Claude Code 2.1.236 Locks Down .env Reads Even If You Rename the File
Claude Code 2.1.236 adds an ANTHROPIC_DEFAULT_MODEL variable that only sets the starting model for new sessions, and closes a macOS sandbox gap where renaming a denied file could bypass wildcard read-deny rules.
What it is
Claude Code 2.1.236 is a release that adds a persistent default-model setting and a cross-session notification hook, alongside a macOS sandbox hardening fix.
What it does
ANTHROPIC_DEFAULT_MODEL sets which model a new session starts on, but unlike ANTHROPIC_MODEL, a manual /model pick still overrides it and that choice persists across restarts. It also adds notify_when_idle to cross-session SendMessage, an opt-in one-shot notice when another local Claude Code session goes idle, and fixes macOS wildcard read-deny rules like **/.env so they take precedence within allowed read regions, cover matched directories fully, and can't be dodged by renaming the denied file.
Why it matters
Teams that pin a model via environment variable but still want engineers to switch models mid-task were stuck choosing one behavior or the other before this; now both work together. The sandbox fix closes a real bypass where a renamed secrets file could slip past a supposedly-denied read rule.
How to use it
Set ANTHROPIC_DEFAULT_MODEL to your preferred model name in the environment before starting new sessions; use notify_when_idle with SendMessage to get pinged when a background session finishes.
Claude Code 2.1.260 Adds a Live Diff Panel and Prompt-Cache Miss Reasons
Claude Code 2.1.260 adds a toggleable diff panel showing uncommitted changes beside the conversation and surfaces the likely cause of prompt-cache misses in /cost and the status line.
/skill-doctor: Claude Code Tells You Which Skills It Never Touched
Claude Code 2.1.261 adds a /skill-doctor command that reports which loaded skills went unused, plus configurable limits for how much Bash and task output Claude sees inline.
Claude Code 2.1.238: Readline Keybindings and a Token-Minting Hook for Plugins
Claude Code 2.1.238 adds a headersHelper setting that runs a command to mint short-lived auth headers for private plugin marketplace fetches, plus an optional readline-style Ctrl+W keybinding.