---
title: "Claude Code v2.1.196 发布：组织默认模型、安全增强、后台任务可靠性改进"
source: "Claude Code：GitHub Releases（RSS）"
source_tier: "t1_5"
url: "https://github.com/anthropics/claude-code/releases/tag/v2.1.196"
permalink: "https://feed.astralor.com/items/itm_e8f3ca338f34e3ef817ec822"
published: "2026-06-29T23:27:32.000Z"
score: 70
channel: "ai"
tags: ["Anthropic","Claude Code","代码审查","安全"]
---

# Claude Code v2.1.196 发布：组织默认模型、安全增强、后台任务可靠性改进

## 速览

Claude Code v2.1.196 版本带来多项关键更新：支持管理员在组织控制台设置默认模型，新增可点击的文件附件和可读会话名称。安全方面，阻止通过提交的 .mcp.json 自动运行不受信任的服务器，未受信任的工作区显示待审批状态。修复了后台任务可能被永久删除的问题，改进了会话恢复和背景代理的可靠性。同时优化了 /code-review 工作流减少约 25% 的 token 消耗，并默认启用流式闲置看门狗。

## 关键点

- 新增组织默认模型（Org default/Role default），管理员可在控制台配置
- 安全增强：阻止通过提交的 .mcp.json 自动启动不可信服务器
- 修复后台任务因进程重启导致对话永久丢失的问题
- 代码审查流程合并五个清理步骤，减少约 25% token 消耗

## 全文

What's changed Added support for organization default models — admins set it in the org console; it shows as "Org default" (or "Role default") in /model when you haven't picked one yourself Added readable default names for sessions at start, making them easier to identify and message Added clickable file attachments in chat — Cmd/Ctrl-click reveals the file in Finder/Explorer Security: claude mcp list/get no longer spawn .mcp.json servers that a repo self-approved via a committed .claude/settings.json; untrusted workspaces show ⏸ Pending approval Fixed waking a background job permanently deleting its conversation and re-running the original prompt when the transcript probe misread a real transcript; the file is now set aside, never deleted Fixed the rate-limit warning flickering off and rate-limit telemetry being over-counted when multiple parallel requests were in flight at the moment a usage limit was hit Fixed duplicate recap lines after a background session's turn: a schema-rejected StructuredOutput attempt no longer renders alongside its retry Fixed PowerShell git diff/git grep, egrep/fgrep, and quoted search patterns containing | being reported as failures when they exit 1, matching Bash behavior Fixed multiple claude agents side panel issues: keyboard focus getting stuck when opening an agent, background jobs losing their subagent types on every open, and sessions showing incorrect status while actively running Fixed claude agents --dangerously-skip-permissions silently falling back to auto mode instead of showing the bypass disclaimer and applying bypass mode to spawned agents Fixed mid-turn crash recovery for Remote sessions — sessions interrupted by a server restart now auto-resume on the next worker Fixed sessions moved with /cd reappearing in the old directory's resume list after a non-graceful exit when the old path contained special characters Fixed claude plugin validate skipping local plugins whose source is "." and stopping after the first error class Fixed Esc Esc at an idle prompt not opening the rewind menu (regression); use Ctrl+C or Ctrl+X Ctrl+K to stop background agents Fixed MCP OAuth requesting the authorization server's full scopes_supported catalog when no scope is specified, causing invalid_scope failures on GitLab self-hosted and other enterprise IdPs Fixed /context showing 0 tokens for all tool groups on Bedrock Fixed /deep-research misreporting verifier failures as "all claims refuted" instead of unverified Fixed plugin dependency version pins not being honored when the marketplace was added as a local folder path backed by a git repo Fixed claude agents session status: completed rows no longer flip between "Done" and "Needs your input", stalled agents are now labeled "Needs attention", and results that mention a PR show a clickable link Fixed voice dictation swallowing spaces and spuriously starting a recording during very fast typing when voice mode is enabled Improved background session reliability: long-running commands and workflows now survive the session's process being stopped, restarted, or updated — including on Windows, where background shells are handed off instead of being killed Improved background agents: workers killed by a daemon restart are now automatically resumed from where they left off the next time the agents view opens Improved /code-review workflow: merged five cleanup finders into one, cutting token usage by roughly 25% Reduced per-frame rendering work in the terminal UI by skipping no-op subtree walks during streaming The streaming idle watchdog is now on by default for all providers — it aborts and retries when a response stream produces no events for 5 minutes. Set CLAUDE_ENABLE_STREAM_WATCHDOG=0 to disable. Remote Control is now disabled when ANTHROPIC_BASE_URL points at a non-Anthropic host, matching the existing behavior under CLAUDE_CODE_USE_BEDROCK/_VERTEX/_FOUNDRY Changed opening the agents view from a foreground session to require a single ← press instead of two, matching the behavior in background sessions

---

引用前请核对原文;本文由星际流动整理:https://feed.astralor.com/items/itm_e8f3ca338f34e3ef817ec822