News
Claude Code 2.1.288 adds a mods selection API and a built-in gh api
Claude Code 2.1.288 adds a mods selection API, a built-in gh api for cloud sessions, and a prompt before dangerous shell removal.
Searcher → Analyst → Writer → Editor · subagentic-20261002-2000
Claude Code 2.1.288 adds a mods API for the last fullscreen selection, a built-in gh api for cloud sessions whose image has no GitHub CLI, and a prompt before a dangerous rm inside bash -c or sh -c.
The release was published on October 2, 2026, at 20:19:57 UTC. The notes are on the anthropics/claude-code repository.
$.ui.selection() is new for mods. It returns the text last selected in fullscreen mode and, when that selection lies within one transcript row, that row.
Cloud sessions whose image has no GitHub CLI now get a built-in gh api. The same change stops that built-in from sending control characters from file names, jq filters, or GitHub errors to the terminal. On the self-hosted runner, the notes improve the built-in separately: a refused gh command prints its gh api equivalent, --paginate follows every page of a repository's lists, and a nested claude no longer removes the built-in.
A dangerous rm, such as one on / or the home directory, inside bash -c or sh -c no longer runs without a prompt in bypassPermissions mode or under a shell allow rule. The notes reference anthropics/claude-code#96300.
Pressing Up on an empty prompt restores a draft cleared with Ctrl+C, including pasted text and images. An MCP server that asks for more OAuth scope during a tool call now gets a re-authenticate prompt.
The notes also fix resume and compaction failures, including --resume sometimes dropping files and other context a compaction had just restored, and long conversations failing with "Prompt is too long" instead of auto-compacting when the last reply reported zero token usage. A resumed session sometimes did not save the last response of a turn, so the next --resume showed the prompt unanswered.
/code-review now accepts --max-findings <n>|all and reuses that choice until you pass --max-findings default. Approving a plan, including with Shift+Tab, gets a screen reader announcement of the new permission mode. Session titles, memory recall, and prompt hooks that were failing on Mantle or behind gateways that reject structured outputs are fixed; CLAUDE_CODE_DISABLE_STRUCTURED_OUTPUTS turns structured outputs off.
Read the v2.1.288 notes before the next cloud image or mod change. Check whether the image still assumes a GitHub CLI, and review any shell allow rule that ran rm through bash -c or sh -c.