Source: raw/anthropic-watch-claude-code-tag-v2-1-208.md + raw/anthropic-watch-claude-code-tag-v2-1-209.md (Anthropic-watch release stubs). The v2.1.208 watch stub truncated at ~11 items, so the full list below was reconciled against the official github.com/anthropics/claude-code/blob/main/CHANGELOG.md (fetched 2026-07-14). Continues Week 28; the reference tables in CLI Reference carry the new flags/env/settings.
The week’s headline is v2.1.208, a large (~45-item) hardening-and-accessibility release — first-class screen reader mode, a batch of background-agent reliability fixes, and broad memory/performance wins — immediately followed by the v2.1.209 hotfix that walks back one over-broad guard from it. Also folded in for continuity: v2.1.207 (the July 11 tail of Week 28), whose headline was auto mode reaching Bedrock/Vertex/Foundry.
v2.1.209 (hotfix)
- Fixed
/modeland other dialogs being blocked inclaude agentsbackground sessions — reverts an overly broad guard introduced by v2.1.208’s background-session work. (208 + 209 are a linked pair: 208 hardened the background daemon; 209 undoes the guard from that work that broke dialogs.)
v2.1.208 — accessibility + background agents + performance
New surface (also in CLI Reference):
- Screen reader mode — opt-in plain-text rendering for screen-reader users. Enable via
claude --ax-screen-reader,CLAUDE_AX_SCREEN_READER=1, or"axScreenReader": truein settings. Claude Code’s first real accessibility surface. vimInsertModeRemapssetting — map two-key insert-mode sequences (e.g.jj→ Escape) in vim mode.CLAUDE_CODE_PROCESS_WRAPPER— enterprise/managed-launcher control: agent view and the background service route every Claude Code self-spawn through a required corporate wrapper executable.- Mouse-click support for multi-select menus and “Other” input rows in fullscreen mode.
Background-agent reliability:
- Replies typed to a background agent are now saved and delivered on session restart when delivery fails (were silently lost).
- Fixed permanent attach failure (“Couldn’t start the background daemon”) after an update replaced the binary a running
claude agentsprocess launched from. - An older daemon no longer silently restarts newer-version workers onto the older binary.
- Completed background agents stay listed in
/tasksuntil cleanup instead of vanishing on finish; attaching to a stopped agent shows its transcript immediately instead of a blank “Session is starting.”
Correctness fixes (selected):
- Fixed the context-window / auto-compact indicator briefly resetting to 200k after CLI auto-update (caused a false “100% context used” on resuming long-context sessions).
- Fixed supervised + background sessions crashing on an HTTP/2
GOAWAYwith requests in flight. - Fixed truncated
stream-json/JSON output and a missing result message when piping largeclaude -presponses. - Fixed
CLAUDE_CODE_MAX_OUTPUT_TOKENS(and similar) silently using the mantissa of scientific-notation values (1e6became1). - Fixed
Readreporting empty files as “shorter than offset,”Grepsilently returning “No files found” on invalid regex and under-reporting paginated counts, andGlobcrashing on null bytes in the pattern/path. - Catastrophic removals (e.g.
rm -rf ~) hidden inside$(…)/ backticks /<(…)now prompt in--dangerously-skip-permissionsand auto mode, matching the plain form (safety). /release-notes“Show all” no longer injects the entire changelog into every subsequent request’s context.
Performance / memory:
- Multiple long-session memory-leak fixes: MCP stdio stderr accumulating up to 64 MB/server, LSP documents now LRU-capped at 50, async hook output freed after backgrounding, and unbounded growth from large tool-result payloads in headless/SDK sessions.
- Up to 7× faster tool rounds in print/SDK sessions with many MCP tools (tool-pool assembly cached); up to 79× smaller session transcripts in edit-heavy sessions (pruned superseded file-history backups); file-edit read cache bounded to 16 MB; large markdown tables capped at 200 rendered rows with a “… N more rows” notice.
v2.1.207 (carryover from Week 28, July 11)
- Auto mode now available without the
CLAUDE_CODE_ENABLE_AUTO_MODEopt-in on Bedrock, Vertex AI, and Foundry (disable viadisableAutoMode). - Security: fixed remote managed settings from a non-interactive run (
claude -p, SDK) being permanently recorded as consented without ever showing the consent dialog. - Changed Bedrock, Vertex, and Claude Platform on AWS to default to Opus 4.8.
- Plugin shell-injection fix:
${user_config.*}in shell-form commands is now rejected (use exec-formargsor$CLAUDE_PLUGIN_OPTION_<KEY>); plugin option values no longer read from project-level.claude/settings.json. - Fixed spurious prompt-injection warnings on benign system-generated conversation updates; several Bedrock AWS-SSO credential fixes. (Already reflected in CLI Reference.)
Related
- Claude Code CLI Reference — the flag/env/setting tables where the new
--ax-screen-reader,CLAUDE_AX_SCREEN_READER,axScreenReader,vimInsertModeRemaps, andCLAUDE_CODE_PROCESS_WRAPPERitems live. - What’s New — Week 28 — the prior digest (in-app browser,
/checkup, v2.1.202–206). - Agent Teams — the background-agent surface most of v2.1.208’s reliability fixes harden.