Matins
← All briefs
Matins
Saturday 13 June — v2.1.176
21 changes / 4 actionable / 2 deep dives
Claude Code

  • availableModels allowlist now blocks alias model env var redirects and /fast toggles. If your org uses availableModels, env vars like ANTHROPIC_DEFAULT_OPUS_MODEL can no longer redirect to a blocked model, and /fast refuses when it would land outside the allowlist (more below).

  • Hook if conditions for file-path tool patterns now actually match. Documented patterns like Edit(src/**), Read(~/.ssh/**), and Read(.env) were silently failing; if you gave up on path-scoped hook triggers, they work now (more below).

  • Session titles now generate in your conversation language. Set the language setting to pin a specific language if you want titles to stay consistent across multilingual sessions.

  • Bedrock credential caching now respects the credential's actual Expiration instead of a fixed 1-hour window. Reduces re-auth friction for sessions with long-lived or short-lived credentials.

New in 2.1.176

2.1.176 (June 13, 2026)

  • Session titles are now generated in the language of your conversation (set the language setting to pin a specific language)
  • Added footerLinksRegexes setting for regex-matched link badges in the footer row, configurable via user or managed settings
  • Improved Bedrock credential caching: credentials from awsCredentialExport are now cached until their Expiration instead of a fixed 1 hour
  • Fixed availableModels enforcement: alias model picks can no longer be redirected to a blocked model via ANTHROPIC_DEFAULT_*_MODEL environment variables, and /fast now refuses to toggle when it would switch to a model outside the allowlist
  • Fixed auto mode failing on Fable 5 for organizations without Opus 4.8 enabled, the classifier now falls back to the best available Opus model
  • Fixed hook if conditions for Read/Edit/Write tool paths: documented patterns like Edit(src/**), Read(~/.ssh/**), and Read(.env) now match correctly
  • Fixed Linux sandbox failing to start when .claude/settings.json is a symlink with an absolute target
  • Fixed /copy and mouse-selection copy not reaching the system clipboard inside tmux over SSH, and tmux paste buffer not loading on versions older than 3.2
  • Fixed Remote Control connecting from web/mobile silently switching the session's model
  • Fixed Remote Control disconnect notifications showing a bare numeric code instead of a human-readable reason, and connection failures adding a duplicate line to the conversation transcript
  • Fixed Remote Control sessions not disconnecting when you sign in to a different account
  • Fixed /cd and worktree moves leaving the session reporting the previous directory's git branch
  • Fixed claude agents: pressing back in one window no longer detaches other windows attached to the same session
  • Fixed backgrounded sessions showing "Working" forever when /bg mid-turn had nothing left to continue
  • Fixed background agent search by PR URL: PRs opened during scheduled wakeups or while a job was blocked now appear in claude agents search
  • Fixed the agents view input showing no text cursor on Windows
  • Fixed claude --bg -cn <name> not seeding the session name
  • Fixed background sessions to neutralize Windows network paths in persisted state before respawn
  • Fixed background-session respawn rejecting malformed resume IDs from corrupted state files
  • Fixed the Windows background-service daemon not starting when ~/.claude/daemon has the ReadOnly attribute set
  • Fixed cloud sessions failing with "Could not resolve authentication method" when idle for too long before being claimed
  • Background sessions now show clearer guidance when a window left open across an auto-update can't submit a reply, and claude daemon status explains version-skew behavior

Notes

availableModels hardening, third beat

2.1.172 closed the first gap: subagent model overrides, the agent dispatch model picker, and the advisor model were not checked against the allowlist. 2.1.174 added enforceAvailableModels to constrain the Default model and prevent user/project settings from widening a managed list. 2.1.176 closes the alias and fast-toggle loophole: ANTHROPIC_DEFAULT_*_MODEL env vars could redirect an alias pick to a blocked model, and /fast could toggle to one outside the allowlist.

If you administer an availableModels policy, the governance surface is now materially tighter than it was a week ago. The three releases together cover the model picker, subagents, dispatch, advisor, Default resolution, env var aliases, and fast mode.

Hook path-pattern matching, third arc

2.1.147 fixed PowerShell(git push*) never matching. 2.1.163 fixed Bash(...) conditions firing on every command containing $() or $VAR instead of matching the intended pattern. 2.1.176 fixes the Read/Edit/Write side: Edit(src/**), Read(~/.ssh/**), and Read(.env) now match correctly.

If you wrote hook conditions for file-path scoped tools and they silently never fired, revisit them. The patterns you intended are now live.