Skip to content
Agentsweak signalverified

Claude Code 2.1.238 stops memory growth in long sessions

The August 20 release fixes what got in the way during long stretches of work rather than adding features. Tool results returned by subagents are now freed as soon as they leave the recent-view window, so memory in long interactive sessions stops growing without a ceiling. The release also fixes custom output styles sliding back to the default tone mid-session, along with a run of stalls in Remote Control. A new keybindingFlavor setting restores Bash behavior, where Ctrl+W deletes back to the previous space, and claude mcp list no longer starts disabled servers just to check their status.

By Redakcija WebAiRadarPublished 3 min readwritten by a model

Version 2.1.238 shipped on August 20, and it is a fix release rather than a feature one. Most of the list covers behavior that only became annoying once a session ran long: memory growth, response tone reverting to the default, and dropped connections during remote work. A handful of settings also change daily work, from the keyboard to how plugins are confirmed at install time.

Memory in a long session no longer grows without end

Claude Code used to hold tool results returned by subagents in memory for the whole session. They are now freed as soon as they leave the recent-view window, which closes the cause of unbounded memory growth in long interactive sessions. The update check also no longer fires at the same moment the program starts; it waits about 10 seconds, so it stops competing for the processor at launch, and the macOS launcher reaches the prompt faster.

Output style stays where you set it

Custom output styles, including those from a project or a plugin, could slide back to the default tone mid-session. That is fixed, so the style you pick holds until you stop working. For anyone with Bash keybindings in their fingers, the new keybindingFlavor setting takes readline, which makes Ctrl+W delete back to the previous space in the prompt. The default value, classic, is unchanged.

  • Ctrl+L and Cmd+K in full-screen mode now only redraw the view. A double press no longer clears the conversation.
  • claude mcp list and claude mcp get show disabled servers as Disabled instead of connecting to them to read their status.
  • Text wrapping in the diff view no longer truncates lines that contain emoji and tabs.

Plugins can now issue their own headers

Plugin marketplaces and individual catalog entries gain a headersHelper field. It runs a command that issues HTTP headers, such as a short-lived token, both for fetching the catalog and for archives from the same source. The guardrails arrived with the feature, not after it.

  • A command from a catalog entry runs only when that plugin is installed or updated, and only after it has been shown to you.
  • claude plugin install and claude plugin update ask for confirmation unless you pass -y.
  • headersHelper in a project .mcp.json, and bundled MCP servers in project agent files, require that you already accepted the trust dialog for that folder — including when running with -p.
  • A helper from a project, a plugin, or an agent file runs without inherited environment variables that carry credentials.

Runners you host yourself

claude self-hosted-runner gains two options for working behind a corporate network. The --defer-shutdown-max-min flag makes a runner keep serving already-attached sessions after a shutdown signal, then drain the rest and exit once the given number of minutes has passed. The --proxy-authorization-command and --proxy-authorization-file flags are for proxies that demand a freshly issued Proxy-Authorization header on every connection. A bug that let the server remove a healthy runner after a single slow or lost request is also fixed.

Remote work

The longest part of the list covers Remote Control, which drives a session from a phone or a browser. Messages sent while Claude is mid-turn no longer vanish from the transcript once the turn ends. A model chosen on the phone now shows in the terminal too. A brief network drop while refreshing the login no longer kills the connection with an expired-account message. Short-lived rejections from a network edge or a proxy are tolerated for up to 3 minutes, and when a block persists, the message names who is doing the blocking.

Sources

BrandsClaude

Related

OPENCLAW 2026.10.232,768characters, and past that a key could slip thr
Agentsmedium signal

OpenClaw 2026.10.2 stops long tool output from slipping credentials past redaction

A bug in OpenClaw's secret masking let a credential through whenever it straddled the boundary between two slices of a long text. The fix ships in 2026.10.2 along with repaired updates from 2026.10.1 and a new compaction default for OpenAI and Anthropic API keys.

OpenClawverified

The OpenClaw web interface with a conversation on the left and the Bits & Bolts reference MCP app open beside it, showing a 3D keycap model and an Attach view + note button.
Agentsmedium signal

OpenClaw 2026.10.1 lets agents search installed skills and changes how sessions message each other

OpenClaw released version 2026.10.1 on October 10, 2026, its first stable release since 2026.9.7. Agents can now search the skills installed on a machine and read only the one a task needs, instead of carrying the whole library in the prompt. Opt-in MCP Apps run beside chat, and full backups can go to an external drive or Cloudflare R2. Three changes can break existing setups: session-to-session messaging, the old required argument, and Workboard data stored before July 2026.

OpenClawverified

CLAUDE CODE2.1.294hooks written as instructions now block what t
Agentsmedium signal

Claude Code 2.1.294 fixes prompt hooks that let through the actions they were written to block

Anthropic released Claude Code 2.1.294 on October 8, 2026. It fixes prompt and agent hooks phrased as instructions, which could allow exactly the actions they were meant to stop. Version 2.1.295 followed the same day with an onFailure setting that makes a crashed or timed-out command or HTTP hook block the action. Releases 2.1.292 and 2.1.293 from earlier in the week closed several permission and sandbox gaps.

Claude Code Releases (GitHub)verified