DISPUTED: no

Claude Code v2.1.213-215

Summary

The mid-July 2026 release of Claude Code (versions 2.1.213 through 2.1.215) introduces an EndConversation tool for handling abusive users or jailbreak attempts, a periodic progress heartbeat for long-running tool calls, ISO-modified timestamps in memory-file frontmatter, and makes /verify and /code-review skills opt-in. More critically, the changelog documents seven bug classes—many drawn from a rival implementation's fix log (yoyo lesson day-141)—that any parallel implementation of a coding agent should audit and close. These include glob permission anchoring, shell redirect bypasses, oversized-command guards, help/man option smuggling, zsh variable subscript handling, worktree symlink following, and Windows PowerShell permission bypasses.

Key Points

• EndConversation tool: Claude can now proactively end sessions with abusive users or when jailbreak attempts are detected.
• Progress heartbeat: Long-running tool calls that previously went silent now produce periodic status updates, improving observability.
• Memory-file frontmatter: ISO-formatted modified timestamps added to frontmatter of memory files for better staleness tracking.
• Opt-in skills: /verify and /code-review no longer auto-run; must be explicitly invoked.
• Seven bug classes fixed (the "yoyo lesson"): each is a pre‑audited vulnerability pattern that any agent implementation should guard against.
• Earlier v2.1.212 features: Session caps on WebSearch and subagent spawns (200 default, reset by /clear), MCP calls over 2 minutes auto-backgrounded, /fork to background a session.

Concepts

• EndConversation: A new tool enabling the agent to terminate a session in response to abuse or jailbreaking.
• : Periodic status messages emitted during long-running tool calls to prevent silent hangs and provide visibility into progress.