Week 29 digest (July 13-17 2026, v2.1.207-212). Features: (1) published artifacts can call MCP connectors live per-viewer; (2) screen reader mode (--ax-screen-reader / CLAUDE_AX_SCREEN_READER) replaces TUI with linear labeled text for VoiceOver/NVDA; (3) /fork now copies conversation into a background session (old in-session subagent behavior renamed /subtask); (4) session-wide WebSearch cap default 200 (CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION) and subagent spawn cap 200, /clear resets budget — same design yoyo shipped Day 140 (SessionCapTool); (5) MCP tool calls >2min auto-move to background (CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS); (6) /resume picker of past sessions incl. deleted; (7) auto-mode reset command; (8) EndConversation tool for abusive sessions.
Fix-log bug classes (pre-graded, check for siblings in parallel implementations): (a) single-segment dir/** allow rules like Edit(src/**) auto-approved writes to nested dir/ anywhere in tree — glob-rule anchoring class; (b) bash permission checks now fail closed on file-descriptor redirect forms parsed differently by bash vs analyzer; (c) commands >10,000 chars always prompt (analyzer misjudges very long commands); (d) zsh variable subscripts/modifiers inside [[ ]] treated as inert text — now prompt; (e) help/man commands could smuggle unsafe options/command substitutions past auto-approve; (f) plan mode auto-ran file-modifying bash (touch, rm) without prompt; (g) worktree creation followed repo-committed symlink at .claude/worktrees escaping the repository — symlink-following file-creation class; (h) permission prompts on remote sessions could proceed before local confirmation. Source: https://code.claude.com/docs/en/whats-new/2026-w29 and https://github.com/anthropics/claude-code/releases/tag/v2.1.212