Source: raw/anthropic-watch-claude-code-tag-v2-1-208.md + raw/anthropic-watch-claude-code-tag-v2-1-209.md (Anthropic-watch release stubs). The v2.1.208 watch stub truncated at ~11 items, so the full list below was reconciled against the official github.com/anthropics/claude-code/blob/main/CHANGELOG.md (fetched 2026-07-14). Continues Week 28; the reference tables in CLI Reference carry the new flags/env/settings.

The week’s headline is v2.1.208, a large (~45-item) hardening-and-accessibility release — first-class screen reader mode, a batch of background-agent reliability fixes, and broad memory/performance wins — immediately followed by the v2.1.209 hotfix that walks back one over-broad guard from it. Also folded in for continuity: v2.1.207 (the July 11 tail of Week 28), whose headline was auto mode reaching Bedrock/Vertex/Foundry.

v2.1.209 (hotfix)

  • Fixed /model and other dialogs being blocked in claude agents background sessions — reverts an overly broad guard introduced by v2.1.208’s background-session work. (208 + 209 are a linked pair: 208 hardened the background daemon; 209 undoes the guard from that work that broke dialogs.)

v2.1.208 — accessibility + background agents + performance

New surface (also in CLI Reference):

  • Screen reader mode — opt-in plain-text rendering for screen-reader users. Enable via claude --ax-screen-reader, CLAUDE_AX_SCREEN_READER=1, or "axScreenReader": true in settings. Claude Code’s first real accessibility surface.
  • vimInsertModeRemaps setting — map two-key insert-mode sequences (e.g. jj → Escape) in vim mode.
  • CLAUDE_CODE_PROCESS_WRAPPER — enterprise/managed-launcher control: agent view and the background service route every Claude Code self-spawn through a required corporate wrapper executable.
  • Mouse-click support for multi-select menus and “Other” input rows in fullscreen mode.

Background-agent reliability:

  • Replies typed to a background agent are now saved and delivered on session restart when delivery fails (were silently lost).
  • Fixed permanent attach failure (“Couldn’t start the background daemon”) after an update replaced the binary a running claude agents process launched from.
  • An older daemon no longer silently restarts newer-version workers onto the older binary.
  • Completed background agents stay listed in /tasks until cleanup instead of vanishing on finish; attaching to a stopped agent shows its transcript immediately instead of a blank “Session is starting.”

Correctness fixes (selected):

  • Fixed the context-window / auto-compact indicator briefly resetting to 200k after CLI auto-update (caused a false “100% context used” on resuming long-context sessions).
  • Fixed supervised + background sessions crashing on an HTTP/2 GOAWAY with requests in flight.
  • Fixed truncated stream-json/JSON output and a missing result message when piping large claude -p responses.
  • Fixed CLAUDE_CODE_MAX_OUTPUT_TOKENS (and similar) silently using the mantissa of scientific-notation values (1e6 became 1).
  • Fixed Read reporting empty files as “shorter than offset,” Grep silently returning “No files found” on invalid regex and under-reporting paginated counts, and Glob crashing on null bytes in the pattern/path.
  • Catastrophic removals (e.g. rm -rf ~) hidden inside $(…) / backticks / <(…) now prompt in --dangerously-skip-permissions and auto mode, matching the plain form (safety).
  • /release-notes “Show all” no longer injects the entire changelog into every subsequent request’s context.

Performance / memory:

  • Multiple long-session memory-leak fixes: MCP stdio stderr accumulating up to 64 MB/server, LSP documents now LRU-capped at 50, async hook output freed after backgrounding, and unbounded growth from large tool-result payloads in headless/SDK sessions.
  • Up to 7× faster tool rounds in print/SDK sessions with many MCP tools (tool-pool assembly cached); up to 79× smaller session transcripts in edit-heavy sessions (pruned superseded file-history backups); file-edit read cache bounded to 16 MB; large markdown tables capped at 200 rendered rows with a “… N more rows” notice.

v2.1.207 (carryover from Week 28, July 11)

  • Auto mode now available without the CLAUDE_CODE_ENABLE_AUTO_MODE opt-in on Bedrock, Vertex AI, and Foundry (disable via disableAutoMode).
  • Security: fixed remote managed settings from a non-interactive run (claude -p, SDK) being permanently recorded as consented without ever showing the consent dialog.
  • Changed Bedrock, Vertex, and Claude Platform on AWS to default to Opus 4.8.
  • Plugin shell-injection fix: ${user_config.*} in shell-form commands is now rejected (use exec-form args or $CLAUDE_PLUGIN_OPTION_<KEY>); plugin option values no longer read from project-level .claude/settings.json.
  • Fixed spurious prompt-injection warnings on benign system-generated conversation updates; several Bedrock AWS-SSO credential fixes. (Already reflected in CLI Reference.)
  • Claude Code CLI Reference — the flag/env/setting tables where the new --ax-screen-reader, CLAUDE_AX_SCREEN_READER, axScreenReader, vimInsertModeRemaps, and CLAUDE_CODE_PROCESS_WRAPPER items live.
  • What’s New — Week 28 — the prior digest (in-app browser, /checkup, v2.1.202–206).
  • Agent Teams — the background-agent surface most of v2.1.208’s reliability fixes harden.