AI library

Source · release

Claude Code release 2.1.310

Author
Anthropic
Published
23 October 2026
Added
26 October 2026
Original
https://github.com/anthropics/claude-code/releases/tag/v2.1.310

Summary

Claude Code 2.1.310 came out on 2026-10-23 (23:39 UTC, from the GitHub release feed), after the previous digest was written. Its main new ability is that the Monitor tool and plugin monitors now work on Bedrock, Vertex, and Foundry, and when telemetry or nonessential traffic is turned off. The rest is fixes for gateways, compaction, symlinks, and Windows hooks, plus admin controls for cloud sessions. Python Agent SDK 0.2.174 (2026-10-24) only bundles this CLI version.

Key points

  • Monitor everywhere: the Monitor tool (watch a background process and get woken when a condition is met) and plugin monitors now run on Bedrock, Vertex, and Foundry, and with telemetry or nonessential traffic disabled. Long foreground sleep calls are now blocked in those setups as well, so use Monitor to wait for something instead.
  • Gateways: if a gateway or compatible server rejects the effort-2025-11-24 beta value or system messages in the middle of a conversation, Claude Code now retries without them instead of failing.
  • Compaction: after a "Prompt is too long" error, compaction no longer keeps too much dense text (base64, SVG), which could make the next request fail too. Headless runs (-p, Agent SDK) use less memory when compacting very large transcripts.
  • Security fixes: on Windows, PreToolUse and PermissionRequest hooks no longer let a tool call through when Git Bash is missing and the hook command is only quoted strings. File-read permission prompts now show where a symbolic link points. Auto mode explains that blocking reads outside the working directories makes shell commands ask for permission.
  • Linux sandbox: /sandbox and the startup warning now name Ubuntu's AppArmor restriction on user namespaces, and say how to lift it, when it stops bubblewrap from starting.
  • MCP: when an MCP tool call times out in a headless session because the server's elicitation was not answered, the error now tells Claude that no answer came and not to repeat the call.
  • Cleanup: a very large cleanupPeriodDays no longer deletes recent files such as pasted images.
  • Admin and cloud: Enterprise custom roles can now control access to cloud sessions and Remote Control. Cloud environments can load their setup script from a file. VS Code: "Send feedback and keep planning" on the plan review card no longer approves the plan when you press Enter.

Why it matters

For people on Bedrock, Vertex, or Foundry, or with telemetry turned off, Monitor-based waiting (instead of sleep loops) now works the same as on the Anthropic API. The Windows hook fix closes a fail-open path for guardrail hooks.