Patch release: Sonnet 4.5 model support, new workspace/connector surfaces (including Box and Microsoft 365), and tighter agent, focus-mode, and web-fetch behavior.
Changelog
[new] Adds support for the claude-sonnet-4-5-v1 model.
[new] Adds Microsoft 365 connector support via the Claude MCP endpoint.
[new] Adds Box connector support (api.box.com / mcp.box.com).
[new] Adds Linear MCP support for creating issues (mcp__linear__create_issue).
[new] Adds workspace MCP tools for bash and web fetch (mcp__workspace__bash, mcp__workspace__web_fetch), plus a remote MCP surface.
[new] Introduces a dedicated web-reading agent path for fetching URLs and extracting only what was asked for, with stricter untrusted-content handling (no following in-page instructions; no constructing URLs from conversation data).
[changed] Focus mode behavior is clearer: only the final text of each response is shown, so intermediate tool chatter is skipped and everything the user needs goes in that last message.
[changed] Subagent guidance refined: background by default when work can proceed in parallel; don’t invent results before the completion notification; remote isolation stays background-only.
[changed] Correction handling now pushes durable memory writes in the same turn as the fix or diagnosis, instead of deferring them.
[changed] Artifact/comment thread handling improved: short receive acknowledgements, ordered thread lists, clearer rules when resolve isn’t available or the summon belongs to another user’s session.
[changed] PR workflow still optionally offers Slack posting when CLAUDE.md calls for it—only after confirmation, and only if a Slack send tool is actually available.
[changed] Stronger safety copy around shared git stash use across worktrees/sessions (tagged stash + apply by SHA, not bare pop).
[changed] Plan mode and auto-mode classifier prompts tightened so non-readonly work stays blocked until the user is ready, with clearer deny messaging when a tool use is rejected.
[changed] Air-gapped / no-telemetry mode documents the tradeoffs (no connector icons/directory fetch, artifacts and MCP Apps degrade) and why it’s discouraged unless policy requires it.
[fix] Clearer messaging when the Claude in Chrome extension was declined for the session, and when enterprise security/compatibility updates won’t auto-install.
[removed] Retired several internal experiment gates (including older review-routing / report-findings paths) in favor of the current review and advisor flows.
Models & prompts
Models:claude-sonnet-4-5-v1 is available alongside existing model IDs.
Web fetch: Specialist instructions emphasize saying when a page or fetch failed (with status), not filling gaps from memory, and treating page bodies as untrusted data.
Computer use: Prompting acknowledges the computer-use MCP (mcp__computer-use__*) for desktop screenshots and input when that connector is present.
Context & memory: Long-session summarization and “recent portion only” summary tasks are spelled out so work can continue across compacted context; good memories stay applicable, durable, and legible.
Coordinator / teammates: Multi-worker orchestration copy and limits on nested teammate spawning remain explicit.
Cowork vs Code: Read-only folders are view/search-only in Cowork; in Code, read-only still applies to file tools (Bash/SSH enforcement called out as not fully there yet).
Under the hood
New host/assets and API base configuration knobs (ANTHROPIC_API_HOST, ANTHROPIC_ASSETS_HOST, related asset/telemetry grouping) for flexible deployment.
Optional switches for feedback surveys, enhanced telemetry, tool-use summaries, resuming an interrupted turn, external permissions in auto mode, and Perforce-oriented mode.
Session-name uniqueness, bridge recovery/resume ownership, teleport menu, advisor-tool result handling, and goal evaluate/clear instrumentation landed behind feature gates.
Additional backend routes for notification preferences, directory, event logging, and CLI API-key OAuth creation/callback.
Hook prompt timeout and marketplace fallback-write paths improved; sandbox scrubbing handles removed non-symlink entries more cleanly.
Upgrade notes
If you rely on air-gapped or locked-down networking, review telemetry/connector tradeoffs before enabling strict no-outbound modes.
Chrome browser tools still require the Claude in Chrome extension; declining it for a session keeps WebFetch/WebSearch as the read-only web path.
Enterprise installs that block auto-updates still need an IT distribution path for security and compatibility fixes.
content/
Browse captured content/
Same tree as claude-code/latest/content for this version. Open the full browser for sidebar navigation between docs and other files.
