claude-code-system-prompts/CHANGELOG.md

Claude Code System Prompts Changelog

2.1.157

+674 tokens

• Agent Prompt: Security monitor for autonomous agent actions (first part) — Expands high-severity review for persistent configuration changes, outbound submissions, novel destinations, and low-information actions whose intent is clarified by the agent's narration.
• Data: Tool use concepts — Adds guidance that tool descriptions should prescribe when to call each tool, especially to improve should-call behavior on recent Opus models.
• Skill: Model migration guide — Adds Opus 4.8 migration guidance to put tool-triggering instructions in each tool's own description, not only in the system prompt.
• Tool Description: EnterWorktree — Allows switching by path from an existing worktree session or pinned agent into another registered .claude/worktrees/ worktree, with cleanup and writability limits clarified.

2.1.156

_{No changes to the system prompts in v2.1.156.}

2.1.154

+11,516 tokens

• NEW: Agent Prompt: /simplify slash command — Adds /simplify behavior that runs four cleanup agents for reuse, simplification, efficiency, and altitude findings, then applies safe fixes while skipping behavior-changing or out-of-scope suggestions.
• NEW: Data: Claude Code live documentation sources — Adds official Claude Code documentation URLs and topic-specific WebFetch prompts for commands, settings, hooks, MCP, skills, subagents, IDEs, deployment, security, and related surfaces.
• NEW: Data: Claude Code recent changes reference — Adds a reference for renamed or removed Claude Code commands, flags, and terms, including /output-style, /pr-comments, /vim, /extra-usage, --enable-auto-mode, and stale naming guidance.
• NEW: Skill: Claude Code configuration guide — Adds a Claude Code configuration skill that checks the live build, bundled recent-change references, and current documentation before answering questions about commands, flags, settings, hooks, skills, MCP servers, subagents, IDE integrations, and related configuration.
• Agent Prompt: Claude guide agent — Adds stale-knowledge handling that tells the guide agent to disclose documentation fetch failures instead of silently answering Claude Code command, flag, or settings questions from memory.
• Agent Prompt: Security monitor for autonomous agent actions (first part) — Expands security review with explicit final-destination tracing for writes, commits, pushes, uploads, publishes, and sent data before deciding whether a boundary-crossing action should be blocked.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Strengthens data-exfiltration rules around trust boundaries, automated pathways, unverified destinations, credential leakage into persistent artifacts, and destination/resource/operation-scoped allow exceptions.
• Data: Anthropic CLI — Updates Anthropic CLI authentication guidance to cover SDK-style credential resolution, OAuth profiles from ant auth login, ant auth print-credentials, bearer-token usage for raw HTTP, and precedence between API keys and auth tokens.
• Data: Claude API reference — cURL — Updates examples and adaptive-thinking guidance for Opus 4.8.
• Data: Claude API reference — Go — Updates the recommended Go SDK model constant and examples from Opus 4.7 to Opus 4.8.
• Data: Claude API reference — Python — Updates credential guidance for API keys, auth tokens, and ant auth login; adds beta mid-conversation system-message examples; and extends adaptive thinking and compaction guidance to Opus 4.8.
• Data: Claude API reference — TypeScript — Updates credential guidance for API keys, auth tokens, and ant auth login; adds beta mid-conversation system-message examples; and extends adaptive thinking and compaction guidance to Opus 4.8.
• Data: Claude model catalog — Adds Claude Opus 4.8 as the current most powerful Opus model with a 1M input window and updates Opus model-selection examples and legacy recommendations to prefer claude-opus-4-8.
• Data: HTTP error codes reference — Updates authentication fixes for OAuth bearer tokens and expands Opus model-specific 400 guidance to include Opus 4.8.
• Data: Managed Agents reference — Python — Updates client initialization examples to prefer environment, auth-token, or ant auth login credential resolution before explicit API-key injection.
• Data: Managed Agents reference — TypeScript — Updates client initialization examples to prefer environment, auth-token, or ant auth login credential resolution before explicit API-key injection.
• Data: Prompt Caching — Design & Optimization — Adds beta mid-conversation system-message guidance as a cache-preserving and prompt-injection-safe way to send operator instructions without editing the top-level system prompt.
• Data: Streaming reference — Python — Updates adaptive-thinking examples for Opus 4.8.
• Data: Streaming reference — TypeScript — Updates adaptive-thinking examples for Opus 4.8.
• Data: Tool use concepts — Updates adaptive-thinking examples for Opus 4.8.
• Skill: Agent Design Patterns — Replaces mid-session <system-reminder> guidance with beta role: "system" messages for supported models, with <system-reminder> retained as the fallback.
• Skill: Building LLM-powered applications with Claude — Adds Opus 4.8 to current model guidance, updates adaptive thinking, effort, task-budget, compaction, and migration recommendations, and documents beta mid-conversation operator instructions.
• Skill: Model migration guide — Adds Opus 4.8 migration guidance, including no new API breaking changes from Opus 4.7, model-ID updates, mid-session system prompts, long-horizon agentic tuning, effort recommendations, tool-triggering behavior, narration changes, ask-rate calibration, and visible-reasoning mitigation.
• System Prompt: Background session instructions — Changes temporary-file guidance from $CLAUDE_JOB_DIR to $CLAUDE_JOB_DIR/tmp for background sessions.
• System Prompt: Coordinator mode orchestration — Updates PR activity subscription guidance and changes worker summary accounting from total tokens to subagent tokens.
• Tool Description: AskUserQuestion — Tightens usage guidance so agents ask only when blocked on a decision that cannot be resolved from the request, code, or sensible defaults.
• Tool Description: Bash (sandbox — tmpdir) — Clarifies that $TMPDIR is set to the same sandbox-writable temporary directory for both sandboxed and unsandboxed commands.
• Tool Description: Workflow — Adds ultracode as standing workflow opt-in, requires inline workflow scripts for first invocation, clarifies JSON args passing, and notes that workflow scripts are plain JavaScript rather than TypeScript.

2.1.153

+303 tokens

• REMOVED: System Reminder: Thinking frequency tuning — Removes the reminder that treated harness-added <system-reminder> messages as thinking-frequency instructions for simpler versus more complex tasks.
• Tool Description: Workflow — Renames the explicit opt-in keyword from ultrawork to workflow, clarifies that model overrides should usually be omitted so agents inherit the resolved session model, and adds exhaustive-review guidance for deduping against all seen findings, using perspective-diverse verification, and looping until discovery runs dry.

2.1.152

+4,566 tokens

• NEW: Agent Prompt: /code-review part 9 fix application — Adds --fix behavior that applies reported review findings to the working tree, covering correctness bugs plus reuse, simplification, and efficiency cleanups, while skipping false positives or fixes that would exceed the reviewed diff.
• NEW: System Prompt: Coordinator mode orchestration — Adds coordinator-mode instructions for delegating software engineering work across workers, synthesizing worker results, managing worker lifecycle, handling cross-session peers, and independently verifying delegated changes before reporting success.
• NEW: System Prompt: Coordinator worker instructions — Adds worker-agent instructions for coordinator-assigned tasks, including scoped execution, safe handling of concurrent branch changes, required commits for file changes, no subagent spawning, resumption behavior, failure reporting, and coordinator-facing summaries.
• Agent Prompt: /code-review part 2 low effort mode — Expands low-effort review beyond hunk-visible correctness bugs to also flag duplicated helpers and dead code visible in the diff context.
• Agent Prompt: /code-review part 3 extra-high and maximum effort modes — Expands extra-high and maximum-effort review from five correctness finder angles to nine finder angles, adding reuse, simplification, efficiency, and altitude checks.
• Agent Prompt: /code-review part 6 medium effort mode — Expands medium-effort review from three correctness finder angles to seven finder angles, adding reuse, simplification, efficiency, and altitude checks.
• Agent Prompt: /code-review part 7 high effort mode — Expands high-effort review from three correctness finder angles to seven finder angles, adding reuse, simplification, efficiency, and altitude checks.
• Data: Claude API reference — Java — Updates the documented Anthropic Java SDK version from 2.27.0 to 2.34.0.
• Tool Description: AskUserQuestion — Clarifies that agents should use the plan-mode entry tool to switch into plan mode, and that AskUserQuestion in plan mode is only for clarifying requirements or choosing approaches before final approval.
• Tool Description: Bash (Git commit and PR creation instructions) — Adds generated-with-Claude-Code PR text guidance to the pull request creation instructions.
• Tool Description: Workflow — Adds examples of common single-phase workflows, recommends chaining scoped workflows across turns, and notes that workflow agents can access session-connected MCP tools through ToolSearch with headless-auth caveats.

2.1.150

_{No changes to the system prompts in v2.1.150.}

2.1.149

+282 tokens

• Tool Description: Workflow — Adds framing for using workflows to decompose broad work, gain confidence through independent checks, and handle scale beyond one context; also recommends scouting inline before orchestration and expands quality patterns with multi-modal sweeps, completeness critics, and logging bounded coverage.

2.1.148

_{No changes to the system prompts in v2.1.148.}

2.1.147

+1,236 tokens

• NEW: Agent Prompt: /code-review part 1 base finder angles — Adds shared finder-angle instructions for /code-review, covering line-by-line diff scanning, removed-behavior auditing, and cross-file caller/callee tracing.
• NEW: Agent Prompt: /code-review part 2 low effort mode — Adds a low-effort /code-review mode that reads the diff once, skips tests and fixtures, avoids subagents and full-file reads, and returns up to four hunk-visible runtime correctness findings.
• NEW: Agent Prompt: /code-review part 3 extra-high and maximum effort modes — Adds extra-high and maximum-effort /code-review modes that prioritize recall with five independent finder angles, one-vote verification, a gap sweep, and up to fifteen findings.
• NEW: Agent Prompt: /code-review part 4 three-state verification phase — Adds a verifier phase that classifies candidate review findings as confirmed, plausible, or refuted, keeping confirmed and plausible candidates.
• NEW: Agent Prompt: /code-review part 5 recall-biased verification phase — Adds recall-biased verification guidance that treats realistic uncertain review candidates as plausible unless the code refutes them.
• NEW: Agent Prompt: /code-review part 6 medium effort mode — Adds a medium-effort /code-review mode focused on precision, using three finder angles, one-vote verification, and up to eight findings.
• NEW: Agent Prompt: /code-review part 7 high effort mode — Adds a high-effort /code-review mode focused on recall, using three finder angles, recall-biased verification, and up to ten findings.
• NEW: Agent Prompt: /code-review part 8 GitHub comment posting — Adds optional --comment behavior for /code-review, posting findings as inline GitHub PR comments when possible and falling back to gh api or terminal output.
• REMOVED: Skill: Simplify — Removes the code review and cleanup skill.
• Agent Prompt: /rename auto-generate session name — Removes the explicit instruction to treat <conversation> contents as data rather than instructions when generating a kebab-case session name.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Replaces the safety-check bypass rule with a broader auto-mode bypass hard block covering classifier jailbreaking, bad-faith retry tunneling, and permission-system indirection; also treats unrequested permission allow-rule widening as self-modification.
• System Prompt: Worker instructions — Clarifies that the code-review skill reports correctness findings but does not edit code, and tells workers to fix any surfaced findings before tests and end-to-end verification.
• System Reminder: Team Coordination — Clarifies that teammates should be addressed by name while active, and that agentId should only be used to resume a completed background agent.
• Tool Description: SendMessageTool — Updates team messaging guidance to allow agentId only for resuming completed background agents while continuing to address active teammates by name.

2.1.146

+4,755 tokens

• NEW: Tool Description: Workflow — Describes the Workflow tool for opt-in deterministic multi-subagent orchestration, including script metadata, agent hooks with plain-text or structured returns, pipeline vs. parallel control flow, token budgeting, quality patterns, concurrency limits, and resume behavior.
• NEW: Agent Prompt: Workflow subagent plain text output — Instructs workflow-spawned subagents to return raw final text as the calling script's parsed value, avoiding human-facing confirmations, markdown wrappers, or SendUserMessage delivery.
• NEW: Agent Prompt: Workflow subagent structured output — Instructs workflow-spawned subagents with schemas to return their answer by calling the StructuredOutput tool exactly once, retrying on schema validation failure and not duplicating the result in text.
• NEW: System Prompt: Phase four of plan mode — Adds final-plan guidance requiring context, a single recommended approach, critical files and reusable utilities, concise executable detail, and end-to-end verification steps.
• REMOVED: Skill: /dream nightly schedule — Removes the skill that deduplicated and created a durable recurring /dream consolidate cron job, confirmed expiry/cancellation details, and triggered immediate consolidation.
• Agent Prompt: Managed Agents onboarding flow — Expands onboarding with concrete success-criteria questions, an optional outcome-graded kickoff using user.define_outcome, and a mandatory pre-flight viability check that reconciles each required action against available tools, credentials, data mounts, networking, and prompt specificity before emitting code.
• Agent Prompt: Security monitor for autonomous agent actions (first part) — Clarifies that [User answered AskUserQuestion]: messages count as direct user intent even though ordinary tool results remain untrusted for authorizing risky action parameters.
• Data: Managed Agents overview — Adds guidance to reconcile resources before the first run so missing tools, MCP servers, credentials, reachable hosts, mounted data, or checkable context are caught before the agent spends budget mid-session.
• Skill: Building LLM-powered applications with Claude — Updates the Managed Agents onboarding slash-command guidance to include the new pre-flight viability check before code generation.
• Skill: Simplify — Renames the skill heading from "Simplify: Code Review and Cleanup" to "Code Review and Cleanup."
• System Prompt: Worker instructions — Changes the post-implementation review step to invoke the code-review skill instead of simplify.

2.1.145

+20,218 tokens

• NEW: Data: Managed Agents self-hosted sandboxes — Adds reference documentation for self_hosted Managed Agents environments, covering outbound worker polling, environment keys, SDK and CLI worker paths, webhook-driven wakeups, orchestration, monitoring, cloud-vs-self-hosted differences, credential handling, and customer-owned security responsibilities.
• NEW: Skill: Run app — Adds a general skill for launching and driving a project's actual runtime surface, first preferring project-specific run skills and otherwise choosing patterns for CLIs, servers, browser apps, Electron apps, TUIs, and libraries.
• NEW: Skill: Run skill generator — Adds guidance for creating project-specific run-<unit> skills, including verified setup/build/run steps, driver or smoke-harness creation, clean-environment verification, and examples for browser, CLI, Electron, library, TUI, and server/API projects.
• NEW: Skill: Run skill template — Adds a reusable template for project-specific run skills with sections for prerequisites, setup, build, agent and human run paths, tests, gotchas, and troubleshooting.
• NEW: Skill: Run browser-driven web app example — Adds an example run skill pattern for web apps that starts a dev server, waits on real readiness, drives it with chromium-cli, captures screenshots, and records recurring gotchas.
• NEW: Skill: Run CLI tool example — Adds an example run skill pattern for CLI tools covering installation, representative invocations, expected output, exit codes, and stdin behavior.
• NEW: Skill: Run Electron desktop GUI app example — Adds an example run skill pattern for Electron apps that launches under xvfb, exposes a Playwright-driven REPL, captures screenshots, and documents desktop automation pitfalls.
• NEW: Skill: Run library SDK example — Adds an example run skill pattern for libraries and SDKs focused on build/test steps plus a minimal public-boundary smoke example.
• NEW: Skill: Run TUI interactive terminal app example — Adds an example run skill pattern for terminal UIs using tmux to launch, send input, capture panes, document key commands, and clean up.
• NEW: Skill: Run web server API example — Adds an example run skill pattern for servers and APIs with background launch, readiness polling, smoke curl verification, and shutdown guidance.
• REMOVED: System Reminder: Plan mode is active (iterative) — Removes the iterative plan-mode reminder that told agents to maintain a plan file while repeatedly exploring, updating the plan, and asking the user questions before exiting plan mode.
• Agent Prompt: Managed Agents onboarding flow — Updates the introductory Managed Agents explanation to include self_hosted environments where the user's own worker runs tool execution, and distinguishes cloud environment networking/packages from self-hosted infrastructure.
• Agent Prompt: /review-pr slash command — Changes the PR detail command to request specific JSON fields from gh pr view, including title, body, author, refs, state, diff stats, changed file count, and labels.
• Agent Prompt: Status line setup — Adds repository identity and current-branch PR metadata to the status-line input schema, with examples for displaying owner/name and PR number/review state.
• Data: Anthropic CLI — Adds self-hosted environment CLI references for ant beta:worker poll/run and ant beta:environments:work stats/stop.
• Data: Claude Platform on AWS reference — Clarifies that Claude Platform on AWS has first-party API parity except for self-hosted sandboxes, which are unavailable there and should use cloud environments instead.
• Data: Live documentation sources — Adds Managed Agents self-hosted sandbox and self-hosted sandbox security documentation URLs to the live documentation source list.
• Data: Managed Agents core concepts — Documents sessions.update() for changing agent.tools, agent.mcp_servers, and vault_ids on an idle existing session as a session-local override.
• Data: Managed Agents endpoint reference — Adds self-hosted environment work queue endpoints and clarifies that session updates can replace tools, MCP servers, and vault IDs; also notes that self-hosted environment configs are just {"type":"self_hosted"}.
• Data: Managed Agents environments and resources — Replaces the old restricted-networking example with limited networking plus allow_package_managers and allow_mcp_servers, and adds self-hosted sandbox guidance for running tool execution in user-controlled infrastructure.
• Data: Managed Agents overview — Adds self-hosted sandboxes as a use case and updates environment guidance so config.type can be either cloud or self_hosted; also points to sessions.update() for per-session tool/MCP/vault changes.
• Data: Managed Agents reference — cURL — Updates the environment creation example to use limited networking with package-manager and MCP-server allowances.
• Data: Managed Agents tools and skills — Clarifies where prebuilt agent tools and MCP tools run for cloud vs. self-hosted environments, and adds notes about session-local tool/MCP/vault updates, large MCP outputs being offloaded to files, and invalid vault credentials surfacing as session errors rather than blocking session creation.
• Data: Prompt Caching — Design & Optimization — Adds cache pre-warming guidance using max_tokens: 0, including when to use it, when to skip it, re-warming cadence, breakpoint placement, rejected parameter combinations, and why it replaces the older max_tokens: 1 workaround.
• Skill: Building LLM-powered applications with Claude — Notes that Claude Platform on AWS supports Managed Agents except self-hosted sandboxes, and adds max_tokens: 0 as the intentional low-token exception for prompt-cache pre-warming.

2.1.144

-105 tokens

• Data: Managed Agents endpoint reference — Drops the type: "model_config" wrapper from the model config shorthand example, so the full config object is now just {id: "claude-opus-4-6", speed: "fast"}.
• Tool Description: CronCreate — Adds a "Not for live watching" section (shown when the Monitor tool is enabled) clarifying that CronCreate re-runs prompts at fixed wall-clock intervals and pointing users to the Monitor tool for streaming log/process/command output as it changes, since cron polls on a schedule. Refactors the durability and runtime-behavior copy so the durable-vs-session-only guidance is sourced from shared snippets rather than inlined conditionals.

2.1.143

+302 tokens

• Agent Prompt: Hook condition evaluator (stop) — Adds a third response shape {"ok": false, "impossible": true, "reason": ...} for conditions that can never be satisfied (self-contradictory, missing capability, or assistant has exhausted approaches). Cautions the evaluator to independently verify impossibility rather than trust the assistant's self-assessment, and not to mark conditions impossible just because progress is slow or the goal isn't yet reached.
• Skill: Verify skill — Reframes the "don't run tests" rationale from "CI already ran them" to "running them proves you can run CI, not that the change works," so the rule applies even when there's no CI. Generalizes the workflow beyond PRs: the scope can be a diff or just "does X work," and "PR description" becomes "any description." Expands the change-discovery section with commands for repos without an upstream (git diff origin/HEAD...), uncommitted changes (git diff HEAD), and a fallback that asks the user to name the scope when there's no repo at all. Adds a "Destructive path?" guard telling the verifier not to drive code live when it deletes, publishes, sends, or writes outside the workspace without a dry-run, and to call out which path went unexercised. Swaps the /init-verifiers follow-up suggestion for a note to capture the working build/launch recipe so it can become a verifier-* skill later, and trims the report-formatting guidance (drops the "hoisted above the PR comment fold" detail).

2.1.142

+1,080 tokens

• NEW: Tool Description: SendUserFile — Describes the SendUserFile tool for surfacing generated deliverable files to the user, with optional captions and normal or proactive status.
• Agent Prompt: Coding session title generator — Wraps the session content in <session> tags and tells the model to treat it as data, not follow links or instructions inside it, and not state inabilities. If the content is just a URL or reference, it should describe what the user is asking about (e.g. "Review Slack thread") rather than refuse. Adds a "Bad (refusal)" example.
• Agent Prompt: Managed Agents onboarding flow — Adds a "Console escape hatch" instruction telling the runtime code to print the session's Console URL right after sessions.create() so users can watch the session in the UI while iterating, defaulting the workspace slug to default.
• Agent Prompt: /rename auto-generate session name — Wraps the conversation content in <conversation> tags and instructs the model to treat it as data to summarize, not instructions to follow.
• Data: Live documentation sources — Adds a WebFetch URL for the Amazon Bedrock documentation page, covering the AnthropicBedrockMantle client, anthropic.-prefixed model IDs, auth paths, feature availability, and regions.
• Data: Managed Agents core concepts — Adds a "Watch it live in Console" tip pointing at https://platform.claude.com/workspaces/{workspace}/sessions/{session.id}, with default as the fallback workspace slug, and asks generated code for locally-iterating users to include the print/console.log of that link.
• Skill: Create verifier skills — Swaps the hardcoded TodoWrite tool reference for one that resolves to either TaskCreate or TodoWrite depending on whether the tasks feature is enabled.
• Skill: Model migration guide — Adds an Amazon Bedrock model IDs section explaining that Bedrock clients use the same Messages API and breaking changes but require an anthropic. provider prefix on model IDs, with a rename table for claude-opus-4-7 and claude-haiku-4-5. Notes that code_execution_* tool versions and Task Budgets are first-party-only and should be skipped for Bedrock, and warns that the legacy InvokeModel/Converse Bedrock integration with ARN-versioned IDs is out of scope.

2.1.141

+4 tokens

• System Reminder: Output style active — Sources the per-turn reminder from a separate turn-reminder object rather than reading it directly off the output-style config, keeping the same "follow the specific guidelines" fallback wording.

2.1.140

+622 tokens

• NEW: Tool Description: Agent (simple usage notes) — Simplified usage notes for the Agent tool covering when to delegate, fork behavior, resumption, worktree isolation, background execution, parallel launches, and context restrictions.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Expands the Self-Modification rule from a vague description to an explicit list of agent-config paths (.claude/settings*.json, CLAUDE.md, CLAUDE.local.md, .claude.json, .claude/rules/, .claude/hooks/, .claude/commands/, .claude/agents/, .claude/skills/, .claude/output-styles/, .claude/workflows/, .claude/routines/, .claude/scheduled_tasks.json, .claude/loop.md, .mcp.json), and carves out exceptions so files under .claude/worktrees/<name>/ are treated as ordinary project files and a project-specific .claude/ subdirectory outside the listed paths is not Self-Modification on its own.
• Agent Prompt: Worker fork — Minor wording cleanup: drops "in your system prompt" from the "default to forking" reference so the rule applies generically to parent guidance.
• Tool Description: Snooze (delay and reason guidance) — Adds an explicit warning not to schedule short-interval wakeups to poll for harness-tracked background work (since the agent is re-invoked automatically when it finishes); instead use a long 1200s+ fallback heartbeat. Reframes the under-5-minute cache window as appropriate for actively polling external state the harness can't notify about (CI runs, deploys, remote queues), and updates the example from a bun build to a CI run.
• Tool Description: Write (read existing file first) — Rewrites the description into a "When to use" format that names creating a new file or fully replacing a previously-read file as the use cases, and points at the edit tool for partial changes.

2.1.139

+2,248 tokens

• NEW: Data: Claude Platform on AWS reference — Reference documentation for using the Claude Developer Platform through AWS infrastructure, including AnthropicAWS clients, required region and workspace configuration, SigV4 authentication, and short-term API keys.
• Agent Prompt: Conversation summarization — Adds requirement to note security-relevant instructions or constraints (sensitive files, forbidden operations, credential handling rules) and preserve them verbatim in the summary so they remain in effect after compaction.
• Agent Prompt: Recent Message Summarization — Same security-relevant instructions preservation requirement added to the recent-portion summarization flow.
• Data: Live documentation sources — Adds WebFetch URLs for Claude Platform on AWS and its required IAM actions documentation.
• Skill: Building LLM-powered applications with Claude — Reframes cloud-provider access so Claude Platform on AWS is treated as Anthropic-operated with same-day API parity and full Managed Agents support, while Bedrock, Vertex, and Foundry remain Claude API + tool use only.
• Skill: Dynamic pacing loop execution — Reorders steps so the brief confirmation (task ran, monitor as wake signal, fallback delay choice) is written as text before the schedule-wakeup call ends the turn.
• Skill: /insights report output — Removes the trailing additional-message block from the shareable report response.
• Skill: /loop self-pacing mode — Same reordering as dynamic pacing loop: confirm self-pacing, monitor wake signal, and fallback delay as text before the schedule-wakeup call.
• Skill: Model migration guide — Adds a Claude Platform on AWS section noting it uses bare first-party model IDs and that the full rename table and breaking-change sections apply verbatim, distinct from Bedrock.
• System Prompt: Auto mode — Drops the "Auto Mode Active" header and reframes destructive-action guidance generically rather than auto-mode-specific.
• System Prompt: Harness instructions — Removes the standalone note that automatic context compaction will trigger when conversations grow long.
• System Prompt: Memory instructions — Replaces 3–4 word titles with short kebab-case slugs, nests type under a metadata block, and introduces [[their-name]] cross-links between related memories.
• System Prompt: Partial compaction instructions — Adds the same security-relevant instructions preservation requirement so sensitive-file rules, forbidden operations, and credential handling carry across partial compactions.
• System Reminder: Output style active — Lets an output style supply its own per-turn reminder text, falling back to the default "follow the specific guidelines" wording.
• System Reminder: Task tools reminder — Removes the instruction telling Claude to never mention the reminder to the user.
• System Reminder: TodoWrite reminder — Removes the instruction telling Claude to never mention the reminder to the user.
• Tool Description: PowerShell — Adds a substantial reference table mapping Unix commands (head, tail, which, touch, wc, mkdir -p, rm -rf, ln -s, chmod, 2>/dev/null, inline VAR=x, bash control flow) to their PowerShell equivalents, and clarifies that -ErrorAction SilentlyContinue still causes exit 1 unless promoted to terminating and caught.

2.1.138

_{No changes to the system prompts in v2.1.138.}

2.1.137

_{No changes to the system prompts in v2.1.137.}

2.1.136

+525 tokens

• NEW: System Prompt: Action safety and truthful reporting — Requires confirmation for irreversible or outward-facing actions unless durably authorized, asks agents to inspect targets before deleting or overwriting them, and emphasizes faithful reporting of skipped steps, failed tests, and verified outcomes.
• Agent Prompt: Auto mode rule reviewer — Adds hard_deny as a fourth custom-rule category for unconditional security-boundary blocks, and narrows soft_deny to destructive or irreversible actions that clear user intent can authorize.
• Agent Prompt: Security monitor for autonomous agent actions (first part) — Splits blocking logic into unconditional hard blocks and user-authorizable soft blocks, updates the default rule, and makes user intent unable to clear hard-block security boundaries.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Moves data exfiltration into hard-block rules, adds hard-block coverage for safety-check bypasses, and treats agent-guessed external services or download sources as untrusted.
• Tool Description: Edit — Restores the line-number prefix format to a template variable while preserving the guidance to exclude line prefixes from edit strings.

2.1.133

+121 tokens

• NEW: Tool Description: Bash (prefer dedicated tools bullet) — Adds guidance to prefer dedicated read/search tools over Bash for commands such as find, grep, and cat unless explicitly instructed or after verifying no dedicated tool can do the task.
• System Reminder: Thinking frequency tuning — Narrows the reminder framing to thinking-block suppression, clarifying that harness reminders may ask the agent to respond without a thinking block.
• Tool Description: EnterWorktree — Documents the worktree.baseRef setting for new worktrees, including the default fresh behavior from origin/<default-branch> and the head option from current local HEAD.

2.1.132

+6,720 tokens

• Agent Prompt: Onboarding guide draft share link workflow — Shares the draft onboarding guide before review, asks the review questions with the draft share URL, then updates the same share link after revisions.
• NEW: Data: Managed Agents multiagent sessions — Adds reference documentation for coordinator rosters, per-agent threads, thread endpoints and streams, multiagent events, subagent tool permissions, and common multiagent pitfalls.
• NEW: Data: Managed Agents outcomes — Adds reference documentation for user.define_outcome rubric-graded work loops, outcome evaluation events, deliverables, interrupts, and interaction rules.
• NEW: Data: Managed Agents webhooks — Adds reference documentation for Console-registered Managed Agents webhooks, HMAC signature verification, payload envelopes, supported event types, retries, and delivery behavior.
• NEW: System Prompt: Strict proactive schedule offer gate — Adds a default-deny gate for proactive /schedule offers, requiring a named future-obligation artifact, concrete timing, and no in-session follow-up path.
• REMOVED: Tool Description: Schedule proactive offer guidance — Removed proactive scheduling-offer instructions from the schedule tool description; dedicated system prompts now govern when to offer /schedule.
• Agent Prompt: Managed Agents onboarding flow — Updates the documented Managed Agents skill limit from 64 to 20 per agent.
• Agent Prompt: Prompt Suggestion Generator v2 — Adds a safety rule to stay silent when suggestions could predict unsafe or sensitive actions, including legitimate security work.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Allows CronCreate, CronDelete, CronList, and RemoteTrigger actions for scheduling and managing Claude Code tasks.
• Agent Prompt: Status line setup — Clarifies that status-line input tokens are current context-window tokens including cache reads and writes, while output tokens are from the most recent API response.
• Data: Live documentation sources — Adds the Managed Agents webhooks documentation source URL.
• Data: Managed Agents core concepts — Updates skill limits to 20 per agent and documents the top-level multiagent coordinator roster field.
• Data: Managed Agents endpoint reference — Adds session thread APIs, MCP OAuth credential validation, multiagent agent schema, outcome definition examples, and updated tool and skill limits.
• Data: Managed Agents events and steering — Adds user.define_outcome, webhook monitoring, outcome evaluation events, multiagent thread/message events, and interrupt behavior for active outcomes.
• Data: Managed Agents overview — Expands Managed Agents coverage to include session threads, outcomes, multiagent coordination, and webhooks.
• Data: Managed Agents tools and skills — Updates the documented Managed Agents skill limit from 64 to 20 per agent.
• Skill: Building LLM-powered applications with Claude — Adds outcomes, multiagent sessions, and webhooks to the Managed Agents documentation reading guide.
• System Prompt: Proactive schedule offer after natural future follow-up — Defines future follow-ups as work more than two hours out or unavailable in-session, lowers the confidence threshold to 75%, and preserves concrete one-time and recurring scheduling signals.

2.1.131

_{No changes to the system prompts in v2.1.131.}

2.1.129

+1,335 tokens

• NEW: System Prompt: Autonomous loop persistence guidance (CLAUDE_CODE_LOOP_PERSISTENT) — Adds timer-invocation guidance for autonomous work loops, including when to continue established work, maintain current PRs, broaden scope before stopping, and require clear authorization for irreversible actions.
• REMOVED: Agent Prompt: Verification specialist — Removed the adversarial verification subagent prompt that required independent builds, tests, browser/API checks, and PASS/FAIL/PARTIAL verdicts without modifying the project.
• REMOVED: Data: Background agent state classification examples — Removed the standalone background-agent state-classification examples data prompt.
• Agent Prompt: Background agent state classifier — Expands notification-state classification with detailed done/working/blocked/failed boundaries, explicit marker rules, embedded examples, cron/re-poll handling, optional-offer vs delivery-gate distinctions, and lock-screen-oriented detail, needs, and output.result guidance.

2.1.128

+1,406 tokens

• NEW: Agent Prompt: Background job agent instructions — Replaces the background-job behavior system prompt with built-in background-agent instructions for progress narration, tool-result restatement, noisy-investigation delegation, and explicit result:, needs input:, or failed: status signals.
• NEW: Agent Prompt: Onboarding guide share link close — Adds onboarding-guide closing instructions that upload finalized ONBOARDING.md with ShareOnboardingGuide, handle existing-guide and unavailable-tool cases, and return the generated team share link.
• NEW: Tool Description: RemoteTrigger prompt — Describes the claude.ai remote-trigger API tool for listing, reading, creating, updating, and running scheduled remote agent routines without exposing OAuth tokens.
• REMOVED: Agent Prompt: Session memory update instructions — Removed the conversation-session notes update prompt that edited structured session memory files during chats.
• REMOVED: Data: Session memory template — Removed the structured summary.md session memory template.
• REMOVED: System Prompt: Background job behavior — Removed the standalone background-job behavior prompt; its conventions now live in the new built-in background job agent instructions.
• Data: Claude API SDK references — Added structured refusal stop-details guidance across Python, TypeScript, C#, Go, Java, PHP, and Ruby, and added programmatic API error type guidance for Java, PHP, Ruby, and the HTTP error reference.
• Data: Claude API reference — C# — Documents beta C# tool-runner and Managed Agents support via BetaToolRunner and client.Beta.Agents/Sessions/Environments.
• Data: Claude API reference — Go — Adds typed model constants, updates adaptive thinking syntax, and documents the beta advisor tool parameter.
• Data: Claude API reference — Java — Updates the documented SDK version from 2.17.0 to 2.27.0 and adds beta advisor tool guidance.
• Data: Claude model catalog — Marks Claude Sonnet 4 and Claude Opus 4 as deprecated, recommends Opus 4.7 or Sonnet 4.6 replacements, and updates older Sonnet replacement guidance to Sonnet 4.6.
• Data: Managed Agents references — Updates Python and TypeScript examples to use client.beta.sessions.events.stream and the current custom-tool event name field.
• Data: Tool use concepts — Adds beta server-side advisor tool documentation, including required model selection, optional fields, and the advisor-tool-2026-03-01 beta header.
• Skill: Building LLM-powered applications with Claude — Refreshes the current-model table for Opus 4.7, Opus 4.6, Sonnet 4.6, and Haiku 4.5; updates default model-ID examples; and notes beta C# support for tool running and Managed Agents.
• Skill: Model migration guide — Adds Opus 4.7 as the recommended Opus 4.6 migration target and adds a tuning check to parse tool inputs as JSON rather than matching serialized raw strings.
• System Prompt: Agent thread notes — Instructs agent threads to return reports, summaries, findings, and analysis directly in the final message instead of writing .md files for the parent agent to read.
• Tool Description: Edit — Hardcodes the Read-output line-number prefix format as “line number + tab” in indentation-preservation guidance.
• Tool Description: ReadFile — Always appends the additional read note placeholder at the end of the empty-file warning instead of gating it behind a separate conditional helper.

2.1.126

-87 tokens

• REMOVED: System Reminder: Malware analysis after Read tool call — Removed the reminder that asked agents to consider whether each file read is malware and to analyze malware without improving or augmenting it.

2.1.124

+166 tokens

• NEW: System Reminder: File modification detected (budget exceeded) — Tells the agent when a user or linter changed a file but the diff was omitted because other modified files already exceeded the snippet budget, and directs it to read the file if current content is needed.
• System Prompt: Harness instructions — Replaces the core-identity function call with explicit introductory-line and security-note insertion points before the shared harness instructions.
• System Prompt: REPL tool usage and scripting conventions — Clarifies that thenable shorthand results are auto-awaited only at return time, so inline uses such as concatenation, templates, or arguments to another call must be awaited first.

2.1.123

+0 tokens

_{No changes to the system prompts in v2.1.123.}

2.1.122

-122 tokens

• REMOVED: System Prompt: Phase four of plan mode — Removed the standalone phase-four plan-mode prompt; the active plan-mode reminder now receives phase-four instructions through its own template placeholder.
• Skill: Debugging — Adds the provided issue description before the issue section and lets daemon debug context supply the fallback issue guidance when the user does not describe a specific problem.
• System Prompt: Proactive schedule offer after follow-up work — Raises the confidence bar for offering /schedule follow-ups from 70%+ to 85%+ odds the user will say yes.
• System Reminder: New diagnostics detected — Formats new diagnostics from the diagnostics list instead of inserting only the precomputed diagnostics summary.
• System Reminder: Plan mode is active (5-phase) — Replaces the phase-four function hook with a direct phase-four-instructions placeholder in the active plan-mode workflow.

2.1.121

-13 tokens

• Tool Description: ReadFile — Removed the extra additional-usage-notes extension point from the end of the ReadFile tool description, leaving the existing additional-read-note hook as the final conditional guidance.

2.1.120

+783 tokens

• NEW: System Prompt: Harness instructions — Core interactive-agent harness guidance for terminal markdown output, permission handling, <system-reminder> context, compaction, tool use, and clickable code references.
• NEW: System Prompt: Memory instructions — Instructions for persistent file-based memory, including frontmatter format, memory types, duplicate/stale-memory handling, and verification of recalled file/function/flag references.
• NEW: Tool Description: BrowserBatch — Describes the browser batch tool for executing multiple browser actions sequentially in one round trip, stopping on first error and returning interleaved outputs/screenshots.
• NEW: Tool Description: Write (read existing file first) — Requires reading an existing file before overwriting it with Write, and recommends Edit for modifications.
• Agent Prompt: Dream memory consolidation — Updated recent-log discovery from one daily log file per day to recursive session logs under logs/YYYY/MM/DD/<id>-<title>.md, with recursive ls -R logs/ guidance and session titles used for triage.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Added a settings_deny_rules insertion point after user deny rules, allowing settings-provided deny rules to be injected into the monitor prompt.
• Agent Prompt: /security-review slash command — Replaced the hardcoded git-diff/status/log/show/remote allowed-tools list with an ${ALLOWED_TOOLS} template variable while keeping Read/Glob/Grep/LS/Task available.
• Data: Managed Agents endpoint reference — Increased the documented organization create-operation limit for Agents, Sessions, and Vaults from 60 RPM to 300 RPM.
• Tool Description: WebSearch — Renamed the current-month template variable from ${GET_CURRENT_MONTH_YEAR()} to ${CURRENT_MONTH_YEAR} and updated the recent-search guidance to use the new variable form.

2.1.119

+12,498 tokens

• NEW: Agent Prompt: Background agent state classifier — Classifies the tail of a background agent transcript as working, blocked, done, or failed and returns concise state JSON.
• NEW: Data: Assistant voice and values template — Template content for an assistant.md file describing Claude's voice, values, and communication style.
• NEW: Data: Background agent state classification examples — Example assistant-message tails and JSON outputs for classifying background agent state, tempo, needs, and result.
• NEW: Data: Managed Agents memory stores reference — Reference documentation for Managed Agents memory stores, including store creation, session attachment, FUSE mounts, memory CRUD, concurrency, versions, redaction, and endpoint paths.
• NEW: Data: User profile memory template — Template content for the user profile memory file, covering personal details, work context, schedule, and communication preferences.
• NEW: System Prompt: Background session instructions — Instructs background job sessions to use the job-specific temporary directory and follow the appropriate worktree isolation guidance.
• NEW: System Prompt: Dream CLAUDE.md memory reconciliation — Instructs dream memory consolidation to reconcile feedback and project memories against CLAUDE.md, deleting stale memories or flagging possible CLAUDE.md drift.
• NEW: System Reminder: Previously invoked skills — Restores skills invoked before conversation compaction as context only, warning not to re-execute setup actions or treat prior inputs as current instructions.
• NEW: Skill: /catch-up periodic heartbeat — Skill for the /catch-up heartbeat that scans priorities, triages actionable changes, reports a short digest, and updates catch-up state.
• NEW: Skill: /dream memory consolidation — Skill for the /dream nightly housekeeping job that consolidates recent logs and transcripts into persistent memory topics, learnings, and a pruned MEMORY.md index.
• NEW: Skill: /morning-checkin daily brief — Skill for the /morning-checkin scheduled task that prepares a daily calendar and inbox digest, schedules pre-meeting check-ins, and records the day's top priority.
• NEW: Skill: /pre-meeting-checkin event brief — Skill for the /pre-meeting-checkin task that gathers event materials, recent thread context, open questions, and a concise meeting brief.
• REMOVED: System Reminder: Invoked skills — Replaced by the new "Previously invoked skills" reminder, which adds explicit context-only framing post-compaction.
• Agent Prompt: Security monitor for autonomous agent actions — Added an encoded/obfuscated command rule requiring base64, PowerShell encoded commands, hex/char-array reassembly, and similar payloads to be decoded and evaluated before allowing; unverifiable payloads are blocked. Expanded block rules with PowerShell and Windows equivalents for remote code execution, remote shell access, production reads, security weakening, irreversible local destruction, credential exploration, and unauthorized persistence.
• Agent Prompt: Status line setup — Documented two new optional JSON fields passed to the statusLine command: effort with level values low, medium, high, xhigh, or max, and thinking.enabled indicating whether extended thinking is on.
• Agent Prompt: Dream memory consolidation — Added hooks for the new CLAUDE.md reconciliation block and an additional-guidance extension point near the index-pruning step.
• Data: Managed Agents core concepts — Documented memory stores as session resources in resources[], including that memory stores attach at session creation time only and cannot be added later with resources.add().
• Data: Managed Agents endpoint reference — Added Memory Stores, Memories, and Memory Versions endpoint tables, including store CRUD/archive, memory create/list/retrieve/update/delete semantics, conflict/precondition errors, view: "basic"|"full", 100KB memory limits, immutable memory versions, and redaction behavior.
• Data: Managed Agents environments and resources — Documented memory_store resources for sessions, including the max of 8 memory stores per session and a pointer to the memory-store reference.
• Data: Managed Agents overview — Added memory stores to Managed Agents beta-resource documentation, SDK auto-beta guidance, and the archive-is-permanent warning.
• Skill: Building LLM-powered applications with Claude — Updated the Managed Agents SDK auto-beta namespace list to include memory_stores.
• Skill: /init CLAUDE.md and skill setup (new version) — Restructured /init around an initial CLAUDE.md existence check, added review/improve, leave, and start-fresh paths, added a plain-text primer before the first question, added a "Let Claude decide" fast path, changed proposal presentation to normal assistant text, treats skills/hooks answers as hints rather than hard filters, and adds an approval-gated diff flow for improving an existing CLAUDE.md.
• Tool Description: Background monitor (streaming events) — Added an explicit decision framework for choosing between Bash run_in_background and the monitor based on notification count, a worked gh pr checks polling example, and warnings against unbounded commands for single-notification use cases, including why tail -f log | grep -m 1 ... can still hang.

2.1.118

+4,712 tokens

• NEW: Data: Anthropic CLI — Reference documentation for the ant CLI covering installation, authentication, command structure, input/output shaping, managed agents workflows, and scripting patterns.
• NEW: System Prompt: Proactive schedule offer after follow-up work — Instructs the agent to offer a one-line /schedule follow-up only when completed work has a strong natural future action and the user is likely to want it.
• NEW: System Prompt: WSL managed settings double opt-in — Explains that WSL can read the Windows managed settings policy chain only when the admin-enabled flag is set, with HKCU requiring an additional user opt-in.
• NEW: System Reminder: Plan mode approval tool enforcement — Requires plan mode turns to end with either AskUserQuestion (for clarification) or ExitPlanMode (for plan approval), and forbids asking for approval any other way.
• NEW: Tool Description: Schedule proactive offer guidance — Explains when to use the scheduling tool for recurring or one-time remote agents and when to proactively offer scheduling after successful work.
• REMOVED: Agent Prompt: Agent Hook — Stop-condition verifier prompt removed.
• REMOVED: System Prompt: Teammate Communication — Swarm-mode teammate communication prompt removed; the broadcast (to: "*") option also dropped from the agent-teams SendMessageTool description.
• REMOVED: System Reminder: Post-turn session summary — The structured-JSON inbox-triage summary reminder added in 2.1.116 has been removed.
• REMOVED: Tool Description: Config — The Config tool for getting/setting Claude Code settings has been removed; the Update Claude Code Config skill now suggests the /config slash command instead of "the Config tool" for simple settings.
• Agent Prompt: Explore, Plan mode (enhanced), Quick git commit, Quick PR creation, REPL tool usage, Tool Description: REPL, Tool Description: ReadFile — Generalized shell guidance to support both Bash and PowerShell environments: read-only command examples and forbidden-command lists are now branched (e.g., Get-ChildItem/Get-Content vs ls/cat; New-Item/Remove-Item vs mkdir/rm), and commit/PR templates emit PowerShell here-strings (@'...'@ at column 0) instead of bash heredocs when running under PowerShell. REPL tips note that shQuote is POSIX-only and show the PowerShell single-quote-doubling alternative. ReadFile no longer hardcodes "Bash tool" for directory listing, referring instead to "the registered shell tool."
• Agent Prompt: /schedule slash command — One-time-run support (run_once_at) is now gated behind a feature flag: when disabled, all references to one-off scheduling, run_once_fired, and the current-time anchor are suppressed. When enabled, added a "Current Time" section providing the local and UTC time at invocation and requiring the agent to re-check date -u via Bash before computing any run_once_at (rather than guessing from conversation context), then echo back both local and UTC for confirmation; if the resolved time is in the past, ask for clarification rather than rolling forward. Also removed the hardcoded opening AskUserQuestion prompt (skipped when the user request is already known).
• Agent Prompt: Managed Agents onboarding flow — Setup block now defaults to emitting YAML files + ant CLI commands (<name>.agent.yaml, <name>.environment.yaml, ant beta:agents create/update --version N) so agents and environments can be checked into the repo and applied from CI; SDK setup code is now a fallback. Runtime block remains SDK code in the detected language because it must react programmatically to events.
• Agent Prompt: Status line setup — Documented two additional vim modes (VISUAL, VISUAL LINE) for the vim.mode status field.
• Agent Prompt: Verification specialist — Replaced inline temp-script guidance with a templated block (so Bash vs PowerShell guidance can be substituted).
• Data: Claude API reference — Python — Added "Client Configuration" section covering with_options() per-request overrides, request timeouts (httpx.Timeout, APITimeoutError), retry behavior (auto-retries on 408/409/429/≥500 with max_retries), the aiohttp async backend (DefaultAioHttpClient), custom HTTP clients via DefaultHttpxClient/DefaultAsyncHttpxClient for proxies and base URLs, and ANTHROPIC_LOG debug logging. Added "Response Helpers" section covering _request_id, to_json()/to_dict(), and .with_raw_response for accessing raw headers.
• Data: Files API reference — Python — Documented additional file= argument forms (pathlib.Path/PathLike, open binary file object) and that iterating client.beta.files.list() directly auto-paginates across all pages.
• Data: Managed Agents core concepts — Added ant CLI examples for session ops (list/retrieve/stream events/archive/delete) and a recommendation to define agents and environments as version-controlled YAML applied via the CLI ("CLI for the control plane, SDK for the data plane"), with agents.create() reframed as the in-code equivalent for programmatic provisioning.
• Data: Managed Agents overview — Added documentation routing entry pointing users wanting version-controlled YAML definitions and shell-driven API calls to shared/anthropic-cli.md.
• Data: Message Batches API reference — Python — Added "List Batches (auto-pagination)" section explaining that iterating client.messages.batches.list() auto-paginates and documenting manual cursor controls (has_next_page(), get_next_page(), next_page_info(), last_id).
• Data: Streaming reference — Python — Added "Low-level: stream=True" section showing how to pass stream=True to messages.create() for the raw event iterator (with no auto-accumulation), and added a best-practice note that large max_tokens without streaming raises ValueError because the SDK refuses non-streaming requests estimated to exceed ~10 minutes.
• Skill: Build with Claude API (reference guide) — Added explicit routing entry pointing users to shared/anthropic-cli.md for terminal access, version-controlled YAML, and scripting.
• Skill: Building LLM-powered applications with Claude — Updated Managed Agents callouts in three places to refer to the Anthropic CLI by its binary name (ant) and point at the dedicated shared/anthropic-cli.md reference instead of shared/live-sources.md.
• System Reminder: Plan mode is active (5-phase) — Restructured to use templated workflow-instructions and phase-five blocks (the user-visible "must use ExitPlanMode for plan approval" enforcement now lives in the new Plan mode approval tool enforcement reminder).

2.1.117

-2,003 tokens

• NEW: System Prompt: Background job behavior — Instructs background job agents to narrate progress, restate final results in message text (not just in tool calls) so classifiers can extract them, and explicitly signal done/blocked/failed status.
• REMOVED: Skill: Verify skill (runtime-verification) — The duplicate alias of the Verify skill registered under the /runtime-verification slash command name has been removed; the primary Verify skill remains.
• Agent Prompt: /schedule slash command — Reframed "triggers" as "routines" throughout user-facing copy (API parameter trigger_id unchanged) and added support for one-time runs via run_once_at (RFC3339 UTC timestamp) as an alternative to cron_expression; updated deletion/management URLs from claude.ai/code/scheduled to claude.ai/code/routines; documented that ended_reason: "run_once_fired" indicates a fired one-shot that can be re-armed by updating with a new run_once_at; extended timezone-conversion guidance to cover one-time timestamps.

2.1.116

+1,136 tokens

• NEW: System Reminder: Post-turn session summary — Instructs Claude to produce a structured JSON summary of a Claude Code session for inbox-style triage across multiple sessions.
• Agent Prompt: Dream memory consolidation — Clarified that daily logs are always present (removed "if present" hedge) and documented their prefix coding (> user, < assistant, . tool call); added explicit ls logs/ step and guidance to read the most recent 1–3 days.
• Agent Prompt: /schedule slash command — Updated connector management URL from claude.ai/settings/connectors to claude.ai/customize/connectors.
• Skill: Build with Claude API (reference guide) — Added an explicit routing entry pointing migrations and retired-model replacements to shared/model-migration.md.
• Skill: Building LLM-powered applications with Claude — Added /claude-api migrate subcommand that dispatches to the model migration guide, with instructions to execute (not summarize) the guide starting from the scope-confirmation step and to ask for the target model if not specified.
• Skill: Model migration guide — Added a top-of-file callout for users arriving via /claude-api migrate telling Claude to execute the steps in order rather than summarize them, and to start with Step 0 (confirm scope) before editing.
• Skill: Simplify — Added "Nested conditionals" as a new hacky-pattern category (ternary chains, nested if/else, nested switch 3+ levels deep) with guidance to flatten using early returns, guard clauses, lookup tables, or if/else-if cascades.
• Tool Description: SendMessageTool (non-agent-teams) — Expanded attachments documentation: entries now accept either a file path string (for files on the working filesystem) or the exact {file_uuid, file_name, size, is_image} object returned by a device tool like attach_file (passed through verbatim for user-uploaded files).

2.1.114

+0 tokens

_{No changes to the system prompts in v2.1.114.}

# 2.1.113

+26 tokens

• Skill: Generate permission allowlist from transcripts — Renamed heading from "Less Permission Prompts" to "Fewer Permission Prompts."
• Tool Description: Bash (maintain cwd) — Added explicit instruction to never prepend cd <current-directory> to a git command, since git already operates on the current working tree and the compound form triggers a permission prompt.

2.1.112

+0 tokens

_{No changes to the system prompts in v2.1.112.}

2.1.111

+21,018 tokens

• NEW: Skill: Generate permission allowlist from transcripts — Analyzes session transcripts to extract frequently used read-only tool-call patterns and adds them to the project's .claude/settings.json permission allowlist to reduce permission prompts.
• NEW: Skill: Model migration guide — Step-by-step instructions for migrating existing code to newer Claude models, covering breaking changes, deprecated parameters, per-SDK syntax, prompt-behavior shifts, and migration checklists.
• REMOVED: System Prompt: Doing tasks (minimize file creation) — Removed instruction to prefer editing existing files over creating new ones.
• REMOVED: System Prompt: Doing tasks (no premature abstractions) — Removed instruction against creating abstractions for one-time operations or hypothetical requirements.
• REMOVED: System Prompt: Doing tasks (no time estimates) — Removed instruction to avoid giving time estimates or predictions.
• REMOVED: System Prompt: Doing tasks (no unnecessary additions) — Removed instruction to not add features, refactor, or improve beyond what was asked.
• REMOVED: System Prompt: Doing tasks (read before modifying) — Removed instruction to read and understand existing code before suggesting modifications.
• REMOVED: System Prompt: Tool usage (create files) — Removed instruction to prefer Write tool instead of cat heredoc or echo redirection.
• REMOVED: System Prompt: Tool usage (delegate exploration) — Removed instruction to use Task tool for broader codebase exploration and deep research.
• REMOVED: System Prompt: Tool usage (direct search) — Removed instruction to use Glob/Grep directly for simple, directed searches.
• REMOVED: System Prompt: Tool usage (edit files) — Removed instruction to prefer Edit tool instead of sed/awk.
• REMOVED: System Prompt: Tool usage (read files) — Removed instruction to prefer Read tool instead of cat/head/tail/sed.
• REMOVED: System Prompt: Tool usage (reserve Bash) — Removed instruction to reserve Bash tool exclusively for system commands and terminal operations.
• REMOVED: System Prompt: Tool usage (search content) — Removed instruction to prefer Grep tool instead of grep or rg.
• REMOVED: System Prompt: Tool usage (search files) — Removed instruction to prefer Glob tool instead of find or ls.
• REMOVED: System Prompt: Tool usage (skill invocation) — Removed instruction about slash commands invoking user-invocable skills via Skill tool.
• Agent Prompt: Memory synthesis — Strengthened the "do not invent facts" rule into a full retrieval-only directive: the subagent must not answer or solve queries from general knowledge, and must return empty results when no memory covers the query.
• Data: Claude API reference — cURL — Added Opus 4.7 to extended thinking references; noted that budget_tokens is fully removed on Opus 4.7 (returns 400 if sent).
• Data: Claude API reference — Python — Added Opus 4.7 to extended thinking and compaction references; noted that budget_tokens is removed on Opus 4.7.
• Data: Claude API reference — TypeScript — Added Opus 4.7 to extended thinking and compaction references; noted that budget_tokens is removed on Opus 4.7.
• Data: Claude model catalog — Added Claude Opus 4.7 as the new flagship model (1M context, 128K output, adaptive thinking only); updated Opus 4.6 and Sonnet 4.6 context windows from "200K (1M beta)" to 1M; updated Models API example to reference Opus 4.7; added "opus 4.7" to the friendly-name lookup table; noted Opus 4.7's thinking: {type: "enabled"} is unsupported.
• Data: HTTP error codes reference — Added Opus 4.7–specific 400 errors for removed temperature/top_p/top_k parameters and removed budget_tokens; updated quick-reference table with new Opus 4.7 rows.
• Data: Live documentation sources — Added Migration Guide URL for fetching breaking changes and per-model migration steps.
• Data: Managed Agents endpoint reference — Changed model shorthand example to use template variable; noted speed: "fast" is only supported on Opus 4.6.
• Data: Prompt Caching — Design & Optimization — Added Opus 4.7 to the 4096-token minimum prefix table; updated example to reference Opus 4.7.
• Data: Streaming reference — Python — Updated adaptive thinking note to include Opus 4.7 alongside Opus 4.6.
• Data: Streaming reference — TypeScript — Updated adaptive thinking note to include Opus 4.7 alongside Opus 4.6.
• Data: Tool use concepts — Updated dynamic filtering heading to include Opus 4.7 alongside Opus 4.6 and Sonnet 4.6.
• Skill: Building LLM-powered applications with Claude — Major Opus 4.7 integration: added Opus 4.7 to model table (1M context at standard pricing); documented that budget_tokens, temperature, top_p, and top_k are fully removed on Opus 4.7 (return 400); introduced "xhigh" effort level exclusive to Opus 4.7; documented thinking content omitted by default on Opus 4.7 with display: "summarized" opt-in; added Task Budgets beta feature; added budget_tokens transitional escape hatch carve-out for Opus 4.6/Sonnet 4.6 (not Opus 4.7); added migration scope confirmation rule requiring Claude to ask which files to edit before starting model migrations; updated compaction context window reference from 200K to 1M; added model migration guide to the documentation reading order; updated 128K output note to include Opus 4.7; expanded JSON escaping and prefill warnings to cover Opus 4.7.
• System Prompt: Skillify Current Session — Replaced explicit session memory and user messages XML blocks with a directive to review the conversation above as source material.
• Tool Description: Skill — Tightened invocation rules: removed example-heavy format in favor of concise instructions; added strict guardrail to only invoke skills that appear in the available-skills list or that the user explicitly typed as a slash command, never guessing or inventing skill names.

2.1.110

+590 tokens

• NEW: Tool Description: PushNotification — Describes a tool that sends desktop notifications to the user's terminal and pushes to their phone when Remote Control is connected.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Added new "Sandbox Network Callback" threat definition covering outbound connections from sandboxed Bash commands to OAST collaborators, request bins, tunnels, raw public IPs, or DNS-exfil-shaped subdomains; clarifies when to allow vs. block based on trusted domains and routine build/test/install activity.
• System Prompt: REPL tool usage and scripting conventions — Made gh() shorthand and REPO constant conditional on whether a GitHub repo is present; added heredoc piping guidance warning against writing temp files to feed shell commands, since generic temp paths get clobbered by parallel agents.
• Tool Description: REPL — Added guidance to pipe via heredoc instead of writing temp files for shell commands, warning that generic temp paths get clobbered by parallel agents.

2.1.109

+0 tokens

_{No changes to the system prompts in v2.1.109.}

2.1.108

+885 tokens

• NEW: System Prompt: REPL tool usage and scripting conventions — Instructs Claude on how to use the REPL tool effectively with dense JavaScript scripts, shorthands, batching rules, and API reference for investigation tasks.
• NEW: Tool Description: REPL — Describes the REPL tool, a JavaScript programming interface for looping, branching, and composing Claude Code tool calls as async functions.
• REMOVED: Skill: Build Claude API and SDK apps — Removed standalone trigger rules for activating guidance when users are building applications with the Claude API, Anthropic SDKs, or Managed Agents.
• Agent Prompt: /security-review slash command — Updated allowed-tools syntax from colon-separated (git diff:*) to space-separated (git diff *) Bash patterns.
• Data: Claude model catalog — Removed blank line before model descriptions section.
• Data: GitHub Actions workflow for @claude mentions — Updated example claude_args from colon-separated to space-separated Bash pattern syntax.
• Data: Live documentation sources — Reformatted Models & Pricing table alignment.
• Skill: Build with Claude API (reference guide) — Added extension point between compaction and prompt caching quick-task entries.
• Skill: Building LLM-powered applications with Claude — Softened budget_tokens deprecation from "must not be used" to "should not be used for new code"; clarified max effort is Opus-tier only (not just Opus 4.6); expanded prefill removal warning from Opus 4.6 only to the entire 4.6 family (Opus 4.6 and Sonnet 4.6); expanded JSON escaping warning to cover both Opus 4.6 and Sonnet 4.6; updated numbered list entry for live sources from 10 to 11; removed blank line between compaction and prompt caching navigation entries.
• Skill: Create verifier skills — Updated all allowed-tools examples from colon-separated to space-separated Bash pattern syntax.
• Skill: Update Claude Code Config — Updated all permission examples from colon-separated (Bash(npm:*)) to space-separated (Bash(npm *)) syntax.
• System Prompt: Avoiding Unnecessary Sleep Commands (part of PowerShell tool description) — Removed specific "1-5 seconds" duration guidance, now just says "keep the duration short."
• System Prompt: Skillify Current Session — Updated allowed-tools example from colon-separated to space-separated Bash pattern syntax.
• Tool Description: Bash (sleep — keep short) — Removed specific "1-5 seconds" duration guidance, now just says "keep the duration short."

2.1.107

+119 tokens

• NEW: System Reminder: Thinking frequency tuning — Added instructions for Claude to treat system-reminder tags as harness instructions and calibrate thinking frequency based on task complexity.

2.1.105

+4,895 tokens

• NEW: Skill: Verify skill (runtime-verification) — Added alias of the Verify skill registered under the /runtime-verification slash command name with identical content but different frontmatter invoke name.
• REMOVED: System Prompt: MCP Tool Result Truncation — Removed guidelines for handling long outputs from MCP tools, including when to use direct file queries vs subagents for analysis.
• REMOVED: System Reminder: Loop wakeup not scheduled — Removed instructions for handling a /loop dynamic mode wakeup that was not scheduled.
• REMOVED: Tool Description: ScheduleWakeup (/loop dynamic mode) — Removed standalone tool description for scheduling the next iteration in /loop dynamic mode; content merged into the Snooze tool description.
• Agent Prompt: Explore — Removed inline whenToUse description and whenToUseDynamic flag from agent metadata; renamed disallowed tool entry from Agent to R4.
• Agent Prompt: Plan mode (enhanced) — Renamed disallowed tool entry from Agent to R4.
• Agent Prompt: Managed Agents onboarding flow — Updated file download example to use scope_id parameter with explicit beta header instead of the previous scope parameter.
• Agent Prompt: Memory synthesis — Restructured from paragraph-based synthesis to a fact-extraction format returning up to 7 standalone relevant facts; added detailed usefulness criteria (avoid re-asking, apply preferences, maintain continuity, avoid pitfalls) and tighter style guidance.
• Data: Managed Agents client patterns — Rewrote Pattern 9 to clarify that vaults are MCP-only and there is no way to set container environment variables; added security note that custom tools don't expose a public endpoint; added warning against embedding API keys in system prompts or user messages.
• Data: Managed Agents core concepts — Added warning that agent archive is permanent with no unarchive, and that archived agents cannot be referenced by new sessions.
• Data: Managed Agents endpoint reference — Expanded archive descriptions for agents and environments to clarify permanence, read-only state, and lack of unarchive; clarified which resources support delete vs archive vs both.
• Data: Managed Agents environments and resources — Updated file listing examples to use scope_id with explicit betas header across all SDK examples; added SDK version requirements and fallback guidance for older SDKs; documented that GitHub repositories are cached for faster session startup; added guidance on rotating repository authorization tokens on running sessions; explained that authorization_token is never placed inside the container and is injected by an Anthropic-side git proxy.
• Data: Managed Agents events and steering — Added note distinguishing routine session archival from permanent agent/environment archival.
• Data: Managed Agents overview — Rewrote beta header guidance to explain which headers the SDK sets automatically and when to pass both headers explicitly for session-scoped file listing; added reading-guide entry for non-MCP secrets via custom tools; added common pitfall warning that archive is permanent on every resource.
• Data: Managed Agents reference — Python — Updated file listing to use scope_id with explicit beta header; updated example session IDs from sess_abc123 to realistic sesn_011CZx... format.
• Data: Managed Agents reference — TypeScript — Updated file listing to use scope_id with explicit beta header; updated example session IDs to realistic sesn_011CZx... format.
• Data: Managed Agents reference — cURL — Updated file listing endpoint from scope to scope_id query parameter; added both files-api and managed-agents beta headers explicitly on file listing and download examples.
• Data: Managed Agents tools and skills — Added new "Credentials and the sandbox" section explaining that vaulted credentials never enter the sandbox, how MCP and git proxy injection works, current limitations for non-MCP CLIs, and workarounds via custom tools; added warning against embedding API keys in prompts.
• System Prompt: Fork usage guidelines — Simplified forking guidance by removing separate research/implementation bullet points and merging into a single paragraph; removed advice about setting model and name on forks.
• System Reminder: Exited plan mode — Simplified the conditional plan file reference to a generic conditional note.
• Tool Description: Agent (usage notes) — Added "trust but verify" guidance instructing Claude to check actual code changes from agents before reporting work as done, rather than relying solely on agent summaries.
• Tool Description: Background monitor (streaming events) — Added "silence is not success" guidance requiring monitors to match all terminal states (failures, crashes, OOM) not just the happy path; added examples of wrong vs right grep patterns for comprehensive coverage; updated output volume guidance to emphasize capturing both success and failure signals; added note about merging stderr with 2>&1 for directly-run commands.
• Tool Description: EnterWorktree — Expanded trigger conditions to include CLAUDE.md and memory instructions directing worktree usage, not just explicit user requests; added support for entering an existing worktree via a new path parameter that accepts paths from git worktree list.
• Tool Description: ReadFile — Added extension point for additional usage notes.
• Tool Description: Snooze (delay and reason guidance) — Absorbed the former ScheduleWakeup /loop dynamic mode description, now including the base tool description for scheduling loop iterations with sentinel handling.
• Skill: /loop self-pacing mode — Added extension point for additional info when stopping the loop.
• Skill: Dynamic pacing loop execution — Replaced fixed tick summary label with a configurable confirmation message; added extension point for additional info when stopping the loop.

2.1.104

+8 tokens

• System Prompt: Communication style — Renamed section heading from "Communication style" to "Text output (does not apply to tool calls)" to clarify that the guidelines apply only to text output, not tool calls.

2.1.101

+4,676 tokens

• NEW: System Prompt: Autonomous loop check — Added behavior for autonomous timer-based invocations, guiding Claude to continue established work, maintain PRs, and handle repeated idle checks while the user is away.
• NEW: System Reminder: Loop wakeup not scheduled — Added instructions for handling a /loop dynamic mode wakeup that was not scheduled, including when to re-issue with the prompt field set.
• NEW: Tool Description: ScheduleWakeup (/loop dynamic mode) — Added description for scheduling the next iteration in /loop dynamic (self-paced) mode, including sentinel handling for autonomous loops.
• NEW: Tool Description: Snooze (delay and reason guidance) — Added guidance on choosing snooze delay relative to the 5-minute prompt cache TTL and writing informative reason fields.
• NEW: Skill: /insights report output — Added formatting and display instructions for insights usage report results after the user runs the /insights slash command.
• NEW: Skill: /loop cloud-first scheduling offer — Added a decision tree for offering cloud-based scheduling before falling back to local session loops in the /loop command.
• NEW: Skill: /loop self-pacing mode — Added instructions for self-pacing a recurring loop by arming event monitors as primary wake signals and scheduling fallback heartbeat delays between iterations.
• NEW: Skill: /loop slash command (dynamic mode) — Added parsing logic for scheduling recurring or dynamically self-paced loop executions.
• NEW: Skill: Dynamic pacing loop execution — Added step-by-step instructions for executing a dynamic pacing loop that runs tasks, arms persistent monitors for event-gated waits, schedules fallback heartbeat ticks, and handles task notifications.
• NEW: Skill: Schedule recurring cron and execute immediately (compact) — Added compact instructions for creating a recurring cron job, confirming the schedule, and immediately executing the parsed prompt.
• NEW: Skill: Schedule recurring cron and run immediately — Added instructions to convert an interval to a cron expression, schedule a recurring task, confirm to the user, and immediately execute without waiting for the first cron fire.
• Skill: Build Claude API and SDK apps — Expanded trigger rules to include debugging, optimizing, and improving Claude features; added prompt caching as a default for apps built with this skill; added trigger for prompt caching and cache hit rate questions in any Anthropic SDK project.
• Skill: /loop slash command — Added extension points for additional parsing notes and additional confirmation info; minor restructuring of parsing and confirmation steps.
• System Prompt: Fork usage guidelines — Relaxed the "don't peek" rule: removed the exception allowing users to explicitly request a progress check; now unconditionally prohibits reading or tailing fork output files.

2.1.100

-845 tokens

• REMOVED: System Prompt: Exploratory questions — analyze before implementing — Removed instructions for Claude to respond to open-ended questions with analysis, options, and tradeoffs instead of jumping to implementation.
• REMOVED: System Prompt: Output efficiency — Removed instructions for concise and direct text output, leading with answers over reasoning and limiting responses to essential information.
• REMOVED: System Prompt: User-facing communication style — Removed detailed guidelines for writing clear, concise, and readable user-facing text including prose style, update cadence, formatting rules, and audience-aware explanations.
• System Prompt: Communication style — Tightened end-of-turn summary guidance from describing the format to a stricter "one or two sentences. What changed and what's next. Nothing else."

2.1.98

+2,045 tokens

• NEW: System Prompt: Communication style — Added guidelines for giving brief user-facing updates at key moments during tool use, writing concise end-of-turn summaries, matching response format to task complexity, and avoiding comments and planning documents in code.
• NEW: System Prompt: Dream team memory handling — Added instructions for handling shared team memories during dream consolidation, including deduplication, conservative pruning rules, and avoiding accidental promotion of personal memories.
• NEW: System Prompt: Exploratory questions — analyze before implementing — Added instructions for Claude to respond to open-ended questions with analysis, options, and tradeoffs instead of jumping to implementation, waiting for user agreement before writing code.
• NEW: System Prompt: User-facing communication style — Added detailed guidelines for writing clear, concise, and readable user-facing text including prose style, update cadence, formatting rules, and audience-aware explanations.
• NEW: Tool Description: Background monitor (streaming events) — Added description for a background monitor tool that streams stdout events from long-running scripts as chat notifications, with guidelines on script quality, output volume, and selective filtering.
• Agent Prompt: Dream memory consolidation — Added support for an optional transcript source note displayed after the transcripts directory path.
• Agent Prompt: Dream memory pruning — Added conservative pruning rules for team/ subdirectory memories: only delete when clearly contradicted or superseded by a newer team memory, never delete just because unrecognized or irrelevant to recent sessions, and never move personal memories into team/.
• Skill: /dream nightly schedule — Minor refactor to include memory directory reference in the consolidation configuration.
• System Prompt: Advisor tool instructions — Minor wording updates: clarified tool invocation syntax, broadened 'before writing code' to 'before writing,' and updated several examples and descriptions for generality (e.g., 'reading code' → 'fetching a source,' 'the code does Y' → 'the paper states Y').

2.1.97

+23,865 tokens

• NEW: Agent Prompt: Managed Agents onboarding flow — Added an interactive interview script that walks users through configuring a Managed Agent from scratch, selecting tools, skills, files, and environment settings, and emitting setup and runtime code.
• NEW: Data: Managed Agents client patterns — Added a reference guide covering common client-side patterns for driving Managed Agent sessions, including stream reconnection, idle-break gating, tool confirmations, interrupts, and custom tools.
• NEW: Data: Managed Agents core concepts — Added reference documentation covering Agents, Sessions, Environments, Containers, lifecycle, versioning, endpoints, and usage patterns.
• NEW: Data: Managed Agents endpoint reference — Added a comprehensive reference for Managed Agents API endpoints, SDK methods, request/response schemas, error handling, and rate limits.
• NEW: Data: Managed Agents environments and resources — Added reference documentation covering environments, file resources, GitHub repository mounting, and the Files API with SDK examples.
• NEW: Data: Managed Agents events and steering — Added a reference guide for sending and receiving events on managed agent sessions, including streaming, polling, reconnection, message queuing, interrupts, and event payload details.
• NEW: Data: Managed Agents overview — Added a comprehensive overview of the Managed Agents API architecture, mandatory agent-then-session flow, beta headers, documentation reading guide, and common pitfalls.
• NEW: Data: Managed Agents reference — Python — Added a reference guide for using the Anthropic Python SDK to create and manage agents, sessions, environments, streaming, custom tools, files, and MCP servers.
• NEW: Data: Managed Agents reference — TypeScript — Added a reference guide for using the Anthropic TypeScript SDK to create and manage agents, sessions, environments, streaming, custom tools, file uploads, and MCP server integration.
• NEW: Data: Managed Agents reference — cURL — Added cURL and raw HTTP request examples for the Managed Agents API including environment, agent, and session lifecycle operations.
• NEW: Data: Managed Agents tools and skills — Added reference documentation covering tool types (agent toolset, MCP, custom), permission policies, vault credential management, and the skills API.
• NEW: Skill: Build Claude API and SDK apps — Added trigger rules for activating guidance when users are building applications with the Claude API, Anthropic SDKs, or Managed Agents.
• NEW: Skill: Building LLM-powered applications with Claude — Added a comprehensive routing guide for building LLM-powered applications using the Anthropic SDK, covering language detection, API surface selection (Claude API vs Managed Agents), model defaults, thinking/effort configuration, and language-specific documentation reading.
• NEW: Skill: /dream nightly schedule — Added a skill that sets up a recurring nightly memory consolidation job by deduplicating existing schedules, creating a new cron task, confirming details to the user, and running an immediate consolidation.
• REMOVED: Data: Agent SDK patterns — Python — Removed the Python Agent SDK patterns document (custom tools, hooks, subagents, MCP integration, session resumption).
• REMOVED: Data: Agent SDK patterns — TypeScript — Removed the TypeScript Agent SDK patterns document (basic agents, hooks, subagents, MCP integration).
• REMOVED: Data: Agent SDK reference — Python — Removed the Python Agent SDK reference document (installation, quick start, custom tools via MCP, hooks).
• REMOVED: Data: Agent SDK reference — TypeScript — Removed the TypeScript Agent SDK reference document (installation, quick start, custom tools, hooks).
• REMOVED: Skill: Build with Claude API — Removed the main routing guide for building LLM-powered applications with Claude, replaced by the new "Building LLM-powered applications with Claude" skill with Managed Agents support.
• REMOVED: System Prompt: Buddy Mode — Removed the coding companion personality generator for terminal buddies.
• Agent Prompt: Status line setup — Added git_worktree field to the workspace schema for reporting the git worktree name when the working directory is in a linked worktree.
• Agent Prompt: Worker fork — Added agent metadata specifying model inheritance, permission bubbling, max turns, full tool access, and a description of when the fork is triggered.
• Data: Live documentation sources — Replaced the Agent SDK documentation URLs and SDK repository extraction prompts with comprehensive Managed Agents documentation URLs covering overview, quickstart, agent setup, sessions, environments, events, tools, files, permissions, multi-agent, observability, GitHub, MCP connector, vaults, skills, memory, onboarding, cloud containers, and migration. Added an Anthropic CLI section. Updated SDK repository extraction prompts to focus on beta managed-agents namespaces and method signatures.
• Skill: Build with Claude API (reference guide) — Updated the agent reference from Agent SDK folders to Managed Agents documentation files, with language-specific routing for Python, TypeScript, cURL, and a note that C# should use raw HTTP examples.
• Skill: Verify skill — Restructured the "Get a handle" section to emphasize checking .claude/skills/ for verifier skills first (even if you already know how to build), framing verifiers as the repo's evidence-capture protocol. Added a new "Push on it" section with concrete probing strategies organized by change type (new flag, new handler, changed error path, interactive/TUI, state/persistence). Added the 🔍 emoji marker for probe steps in the report format, with guidance that a steps list with no probes is a happy-path replay. Added probe documentation guidance in the Findings section.
• System Prompt: Agent thread notes — Removed the conditional logic for relative vs. absolute file paths; agent threads now always require absolute file paths unconditionally.
• Tool Description: ReadFile — Simplified to always require absolute file paths, removing the conditional relative-path option.
• Tool Description: Write — Removed a conditional note variable from the "prefer Edit" guidance, making it unconditional.

2.1.96

+0 tokens

_{No changes to the system prompts in v2.1.96.}

2.1.94

+2,000 tokens

• NEW: Agent Prompt: Dream memory pruning — Added a subagent prompt for performing memory pruning passes by deleting stale or invalidated memory files and collapsing duplicates.
• NEW: Agent Prompt: Memory synthesis — Added a subagent that reads persistent memory files and returns a JSON synthesis of only the information relevant to each query, with cited filenames.
• NEW: Agent Prompt: Onboarding guide generator — Added a subagent that co-authors a team onboarding guide (ONBOARDING.md) by analyzing the creator's usage data, classifying session types, and iterating on the draft collaboratively.
• NEW: Agent Prompt: Session search — Added a lightweight subagent prompt for searching past conversation sessions by scanning .jsonl transcript files and returning matching session IDs.
• NEW: System Prompt: Memory description of user details — Added a description for per-user memory files that accumulate details about the user's role, goals, knowledge, and preferences across sessions.
• NEW: System Prompt: Memory staleness verification — Added instructions for the agent to verify memory records against current file/resource state and delete stale memories that conflict with observed reality.
• NEW: Skill: Team onboarding guide — Added a skill template for onboarding a new teammate to a team's Claude Code setup, walking through usage stats, setup checklists, MCP servers, skills, and team tips.
• REMOVED: Agent Prompt: Session Search Assistant — Removed the verbose session search assistant with detailed matching heuristics, replaced by the lighter Session search subagent.
• REMOVED: Agent Prompt: Worker fork execution — Removed the detailed forked worker sub-agent prompt with its 10-rule format and structured output template.
• REMOVED: Tool Description: Agent (when to launch subagents) — Removed the separate "when to launch" description block; its guidance is now folded into the main Agent usage notes.
• Agent Prompt: Dream memory consolidation — Added a post-gather hook point between the Gather and Consolidate phases.
• Agent Prompt: Worker fork — Replaced the previous verbose worker fork prompt with a streamlined version focused on concise single-directive execution and reporting.
• Skill: Build with Claude API — Added a Subcommands dispatch section that lets users invoke specific flows via /claude-api <subcommand> by matching against subcommand tables defined throughout the document.
• Skill: Verify skill — Relaxed the CI assumption from "green checks on the PR mean they passed" to simply noting CI already ran. Refined the Findings guidance to clarify that observations must come from running the app yourself — red CI checks, review comments, or bot outputs visible to anyone already don't count as original observations.
• Tool Description: Agent (usage notes) — Streamlined usage notes: shortened the description-length guidance, condensed the resume-vs-fresh-agent explanation into a single bullet, removed the note that agent outputs should generally be trusted, shortened the worktree isolation bullet, and simplified the proactive-use guidance.

2.1.92

-167 tokens

• REMOVED: Agent Prompt: Hook condition evaluator — Removed the generic hook condition evaluator prompt.
• NEW: Agent Prompt: Hook condition evaluator (stop) — Added a specialized hook condition evaluator for stop conditions, replacing the generic version.
• REMOVED: System Prompt: Team memory content display — Removed the template for rendering shared team memory file contents into conversation context.
• REMOVED: Tool Description: Sleep — Removed the dedicated Sleep tool for waiting/sleeping with early wake capability on user input.
• Agent Prompt: Session Search Assistant — Removed the note that users tag sessions with the /tag command.
• System Prompt: MCP Tool Result Truncation — Changed subagent file-reading guidance from "Read ALL of [file]" to instruct reading in sequential chunks using offset/limit until 100% of the file has been read, then summarizing.
• System Prompt: Remote plan mode (ultraplan) — Rewrote the plan-formatting guidance to frame diagrams as a verification aid for reviewers rather than a general readability tool. Simplified the diagram instructions to a single paragraph mentioning mermaid or ASCII block diagrams, removing the itemized list of diagram types (flowchart, sequence, state, graph) and the before/after tree suggestion.
• Tool Description: Write — Added explicit guidance to only use Write for creating new files or complete rewrites. Made the "prefer Edit" note unconditional rather than configurable.

2.1.91

+2,043 tokens

• NEW: Skill: Agent Design Patterns — Added a reference guide covering decision heuristics for building agents on the Claude API, including tool surface design, context management, caching strategies, and composing tool calls.
• REMOVED: Agent Prompt: /pr-comments slash command — Removed the slash command for fetching and displaying GitHub PR comments.
• REMOVED: Agent Prompt: Update Magic Docs — Removed the magic-docs agent prompt.
• Agent Prompt: Determine which memory files to attach — Replaced the rule about skipping memories for recently-used tools with a simpler rule: do not re-select memories already returned for an earlier query in the same conversation. Also clarified that the first message lists available memories and subsequent messages each contain one user query.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Added "Memory Poisoning" block rule covering writes to the agent's memory directory that would function as permission grants, BLOCK-rule bypasses, or fabricated user authorization. Added corresponding "Memory Directory" allow exception for routine memory writes (user preferences, project facts, references) that don't constitute poisoning.
• Data: Live documentation sources — Added WebFetch URLs for six additional tool documentation pages: Bash Tool, Text Editor, Memory Tool, Tool Search, Programmatic Tool Calling, and Skills. Added Context Editing to the Advanced Features section.
• Data: Tool use concepts — Added new sections for Skills (task-specific instruction packages loaded on demand) and Context Editing (pruning stale tool results from the transcript). Expanded the Programmatic Tool Calling description to explain the round-trip cost problem and how scripts run in the code execution container. Added note to Tool Search that discovered schemas are appended (preserving prompt cache) and cross-referenced agent design patterns. Added cross-reference to agent-design.md in the opening paragraph.
• Skill: Build with Claude API — Added shared/agent-design.md as a new entry in the reading guide for agent design topics (tool surface, context management, caching strategy). Revised effort parameter guidance to recommend medium as a favorable balance and max when correctness matters more than cost. Renumbered the file reading order to accommodate the new entry.
• Skill: Build with Claude API (reference guide) — Added a quick-task navigation entry pointing to shared/agent-design.md for agent design questions.
• Skill: Verify skill — Added a SKIP verdict for changes with no runtime surface (docs-only, types-only, tests-only), distinct from BLOCKED which now strictly means the verifier couldn't reach an observable state. Added guidance that tests in the diff are the author's evidence, not a verification surface — tests-only PRs should be SKIPped, and mixed PRs should verify the source while ignoring the test files.
• System Prompt: Agent thread notes — Made the cwd/path guidance conditional: when embedded tools are available, notes that Bash resets to cwd between calls but file-tool paths can be relative; otherwise preserves the existing absolute-paths-only instruction.
• Tool Description: Edit — Removed the inline note about edits failing when old_string is not unique; replaced with a slot for additional edit guidelines.
• Tool Description: ReadFile — Added support for relative file paths (preferred for brevity) as a conditional alternative to the absolute-path-only requirement. Made the default line-read limit and additional read notes configurable.
• Tool Description: Write — Replaced the blanket "read first" requirement with a conditional note for new files. Made the "prefer Edit" guidance configurable.

2.1.90

+815 tokens

• Agent Prompt: Determine which memory files to attach — Added guidance to be especially conservative with user-profile and project-overview memories, matching on what the question is actually about rather than surface keyword overlap with who the user is.
• Agent Prompt: /schedule slash command — Updated GitHub reminder logic to require an additional feature flag check before suggesting the /web-setup flow for connecting a GitHub account.
• Agent Prompt: Security monitor for autonomous agent actions (first part) — Reworked the User Intent Rule into a bidirectional framework: user intent can now both authorize (clear a block with a high evidence bar) and bound (create a block even for otherwise-allowed actions, with a lower evidence bar). Added rule 7 requiring conditional boundaries ("wait for X before Y", "don't push until I review") to stay in force until clearly lifted by a later user message, not by the agent's own judgment. Restructured the evaluation algorithm into a two-phase flow: preliminary verdict from BLOCK/ALLOW rules, then user intent applied as a final signal in both directions.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Updated the ALLOW exceptions preamble to note two carve-outs that still block even when an exception applies: suspicious masquerading (e.g. typosquatting) and explicit user boundaries.
• Agent Prompt: Verification specialist — Changed file-list discovery to prefer git diff --name-only HEAD when in a git repo (catches Bash file writes, sed -i, etc.), falling back to scanning tool_use blocks and REPL innerToolCalls for non-repo contexts.
• Skill: Verify skill — Added guidance that observations matter as much as the verdict: anything that caused a pause, workaround, or surprise should be surfaced, not just bugs. Expanded the Findings section to encourage reporting friction, unhelpful errors, odd defaults, and unexpected slowness, with a ⚠️ prefix for lines worth hoisting above the PR comment fold. Changed verification step format to lead with the status emoji rather than trail it.

2.1.89

+3,986 tokens

• NEW: System Prompt: Buddy Mode — Added instructions for generating coding companions that live in the terminal and comment on the developer's work, with a focus on creating memorable, distinct personalities based on given stats and inspiration words.
• NEW: System Prompt: MCP Tool Result Truncation — Added guidelines for handling long outputs from MCP tools, including when to use direct file queries vs subagents for analysis.
• NEW: System Prompt: Remote plan mode (ultraplan) — Added system reminder for remote planning sessions that instructs Claude to explore the codebase, produce a diagram-rich plan via ExitPlanMode, and implement it with a pull request upon approval.
• NEW: System Prompt: Remote planning session — Added system reminder that configures a remote planning session to explore the codebase, produce an implementation plan, and handle plan approval, rejection, or teleportation back to the user's local terminal.
• NEW: Skill: Computer Use MCP — Added instructions for using computer-use MCP tools including tool selection tiers, app access tiers, link safety, and financial action restrictions.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Expanded "Irreversible Local Destruction" to block mv/cp/Write/Edit onto existing untracked or out-of-repo paths, noting they have no git recovery. Added "Create Public Surface" block rule covering creating public repos, changing repo visibility, or publishing to public registries. Expanded "Expose Local Services" to cover mounting host paths into containers. Added note to "Credential Leakage" that committing credentials to a public repo counts even if trusted. Added git hooks to "Unauthorized Persistence" mechanisms.
• Agent Prompt: Verification specialist — Substantially expanded with a new self-awareness section documenting known failure patterns (skipping checks, trusting self-reports, hedging with PARTIAL, being fooled by AI slop). Added instructions to scan the parent agent's conversation for tool calls, claims, shortcuts, and glossed-over errors before verifying. Added a mandatory adversarial verification protocol requiring at least one probe per change area (boundary values, concurrency, idempotency, orphan ops). Tightened PARTIAL verdict guidance to prohibit using it as a hedge — ambiguous findings must be decided as PASS or FAIL.
• Data: Prompt Caching — Design & Optimization — Added model-specific minimum cacheable prefix table (ranging from 1024 to 4096 tokens by model). Updated cache write economics to distinguish 5-minute TTL (1.25×) from 1-hour TTL (2×) pricing with break-even analysis. Added clarification that input_tokens is the uncached remainder only. Added new sections on the invalidation hierarchy (three cache tiers), the 20-block lookback window limit, and concurrent-request timing with a fan-out workaround.
• Tool Description: Agent (when to launch subagents) — Added support for an additional info block alongside the agent types listing.

2.1.88

-1,627 tokens

• NEW: System Prompt: Partial compaction instructions — Added instructions for compacting only a portion of the conversation, with a structured summary format and analysis process.
• NEW: System Prompt: PowerShell edition for 5.1 — Added system prompt providing information about Windows PowerShell 5.1.
• NEW: Tool Description: Config — Added tool for getting and setting Claude Code configuration settings.
• REMOVED: System Prompt: System section — Removed the system section describing tool permission mode behavior and denied tool call guidance.
• Skill: Verify skill — Substantially condensed the verification skill, cutting roughly two-thirds of the text while preserving the core workflow: find the change, identify the surface, get a handle, drive the running app, capture evidence, report. Removed the extended "discovery ladder," "red flags," and "what DONE looks like" reference tables in favor of a compact surface table and inline guidance.
• System Prompt: Fork usage guidelines — Incorporated fork-specific prompt-writing guidance (previously in the subagent prompts section) about writing directives that specify scope rather than re-explaining background.
• System Prompt: Git status — Stripped the inline variable template (branch, status, recent commits); now contains only the introductory note that git status is a point-in-time snapshot.
• System Prompt: Writing subagent prompts — Collapsed the separate context-inheriting vs fresh-agent sections into a single flow that defaults to the fresh-agent briefing style, with conditional notes when a subagent type is present.
• System Reminder: Plan mode is active (iterative) — Made the subagent exploration suggestion conditional on whether agents are actually available, instead of always appending it.
• System Reminder: Ultraplan mode — Ultraplan can now implement the plan in the same session on approval; added a teleport sentinel so the agent knows when the plan was sent to the user's local terminal instead of being implemented remotely.
• Tool Description: Agent (usage notes) — Removed the instruction to provide clear, detailed prompts for agents without subagent types (guidance now lives in the fork/subagent prompt-writing sections).
• Tool Description: PowerShell — Significantly expanded syntax guidance: added registry PSDrive prefixes, environment variable access, call operator for paths with spaces, interactive/blocking command warnings, multiline here-string rules (including column-0 closing requirement), stop-parsing token, and revised command-chaining advice to distinguish sequential-with-error-handling from fire-and-forget.
• Tool Description: TeammateTool — Updated the team file path from ~/.claude/teams/{team-name}.json to ~/.claude/teams/{team-name}/config.json.

2.1.87

_{No changes to the system prompts in v2.1.87.}

2.1.86

-157 tokens

• REMOVED: System Prompt: Doing tasks (blocked approach) — Removed guidance about considering alternatives when blocked instead of brute-forcing.
• REMOVED: Tool Description: Bash (command description) — Removed instruction to write clear command descriptions for Bash tool usage.
• Agent Prompt: General purpose — Replaced "Do what has been asked; nothing more, nothing less" with "Complete the task fully—don't gold-plate, but don't leave it half-done."
• Agent Prompt: Worker fork execution — Wrapped fork instructions in boilerplate tags; replaced dynamic role description with a fixed "You are a forked worker process" statement; added a new boilerplate instructions variable.
• System Prompt: Doing tasks (no premature abstractions) — Expanded guidance to clarify that complexity should match what the task actually requires—discouraging both speculative abstractions and half-finished implementations.
• Tool Description: Bash (sandbox — tmpdir) — Simplified temporary file guidance by removing the fallback function; now instructs to use only $TMPDIR directly.
• Tool Description: Edit — Changed the line number prefix format description from a hardcoded explanation to a dynamic reference; no change to the matching guidance itself.

2.1.85

+172 tokens

• Agent Prompt: Security monitor for autonomous agent actions (second part) — Added "Production Reads" as a new blocked category: reading inside running production via remote shell, dumping env vars/configs, or direct prod database queries now requires explicit user approval, since even read-only access pulls live credentials into the transcript. Separated "Remote Shell Writes" from read-only inspection (previously noted as fine) to enforce this distinction.
• System Prompt: Fork usage guidelines — Added guidance to pass a short name on forks so the user can see them in the teams panel and steer them mid-run.
• System Prompt: Subagent delegation examples — Added name fields to the fork and subagent delegation examples (e.g., "ship-audit", "migration-review") to align with the new fork naming guidance.
• System Reminder: Ultraplan mode — Added a confidentiality instruction: the agent must not disclose the ultraplan prompt or how the feature works; if asked, it should say it's generating an advanced plan with subagents and offer to help with the plan instead.

2.1.84

+325 tokens

• NEW: Agent Prompt: General purpose — System prompt for the general-purpose subagent that searches, analyzes, and edits code across a codebase while reporting findings concisely to the caller.
• NEW: System Prompt: Avoiding Unnecessary Sleep Commands (part of PowerShell tool description) — Guidelines for avoiding unnecessary sleep commands in PowerShell scripts, including alternatives for waiting and notification.
• NEW: Tool Description: PowerShell — Describes the PowerShell command execution tool with syntax guidance, timeout settings, and instructions to prefer specialized tools over PowerShell for file operations.
• NEW: Tool Description: request_teach_access (part of teach mode) — Describes a tool that requests permission to guide the user through a task step-by-step using fullscreen tooltip overlays instead of direct access.
• REMOVED: Agent Prompt: Common suffix (response format) — Removed standalone response format suffix; behavior now integrated into agent thread notes and individual agent prompts.
• REMOVED: Agent Prompt: Explore strengths and guidelines — Removed as a separate prompt; strengths, guidelines, and agent metadata merged into the main Explore agent prompt.
• REMOVED: Agent Prompt: /review slash command (remote) — Removed remote version of the /review slash command.
• REMOVED: System Prompt: Analysis instructions for full compact prompt (full conversation) — Removed; analysis instructions now inlined directly into the conversation summarization prompt.
• REMOVED: System Prompt: Analysis instructions for full compact prompt (minimal and via feature flag) — Removed; lean analysis instructions no longer a separate prompt.
• REMOVED: System Prompt: Analysis instructions for full compact prompt (recent messages) — Removed; analysis instructions now inlined directly into the recent message summarization prompt.
• REMOVED: System Prompt: Doing tasks (avoid over-engineering) — Removed the "avoid over-engineering" guidance.
• REMOVED: Tool Description: Glob — Removed the Glob file pattern matching tool description.
• Agent Prompt: Claude guide agent — Removed the "avoid emojis" guideline.
• Agent Prompt: Conversation summarization — Inlined the full analysis instructions directly into the prompt instead of referencing a shared template.
• Agent Prompt: Explore — Removed 'return absolute paths' and 'avoid emojis' guidelines; reorganized agent metadata after the separate strengths-and-guidelines prompt was removed.
• Agent Prompt: Plan mode (enhanced) — Removed the read-only critical system reminder from agent metadata; simplified the critical files listing format by dropping the brief-reason annotations.
• Agent Prompt: Recent Message Summarization — Inlined the full analysis instructions directly into the prompt instead of referencing a shared template.
• System Prompt: Advisor tool instructions — Relaxed the "always call advisor" mandate; advisor is now recommended at least once before committing to an approach and once before declaring done on multi-step tasks, but short reactive tasks no longer require repeated calls.
• System Prompt: Agent thread notes — Removed feature flag conditional around response formatting; now always instructs agents to share only load-bearing code snippets and absolute file paths.
• System Prompt: Auto mode — Reworded guidance: added 'low-risk work' qualifier
• Tool Description: Agent (usage notes) — Removed the explicit 'launch multiple agents concurrently' instruction for non-pro tiers.
• Tool Description: Agent (when to launch subagents) — Removed the "Available agent types and the tools they have access to" heading before the agent types listing.
• Tool Description: Bash (Git commit and PR creation instructions) — Added a general parallel tool-calling instruction at the top; simplified the per-step parallel execution notes.
• Tool Description: ReadFile — Removed the "speculatively read multiple files in parallel" guidance.
• Tool Description: TaskCreate — Simplified the description field guidance from "detailed description with context and acceptance criteria" to "what needs to be done"; removed the tip about including enough detail for another agent.
• Tool Description: TodoWrite — Trimmed assistant narration from all examples, removing introductory/transitional phrasing so examples show more direct action.

2.1.83

+5,960 tokens

• NEW: Data: Prompt Caching — Design & Optimization — New document covering how to design prompt-building code for effective caching, including placement patterns and anti-patterns.
• NEW: System Prompt: Advisor tool instructions — Instructions for using the Advisor tool.
• NEW: System Reminder: Ultraplan mode — System reminder for using Ultraplan mode to create a detailed implementation plan with multi-agent exploration and critique.
• NEW: Skill: Verify CLI changes (example for Verify skill) — Example workflow for verifying a CLI change, as part of the Verify skill.
• NEW: Skill: Verify server/API changes (example for Verify skill) — Example workflow for verifying a server/API change, as part of the Verify skill.
• NEW: Skill: Verify skill — Opinionated verification workflow for validating code changes, replacing the previous verification specialist skill.
• REMOVED: Skill: Verification specialist — Removed in favor of the new Verify skill and its example workflows.
• REMOVED: System Reminder: Task status — Removed TaskOutput tool reference reminder.
• Agent Prompt: Dream memory consolidation — Added a ~25KB size cap to the index file; tightened index entry format to one line under ~150 characters; changed verbose-entry demotion guidance to trigger on lines over ~200 chars.
• Data: Agent SDK reference — Python — Added documentation for per-turn usage data on AssistantMessage for tracking costs.
• Data: Agent SDK reference — TypeScript — Added comment noting optional skills and mcpServers for subagent customization in team definitions.
• Data: Claude API reference — C# — Updated source-verified SDK version from 12.8.0 to 12.9.0; added prompt caching cross-reference to the shared design document; added cache-hit verification via usage fields.
• Data: Claude API reference — cURL — Added Prompt Caching section with example, TTL options, top-level auto-placement, and cache-hit verification guidance.
• Data: Claude API reference — Go — Added Prompt Caching section with system block caching example, TTL options, top-level auto-placement, and cache-hit verification.
• Data: Claude API reference — Java — Bumped SDK version from 2.16.1 to 2.17.0; added prompt caching cross-reference to the shared design document; added cache-hit verification via usage fields.
• Data: Claude API reference — PHP — Added beta tool runner documentation with BetaRunnableTool and toolRunner() examples; added structured outputs section with StructuredOutputModel and raw schema approaches; added Prompt Caching section; bumped recommended SDK version from ^0.6 to ^0.7; updated intro note to reflect new beta tool runner and structured output support.
• Data: Claude API reference — Python — Expanded prompt caching intro with prefix-match explanation, architectural guidance, and silent-invalidator audit reference; added "Verifying Cache Hits" subsection with usage field examples and debugging tips.
• Data: Claude API reference — Ruby — Added Prompt Caching section with system block caching example, TTL options, top-level auto-placement, and cache-hit verification.
• Data: Claude API reference — TypeScript — Added prefix-match explanation and cross-reference to the shared caching design document; added "Verifying Cache Hits" subsection with usage field examples and silent-invalidator debugging tips.
• Data: Tool use concepts — Updated tool runner language list to include PHP; noted PHP's BetaRunnableTool wraps a run closure around a hand-written schema.
• Skill: Build with Claude API — Added PHP beta tool runner to the SDK feature table; added "Prompt Caching (Quick Reference)" section with prefix-match explanation, top-level auto-caching guidance, and silent-invalidator troubleshooting; added prompt caching routing entries to the reading guide.
• Skill: Build with Claude API (reference guide) — Added prompt caching routing entry for quick task navigation.
• Tool Description: CronCreate — Added durable mode documentation: jobs can now optionally persist to disk and survive session restarts, with guidance on when to use durable vs. session-only; expanded runtime behavior section for durable job catch-up semantics.
• Tool Description: SendMessageTool — Significantly condensed from a detailed protocol reference to a compact quick-reference format; inlined addressing table, simplified protocol response examples, and removed verbose per-message-type sections.

2.1.81

+294 tokens

• NEW: Agent Prompt: /review slash command (remote) — Remote version of the /review slash command.
• NEW: Agent Prompt: Auto mode rule reviewer — Reviews and critiques user-defined auto mode classifier rules for clarity, completeness, conflicts, and actionability.
• NEW: System Prompt: Minimal mode — Describes the behavior and constraints of minimal mode, which skips hooks, LSP, plugins, auto-memory, and other features while requiring explicit context via CLI flags.
• Agent Prompt: /batch slash command — Changed terminology from "Explore agents" to "subagents" in the scope-understanding step.
• Agent Prompt: /schedule slash command — Replaced raw curl-based API calls with a dedicated tool for managing remote triggers; simplified the create body shape documentation; removed direct references to auth environment variables.
• Agent Prompt: Security monitor for autonomous agent actions (first part) — Clarified transcript evaluation target from "final tool_use block" to "agent's most recent action"; strengthened the "Evaluate on Own Merits" rule with an explicit "silence is not consent" principle — the user not intervening between consecutive actions is not evidence of approval.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Expanded sensitive data definition to default-classify internal files (repo scripts, diagrams, slides) as sensitive when uploading to public storage such as gists, pastebins, or diagram renderers.
• Skill: /init CLAUDE.md and skill setup (new version) — Changed terminology from "Explore subagent" to generic "subagent" in the codebase exploration phase.
• Skill: Simplify — Added "unnecessary comments" check to the hacky-patterns review: delete comments that explain what code does, narrate the change, or reference the task/caller; keep only non-obvious "why" comments.
• System Prompt: Fork usage guidelines — Changed terminology from referencing a specific subagent type to "a fresh subagent" when explaining cache-sharing advantages of forks.
• System Prompt: Tool usage (task management) — Simplified tool name reference.
• System Reminder: Plan mode is active (iterative) — Minor rewording of the explore step's subagent guidance.

2.1.80

+3,065 tokens

• NEW: Agent Prompt: /schedule slash command — Guides the user through scheduling, updating, listing, or running remote Claude Code agents on cron triggers via the Anthropic cloud API.
• Agent Prompt: Status line setup — Added rate_limits object to the status line JSON schema, exposing Claude.ai subscription usage limits with 5-hour session and 7-day weekly windows (each with used percentage and reset timestamp); added example shell commands for displaying rate limit usage in the status line.
• Data: HTTP error codes reference — Minor update to HTTP error codes documentation.

2.1.79

+714 tokens

• REMOVED: System Prompt: Tool Use Summary Generation — Removed prompt for generating brief past-tense summaries of tool usage.
• Data: Claude model catalog — Added Programmatic Model Discovery section with Python SDK and raw HTTP examples for querying the Models API to retrieve live capability data (context window, max output tokens, vision, thinking, effort, structured outputs); includes guidance on iterating and filtering models by capability.
• Skill: Build with Claude API — Added Models API endpoints (GET /v1/models, GET /v1/models/{id}) to the list of supporting endpoints; added live capability lookup note directing users to query the Models API instead of relying on cached model tables.
• Skill: /loop slash command — Changed recurring task auto-expiry from a hardcoded 3-day limit to a configurable timeframe.
• Tool Description: CronCreate — Changed recurring task auto-expiry from a hardcoded 3-day limit to a configurable timeframe.
• System Prompt: Team memory content display — Updated memory content rendering to use a separate content reference.
• System Reminder: Memory file contents — Updated memory content rendering to use a separate content reference.

2.1.78

+1,956 tokens

• NEW: Agent Prompt: Dream memory consolidation — Instructs an agent to perform a multi-phase memory consolidation pass — orienting on existing memories, gathering recent signal from logs and transcripts, merging updates into topic files, and pruning the index.
• REMOVED: System Prompt: Memory system (private feedback) — Removed description of the private feedback memory type for storing user guidance and corrections.
• REMOVED: System Prompt: Tone and style (concise output — detailed) — Removed instruction for concise, polished output without filler or inner monologue.
• NEW: System Prompt: Memory description of user feedback — Describes the user feedback memory type that stores guidance about work approaches, emphasizing recording both successes and failures and checking for contradictions with team memories.
• Data: Agent SDK patterns — Python — Added Session Mutations section with rename_session, tag_session examples including tag clearing and project-directory scoping.
• Data: Agent SDK patterns — TypeScript — Added getSessionInfo to Session History; added tag field to session listing output; added Session Mutations section with renameSession, tagSession, and forkSession examples; noted pagination support via limit/offset on listSessions.
• Data: Agent SDK reference — Python — Added RateLimitEvent documentation with example showing how to handle rate-limit status transitions; added Session Mutations section with rename_session and tag_session (sync functions, optional directory scoping).
• Data: Agent SDK reference — TypeScript — Added agentProgressSummaries option to the options table for enabling periodic AI-generated progress summaries on task_progress events; updated task_progress description to mention the summary field; added getSessionInfo for single-session metadata retrieval; added tag field to session listing; noted pagination support on listSessions; added Session Mutations section with renameSession, tagSession, and forkSession.
• Data: Claude API reference — Java — Bumped SDK version from 2.16.0 to 2.16.1. Data: Claude API references (all languages) and tool use / streaming / batches / files references — Updated max_tokens values across code examples, increasing to 16000 for non-streaming and 64000 for streaming to avoid mid-thought truncation.
• Skill: Build with Claude API — Added max_tokens defaults guidance: use ~16000 for non-streaming and ~64000 for streaming; clarified that lowballing max_tokens truncates output and requires retries; noted exceptions for classification (~256), cost caps, or deliberately short outputs.
• System Prompt: Auto mode — Added rule 6: never post to public services (GitHub gists, Mermaid Live, Pastebin, etc.) without explicit written user approval, requiring the user to review content for sensitivity first.
• System Prompt: Executing actions with care — Added guidance that uploading content to third-party web tools (diagram renderers, pastebins, gists) publishes it and may be cached or indexed, so sensitivity should be considered before sending.

2.1.77

+6,494 tokens

• NEW: Skill: /init CLAUDE.md and skill setup (new version) — A comprehensive onboarding flow for setting up CLAUDE.md and related skills/hooks in the current repository, including codebase exploration, user interviews, and iterative proposal refinement.
• NEW: Skill: update-config (7-step verification flow) — A skill that guides Claude through a 7-step process to construct and verify hooks for Claude Code, ensuring they work correctly in the user's specific project environment.
• Data: Claude API reference — Java — Bumped SDK version from 2.15.0 to 2.16.0; added Memory Tool section with BetaMemoryToolHandler example showing how to implement a file-system-backed memory backend with BetaToolRunner.
• Data: Tool use concepts — Added Java to the list of SDKs that provide helper classes/functions for implementing the memory tool backend.
• Skill: /loop slash command — Reformatted action steps as a numbered list; added step 3 instructing Claude to immediately execute the parsed prompt instead of waiting for the first cron fire (invoking slash commands via the Skill tool or acting directly).
• Skill: /stuck slash command — Changed Slack reporting to only post when a stuck session is actually found (no more all-clear messages); introduced a two-message structure with a short top-level message and a threaded detail reply for channel scannability; added relevant debug log tail or sample output to the thread reply.
• Skill: Update Claude Code Config — Added reference to the new constructing-hook prompt; updated the prettier hook example command from xargs prettier --write to a safer read -r f; prettier --write "$f" pattern.
• System Prompt: Hooks Configuration — Updated the prettier PostToolUse hook example command from xargs prettier --write to read -r f; prettier --write "$f" for safer filename handling.
• Tool Description: Agent (usage notes) — Replaced agent resume-by-ID mechanism with instructions to use SendMessage with the agent's ID or name as the to field to continue a previously spawned agent; removed the separate bullet about agent ID return values; consolidated fresh-invocation guidance into a single bullet.

2.1.76

+43 tokens

• Agent Prompt: Security monitor for autonomous agent actions (second part) — Clarified "base64-encoded" to "encoded (e.g. base64)" for sensitive data detection; broadened code-from-external deserialization examples to "formats that can execute code (eval, exec, yaml.unsafe_load, pickle, etc)"; refined "Modify Shared Resources" examples by removing "model registrations"; improved "Irreversible Local Destruction" formatting and clarified package-manager-controlled directory guidance (explaining files get regenerated on install and suggesting copying into source tree); changed "GitHub issues/PRs" capitalization to "GitHub Issues/PRs" in External System Writes; updated Data Exfiltration to replace "creating gists" with "public plaintext sharing applications (e.g. public GitHub gists)"; quoted rule names in cross-references (e.g. "Local Operations" ALLOW exception, "Irreversible Local Destruction" in BLOCK).
• Skill: Update Claude Code Config — Added PostCompact to the list of available hook events.
• System Prompt: Hooks Configuration — Added PostCompact hook event (fires after compaction, receives summary) to the hooks event table.
• Tool Description: ReadFile — Condensed and reordered usage notes; added a note about reading full files.

2.1.75

+156 tokens

• NEW: Agent Prompt: Determine which memory files to attach — Agent for determining which memory files to attach for the main agent.
• NEW: System Prompt: One of six rules for using sleep command — One of the six rules for using the sleep command.
• NEW: System Prompt: System section — System section of the main system prompt.
• REMOVED: Agent Prompt: Memory selection — Removed instructions for selecting relevant memories for a user query (replaced by "Determine which memory files to attach").
• REMOVED: Tool Description: Bash (sleep — no retry loops) — Removed instruction to diagnose failures instead of retrying in sleep loops.
• REMOVED: Tool Description: Bash (sleep — use run_in_background) — Removed instruction to use run_in_background for long-running commands.
• Agent Prompt: Security monitor for autonomous agent actions (first part) — Added "Unseen Tool Results" evaluation rule: when an action's parameters depend on a tool result not visible in the transcript, treat those parameters as unverifiable and block if the action is high-severity.
• System Prompt: Teammate Communication — Updated SendMessage usage instructions from type: "message" / type: "broadcast" to to: "<name>" / to: "*" addressing pattern.
• System Reminder: Team Coordination — Updated SendMessage example from operation/target_agent_id/value fields to to/message/summary fields.
• Tool Description: ReadFile — Simplified usage notes around line length truncation and conditional read lines.
• Tool Description: SendMessageTool — Restructured around a unified three-field schema (to, message, summary) replacing the previous type/recipient/content pattern; protocol messages (shutdown, plan approval) are now nested inside the message field as structured objects; added addressing table; clarified that structured protocol messages cannot be broadcast.
• Tool Description: TeammateTool — Updated SendMessage references from type: "shutdown_request" to message: {type: "shutdown_request"}; changed field name from target_agent_id to to for sending messages.

2.1.74

+1,750 tokens

• NEW: Agent Prompt: Coding session title generator — Generates a title for the coding session.
• NEW: Skill: /stuck — Diagnose frozen or slow Claude Code sessions.
• Agent Prompt: Memory selection — Added rule to skip API/usage reference memories for tools already in active use, while still selecting warnings, gotchas, and known-issue memories for those tools.
• Agent Prompt: Security monitor for autonomous agent actions (first part) — Added block rule for agents posting or commenting to shared/external systems when the user only asked a question or requested analysis; added "posting or writing to shared/external systems" to the list of high-severity actions requiring precise user intent; refined messaging context rule to evaluate content sensitivity, accuracy, and audience scope rather than blanket-allowing internal messaging; simplified evaluation procedure wording; added scope-creep example for read-vs-publish distinction.
• Agent Prompt: Security monitor for autonomous agent actions (second part) — Added "Remote Shell Writes" block rule for writes to production/shared hosts via kubectl exec, docker exec, or ssh; renamed "Preview/Apply Collapse" to "Blind Apply" with clearer description of bypassed confirmation flags; added "External System Writes" block rule covering deletions, modifications, and publishing in external collaboration tools the agent didn't create; added "Content Integrity / Impersonation" block rule for false, fabricated, or misattributed content; added "Real-World Transactions" block rule for purchases, payments, and communications to people outside the user's organization; expanded "Irreversible Local Destruction" to cover untested glob/regex patterns and edits to package-manager-installed files; clarified "Local Operations" allow exception to scope "project scope" as the starting repository only; expanded "Production Deploy" definition to include production services.
• System Reminder: /btw side question — Rewrote constraint framing from 'CRITICAL CONSTRAINTS' with 'no tools available' messaging to 'IMPORTANT CONTEXT' explaining the responder is a separate lightweight agent; clarified that the main agent continues working independently and that the responder should not reference being interrupted.

2.1.73

+13,443 tokens

• NEW: Data: Claude API reference — cURL — Raw API reference for Claude API for use with cURL or raw HTTP.
• NEW: System Prompt: How to use the SendUserMessage tool — Instructions for using the SendUserMessage tool.
• NEW: System Prompt: Phase four of plan mode — Phase four of plan mode, extracted as a standalone prompt.
• NEW: Tool Description: SendMessageTool (non-agent-teams) — Description of the SendMessageTool for non-agent-teams contexts.
• REMOVED: System Prompt: Brief mode — Removed Codex-like execution mode with short status updates before launching into work.
• REMOVED: System Prompt: Post checkpoints — Removed instructions for how to post checkpoints during task execution.
• Data: Agent SDK patterns — Python — Clarified that custom SDK MCP tools require ClaudeSDKClient (not query()); removed allow_dangerously_skip_permissions from bypass permissions example; fixed session ID extraction to use message.data.get("session_id"); changed list_sessions and get_session_messages from async to sync functions.
• Data: Agent SDK reference — Python — Removed "dontAsk" permission mode; removed allow_dangerously_skip_permissions option and requirement for bypass permissions; reduced available hook events list to a smaller set; fixed session ID extraction to use message.data.get("session_id"); renamed task message subclasses to TaskStartedMessage, TaskProgressMessage, TaskNotificationMessage; changed list_sessions and get_session_messages from async to sync functions; changed MCP server management methods from add/remove to reconnect/toggle/status pattern.
• Data: Agent SDK reference — TypeScript — Clarified "dontAsk" permission mode as denying anything not pre-approved rather than auto-approving; expanded available hook events list with Elicitation, ElicitationResult, WorktreeCreate, WorktreeRemove, InstructionsLoaded; changed tools option to accept a preset object in addition to string arrays; changed systemPrompt option to accept a preset object with optional append; corrected stop reason example values; clarified toggleMcpServer requires both name and enabled parameters; clarified mcpServerStatus returns an array of all configured servers.
• Data: Claude API reference — C# — Substantially expanded: added content block iteration with TryPick* pattern for type-safe narrowing; added adaptive thinking section; added full tool definition and manual tool loop with round-trip conversion guidance; added context editing/compaction beta section with BetaContentBlock handling; added effort parameter, prompt caching, token counting, structured output, PDF/document input, server-side tools, and Files API beta sections.
• Data: Claude API reference — Go — Added stream message accumulation pattern; added BetaTextBlock type narrowing for RunToCompletion results; replaced fixed-budget extended thinking with adaptive thinking as recommended mode; added server-side tools, PDF/document input, Files API beta, and context editing/compaction beta sections.
• Data: Claude API reference — Java — Substantially expanded: added adaptive thinking section with ThinkingConfigAdaptive; added non-beta tool declaration with manual JSON schema; added MessageParam content block building for tool result round-trips; added effort parameter, prompt caching, token counting, structured output with typed parsing, PDF/document input, server-side tools with beta namespace guidance, server tool response reading, and Files API beta sections.
• Data: Claude API reference — PHP — Substantially expanded: updated Bedrock, Vertex AI, and Foundry client initialization to use new namespaced static factories; added content block type checking for safe text extraction; added SDK version requirement note for streaming; added typed streaming event handling; added full manual tool use loop with camelCase key guidance; added adaptive thinking section; added beta features section with MCP server and server-side tools guidance.
• Data: Claude API reference — Python — Updated compaction availability from "Opus 4.6 only" to "Opus 4.6 and Sonnet 4.6."
• Data: Claude API reference — TypeScript — Corrected multi-turn rule from "messages must alternate" to "consecutive same-role messages are allowed"; updated compaction availability from "Opus 4.6 only" to "Opus 4.6 and Sonnet 4.6"; added type guard narrowing for BetaTextBlock in compaction example.
• Data: Claude model catalog — Added retirement date (Apr 19, 2026) for Claude Haiku 3.
• Data: Files API reference — Python — Updated code examples to iterate content blocks by type instead of indexing content[0].text.
• Data: HTTP error codes reference — Added request_id field to error response example.
• Data: Message Batches API reference — Python — Updated code examples to find text blocks by type instead of indexing content[0].text.
• Data: Tool use reference — Python — Fixed tool_runner call from async to sync; updated structured output example to find text blocks by type instead of indexing content[0].text.
• Data: Tool use reference — TypeScript — Added server-side tools section with interface/name/type mapping table and beta mixing warning; fixed pause_turn handling to append assistant turn instead of resetting messages; added ESM __dirname workaround note; fixed variable shadowing in file download example; added nullability annotations for container.id and parsed_output; added "Reading Local Files" ESM section.
• Skill: Build with Claude API — Updated compaction availability from "Opus 4.6 only" to "Opus 4.6 and Sonnet 4.6."
• System Reminder: Plan mode is active (5-phase) — Extracted Phase 4 (Final Plan) instructions into a separate reusable prompt reference.

2.1.72

+1,643 tokens

• NEW: System Prompt: Auto mode — Continuous task execution mode, akin to a background agent.
• NEW: System Prompt: Brief mode — Codex-like execution mode with short status updates before launching into work.
• NEW: System Prompt: Post checkpoints — Instructions for how to post checkpoints during task execution.
• NEW: Tool Description: ExitWorktree — Tool for leaving a git worktree mid-session, with option to keep or remove it.
• NEW: Tool Description: ToolSearch (second part) — Second part of the ToolSearch tool description with query modes and usage examples.
• REMOVED: System Prompt: Tool permission mode — Removed guidance on tool permission modes and handling denied tool calls.
• REMOVED: System Prompt: Using your tools (how to use searching tools) — Removed standalone searching tools guidance (consolidated into existing direct search and delegate exploration prompts).
• REMOVED: System Prompt: Using your tools (whether to use Explore subagent) — Removed standalone Explore subagent guidance (consolidated into existing delegate exploration prompt).
• REMOVED: Tool Description: ToolSearch extended — Removed extended ToolSearch usage instructions (replaced by ToolSearch second part).
• Agent Prompt: Claude guide agent — Removed inline agent metadata block (agent type, model, permission mode, tool list, and when-to-use guidance).
• Agent Prompt: Explore strengths and guidelines — Added agent metadata block with agent type, model, disallowed tools, when-to-use guidance, and critical read-only system reminder (moved from Explore prompt).
• Agent Prompt: Explore — Removed inline agent metadata block (moved to Explore strengths and guidelines).
• Agent Prompt: Verification specialist — Significantly expanded with two documented failure patterns (verification avoidance and "first 80%" bias); added structured per-check output format requiring command run, output observed, and result; added self-rationalization recognition section with common excuses to override; added guidance to match rigor to stakes; added pre-FAIL checklist to avoid flagging intentional behavior or already-handled cases; defined PARTIAL as environmental limitations only; updated mobile verification strategy to use accessibility/UI tree dumps instead of screenshots; clarified that test suite results are context, not evidence.
• Skill: Simplify — Added "Recurring no-op updates" as a new efficiency check for state/store updates in polling loops or event handlers that fire unconditionally without change detection.
• System Prompt: Fork usage guidelines — Refined forking criteria from a list of use cases to a qualitative "will I need this output again" heuristic; added guidance that forks beat Explore subagent for research because they inherit context and share cache; added warning not to set a different model on forks to preserve cache reuse.
• System Prompt: Tool usage (delegate exploration) — Generalized individual tool name references to a unified search tools reference.
• System Prompt: Tool usage (direct search) — Generalized individual tool name references to a unified search tools reference.
• Tool Description: Agent (usage notes) — Internal variable renames only; no user-facing changes.
• Tool Description: EnterWorktree — Added mention of ExitWorktree for leaving the worktree mid-session; clarified that the keep/remove prompt on session exit only applies if still in the worktree.
• Tool Description: WebSearch — Internal variable rename only; no user-facing changes.

2.1.71

+10,211 tokens

• NEW: Agent Prompt: Security monitor for autonomous agent actions (first part) — Instructs Claude to act as a security monitor that evaluates autonomous coding agent actions against block/allow rules to prevent prompt injection, scope creep, and accidental damage.
• NEW: Agent Prompt: Security monitor for autonomous agent actions (second part) — Defines the environment context, block rules, and allow exceptions that govern which tool actions the agent may or may not perform.
• NEW: Skill: /loop slash command — Parses user input into an interval and prompt, converts the interval to a cron expression, and schedules a recurring task.
• NEW: System Prompt: Memory system (private feedback) — Describes the private feedback memory type for storing user guidance and corrections, with instructions to check for contradictions against team feedback before saving.
• NEW: System Prompt: Team memory content display — Renders shared team memory file contents with path and content for injection into the conversation context.
• NEW: System Prompt: Using your tools (how to use searching tools) — Guidance to use find or grep via Bash for simple, directed codebase searches like finding a specific file, class, or function.
• NEW: System Prompt: Using your tools (whether to use Explore subagent) — Guidance to use the Explore subagent for broader codebase exploration and deep research, noting it's slower than direct find/grep and should only be used when simple searches are insufficient.
• NEW: Tool Description: CronCreate — Describes the CronCreate tool for enqueuing one-shot or recurring cron-based jobs with jitter and off-minute scheduling guidance.
• Agent Prompt: Claude guide agent — Consolidated individual tool name references (Read, Glob, Grep) into a single grouped reference for local project file searching.
• Agent Prompt: Explore strengths and guidelines — Generalized file search guidance from "Use Grep or Glob" to "search broadly when you don't know where something lives."
• Agent Prompt: Explore — Tool usage guidelines now adapt based on whether embedded tools are active, conditionally including grep in allowed Bash operations.
• Agent Prompt: Plan mode (enhanced) — Exploration instructions now adapt between find/grep and Glob/Grep tool references depending on embedded tools mode; conditionally includes grep in allowed Bash operations.
• Agent Prompt: Worker fork execution — Removed Grep and Glob from the explicit tool list; added agent metadata block (fork type, inherited model, permission bubbling, max turns).
• Data: Agent SDK patterns — Python — Added Session History section with examples for listing past sessions and retrieving messages.
• Data: Agent SDK patterns — TypeScript — Added Session History section with examples for listing past sessions and retrieving messages with pagination.
• Data: Agent SDK reference — Python — Added agent_id/agent_type fields on tool-lifecycle hook inputs; added stop_reason to result messages; added typed task message subclasses (TaskStarted, TaskProgress, TaskNotification); added Session History section; added MCP Server Management section with runtime add/remove/status operations.
• Data: Agent SDK reference — TypeScript — Added agent_id/agent_type fields on tool-lifecycle hook inputs; added stop_reason to result messages; added task-related system message subtypes (task_started, task_progress, task_notification); added Session History section with pagination support; added MCP Server Management section with reconnect/toggle/status operations.
• Data: Claude API reference — Go — Substantially expanded: updated basic example to use context.Background() and proper content block type-switching; added full manual agentic tool loop example with key API surface table; added Extended Thinking section with enable/disable/adaptive helpers.
• Data: Claude API reference — Python — Updated basic message example to iterate content blocks by type instead of indexing content[0].text; updated ConversationManager to use next() with type filter.
• Data: Claude API reference — Ruby — Updated basic message example to iterate content blocks by type symbol instead of calling .first.text.
• Data: Claude API reference — TypeScript — Updated basic message example to iterate content blocks with type narrowing instead of indexing content[0].text.
• Skill: Debugging — Added conditional section informing users when debug logging was just enabled (vs. already active), with instructions to reproduce the issue; fixed typo "relevate" → "relevant."
• Skill: Simplify — Added "Unnecessary JSX nesting" as a new hacky-pattern check for wrapper elements that add no layout value; generalized duplicate-search guidance from tool-specific to broad search language.
• Tool Description: Bash (prefer dedicated tools) — The list of commands to avoid running via Bash (previously hardcoded as find, grep, cat, head, tail, sed, awk, echo) is now dynamically determined based on context.

2.1.70

+1,212 tokens

• NEW: Agent Prompt: Worker fork execution — System prompt for a forked worker sub-agent that executes a directive directly without spawning further sub-agents, then reports structured results.
• NEW: System Prompt: Fork usage guidelines — Instructions for when to fork subagents and rules against reading fork output mid-flight or fabricating fork results.
• NEW: System Prompt: Subagent delegation examples — Provides example interactions showing how a coordinator agent should delegate tasks to subagents, handle waiting states, and report results.
• NEW: System Prompt: Writing subagent prompts — Guidelines for writing effective prompts when delegating tasks to subagents, covering context-inheriting vs fresh subagent scenarios.
• NEW: Tool Description: Agent (usage notes) — Usage notes and instructions for the Task/Agent tool, including guidance on launching subagents, background execution, resumption, and worktree isolation.
• NEW: Tool Description: Agent (when to launch subagents) — Describes when to use the Agent tool for launching specialized subagent subprocesses to autonomously handle complex multi-step tasks.
• REMOVED: Agent Prompt: User sentiment analysis — Deleted the agent prompt for analyzing user frustration and PR creation requests.
• REMOVED: Tool Description: Task — Deleted the Task tool description (replaced by the new Agent usage notes and Agent when-to-launch prompts).
• Agent Prompt: /security-review slash command — Changed git diff command from --merge-base origin/HEAD to origin/HEAD...; fixed version tag.

2.1.69

+3,310 tokens

• NEW: Agent Prompt: Common suffix (response format) — Appends response format instructions to agent prompts, switching between concise sub-agent reporting and detailed standalone writeups based on a caller flag.
• NEW: Agent Prompt: Explore strengths and guidelines — Defines the strengths and behavioral guidelines for the codebase exploration subagent, emphasizing search strategies, thoroughness, and avoiding unnecessary file creation.
• NEW: Agent Prompt: Verification specialist — Re-added system prompt for a verification subagent that adversarially tests implementations and issues PASS/FAIL/PARTIAL verdicts (removed in v2.1.66).
• NEW: System Prompt: Agent thread notes — Behavioral guidelines for agent threads covering absolute paths, response formatting, emoji avoidance, and tool call punctuation.
• NEW: System Prompt: Analysis instructions for full compact prompt (full conversation) — Compaction analysis instructions for full conversation context.
• NEW: System Prompt: Analysis instructions for full compact prompt (minimal and via feature flag) — Lean/experimental compaction analysis instructions.
• NEW: System Prompt: Analysis instructions for full compact prompt (recent messages) — Compaction analysis instructions for recent messages only.
• NEW: System Prompt: Description part of memory instructions — Field for describing what a memory is, part of memory creation instructions.
• NEW: System Prompt: Output efficiency — Re-added instructions for concise, direct output (removed in v2.1.66). NEW: Tool Description: AskUserQuestion (preview field) — Instructions for using the optional preview field on single-select question options to display visual artifacts like HTML mockups, code snippets, and diagrams.
• REMOVED: Agent Prompt: Task tool — Deleted the general-purpose subagent system prompt (content split into Explore strengths and guidelines and Agent thread notes).
• REMOVED: Agent Prompt: Task tool (extra notes) — Deleted additional notes for Task tool usage (content moved to Agent thread notes).
• REMOVED: System Reminder: Output token limit exceeded — Deleted the warning shown when a response exceeds the output token limit.
• REMOVED: Tool Description: ToolSearch — Deleted the base ToolSearch tool description (content consolidated into ToolSearch extended).
• Agent Prompt: Conversation summarization — Replaced inline analysis instructions with ${ANALYSIS_INSTRUCTION_TAGS} variable.
• Agent Prompt: /pr-comments slash command — Minor wording changes.
• Agent Prompt: Quick PR creation — Removed hardcoded Changelog section and Slack posting step; made PR creation/edit options and body sections configurable; fixed typo in SAFEUSER variable name.
• Agent Prompt: Recent Message Summarization — Refactored analysis instructions into a shared component.
• Agent Prompt: Status line setup — Re-added worktree object to the status line JSON schema (name, path, branch, original cwd, and original branch fields).
• Data: Tool use concepts — Added mention of Python SDK MCP conversion helpers (anthropic.lib.tools.mcp).
• Data: Tool use reference — Python — Added full MCP Tool Conversion Helpers section with examples for tool runner integration, prompts, resources as content, and file uploads.
• Skill: Create verifier skills — Re-added self-update guidance: verifiers now offer to edit their own SKILL.md when instructions are outdated; added user-facing note about self-update behavior.
• Skill: Verification specialist — Re-added verifier skill maintenance section for distinguishing outdated verifier instructions from actual feature failures.
• System Prompt: Option previewer — Renamed markdown field to preview; added description of rendering as markdown in a monospace box with multi-line support.
• Tool Description: Task — Removed 'access to current context' guidance; added note that teammates cannot spawn other teammates when background tasks are disabled.
• Tool Description: TaskCreate — Made activeForm parameter optional (spinner falls back to subject when omitted); simplified task creation instructions.
• Tool Description: ToolSearch extended — Re-added comma-separated multi-tool direct selection (e.g., select:Read,Edit,Grep).

2.1.68

_{No changes to the system prompts in v2.1.68.}

2.1.66

-1,507 tokens

• REMOVED: Agent Prompt: Verification specialist — Deleted the adversarial verification agent prompt that returned PASS/FAIL/PARTIAL verdicts.
• REMOVED: System Prompt: Output efficiency instructions — Deleted instructions for concise, direct output.
• REMOVED: System Reminder: Ultraplan complete — Deleted the reminder instructing Claude to present a pre-generated plan from a remote session.
• Agent Prompt: Explore — Removed inline whenToUse description and whenToUseDynamic flag from agent metadata; renamed Agent to tq in disallowed tools.
• Agent Prompt: Plan mode enhanced — Renamed Agent to tq in disallowed tools.
• Agent Prompt: Status line setup — Removed worktree object from the status line JSON schema (name, path, branch, original cwd, and original branch fields).
• Skill: Create verifier skills — Removed self-update guidance: verifiers no longer offer to edit their own SKILL.md when instructions are outdated.
• Skill: Verification specialist — Removed verifier skill maintenance section for distinguishing outdated verifier instructions from actual feature failures.
• Tool Description: Task — Re-added guidance about agents with "access to current context" seeing full conversation history (had been removed in v2.1.64).
• Tool Description: ToolSearch extended — Removed comma-separated multi-tool direct selection; select: now loads only a single named tool.
• Tool Description: ToolSearch — Added ADDITIONAL_PROMPT_SECTION variable.

2.1.64

+1,291 tokens

• NEW: Agent Prompt: Verification specialist — System prompt for adversarially verifying implementation correctness through builds, tests, and runtime checks, returning PASS/FAIL/PARTIAL verdicts.
• NEW: System Prompt: Output efficiency instructions — Instructions for being concise and to the point.
• NEW: System Reminder: Ultraplan complete — Instructs Claude to present a pre-generated plan from a remote session without further exploration.
• Agent Prompt: Status line setup — Added worktree object to the status line JSON schema with name, path, branch, original cwd, and original branch fields.
• Skill: Create verifier skills — Added self-update guidance: verifiers now offer to edit their own SKILL.md when instructions are outdated rather than reporting a false FAIL.
• Skill: Verification specialist — Added verifier skill maintenance section for distinguishing outdated verifier instructions from actual feature failures, with self-repair workflow.
• Tool Description: Task — Removed guidance about agents with "access to current context" seeing full conversation history.
• Tool Description: ToolSearch extended — Added comma-separated multi-tool direct selection (e.g., select:Read,Edit,Grep).
• Tool Description: ToolSearch — Removed EXTENDED_TOOL_SEARCH_PROMPT variable; inlined the tool description.

2.1.63

+4,200 tokens

• NEW: Agent Prompt: /batch slash command — Instructions for orchestrating a large, parallelizable change across a codebase.
• NEW: System Prompt: Worker instructions — Instructions for workers to follow when implementing a change.
• REMOVED: Agent Prompt: Bash command file path extraction — System prompt for extracting file paths from bash command output.
• REMOVED: Skill: Build with Claude API (trigger) — Activation criteria for the Build with Claude API skill.
• REMOVED: System Reminder: Todo list changed — Notification that todo list has changed.
• REMOVED: System Reminder: Todo list empty — Reminder that todo list is empty.
• Data: Claude API reference — Go — Added BetaToolRunner documentation with the toolrunner package; restructured tool use into "Tool Runner (Beta)" and "Manual Loop" sections.
• Data: Claude API reference — PHP — Added Bedrock, Vertex AI, and Foundry client initialization examples; removed version pinning from install command.
• Data: Claude API reference — Java — Updated SDK version from 2.14.0 to 2.15.0.
• Data: Claude API reference — Python — Added automatic caching section for simplified prompt caching alongside existing manual cache control.
• Data: Claude API reference — TypeScript — Added automatic caching section, typed error handling guidance, SDK types guidance (Anthropic.MessageParam, etc.), and multi-turn typing improvements.
• Data: HTTP error codes reference — Added typed exceptions table mapping HTTP codes to TypeScript and Python exception classes, with correct/incorrect usage examples.
• Data: Tool use concepts — Expanded tool runner availability to include Java, Go, and Ruby; improved pause_turn handling with code example and max_continuations guidance; simplified dynamic filtering (no longer requires separate code_execution tool or beta header).
• Data: Tool use reference — TypeScript — Added streaming manual loop section combining stream() + finalMessage() with tool-use loop; added pause_turn handling; added SDK type annotations and error handling guidance throughout.
• Data: Tool use reference — Python — Added pause_turn handling in manual agentic loop.
• Data: Streaming reference — TypeScript — Enhanced best practices: expanded finalMessage() guidance, added stream.on("text") tip, added agentic loop streaming cross-reference.
• Data: Claude model catalog — Moved Claude Haiku 3 from current models to deprecated.
• Skill: Build with Claude API — Updated Go SDK to show beta tool runner support; added guidance against reimplementing SDK functionality, redefining SDK types, and guidance on report/document output via code execution sandbox.
• Agent SDK references and patterns (Python, TypeScript) — Renamed Task tool to Agent in allowed tools, tool tables, and code examples.
• Agent Prompt: Conversation summarization — Fixed list indentation and corrected duplicate section numbering (two section 6s → 6, 7).
• System Reminder: Plan mode is active (5-phase) — Simplified template variables and removed several variable declarations.
• System Reminder: Plan mode is active (iterative) — Restructured plan file info rendering and simplified variable references.
• Tool descriptions (EnterPlanMode, TeammateTool) — Renamed Task tool references to Agent.
• Hardcoded model IDs (e.g., claude-opus-4-6) replaced with template variables (e.g., {{OPUS_ID}}) across all SDK reference, data, and skill files.

2.1.62

_{No changes to the system prompts in v2.1.62.}

2.1.61

_{No changes to the system prompts in v2.1.61.}

2.1.59

-493 tokens

• REMOVED: Data: Claude Code version mismatch warning — Warning shown when Claude Code version is outdated, including update instructions.
• REMOVED: System Reminder: Hook JSON validation failed — Error message shown when hook JSON output fails schema validation.

2.1.58

_{No changes to the system prompts in v2.1.58.}

2.1.56

_{No changes to the system prompts in v2.1.56.}

2.1.55

_{No changes to the system prompts in v2.1.55.}

2.1.54

_{No changes to the system prompts in v2.1.54.}

2.1.53

-617 tokens

• NEW: Agent Prompt: Memory selection - Instructions for selecting relevant memories for a user query (156 tks).
• REMOVED: Agent Prompt: Command execution specialist - Removed command execution specialist agent for running bash commands (109 tks).
• REMOVED: System Prompt: Main system prompt - Removed standalone core identity prompt; content absorbed into other prompt sections (269 tks).
• Tool Description: Task - Background agents now auto-notify on completion instead of providing an output file path; explicitly discourages sleeping, polling, or proactive checking (1317 → 1331 tks).
• Tool Description: Write - Clarified Write vs Edit guidance: prefer Edit for modifications (sends only the diff), reserve Write for new files or complete rewrites (127 → 129 tks).
• Widespread decomposition of 6 monolithic system prompts and 2 tool descriptions into ~70 smaller atomic files. Content is largely preserved but reorganized into independently addressable units, with some new sub-prompts (e.g., "ambitious tasks", "blocked approach", "code references") and redistributed content (e.g., "no time estimates" moved from Tone and style to Doing tasks):
  • System Prompt: Doing tasks (437 tks) → 13 files covering software engineering focus, read-before-modifying, security, over-engineering, unnecessary additions, error handling, premature abstractions, compatibility hacks, file creation, time estimates, help/feedback, ambitious tasks, and blocked approach.
  • System Prompt: Tone and style (500 tks) → 3 files covering code references, concise output (detailed), and concise output (short).
  • System Prompt: Tool usage policy (352 tks) → 11 files covering create/edit/read/search files, Bash reservation, content search, delegate exploration, direct search, skill invocation, subagent guidance, and task management.
  • System Prompt: Task management (565 tks) → merged into Tool usage (task management) sub-prompt (73 tks).
  • System Prompt: Conditional delegate codebase exploration (249 tks) → merged into Tool usage (delegate exploration) sub-prompt (114 tks).
  • Tool Description: Bash (1067 tks) + Bash (sandbox note) (438 tks) → 45 files covering overview, working directory, timeout, command description, quoting, sequential/parallel commands, newlines, semicolons, cwd maintenance, dedicated-tool preferences, 6 alternative-tool notes, git safety (3 files), sleep guidance (6 files), sandbox policy (17 files), and verify-parent-directory.

2.1.52

_{No changes to the system prompts in v2.1.52.}

2.1.51

+6,918 tokens

• NEW: Agent Prompt: Quick PR creation - Streamlined prompt for creating a commit and pull request with pre-populated context (945 tks).
• NEW: Agent Prompt: Quick git commit - Streamlined prompt for creating a single git commit with pre-populated context (507 tks).
• NEW: Data: Agent SDK reference — TypeScript - TypeScript Agent SDK reference including installation, quick start, custom tools, and hooks (2287 tks).
• NEW: Data: Claude Code version mismatch warning - Warning shown when Claude Code version is outdated (173 tks).
• NEW: Skill: Create verifier skills - Prompt for creating verifier skills for the Verify agent to automatically verify code changes (2586 tks).
• NEW: System Reminder: Hook JSON validation failed - Error when hook JSON output fails validation (320 tks).
• REMOVED: Agent Prompt: Single-word search term extractor - Removed prompt for extracting single-word search terms from a user's query (361 tks).
• Data: Agent SDK patterns — Python - Replaced asyncio with anyio; switched message type checks from message.type == "result" to isinstance(message, ResultMessage); custom tools now require MCP server via create_sdk_mcp_server + ClaudeSDKClient; added permission_mode="plan" and allow_dangerously_skip_permissions for bypass mode (2080 → 2350 tks).
• Data: Agent SDK reference — Python - Added ClaudeSDKClient interface with full lifecycle control; expanded built-in tools table (AskUserQuestion, Task); added plan and dontAsk permission modes; greatly expanded Common Options table with max_budget_usd, output_format, thinking, betas, setting_sources, env, and more; updated hook events list with 15+ event types (1718 → 2750 tks).
• Data: Tool use concepts - Code execution promoted from beta to GA (code_execution_20260120); added new server-side tools sections for Web Search/Fetch (web_search_20260209, web_fetch_20260209) with dynamic filtering, Programmatic Tool Calling, Tool Search, and Tool Use Examples; removed beta requirement for memory tool; updated structured outputs guidance for output_config.format (2820 → 3640 tks).
• Data: Tool use reference — Python - Migrated code execution and memory from client.beta.messages.create to client.messages.create; removed betas arrays; Files API beta now passed via extra_headers (4261 → 4180 tks).
• Data: Tool use reference — TypeScript - Same beta→GA migration as Python; structured output example updated from output_format to output_config.format (3294 → 3228 tks).
• Data: Claude API reference — Python - Added explicit TTL support for cache_control ("ttl": "1h"); extended adaptive thinking note to include Sonnet 4.6; added Stop Reasons table (end_turn, max_tokens, tool_use, pause_turn, refusal); updated rate limit error handling; changed Sonnet reference to claude-sonnet-4-6 (2905 → 3248 tks).
• Data: Claude API reference — TypeScript - Added explicit TTL for cache_control; extended adaptive thinking to Sonnet 4.6; added Stop Reasons table (2024 → 2388 tks).
• Data: Claude API reference — Java - Updated SDK version 2.11.1 → 2.14.0; improved streaming with fluent stream API; added anthropic-beta header for structured outputs; added non-beta tool use section (1073 → 1226 tks).
• Data: Claude API reference — C# - Removed "beta" label; expanded streaming example with typed RawMessageStreamEvent handling (458 → 550 tks).
• Data: Claude API reference — Ruby - Updated tool runner to use BaseModel input schema pattern with doc method and input parameter (603 → 622 tks).
• Data: Claude API reference — Go - Updated model constants from ModelClaudeOpus4_5_20251101 to ModelClaudeOpus4_6 (629 → 621 tks).
• Data: Claude API reference — PHP - Removed "beta" label; updated SDK 0.4.0 → 0.5.0; switched from array syntax to named parameters (410 → 394 tks).
• Data: Claude model catalog - Added Max Output column (128K for Opus, 64K for Sonnet/Haiku); Opus 4.6 now shows 1M beta context; added Model Descriptions section; moved Sonnet 3.7 and Haiku 3.5 from "deprecated" to "retired"; updated alias table accordingly (1349 → 1510 tks).
• Data: HTTP error codes reference - Replaced human-readable error names with API error type strings (e.g., invalid_request_error); removed 422 status code, merging validation errors into 400; stripped escaped markdown formatting (1460 → 1387 tks).
• Skill: Build with Claude API - Opus 4.6 now shows 1M beta context; stronger default-model guidance ("ALWAYS use claude-opus-4-6"); extended adaptive thinking and effort parameter to Sonnet 4.6; expanded thinking/budget_tokens deprecation notes; removed "beta" labels from C#/PHP SDKs (token count unchanged).
• Skill: Build with Claude API (trigger) - Simplified trigger criteria to explicit SDK import checks (anthropic, claude_agent_sdk); clearer DO NOT TRIGGER rules (token count unchanged).
• Tool Description: EnterWorktree - Added explicit "When NOT to Use" section; narrowed activation to only when user explicitly says "worktree"; no longer triggers for general isolation or branch requests (284 → 334 tks).
• Data: Agent SDK patterns — TypeScript - Fixed session init check from "subtype" in message to message.type === "system" (1067 → 1069 tks).
• Data: Message Batches API reference — Python - Added "canceled" result type handling (1481 → 1505 tks).
• Widespread internal variable renames across 12 files (e.g., ADDITIONAL_USER_INPUT → USER_INPUT, PREVIOUS_AGENT_SUMMARY → PREVIOUS_SUMMARY, SYSTEM_REMINDER → PLAN_STATE, COMMIT_CO_AUTHORED_BY_CLAUDE_CODE → ATTRIBUTION_TEXT, IS_TRUTHY_FN → IS_BACKGROUND_TASKS_DISABLED_FN, CAN_READ_PDF_FILES → IS_PDF_SUPPORTED_FN, and others).

2.1.50

+110 tokens

• Tool Description: EnterWorktree - Generalized from git-only to support VCS-agnostic isolation via WorktreeCreate/WorktreeRemove hooks; requirements now allow non-git repos with hooks configured (237 → 284 tks).
• Tool Description: ReadFile - Replaced hardcoded "cat -n format" line-number note with a CONDITIONAL_READ_LINES variable (476 → 468 tks).
• Tool Description: Task - Added isolation: "worktree" option to run agents in temporary git worktrees with automatic cleanup (1228 → 1299 tks).

2.1.49

_{No changes to the system prompts in v2.1.49.}

2.1.48

-1,082 tokens

• NEW: Tool Description: EnterWorktree - Tool description for the EnterWorktree tool (237 tks).
• REMOVED: System Prompt: MCP CLI - Removed instructions for using mcp-cli to interact with Model Context Protocol servers (1333 tks).
• Tool Description: Task - Simplified background agent output-file guidance; removed BASH_TOOL variable and tail instructions; added new "Foreground vs background" bullet explaining when to use each mode (1214 → 1228 tks).

2.1.47

+34,752 tokens

• NEW: Data: Agent SDK patterns — Python (2080 tks), Agent SDK patterns — TypeScript (1067 tks), Agent SDK reference — Python (1718 tks) - SDK pattern guides and reference for Python and TypeScript Agent SDKs.
• NEW: Data: Claude API reference — C# (458 tks), Go (629 tks), Java (1073 tks), PHP (410 tks), Python (2905 tks), Ruby (603 tks), TypeScript (2024 tks) - SDK references for all supported Claude API client languages.
• NEW: Data: Claude model catalog (1349 tks) - Catalog of current and legacy Claude models with IDs, aliases, context windows, and pricing.
• NEW: Data: Files API reference — Python (1303 tks), TypeScript (798 tks) - References for the Files API covering upload, listing, deletion, and message usage.
• NEW: Data: HTTP error codes reference (1460 tks) - Reference for Claude API HTTP error codes with common causes and handling strategies.
• NEW: Data: Live documentation sources (2337 tks) - WebFetch URLs for fetching current Claude API and Agent SDK documentation from official sources.
• NEW: Data: Message Batches API reference — Python (1481 tks) - Batches API reference including batch creation, status polling, and result retrieval.
• NEW: Data: Streaming reference — Python (1534 tks), TypeScript (1553 tks) - Streaming references covering sync/async streaming and content type handling.
• NEW: Data: Tool use concepts (2820 tks) - Conceptual foundations of tool use including definitions, tool choice, and best practices.
• NEW: Data: Tool use reference — Python (4261 tks), TypeScript (3294 tks) - Tool use references covering tool runner, agentic loops, code execution, and structured outputs.
• REMOVED: Agent Prompt: Prompt Suggestion Generator (Coordinator) - Removed the coordinator-mode prompt suggestion generator that predicted what a team supervisor would type next (283 tks).
• REMOVED: System Reminder: Delegate mode prompt - Removed the delegate mode system reminder that restricted tool usage to team coordination tools (185 tks).
• REMOVED: System Reminder: Exited delegate mode - Removed the notification shown when exiting delegate mode (50 tks).
• Agent Prompt: Status line setup - Added added_dirs field to the workspace schema for directories added via /add-dir (1482 → 1502 tks).
• Tool Description: AskUserQuestion - Added EXIT_PLAN_MODE_TOOL_NAME variable; expanded plan mode guidance to warn against referencing "the plan" in questions, since users cannot see the plan until ExitPlanMode is called (194 → 287 tks).

2.1.45

+276 tokens

• NEW: Agent Prompt: Single-word search term extractor - System prompt for extracting single-word search terms from a user's query (361 tks).
• NEW: System Prompt: Option previewer - System prompt for previewing UI options in a side-by-side layout (129 tks).
• REMOVED: Agent Prompt: Prompt Suggestion Generator (Stated Intent) - Removed the stated-intent prompt suggestion generator that returned a user's explicitly stated next step (166 tks).
• Agent Prompt: /review-pr slash command - Replaced ${BASH_TOOL_OBJECT.name}(...) template expressions with plain backtick-quoted gh commands; removed BASH_TOOL_OBJECT variable (243 → 211 tks).
• Tool Description: Bash (sandbox note) - Removed CONDITIONAL_NEWLINE_IF_SANDBOX_ENABLED variable; the conditional newline before the "Set dangerouslyDisableSandbox" bullet is now always included (454 → 438 tks).

2.1.44

_{No changes to the system prompts in v2.1.44.}

2.1.42

-1,060 tokens

• REMOVED: Agent Prompt: Remember skill - Removed the /remember skill prompt that reviewed session memories and updated CLAUDE.local.md with recurring patterns and learnings (1048 tks).
• Tool Description: WebSearch - Simplified date-awareness variables; replaced GET_CURRENT_DATE_FN and CURRENT_YEAR with a single CURRENT_MONTH_YEAR variable; updated example to use plain text ("with the current year, NOT last year") instead of template expressions (331 → 319 tks).

2.1.41

+262 tokens

• NEW: System Prompt: Conditional delegate codebase exploration - Added instructions for when to use the Explore subagent versus calling tools directly (249 tks).
• System Prompt: Tool usage policy - Replaced inline "VERY IMPORTANT" block and examples about delegating codebase exploration to the Explore agent with a conditional variable reference; removed GLOB_TOOL_NAME and GREP_TOOL_NAME variables (564 → 352 tks).
• System Prompt: Skillify Current Session - Added Round 2 prompt to ask the user where to save the skill (repo-specific vs personal); updated Step 3 to use the user-chosen location instead of hardcoded .claude/skills/; changed Step 4 to output the SKILL.md as a YAML code block for review and use a simpler AskUserQuestion confirmation (1750 → 1882 tks).
• System Reminder: Plan mode is active (5-phase) - Made Explore subagent usage conditional; when disabled, Phase 1 now instructs Claude to use Glob, Grep, and Read tools directly; updated Phase 2 variable references for plan subagent and agent count (1429 → 1500 tks).
• Agent Prompt: Status line setup - Added session_name field (optional human-readable session name set via /rename) to the JSON input spec (1460 → 1482 tks).

2.1.40

-293 tokens

• REMOVED: Agent Prompt: Evolve currently-running skill - Removed agent prompt for evolving a currently-running skill based on user requests or preferences (293 tks).

2.1.39

+293 tokens

• NEW: Agent Prompt: Evolve currently-running skill - Added new agent prompt for evolving a currently-running skill based on what the user is implicitly or explicitly requesting (293 tks).

2.1.38

+105 tokens

• NEW: Agent Prompt: Prompt Suggestion Generator (Coordinator) - Added new agent prompt for prompt suggestion generation in coordinator mode (283 tks).
• NEW: System Prompt: Context compaction summary - Added new prompt used for context compaction summary for the SDK (278 tks).
• NEW: Tool Description: TaskList (teammate workflow) - Added conditional section appended to the TaskList tool description for teammate workflows (133 tks).
• REMOVED: Agent Prompt: Prompt Suggestion Generator (for Agent Teams) - Removed agent-teams-specific prompt suggestion generator (209 tks).
• REMOVED: System Prompt: Accessing past sessions - Removed instructions for searching past session data including memory summaries and transcript logs (352 tks).
• Tool Description: Sleep - Simplified description; replaced "Wakes early if the user sends a message" with "The user can interrupt the sleep at any time" and removed other references to early wake behavior.
• Tool Description: Task - Fixed typo in example agent description ("when to respond" → "to respond") and corrected mismatched XML closing tag.
• Tool Description: Bash (Git commit and PR creation instructions) - Minor formatting cleanup in the git amend warning text.

2.1.37

_{No changes to the system prompts in v2.1.37.}

2.1.36

_{No changes to the system prompts in v2.1.36.}

2.1.34

_{No changes to the system prompts in v2.1.34.}

2.1.33

-1,086 tokens

• NEW: Agent Prompt: Prompt Suggestion Generator (for Agent Teams) - Instructions for generating prompt suggestions when agent swarms are enabled
• NEW: Tool Description: TeamDelete - Tool description for deleting/cleaning up team resources
• REMOVED: System Prompt: Action Suggestor for the Task Coordinator - Removed system prompt for suggesting actions to the task coordinator
• REMOVED: Tool Description: EnterPlanMode (ambiguous tasks) - Removed separate conditional description for entering plan mode on ambiguous tasks
• System Reminder: Plan mode is active (5-phase) - Added requirement to begin Phase 4's final plan with a Context section explaining why the change is being made
• System Reminder: Plan mode is active (iterative) - Major rewrite: consolidated variables; restructured from a 5-step "How to Work" section into a streamlined "The Loop" cycle (Explore → Update plan → Ask user); added new "First Turn", "Asking Good Questions", and "When to Converge" sections; reframed as pair-planning with the user; reduced from 909 to 797 tokens
• Tool Description: EnterPlanMode - Extracted "What Happens in Plan Mode" section into a conditional variable (CONDITIONAL_WHAT_HAPPENS_NOTE); reduced from 970 to 878 tokens
• Tool Description: Task - Removed AGENT_TEAM_CHECK variable and conditional note about Agent Teams not being available on certain plans; reduced from 1340 to 1215 tokens
• Tool Description: TeammateTool - Renamed tool heading from "TeammateTool" to "TeamCreate"; removed spawnTeam operation label and cleanup operation (now separate TeamDelete tool); added explicit file paths for created team and task list resources; added note about automatic message delivery; updated workflow to reference TeamCreate; reduced from 1790 to 1642 tokens

2.1.32

+2,323 tokens

• NEW: Agent Prompt: Recent Message Summarization - Agent prompt used for summarizing recent messages
• NEW: System Prompt: Action Suggestor for the Task Coordinator - System prompt used for suggesting actions to the task coordinator or team lead
• NEW: System Prompt: Agent Summary Generation - System prompt used for "Agent Summary" generation
• NEW: System Prompt: Skillify Current Session - System prompt for converting the current session into a skill
• System Prompt: Executing actions with care - Added guidance about lock files: investigate what process holds a lock file rather than deleting it
• System Prompt: Teammate Communication - Rebranded from "Teammate Communication" to "Agent Teammate Communication"; updated to reference SendMessage tool instead of Teammate tool; simplified and clarified communication instructions; reduced from 138 to 127 tokens
• System Reminder: Plan mode is active (iterative) - Updated guidance about using the Explore agent type, clarifying it's useful for parallelizing complex searches but direct tools are simpler for straightforward queries
• Tool Description: SendMessageTool - Updated terminology from "teammates in a swarm" to "agent teammates in a team"
• Tool Description: TeammateTool - Major refactoring: removed operations (discoverTeams, requestJoin, approveJoin, rejectJoin) and Environment Variables section; added "When to Use" and "Choosing Agent Types for Teammates" sections; added note about peer DM visibility in idle notifications; streamlined team workflow and coordination instructions; clarified that teammates should not send structured JSON status messages; reduced from 2393 to 1790 tokens

2.1.31

+693 tokens

• NEW: System Prompt: Agent memory instructions - Instructions for including domain-specific memory update guidance in agent system prompts (e.g., for code reviewers, test runners, architects)
• NEW: System Prompt: Censoring assistance with malicious activities - Guidelines for assisting with authorized security testing, defensive security, CTF challenges, and educational contexts while refusing malicious requests (previously removed in v2.1.20, now re-added)
• NEW: System Prompt: Tool permission mode - Guidance on tool permission modes and handling denied tool calls; advises not to re-attempt denied tool calls and to adjust approach instead
• NEW: System Reminder: Hook stopped continuation prefix - Prefix for hook stopped continuation messages
• NEW: Tool Description: ToolSearch extended - Extended usage instructions for ToolSearch moved to separate conditional prompt (query modes, examples, correct/incorrect usage patterns)
• REMOVED: Tool Description: TeammateTool operation parameter - Description of the operation parameter for the TeammateTool (removed)
• Tool Description: Task - Added conditional note about "Agent Teams" feature (TeammateTool, SendMessage, spawnTeam) not being available on certain plans; clarifies this limitation only applies when users explicitly ask for agent teams or peer-to-peer messaging
• Tool Description: ToolSearch - Refactored: moved extended content to separate ToolSearch extended prompt; simplified base description now references <available-deferred-tools> messages and conditionally includes extended content via identifier

2.1.30

+3,152 tokens

• NEW: System Prompt: Executing actions with care - Instructions for executing actions carefully
• NEW: System Prompt: Insights at a glance summary - Generates a concise 4-part summary (what's working, hindrances, quick wins, ambitious workflows) for the insights report
• NEW: System Prompt: Insights friction analysis - Analyzes aggregated usage data to identify friction patterns and categorize recurring issues
• NEW: System Prompt: Insights on the horizon - Identifies ambitious future workflows and opportunities for autonomous AI-assisted development
• NEW: System Prompt: Insights session facets extraction - Extracts structured facets (goal categories, satisfaction, friction) from a single Claude Code session transcript
• NEW: System Prompt: Insights suggestions - Generates actionable suggestions including CLAUDE.md additions, features to try, and usage patterns
• NEW: System Prompt: Parallel tool call note - System prompt for telling Claude to use parallel tool calls
• NEW: Tool Description: Sleep - Tool for waiting/sleeping with early wake capability on user input
• System Prompt: Accessing past sessions - Added tip to truncate search results to 64 characters per match to keep context manageable
• System Prompt: Hooks Configuration - Significantly restructured hook response format with new fields including suppressOutput, decision, reason, and hookSpecificOutput with event-specific parameters
• System Reminder: Plan mode is active (5-phase) - Added guidance to actively search for and reuse existing functions, utilities, and patterns, with emphasis on including references to found utilities in the plan
• System Reminder: Plan mode is active (iterative) - Added similar guidance about reusing existing code and including references to found utilities in the plan
• Tool Description: ReadFile - Added requirement to use pages parameter for large PDFs (more than 10 pages), with maximum 20 pages per request
• Tool Description: SendMessageTool - Restructured message types (removed nested "request" and "response" types), added required summary field for message and broadcast types, flattened protocol to use specific types like shutdown_request, shutdown_response, plan_approval_response
• Tool Description: Task - Restructured preamble section
• Tool Description: TeammateTool - Clarified that teammates go idle after every turn (not just when done), explained that idle teammates can still receive messages and will wake up to process them, and clarified that idle notifications are automatic and normal

2.1.29

_{No changes to the system prompts in v2.1.29.}

2.1.28

_{No changes to the system prompts in v2.1.28.}

2.1.27

_{No changes to the system prompts in v2.1.27.}

2.1.26

+0 tokens

• Agent Prompt: Prompt Suggestion Generator (Stated Intent) - Increased maximum suggestion length from 2-8 words to 2-12 words
• Agent Prompt: Prompt Suggestion Generator v2 - Increased maximum suggestion length from 2-8 words to 2-12 words

2.1.25

_{No changes to the system prompts in v2.1.25.}

2.1.23

-383 tokens

• NEW: System Reminder: /btw side question - System reminder for /btw slash command side questions without tools
• REMOVED: Agent Prompt: Exit plan mode with swarm - System reminder for when ExitPlanMode is called with isSwarm set to true
• System Prompt: Main system prompt - Removed trailing period after SECURITY_POLICY variable
• Tool Description: Skill - Simplified and streamlined: removed examples section, condensed important notes, changed from listing available skills inline to referencing system-reminder messages, updated variable references (FORMAT_SKILLS_AS_XML_FN → SKILL_TAG_NAME, removed LIMITED_COMMANDS)
• Tool Description: TeammateTool - Updated UI notification description: now shows "a brief notification with the sender's name" instead of "Queued teammate messages" when messages are waiting

2.1.22

_{No changes to the system prompts in v2.1.22.}

2.1.21

+442 tokens

• NEW: System Prompt: Accessing past sessions - Instructions for searching past session data including memory summaries and transcript logs
• Tool Description: TeammateTool - Added guidance to prefer tasks in ID order (lowest ID first) when multiple tasks are available, as earlier tasks often set up context for later ones

2.1.20

-1,928 tokens

• NEW: System Prompt: Doing tasks - Instructions for performing software engineering tasks
• NEW: System Prompt: Task management - Instructions for using task management tools
• NEW: System Prompt: Tone and style - Guidelines for communication tone and response style
• NEW: System Prompt: Tool usage policy - Policies and guidelines for tool usage
• NEW: Tool Description: SendMessageTool - Tool for sending messages to teammates and handling protocol requests/responses in a swarm
• NEW: Tool Description: EnterPlanMode (ambiguous tasks) - Tool for entering plan mode when task has ambiguity
• REMOVED: System Prompt: Censoring assistance with malicious activities - Guidelines for assisting with authorized security testing
• REMOVED: System Reminder: Queued command (prompt) - Queued user message to address (prompt variant)
• REMOVED: System Reminder: Queued command - Queued user message to address
• REMOVED: System Reminder: Session memory - Past session summaries that may be relevant
• System Prompt: Main system prompt - Massively reduced from 2896 to 269 tokens; most content extracted into separate, focused system prompts (Doing tasks, Task management, Tone and style, Tool usage policy)
• Agent Prompt: Session title and branch generation - Changed output format from XML-style tags to JSON object with "title" and "branch" fields
• Agent Prompt: Bash command prefix detection - Changed from smart quotes to standard quotes
• Tool Description: TeammateTool - Removed protocol operations (approvePlan, rejectPlan, requestShutdown, approveShutdown, rejectShutdown, write, broadcast) and simplified to core team management operations
• Tool Description: TeammateTool operation parameter - Renamed from "TeammateTool's operation parameter" and condensed from 173 to 72 tokens
• Tool Description: Edit - Simplified by removing explicit read tool requirement from usage notes
• Tool Description: Write - Simplified by removing explicit read tool requirement from usage notes
• Tool Description: Bash (Git commit and PR creation instructions) - Added guidance to keep PR titles short (under 70 characters) and use description/body for details
• System Prompt: Tool execution denied - Streamlined wording
• Agent Prompt: Conversation summarization with additional instructions - Merged into base "Conversation summarization" prompt; additional instructions now added conditionally via code rather than as separate prompt string
• Agent Prompt: Prompt Hook execution - Shortened from 485 to 263 characters; removed verbose JSON formatting instructions

2.1.19

+182 tokens

• NEW: System Prompt: Tool Use Summary Generation - Prompt for generating summaries of tool usage
• REMOVED: Tool Description: TaskList - Description for the TaskList tool, which lists all tasks in the task list
• Agent Prompt: Status line setup - Added agent information (name and type) to the statusLine structure for agents started with --agent flag
• Tool Description: Skill - Updated wording from "Only use skills listed in 'Available skills' below" to "Skills listed below are available for invocation"
• Tool Description: TaskCreate - Added template variables for conditional notes and restructured task assignment instructions
• Tool Description: ToolSearch - Major expansion: reordered query modes (keyword search now first), clarified that both modes load tools immediately, added required keyword syntax with + prefix, expanded examples to show redundant selection patterns to avoid

2.1.18

_{No changes to the system prompts in v2.1.18.}

2.1.17

_{No changes to the system prompts in v2.1.17.}

2.1.16

+7,114 tokens

• NEW: Agent Prompt: Exit plan mode with swarm - System reminder for when ExitPlanMode is called with isSwarm set to true
• NEW: System Prompt: Teammate Communication - System prompt for teammate communication in swarm
• NEW: System Prompt: Tool execution denied - System prompt for when tool execution is denied
• NEW: System Reminder: Delegate mode prompt - System reminder for delegate mode
• NEW: System Reminder: Plan mode is active (5-phase) - Enhanced plan mode system reminder with parallel exploration and multi-agent planning
• NEW: System Reminder: Plan mode is active (iterative) - Iterative plan mode system reminder for main agent with user interviewing workflow
• NEW: System Reminder: Team Coordination - System reminder for team coordination
• NEW: System Reminder: Team Shutdown - System reminder for team shutdown
• NEW: Tool Description: TaskCreate - Tool description for TaskCreate tool
• NEW: Tool Description: TaskList - Description for the TaskList tool, which lists all tasks in the task list
• NEW: Tool Description: TeammateTool's operation parameter - Tool description for the TeammateTool's operation parameter
• NEW: Tool Description: TeammateTool - Tool description for the TeammateTool
• NEW: Tool Parameter: Computer action for Computer tool - Action parameter options for the Chrome browser computer tool (includes hover action and other actions)
• Agent Prompt: /security-review slash command - Renamed from "/security-review slash" for consistency
• System Prompt: Learning mode - Description metadata updated (removed "System Prompt:" prefix)
• System Reminder: Plan mode is active (subagent) - Renamed from "Plan mode is active (for subagents)" for consistency
• Tool Description: Bash (Git commit and PR creation instructions) - Added guidance to avoid using --no-edit flag with git rebase commands, as it is not a valid option for git rebase
• Tool Description: Write - Description clarified from "creating/overwriting writing individual files" to "for creating and overwriting individual files"

2.1.15

+183 tokens

• Tool Description: Bash (Git commit and PR creation instructions) - expanded Git Safety Protocol with specific list of destructive commands and added detailed explanation about potential data loss; clarified that --amend should be avoided after pre-commit hook failures; added guidance to prefer staging specific files by name rather than using "git add -A" or "git add ." to avoid accidentally including sensitive files (.env, credentials) or large binaries
• Tool Description: Task - updated background agent output retrieval instructions from using TaskOutput tool to reading output_file path with Read tool or using Bash with tail to see recent output; added conditional note about run_in_background, name, team_name, and mode parameters not being available in certain contexts

2.1.14

-1,153 tokens

• NEW: Agent Prompt: Prompt Suggestion Generator (Stated Intent) - instructions for generating prompt suggestions based on user's explicitly stated next steps
• NEW: Tool Description: ToolSearch - renamed from MCPSearch; tool description for loading and searching deferred tools before use
• REMOVED: Tool Description: ExitPlanMode v2 and ExitPlanMode v2 (security notes) - consolidated functionality into base ExitPlanMode
• REMOVED: Tool Description: MCPSearch and MCPSearch (with available tools) - replaced by ToolSearch
• Tool Description: ExitPlanMode - added "How This Tool Works" section explaining plan file workflow; clarified that tool reads from plan file rather than taking plan as parameter; simplified "Handling Ambiguity in Plans" section to "Before Using This Tool" with clearer guidance on when to use AskUserQuestion; removed variable references in favor of direct tool names
• Tool Description: Bash - clarified session persistence behavior: "Working directory persists between commands; shell state (everything else) does not. The shell environment is initialized from the user's profile (bash or zsh)"
• Tool Description: WebFetch - added guidance to prefer gh CLI via Bash for GitHub URLs (e.g., gh pr view, gh issue view, gh api)
• System Prompt: Chrome browser MCP tools - updated to reference ToolSearch instead of MCPSearch

2.1.12

_{No changes to the system prompts in v2.1.12.}

2.1.11

_{No changes to the system prompts in v2.1.11.}

2.1.10

-118 tokens

• Agent Prompt: Session title and branch generation - added explicit instruction to use sentence case for titles (capitalize only the first word and proper nouns), not Title Case
• Tool Description: Bash (Git commit and PR creation instructions) - simplified git commit --amend guidance by removing complex conditional rules (5 conditions about when amending is allowed); replaced with simpler CRITICAL directive to always create new commits and never use --amend unless user explicitly requests it; removed reference to "amend rules above" in pre-commit hook failure step

2.1.9

+963 tokens

• NEW: System Prompt: Hooks Configuration - system prompt for hooks configuration, used for Claude Code config skill
• REMOVED: System Prompt: Autonomous agent (standalone) - standalone autonomous agent mode prompt without system context prefix
• REMOVED: System Prompt: Autonomous agent (with context) - autonomous agent mode prompt prefixed with main system prompt
• System Prompt: Main system prompt - renamed "Planning without timelines" section to "No time estimates"; expanded guidance to explicitly prohibit giving time estimates for Claude's own work (e.g., "this will take me a few minutes," "should be done in about 5 minutes," "this is a quick fix") in addition to existing prohibition on suggesting project timelines; added emphasis that users should judge timing themselves

2.1.8

-101 tokens

• System Reminder: Plan mode is active - extracted inline plan file info section into separate, new section; converted hardcoded phase numbers (2-5) to dynamic variables for conditional user interview phase; replaced user interview guidance with a new phase explicitly for user interview
• Tool Description: WebSearch - updated year example to use the current year instead of hardcoded year value

2.1.7

+74 tokens

• NEW: Tool Description: ExitPlanMode v2 (security notes) - security guidelines for scoping permissions when using the ExitPlanMode tool
• System Prompt: Claude in Chrome browser automation - added IMPORTANT emphasis to alerts and dialogs warning about blocking browser events
• System Reminder: Plan mode is active - clarified that plan approval questions (e.g., "Is this plan okay?", "Should I proceed?") must use ExitPlanMode tool, not text questions or AskUserQuestion; expanded guidance distinguishing when to use AskUserQuestion (only for requirements/approach clarification) vs ExitPlanMode (for plan approval)
• Tool Description: ExitPlanMode v2 - extracted detailed security and permission scoping guidelines to new PERMISSION_SCOPING_GUIDELINES variable; replaced inline scoping instructions with variable reference; updated tool name references from ASK_USER_QUESTION_TOOL_NAME to PERMISSION_SCOPING_GUIDELINES in "Before Using This Tool" and "Important" sections

2.1.6

+742 tokens

• NEW: System Prompt: Autonomous agent (standalone) - standalone autonomous agent mode prompt without system context prefix
• NEW: System Prompt: Autonomous agent (with context) - autonomous agent mode prompt prefixed with main system prompt
• REMOVED: Agent Prompt: Bash command explainer - removed in favor of integrated bash command explanation
• Agent Prompt: Status line setup - added pre-calculated used_percentage and remaining_percentage fields to context_window object; updated examples to use simpler syntax for displaying context usage
• Agent Prompt: Claude guide agent - fixed incorrect variable references in documentation source URLs and tool names throughout approach steps
• Agent Prompt: Session Search Assistant - simplified introduction text
• Tool Description: Bash - refactored variable usage, replacing BASH_TOOL_NAME with RUN_IN_BACKGROUND_NOTE
• Tool Description: ExitPlanMode v2 - added comprehensive "Requesting Permissions (allowedPrompts)" section with guidelines for requesting prompt-based permissions for bash commands, including security-conscious scoping practices

2.1.5

-24 tokens

• Tool Description: Bash - replaced GIT_COMMIT_AND_PR_CREATION_INSTRUCTION variable with BASH_TOOL_NAME variable in metadata
• Tool Description: Task - reordered variable declarations, moving IS_TRUTHY_FN and PROCESS_OBJECT earlier in the list

2.1.4

-19 tokens

• Tool Description: Bash - moved run_in_background parameter documentation to new BASH_BACKGROUND_TASK_NOTES_FN function variable; added BASH_TOOL_EXTRA_NOTES() placeholder; fixed misaligned variable references in dedicated tools list (file search, content search, read files, edit files, write files were each referencing the wrong tool name)
• Tool Description: Task - added IS_TRUTHY_FN and PROCESS_OBJECT variables for conditional rendering; background task instructions now conditionally rendered based on CLAUDE_CODE_DISABLE_BACKGROUND_TASKS environment variable

2.1.3

+1,047 tokens

• NEW: Agent Prompt: Bash command description writer - instructions for generating clear, concise command descriptions in active voice for bash commands
• NEW: Agent Prompt: Bash command explainer - instructions for explaining bash commands with reasoning, risk assessment, and risk level classification
• NEW: Agent Prompt: Remember skill - system prompt for the /remember skill that reviews session memories and updates CLAUDE.local.md with recurring patterns and learnings
• REMOVED: Agent Prompt: Bash command risk classifier - replaced with the new bash command explainer agent
• Tool Description: Bash - updated description field instructions to provide more context for complex commands (piped commands, obscure flags, etc.) while keeping simple commands brief
• Tool Description: Bash (Git commit and PR creation instructions) - added warning to never use git status -uall flag as it can cause memory issues on large repos
• Tool Description: Task - updated internal variable references and improved background agent monitoring instructions

2.1.2

-374 tokens

• NEW: Agent Prompt: Bash command risk classifier - classifies shell commands by risk level (LOW/MEDIUM/HIGH) to determine permission requirements
• REMOVED: Agent Prompt: Bash output summarization - system prompt for determining whether bash command output should be summarized
• REMOVED: Agent Prompt: Plan verification agent - agent prompt for verifying that the main agent correctly executed a plan

2.1.1

_{No changes to the system prompts in v2.1.1.}

2.1.0

_{No changes to the system prompts in v2.1.0.}

2.0.77

-128 tokens

• NEW: Agent Prompt: Task tool (extra notes) - additional notes for Task tool usage (absolute paths, no emojis, no colons before tool calls)
• NEW: Agent Prompt: Command execution specialist - agent prompt for command execution focusing on bash commands
• NEW: Agent Prompt: Plan verification agent - agent prompt for verifying that the main agent correctly executed a plan
• NEW: System Prompt: Chrome browser MCP tools - instructions for loading Chrome browser MCP tools via MCPSearch before use
• REMOVED: Data: GitHub Actions workflow for automated code review (beta) - GitHub Actions workflow template for automated Claude Code reviews
• REMOVED: Tool Description: Task (async return note) - message returned to the model when a subagent launched successfully
• Agent Prompt: Agent creation architect - updated examples from code-reviewer to test-runner agent
• Agent Prompt: Status line setup - added vim mode information (INSERT/NORMAL) to available session data
• System Prompt: Main system prompt - removed "Looking up your own documentation" section with claude-guide agent instructions; added instruction about not using colons before tool calls; numerous variable reference corrections throughout
• System Reminder: Plan mode is active - added verification section requirement in plan files; clarified that AskUserQuestion is for clarifying requirements, not for plan approval
• Tool Description: AskUserQuestion - added plan mode note clarifying this tool is for clarifying requirements before finalizing plans, not for requesting plan approval
• Tool Description: Bash - updated run_in_background parameter description to clarify notification behavior
• Tool Description: Bash (Git commit and PR creation instructions) - simplified parallel command instructions; removed "You can call multiple tools in a single response" preambles; added GIT_COMMAND_PARALLEL_NOTE variable
• Tool Description: ExitPlanMode v2 - reorganized "Handling Ambiguity in Plans" section into "Before Using This Tool"; added clarification that this tool inherently requests user approval
• Tool Description: Skill - reformatted instructions removing XML wrapper tags; added check for already-loaded skills
• Tool Description: Task - updated background agent output retrieval instructions (now uses output_file with Read/Write tools instead of AgentOutputTool); removed pro-only parallel launch note; updated example agent from code-reviewer to test-runner

2.0.76

_{No changes to the system prompts in v2.0.76.}

2.0.75

-183 tokens

• REMOVED: Agent Prompt: Task tool (extra notes) - additional notes for Task tool usage (absolute paths, no emojis, no colons before tool calls)
• Main system prompt - removed instruction about not using colons before tool calls

2.0.74

-1693 tokens

• NEW: Agent Prompt: Session Search Assistant - agent prompt for finding relevant sessions based on user queries, with priority matching on tags, titles, branches, summaries, and transcripts
• REMOVED: Agent Prompt: Exit plan mode with swarm - instructions for launching swarm teammates when ExitPlanMode is called with isSwarm set to true
• REMOVED: System Reminder: Delegate mode prompt - system reminder for delegate mode with restricted tool access
• REMOVED: System Reminder: Team Coordination - system reminder for team coordination with teammate identity and resources
• REMOVED: Tool Description: TaskList - tool for listing all tasks in the task list
• REMOVED: Tool Description: TaskUpdate - tool for updating task status and adding comments
• REMOVED: Tool Description: TeammateTool's operation parameter - description of TeammateTool operations
• Tool Description: Bash (Git commit and PR creation instructions) - simplified pre-commit hook failure handling; removed detailed amend rules for auto-modified files, now just advises to fix and create a new commit

2.0.73

+91 tokens

• NEW: Agent Prompt: Prompt Suggestion Generator v2 - V2 instructions for generating prompt suggestions, focusing on predicting what the user would naturally type next
• REMOVED: Tool Description: SlashCommand - functionality merged into Skill tool
• Tool Description: Skill - added guidance for invoking skills via slash command syntax (e.g., "/commit"), added args parameter for passing arguments to skills
• Tool Description: LSP - added call hierarchy operations (prepareCallHierarchy, incomingCalls, outgoingCalls)
• Tool Description: TeammateTool's operation parameter - added team discovery and join operations (discoverTeams, requestJoin, approveJoin, rejectJoin)
• Main system prompt - terminology update: "slash commands" → "skills"; removed duplicate "complete tasks fully" instruction
• Agent Prompt: Claude guide agent - terminology update: "slash commands" → "skills"

2.0.72

+47 tokens

• Tool Description: Task - Added usage note requiring a short description (3-5 words) summarizing what the agent will do
• Tool Description: TaskUpdate - Added "Staleness" section with instruction to read task's latest state using TaskGet before updating

2.0.71

+948 tokens

• NEW: System Prompt: Claude in Chrome browser automation - instructions for using Claude in Chrome browser automation tools effectively
• NEW: Tool Description: Computer - main description for the Chrome browser computer automation tool
• NEW: Tool Description: Computer action parameter - description for the computer action parameter used with the Computer tool
• Tool Description: Bash (Git commit and PR creation instructions) - expanded amend safety rules with explicit conditions: (1) user requested OR hook auto-modified files, (2) HEAD was created by you, (3) not yet pushed; added critical warnings for rejected hooks and already-pushed commits; clarified hook failure vs auto-modification handling
• REMOVED: Agent Prompt: Prompt suggestion generator
• REMOVED: System Reminder: MCP CLI large output

2.0.70

+2283 tokens

• NEW: Agent Prompt: /review-pr slash command - system prompt for reviewing GitHub PRs with code analysis
• NEW: Agent Prompt: Task tool (extra notes) - additional notes for Task tool usage (absolute paths, no emojis, no colons before tool calls)
• NEW: System Reminder: Delegate mode prompt - system reminder for delegate mode with restricted tool access
• NEW: Tool Description: MCPSearch - tool for searching/selecting MCP tools before use (mandatory prerequisite)
• NEW: Tool Description: MCPSearch (with available tools) - MCPSearch variant that lists available MCP tools
• NEW: Tool Description: TaskList - tool for listing all tasks in the task list
• NEW: Tool Description: TeammateTool's operation parameter - description of TeammateTool operations (spawn, assignTask, claimTask, shutdown, etc.)
• Agent Prompt: Status line setup - Added current_usage object to context_window schema with input_tokens, output_tokens, cache_creation_input_tokens, and cache_read_input_tokens fields; added example for calculating context window percentage
• Tool Description: TaskUpdate - Added instruction to call TaskList after resolving a task; added note about teammates adding comments while working

2.0.69

_{No changes to the system prompts in v2.0.69.}

2.0.68

-191 tokens

• Main system prompt: Added instruction to not use colons before tool calls ("Let me read the file." instead of "Let me read the file:")
• REMOVED: Agent Prompt: /review-pr slash command

2.0.67

_{No changes to the system prompts in v2.0.67.}

2.0.66

+172 tokens

• NEW: System Prompt: Scratchpad directory - instructions for using a dedicated session-specific scratchpad directory for temporary files instead of /tmp

2.0.65

+97 tokens

• Agent Prompt: Status line setup - Added context_window object to status line data schema with total_input_tokens, total_output_tokens, and context_window_size fields
• LSP tool: Added goToImplementation operation; changed line/character documentation from 0-indexed to 1-based

2.0.64

_{No changes to the system prompts in v2.0.64.}

2.0.63

+10 tokens

• Main system prompt: Added BUILD_TIME to config variables interpolation

2.0.62

+381 tokens

• NEW: AskUserQuestion tool description - includes guidance on recommending options by adding "(Recommended)" to labels
• Main system prompt: Added instruction to complete tasks fully without stopping mid-task or claiming context limits prevent completion
• EnterPlanMode tool: Major rewrite encouraging proactive use for non-trivial tasks; expanded "when to use" examples including new features and code modifications; shifted guidance from "err on implementation" to "err on planning"
• Skill tool: Added blocking requirement to invoke skill tool immediately as first action when relevant, before generating any other response
• Task tool: Added resume parameter documentation for continuing agents with preserved context; clarified agent ID return for follow-up work
• WebFetch tool: Simplified MCP tool preference note (removed "All MCP-provided tools start with mcp__")

2.0.61

_{No changes to the system prompts in v2.0.61.}

2.0.60

+1339 tokens

• NEW: System Reminder: Team Coordination - instructions for team-based multi-agent workflows with team config, task list paths, and teammate messaging
• NEW: Agent Prompt: Exit plan mode with swarm - instructions for launching worker swarms when ExitPlanMode is called with isSwarm enabled
• Agent Prompt: Claude Code guide agent → renamed to Claude guide agent with expanded scope covering Claude Code, Claude Agent SDK, and Claude API (formerly Anthropic API)
• Task tool: Added run_in_background parameter documentation and TaskOutput tool usage for retrieving background agent results
• TaskUpdate tool: Major expansion with task ownership requirements, team coordination, claiming tasks, and detailed field documentation
• WebFetch tool: Added conditional instructions based on trusted domain status (simpler instructions for trusted domains)
• REMOVED: System Prompt: whenToUse note for claude-code-guide subagent (functionality merged into updated guide agent)

2.0.59

+140 tokens

• NEW: Added new TaskUpdate tool which allows Claude to update the task list.

2.0.58

+21 tokens

• Session notes template: Added new "Current State" section for tracking active work and pending tasks
• Session notes template: Renamed "User Corrections / Mistakes" to "Errors & Corrections" with expanded description
• Session notes instructions: Added emphasis on updating "Current State" for continuity after compaction
• Session notes instructions: Removed instruction about not repeating past session summaries
• Session notes instructions: Fixed markdown header reference ('##' → '#')
• Documentation URL: Changed from docs.claude.com/s/claude-code to code.claude.com/docs/en/overview
• GitHub Action templates: Updated CLI reference URL to code.claude.com/docs/en/cli-reference

2.0.57

_{No changes to the system prompts in v2.0.57.}

2.0.56

-134 tokens

• Reinforced note about using the current year in the WebSearch tool description
• Added a note to the main system prompt instructing Claude to never include time estimates when presenting options or plans.
• Strengthened and elaborated "plan mode is active" system reminder
• Encouraged the Explore subagent to be more tool-call-efficient and token-efficient
• Added an instruction to "Read any files provided to you in the initial prompt" to the Plan subagent
• Changed the theme of the prompt suggestion generator's prompt from "predict what the user will type next" to "suggest what Claude could help with"
• Stopped directing the user to open a GH an on the Claude Code repo via /feedback when the claude-code-guide subagent is at a loss
• Removed the old plan mode's system reminder

2.0.55

+121 tokens

• NEW: Added Agent Prompt: Suggested Prompt Generator for suggesting a followup propmt after Claude response. Requires tweakcc to enable the functionality in Claude Code: run npx tweakcc@latest --apply and then claude and then send a message.
• Modified interpolated formatting code in mcp-cli prompt

2.0.54

+128 tokens

• Multi-Agent Planning Note: Added a note discouraging overuse of multiple plan agents: If the task is simple, you should try to use the minimum number of agents necessary (usually just 1)
• Added a similar longer note to the "Plan mode is active" system reminder

2.0.53

_{No changes to the system prompts in v2.0.53.}

2.0.52

+42 tokens

• Add a 4th note to the procedure steps in the Plan Mode Re-entry System Prompt: "Continue on with the plan process and most importantly you should always edit the plan file one way or the other before calling ExitPlanMode."

2.0.51

+906 tokens

• NEW: Prompt for the new EnterPlanMode tool.
• NEW: Prompt for agent hooks.

2.0.50

+465 tokens

• NEW: System reminder sent when an mcp-cli read or mcp-cli call output is longer than the MAX_MCP_OUTPUT_TOKENS environment variable (defaults to 25000)
• WebSearch tool description: Added a "CRITICAL REQUIREMENT" to include a "Sources:" section whenever performing a web search.
• Session notes template: Added a "Key results" section including "specific outputs" such as "an answer to question, a table, or other document."

2.0.49

• Explore & Plan agents:
  • Enhanced READ-ONLY restrictions with explicit bulleted list of prohibited operations
  • Added note that file editing tools are not available
  • Reformatted Bash tool restrictions for clarity

2.0.48 – This version does not exist.

2.0.47

• NEW: Agent prompt: Multi-Agent Planning Note - instructions for multi-agent planning when CLAUDE_CODE_PLAN_V2_AGENT_COUNT > 1
• NEW: System reminder: Plan mode re-entry - sent when user re-enters Plan mode after exiting
• Main system prompt: Added "NEVER propose changes to code you haven't read" instruction
• Main system prompt: Added comprehensive "Avoid over-engineering" section with guidelines on simplicity
• Enhanced plan mode reminder: Refactored variable names and simplified structure
• Enhanced plan mode reminder: Fixed typo "Syntehsize" → "Synthesize", "alwasy" → "always"

2.0.46

_{No changes to the system prompts in v2.0.46.}

2.0.45

• NEW: Agent prompt: Claude Code guide agent for helping users with Claude Code and Agent SDK
• NEW: Agent prompt: Session title and branch generation (replaces session title generation)
• NEW: System prompt: whenToUse note for claude-code-guide subagent
• Main system prompt: Updated to use Task tool with claude-code-guide subagent instead of WebFetch for documentation lookup
• Enhanced plan mode reminder: Added parallel exploration support with PLAN_V2_EXPLORE_AGENT_COUNT
• REMOVED: Agent prompt: Session title generation (replaced by session title and branch generation)

2.0.44

_{No changes to the system prompts in v2.0.44.}

2.0.43

• NEW: Tool description: ExitPlanMode v2
• NEW: System reminder: Plan mode is active (for subagents)
• Main system prompt: Added "Planning without timelines" section
• Main system prompt: Added instruction to avoid backwards-compatibility hacks
• Enhanced plan mode reminder: Major restructuring with plan file support and variable updates

2.0.42

_{No changes to the system prompts in v2.0.42.}

2.0.41

• NEW: Agent prompt: Plan mode (enhanced)
• NEW: System reminder: Plan mode is active (enhanced)
• Explore agent: Strengthened READ-ONLY restrictions with explicit forbidden commands
• Prompt Hook execution: Fixed JSON format (added quotes around keys)
• Main system prompt: Added FEEDBACK_CHANNEL variable

2.0.40 – This version does not exist.

2.0.39 – This version does not exist.

2.0.38 – This version does not exist.

2.0.37

• NEW: Agent prompt: Prompt Hook execution
• Main system prompt: Changed isCodingRelated to keepCodingInstructions

2.0.36

• MCP CLI: Added mcp-cli read command for reading resources
• Main system prompt: Removed empty bullet point in "Doing tasks" section
• Skill tool: Updated examples to use skill: instead of command:
• SlashCommand tool: Removed "Intent Matching" section, simplified formatting

2.0.35

_{No changes to the system prompts in v2.0.35.}

2.0.34

• NEW: System prompt: MCP CLI instructions
• Main system prompt: Added "Asking questions as you work" section with ASKUSERQUESTION_TOOL_NAME
• Task tool: Added note about agents with "access to current context"
• Bash sandbox note: Added CONDITIONAL_NEWLINE_IF_SANDBOX_ENABLED variable

2.0.33

• Main system prompt: Removed extra blank lines

2.0.32

_{No changes to the system prompts in v2.0.32.}

2.0.31

_{No changes to the system prompts in v2.0.31.}

2.0.30

• NEW: Agent prompt: Update Magic Docs
• NEW: Tool description: LSP
• Main system prompt: Added security warning for OWASP top 10 vulnerabilities
• Plan mode reminder: Clarified AskUserQuestion tool usage
• ExitPlanMode tool: Added "Handling Ambiguity in Plans" section with example
• Bash sandbox note: Removed RESTRICTIONS_LIST and temp file instructions
• REMOVED: Agent prompt: Output style creation

2.0.29

• Task tool: Re-added runsInBackground property and AgentOutputTool usage note

2.0.28

• Main system prompt: Added "Avoid using over-the-top validation or excessive praise" guidance
• Plan mode reminder: Added NOTE_ABOUT_USING_PLAN_SUBAGENT variable
• Task tool: Removed runsInBackground property and background agent instructions

2.0.27

_{No changes to the system prompts in v2.0.27.}

2.0.26

• Bash sandbox note: Renamed dangerouslyOverrideSandbox to dangerouslyDisableSandbox

2.0.25

• Session notes template: Added "Session Title" section
• Session notes update instructions: Enhanced with multi-edit support and clearer structure preservation rules
• Bash tool: Removed note about not using run_in_background with 'sleep'

2.0.24

• NEW: Tool description: Bash (sandbox note)

2.0.23 – This version does not exist.

2.0.22

_{No changes to the system prompts in v2.0.22.}

2.0.21

• Plan mode reminder: Added NOTE_ABOUT_AskUserQuestion variable
• ExitPlanMode tool: Added NOTE_ABOUT_AskUserQuestion variables

2.0.20

• NEW: Tool description: Skill

2.0.19

_{No changes to the system prompts in v2.0.19.}

2.0.18

• Explore agent: Changed "Be thorough" guideline to "Adapt your search approach based on the thoroughness level specified by the caller"

2.0.17

• Main system prompt: Added critical instruction to use Task tool with Explore subagent for codebase exploration
• Main system prompt: Added examples for when to use Explore agent vs direct search
• Main system prompt: Added new variables (EXPLORE_AGENT, GLOB_TOOL_NAME, GREP_TOOL_NAME)

2.0.16 – This version does not exist.

2.0.15

• Updated ExitPlanMode tool description formatting (added "Examples" header)
• Minor punctuation fix in plan mode reminder

2.0.14

Initial comprehensive system prompts collection.

Agent Prompts:

• Agent creation architect
• Bash command file path extraction
• Bash command prefix detection
• Bash output summarization
• Claude.md creation
• Conversation summarization (with additional instructions variant)
• Explore agent
• Output style creation
• PR comments slash command
• Review PR slash command
• Security review slash command
• Session notes template and update instructions
• Session title generation
• Status line setup
• Task tool agent
• User sentiment analysis
• WebFetch summarizer

GitHub Integration:

• GitHub Actions workflow for @claude mentions
• GitHub Actions workflow for automated code review (beta)
• GitHub App installation PR description

System Prompts:

• Main system prompt
• Learning mode and learning mode insights
• Plan mode is active reminder

Tool Descriptions:

• Bash (with git commit and PR creation instructions)
• Edit
• ExitPlanMode
• Glob
• Grep
• NotebookEdit
• Read file
• SlashCommand
• Task (with async return note)
• TodoWrite
• WebFetch
• WebSearch
• Write