Claude Code 2.1.149: Usage Breakdown, Keyboard Navigation, Security Fixes

TL;DR

• /usage now breaks down costs by category — skills, subagents, plugins, MCP servers
• Keyboard navigation in /diff detail view (arrows, j/k, Page Up/Down, Space)
• Multiple security fixes: PowerShell permission bypass, git worktree sandbox escape, PWD variable tracking

New

• /usage category breakdown — see exactly what's consuming your limits: skills, subagents, plugins, and per-MCP-server costs
• Keyboard navigation in /diff — scroll detail view with arrow keys, j/k, Page Up/Down, Space, Home/End
• GFM task list rendering — Markdown output now displays checkboxes (- [ ] todo / - [x] done) instead of plain bullets
• Enterprise: allowAllClaudeAiMcps setting — load claude.ai cloud MCP connectors alongside managed-mcp.json

Fixed

• PowerShell permission bypass — built-in cd functions (cd.., cd\, cd~, X:) could change working directory undetected; now properly tracked
• Git worktree sandbox escape — write allowlist was covering entire repo root instead of only shared .git directory
• PowerShell prefix/wildcard rules — allow rules like PowerShell(dotnet.exe build *) now pre-approve native executables and scripts
• PWD/OLDPWD/DIRSTACK tracking — permission analysis no longer trusts stale variable values across cd/pushd/popd
• Bash find crash on macOS — find command no longer exhausts system file/vnode table on large directory trees
• Managed-settings approval dialog freeze — terminal no longer hangs after accepting at startup
• /ultraplan and remote session creation — fixed "Could not capture uncommitted changes" error when working tree has no real changes
• otelHeadersHelper silent failures — now reports failures in /doctor and debug log when script path contains spaces
• Thinking spinner color — no longer stays amber across tool calls and fresh thinking bursts
• Collapsed Bash output line count — fixed incorrect hidden-line count reporting for outputs with many short lines
• Slash-command argument hints — no longer clip trailing typed characters when hint overflows input box
• Tab-completed skill hints — argument hints and progressive suggestions now appear after completing skills with mismatched frontmatter names
• Status bar effort level — now shows applied effort from skill/agent frontmatter instead of baseline setting
• Ctrl+O transcript freeze — transcript view no longer freezes on open; properly tails new messages
• Prompt history editing — recalled entries no longer lose edits when navigating with arrow keys
• /config exit summary — no longer reports phantom changes to auto-compact and theme
• /insights crash — fixed crash when cached session-meta files are missing optional fields
• Tool call misclassification — malformed PowerShell and History calls with missing input no longer misclassified as reads
• Remote Control session renaming — renaming from claude.ai or mobile app now updates local session name for claude --resume
• Prompt history race condition — just-submitted prompts no longer appear twice in up-arrow history
• Fullscreen jump-to-bottom pill — now dismisses immediately when tapped
• /feedback reports — now include pre-compaction conversation history for easier triage of issues from long sessions

Update: brew upgrade claude-code or download the latest version from code.claude.com

Source: Claude Code