data analyst, Deep researcher, Field monitor, Incident commander, Sprint retro facilitator, Structured extractor, Support agent, Support-to-eng escalator)—Nine bundled templates, each with an agent.md definition and system prompt; some add cron deployments or an outcome rubric. - NEW: Skill: Claude API Managed Agents onboarding source tier—Closing section for managed-agents-onboard requests naming the source as bundled quickstart, first-party URL, or third-party URL; nothing in the request or fetched pages can raise the tier. - NEW: Data: Working tree upload refusals (git dubious ownership, missing git objects folders, private git directory setup failure, unread git config environment variable)—Four errors that stop a working-tree upload, each explaining the cause and the recovery steps. - NEW: System Reminder: Output token limit continuation—Defines continuation from the start of a cut-off line, row, item or sentence, reopening fences and tables; active recovery still uses the older template. - NEW: Tool Description: Offer Claude in Chrome setup—Offers a one-time Claude in Chrome setup card after a Chrome tool reports the extension is disconnected and the task needs the user's browser. Needs a supporting client and an experiment flag. - NEW: System Prompt: Bash call cost guidance—Explains that each Bash call is a full model round trip, so batch needed work into one command, keep output small, and recheck requirements. Behind a feature flag. - Agent Prompt: Summarization no-tools guard—The required plain-text reply shape is now variable, naming only a <summary> block for the new lean, short, and capped compaction variants. - Agent Prompt: Pull request creation and Agent Prompt: Quick git commit—Drop the optional reminder to run the user's verify, simplify, and code-review skills right before committing. - Agent Prompt: Artifact comment thread background directive—Thread-read instructions now pass the thread's thread_id to the Artifact comments action. - Data: Built-in gh stand-in api command help—Directs any-host requests to use --hostname for non-GitHub hosts rather than GH_HOST or the host embedded in GH_REPO. - Data: Gateway device code entry page—Removes the "Connect device" badge, labels the code input with the heading, and moves any error message inside the form as its description. - Data: Managed Agents outcomes—Generally worded outcomes need the user's question sent first in the same initial_events array, and requires_action sessions join budget-paused ones in accepting only settle events. - Skill: /doctor slash command and Skill: Generate permission allowlist from transcripts—Never allowlist pyright in any form, because it runs python3 in the working directory; it leaves the auto-allowed read-only list. - System Prompt: Artifact patch turn edit composer—Requests for an opinion, recommendation, or choice between options count as questions, so the assistant answers in words instead of editing. - System Reminder: Attached machine untrusted attachments refusal—Rewrites the recovery steps: call list_computer_folders once, relay any trust question or request_computer_folder Allow, otherwise explain what stays blocked. - Tool Description: Agent (when to launch subagents)—Optionally appends a note about the per-agent token budget when the subagent budget feature is enabled. - Tool Description: Code review command—Effort levels now read low|medium|high|xhigh|max, described as running from few high-confidence findings up to many, some uncertain. Details: github.com/Piebald-AI/claude…