---
title: "Claude Code v2.1.210 发布：修复多项子代理隔离、会话崩溃与粘贴字符泄漏问题"
source: "Claude Code：GitHub Releases（RSS）"
source_tier: "t1_5"
url: "https://github.com/anthropics/claude-code/releases/tag/v2.1.210"
permalink: "https://feed.astralor.com/items/itm_517aedb4ec32821a37b6e1fb"
published: "2026-07-14T23:45:25.000Z"
score: 79
channel: "ai"
tags: ["AI编程助手","Anthropic","Claude Code","子代理隔离","版本更新"]
---

# Claude Code v2.1.210 发布：修复多项子代理隔离、会话崩溃与粘贴字符泄漏问题

## AI 点评

> 这次更新虽然都是些小修小补，但每个修复都戳中了日常使用中的痛处——比如粘贴È/É字符这种烦人的问题终于解决了。对正在重度使用Claude Code做代码审查或自动化任务的团队来说，子代理隔离修复尤其关键，可以放心让AI操作Git了。另外自动模式默认用Sonnet 5这一点，可能暗示Anthropic正在悄悄优化模型分配策略。

## 速览

Claude Code v2.1.210 版本主要修复了大量与子代理隔离、会话稳定性、粘贴字符泄漏及权限规则相关的 Bug，并改进了超时提示、自动模式权限分类器、屏幕阅读器支持及数据可视化技能的颜色验证。新增了实时耗时计数器，优化了背景任务等待提示。该版本还解决了在 Bedrock、Vertex 等平台上的自动模式默认提案问题，并提升了 Bash/PowerShell 工具超时后的信息提示。

## 关键点

- 新增实时耗时计数器，让长时间运行的工具调用不再看似卡死。
- 对 Write/NotebookEdit/Glob 权限规则增加启动警告，建议改用 Edit/Read。
- 修复子代理可对主仓库执行 Git 写入命令的隔离漏洞。
- 修复粘贴标记泄漏到外部编辑器（出现 È/É 字符）及会话崩溃（大整数值导致）等问题。

## 全文

What's changed Added a live elapsed-time counter to the collapsed tool summary line so long-running tool calls visibly tick instead of looking stuck Added a startup warning for Write(path), NotebookEdit(path), and Glob(path) permission rules — use Edit(path) or Read(path) instead Fixed isolation: 'worktree' subagents being able to run git-mutating commands against the main repo checkout instead of their own isolated worktree Fixed the ultracode keyword opt-in firing on non-human-originated input such as webhook payloads and relayed PR comments Fixed a rendered text fragment leaking into crash telemetry when a UI component returned content outside a styled text element Fixed paste markers leaking into external editors opened from Claude Code, which could appear as stray È/É characters around pasted text Fixed claude attach sometimes failing with "job not found" or "agent is still starting" errors during session transitions — attach now waits for the daemon to settle, and terminal resizes during a slow attach are applied once it completes Fixed a session crash when a tool's result renderer returned a numeric bigint value or plain text instead of a UI element Fixed a hook callback timeout being misreported to the model as a user rejection, which made unattended sessions stop and wait Fixed Claude assuming a cd took effect after its command was moved to the background; the tool result now states the working directory is unchanged Fixed plugin-provided MCP servers being torn down when MCP servers are re-synced mid-session Fixed plan approvals without edits being labeled "(edited by user)" and overwriting the plan file with a stale snapshot Fixed /doctor skipping its auto-mode-default proposal on Bedrock, Vertex, and Foundry, where auto mode no longer needs an opt-in Fixed Grep content mode claiming "No matches found" when paginating past the end of results Fixed unmatched $1/$2 positional placeholders in skills and commands being silently stripped; they are now preserved verbatim Fixed plugin cache writes leaving temp files behind on failure and failing on locked-file renames on Windows and network filesystems Fixed background workers crash-looping when a client resets its connection to the background service Fixed claude agents --effort ultracode not reaching dispatched sessions; the value was silently dropped Fixed pressing ← to open the agents view dropping the task tracker when returning to the session Fixed the agents dashboard retaining pasted images from abandoned reply drafts after their session was deleted Fixed killed background sessions leaving a permanent git worktree lock behind; the periodic sweep now releases locks whose owning process is gone Fixed SDK MCP servers registered via an initialize control request waiting until the next turn to start connecting Fixed returning to the agents view from a session leaving overlapping ghost frames with CLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1 Fixed late-appearing .claude/* symlinks not being reconciled into the sandbox deny-write list Hardened the Agent tool against indirect prompt injection via content a subagent read Improved the Bash/PowerShell tool message when a command hits its timeout and is auto-backgrounded, so the model can distinguish a hang from an explicit background request Improved auto mode: the permission classifier now defaults to Sonnet 5 for external sessions, validated on the session's first request and pinned for the session Improved the bundled dataviz skill's chart color validation with perceptual OKLab color difference and recalibrated color-blindness thresholds Memory writes that leave a MEMORY.md index over its read limit now produce an explicit error instead of silent truncation Screen reader mode now announces permission mode changes aloud when cycling modes with Shift+Tab The agents footer hint now shows how many background agents are waiting on your input, with a brief color emphasis when the count changes Agent view: the session you pressed ← from stays visibly marked even after mouse hover or arrow keys move the selection Fable temporarily shows as unavailable in the advisor picker while a server-side issue causing Fable advisor failures is fixed

---

引用前请核对原文;本文由星际流动整理:https://feed.astralor.com/items/itm_517aedb4ec32821a37b6e1fb