At a glance: The version limits web searches (default 200 per session) and subagent spawns (default 200 per session) to prevent runaway loops, automatically moves MCP tools running longer than 2 minutes to the background, and fixes several critical bugs in execution logic and Windows compatibility.
Claude Code 2.1.212 introduces safeguards against uncontrolled loops and automatically moves long-running MCP calls to the background. Additionally, multiple bugs in session management, plan execution, and command-line interface have been fixed.
New limits and automatic processing
The release introduces session-wide configurable limits: WebSearch calls are capped at 200 per session (adjustable via CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION), subagent spawns at 200 (CLAUDE_CODE_MAX_SUBAGENTS_PER_SESSION). MCP tool calls running longer than 2 minutes automatically move to the background to keep the active session usable (threshold configurable via CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS). The /clear command resets subagent budgets.
Changed delegation and session management
/fork now copies conversations into new background sessions (separate lines in Claude Agents), while work continues in the current session; the former in-session subagent is now launched via /subtask. /resume opens a picker for past sessions—including deleted ones—and continues a selection as a background session. /background and claude –bg now work on Windows even when Group Policy blocks PowerShell 5.1; the daemon prefers PowerShell 7.
Fixed security and execution bugs
Plan mode executed file-modifying bash commands (touch, rm) without confirmation prompt or SDK callback—this is fixed. ExitWorktree failed with “no active EnterWorktree session” error after session resumption in print/SDK mode. SIGTERM during a running bash tool orphaned process trees in print/SDK mode; the CLI now aborts the turn, terminates the tree, and exits with code 143.
Repository and file handling
Worktree creation after a symlink committed in the repository at .claude/worktrees could create files outside the repository—fixed. A spurious “File has not been read yet” error occurred when editing files that had been read with offset/limit after session resumption. /ultrareview rejected PR references like #123, PR 123, and pasted URLs; these are now accepted. /ultrareview <branch> did not fetch remote branches; this is fixed.
Additional corrections
Hook infrastructure errors were incorrectly reported as user rejections. Shell mode (!) did not execute commands with file paths when the path autocomplete popup was open. Ctrl+J did not insert newline in agent view dispatch input on terminals with extended key reporting. Hosted sessions with mTLS certificates, extra CA bundles, or OAuth scopes failed to start; these transport settings are now ignored with a warning. Remote control clients in the workflow agent grid now correctly display content even after mid-run join.
Source: github.com · Published 17 July 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification via Lumi News Pipeline v1.7.3.