Skip to main content
ClaudeREF.com
← All news
3 September 2026claude-code#claude-code#release#security#workflow

Claude Code v2.1.252–2.1.258: safer auto mode, time controls, and a new Fable default

Claude Code adds session time formatting, stronger auto-mode protections, forced subagent model selection, and targeted fixes for macOS, Remote Control, and scheduled work.

Claude Code moved from v2.1.251 to v2.1.258 between August 31 and September 1, 2026. v2.1.252 and v2.1.258 are focused repair releases; v2.1.257 is the update worth reviewing because it changes auto-mode safeguards, session presentation, subagent model control, and the default Fable model.

Changes worth noticing

  • Time formatting for sessions: timeFormat and timeZone control the turn-end clock and transcript timestamps. Choose 12-hour, 24-hour, UTC, or a strftime pattern when a team needs consistent timestamps across machines.
  • Safer auto mode: Claude Code now treats cloud-metadata credential requests, egress evasion, and cross-tenant reach as a Containment Escape rule that is not auto-approved. It also asks once before the first file read outside the working directories and can block those reads with permissions.blockReadsOutsideWorkingDirectories.
  • Predictable subagent models: CLAUDE_CODE_SUBAGENT_MODEL_FORCE applies CLAUDE_CODE_SUBAGENT_MODEL—or the main model—to every subagent, even when an agent definition or spawn request names another model. Use it when a team needs a uniform cost, capability, or provider policy.
  • Faster session adjustments: typing s in /effort changes effort for only the current session, matching /model. /doctor now warns about stale sandbox mask files, which helps explain problems after an interrupted sandboxed session.
  • Gateway and IDE improvements: gateway-discovered models can include a supplied description, and the VS Code extension gains clearer account, session-manager, model, effort, and output-style controls.

Reliability and security fixes

The release series closes several practical edges. Claude Code now refuses plugin paths that resolve outside the plugin directory through symlinks, avoids unbounded memory growth for invalid streamed JSON input, and applies command-deny rules to redirected inputs and reader commands. It also fixes permission rules being skipped inside compound shell commands or subshells.

For session workflows, the updates improve background-session startup during self-update, restore settings created after startup, prevent duplicated or stalled background sessions, preserve subagents after an interrupted stream, and make Remote Control respect a model selected from the Claude app. The smaller v2.1.252 fixes task-output failures on some Macs, persistence of “always allow” in new projects, and Remote Control stalls. v2.1.258 fixes a macOS Monterey launch regression and remote or scheduled sessions failing after a re-sent permission approval.

What to do

Update Claude Code, then review any shared auto-mode policy before relying on it for unattended work:

claude update

If you use agents with an approved model policy, test CLAUDE_CODE_SUBAGENT_MODEL_FORCE in a non-production project first. If your work crosses multiple time zones, set timeZone and timeFormat in shared settings so session evidence is easier to compare.

Official Claude Code v2.1.252 release notes · v2.1.257 release notes · v2.1.258 release notes