[Release] anthropics/claude-code v2.1.236: v2.1.236

Claude Code v2.1.236 introduces the `ANTHROPIC_DEFAULT_MODEL` environment variable for persistent model selection, adds cross-session idle notifications via `notify_when_idle`, and enhances sandbox security with precedence-based wildcard read-deny rules on macOS. The release fixes 20+ bugs affecting clipboard operations, fullscreen rendering, subprocess handling, and terminal UI consistency, while improving auto mode classification, startup performance, and accessibility with screen reader support.

Key Points

• •Set default model for new sessions with `ANTHROPIC_DEFAULT_MODEL` env var; `/model` picker still overrides and persists across restarts
• •Use `notify_when_idle` in cross-session `SendMessage` to request another Claude Code session to send a notice when idle (macOS/Linux, opt-in, no polling)
• •Wildcard read-deny sandbox rules (e.g., `**/.env`) now take precedence inside allowed regions on macOS and can't be bypassed by file renaming
• •Fixed critical regressions: clipboard copy, background sessions, and MCP logs no longer break when session directory is removed
• •Fullscreen renderer now falls back to classic mode instead of exiting on failed starts; `/model` picker scrolls when models exceed terminal height
• •Auto mode improvements: Monitor allow rules are set aside during auto mode; classifier uses consistent defaults across Bedrock, Vertex AI, and Foundry
• •Git status check in auto mode can no longer be fooled by `status.showUntrackedFiles=no` config into reporting clean trees
• •Idle sessions with parked goals now auto-check-in after 30 minutes (then 1h, 2h) instead of waiting for user return
• •Slash-command typos and unavailable commands now report errors instead of fuzzy-matching to closest command
• •Added screen reader support for VSCode transcript with live announcements for replies, permissions, errors, and per-turn heading navigation

Workflow Diagram

Concepts