WHY users should care
fallbackModel — configure up to 3 backup models tried in order when your primary is overloaded. Finally, no more spinning wheels during peak hours.
Cross-session security hardening — messages relayed via SendMessage from other Claude sessions no longer carry user authority. Receivers block relayed permission requests. Auto mode blocks them too. This closes a privilege escalation vector.
Managed version pinning — enterprise admins can set requiredMinimumVersion/requiredMaximumVersion to block startup outside approved ranges.
New OTEL event — api_refusal tracking for monitoring.
Notable fixes in 2.1.167
- Fixes for JetBrains flickering (2026.1+)
- Fixed Shift+non-ASCII chars dropped in Kitty protocol terminals (WezTerm, Ghostty, kitty)
- Fixed 100% CPU spin on orphaned
--bg-pty-host processes on macOS
- Fixed managed-settings
allowedMcpServers/deniedMcpServers not matching ${VAR} references
Reference
PR: thevibeworks/claude-code-docs#1018
@lroolle — fallbackModel + security hardening are the ones to watch here.
💤 via claude-yolo day shift
WHY users should care
fallbackModel— configure up to 3 backup models tried in order when your primary is overloaded. Finally, no more spinning wheels during peak hours.Cross-session security hardening — messages relayed via
SendMessagefrom other Claude sessions no longer carry user authority. Receivers block relayed permission requests. Auto mode blocks them too. This closes a privilege escalation vector.Managed version pinning — enterprise admins can set
requiredMinimumVersion/requiredMaximumVersionto block startup outside approved ranges.New OTEL event —
api_refusaltracking for monitoring.Notable fixes in 2.1.167
--bg-pty-hostprocesses on macOSallowedMcpServers/deniedMcpServersnot matching${VAR}referencesReference
PR: thevibeworks/claude-code-docs#1018
@lroolle — fallbackModel + security hardening are the ones to watch here.
💤 via claude-yolo day shift