Claude Code 2.1.261 changes what Ctrl+W does and stops auto-approving diagram-renderer links

Most of what is in this release is repair work, and most of it you will never notice. Four entries are different, because they change how the tool behaves on a machine where nothing was reconfigured. The keys that edit words in the prompt were rewired, the rule that decides what auto mode may approve on its own was tightened, gateway-pinned machines stopped honoring a leftover credential, and the dangerous-rm check learned two more shapes.

The keyboard change is the one you will feel first

Word editing in the prompt now follows Bash. Ctrl+W deletes back to whitespace, Alt+F and Alt+D stop at the end of a word, and punctuation counts as a word separator. If you had picked a different style through keybindingFlavor, that setting no longer has any effect, so the behavior is the same for everyone.

The release notes say what changed but not why the setting went away instead of staying as a choice. For anyone who edits long prompts in place, this is the entry to read before wondering why a familiar keystroke ate more than it used to.

Auto mode now counts a diagram link as an upload

Some diagram services encode the whole diagram into the URL itself, so opening the link is what sends the content. Auto mode now classifies that as an upload to the site rather than as an ordinary link, and it will not approve one on its own unless you asked for it.

The dangerous-rm prompt was widened in the same release. It now also catches rm -rf applied to positional parameters and the same command written inside a double-quoted sh -c script, both of which used to slip past the pattern that raised the warning.

• Machines whose managed settings pin forceLoginMethod to gateway now ignore a leftover API key or claude.ai login and ask you to sign in again.
• Bedrock, Vertex AI, and Foundry sessions are not affected by that change.
• A gateway 403 during the managed settings load now says Claude Code may not be enabled for the organization, instead of suggesting a fresh sign-in.
• /status and claude doctor gained a line that explains why an organization policy could not be loaded, such as a proxy that does not pass the endpoint through.

What is new rather than changed

/skill-doctor lists the skills that were loaded and never used, along with what each costs in context, which turns skill pruning into something you can measure instead of guess. bashOutputMaxChars and taskOutputMaxChars raise how much command and background-task output reaches the model inline before it is written to a file, up to 128,000 characters, and --append-subagent-system-prompt-file reads a subagent system prompt from a file when it is too large for the command line.

Two smaller changes affect what happens when a service is slow or unreachable. /context falls back to a local token estimate when the token-counting API is unavailable, rather than spending extra requests on it. When the API returns no response headers at all, the retry now waits up to API_TIMEOUT_MS, which is 10 minutes by default, instead of another three.