一年，
254 次更新 One Year,
254 Updates

"Task 工具从这天起有了「手」——Claude Code 第一次可以自己写文件、跑命令。" "From this release on, the Task tool has hands — Claude Code can write files and run commands on its own."

"这不是一次功能上新，而是 v1.0 之前最后一周的管道活。" "Not a feature drop — the last week of plumbing before v1.0."

"v1.0 前一天，旧的默认和旧的习惯一起被清掉。" "The day before v1.0, the old defaults and the old habits get swept away together."

"三个月，从 research preview 到 v1.0——以及说出「一般可用」这四个字的勇气。" "Three months from research preview to v1.0 — and the nerve to finally say "generally available.""

"/context 终于走进 Bedrock 和 Vertex，企业部署的最后一道墙拆掉。" "/context finally reaches Bedrock and Vertex — the last wall around enterprise deploys comes down."

"原生 VS Code 扩展、/rewind、SDK 改名同日落地——一次塞进去的三件大事。" "Native VS Code, /rewind, and an SDK rename — three big moves crammed into one day."

"v2.0 三天后，IME 误发、OAuth 401、SDK 重放——三个最尴尬的洞先补上。" "Three days post-v2.0, the three most embarrassing holes — IME mis-submits, OAuth 401s, SDK message replays — get plugged first."

"旧 .claude.json 里的四个老字段一次性下架，迁移没有缓冲期。" "Four legacy fields evicted from .claude.json in one shot — no grace period."

"改名三周后，旧 SDK 入口被直接拆走，迁移再无退路。" "Three weeks after the rename, the old SDK entrypoint is yanked — migration, no more delays."

"Nx 事件之后，dangerouslyDisableSandbox 这扇逃生门第一次能从策略层焊死。" "Post-Nx, the dangerouslyDisableSandbox escape hatch can finally be welded shut at the policy layer."

"脚本跑完了不知道该不该退？现在有一个环境变量替你做决定。" "Scripts that don't know when to leave finally get an env var to decide for them."

"长会话的内存占用一夜砍掉三分之二，每天被打字清空一次的输入框也终于不再清空。" "Long sessions cost a third of the memory they used to, and your half-typed prompt stops vanishing every time a queued command lands."

"终端里的 Claude 第一次伸手到 Chrome 标签页里。" "The Claude inside your terminal reaches out and clicks around in a Chrome tab for the first time."

"2.1 的开门第一刀打在自己身上——debug 日志会泄露 OAuth token。" "2.1 opens by patching itself — the debug log that could spill OAuth tokens, API keys, and passwords is finally sealed."

"长输出不再被截断——它们落到磁盘上，由 Claude 自己回头读完整版。" "Long outputs stop being chopped at the edge; they land on disk and Claude reads the whole thing back."

"在 home 目录点「信任」却没真的解锁 hooks 的那条沉默漏洞，今天被修掉。" "The trust dialog that said yes from your home directory but never actually unlocked hooks finally tells the truth."

"`Bash(npm *)` 原本能放过 `npm install && rm -rf .`——今天的第二个补丁堵的是这个。" "`Bash(npm *)` was quietly waving through `npm install && rm -rf .`. The day's second security patch closes that door."

"一个反斜杠加换行就能绕过权限的旧把戏，今天被堵掉——而它的孪生补丁同天就到。" "A backslash and a newline used to be enough to walk around the permission system. Today that trick dies — and its twin patch ships hours later."

"并行工具调用甩出孤儿 tool_result 的那个 bug，今天被堵上了。" "The bug where parallel tool calls spat out an orphan tool_result finally gets sealed off."

"/rewind 这次面向所有 VSCode 用户开门，对话可以拉回任意一步重走。" "/rewind opens up to every VSCode user — pull the conversation back to any step and try again."

"这不是一次换代，而是推理透明度的第一次悄然让渡。" "Not just a model bump — the first quiet handoff of reasoning transparency."

"新模型登场的同一天，团队选择先把 Agent Teams 跑不起来的洞补上。" "On the day a new model arrives, the team spends it patching the holes Agent Teams kept falling through."

"模型曾经能用一句虚构的「这条命令匹配了规则 X」给自己开闸——这条路今天被堵上。" "The model used to wave commands through by fabricating which rule they matched. That door gets nailed shut today."

"后台代理第一次有了自己的工作树，主线程不再被它们踩。" "Background agents get their own working tree for the first time — the main thread stops getting trampled."

"符号链接路径下，会话恢复时整段历史会凭空消失——今天这条路被堵上。" "Under a symlinked working directory, resumed sessions used to disappear into thin air. Not anymore."

"外部系统第一次有了官方的「钩进 Claude Code」入口。" "External systems get their first official way to reach into a Claude Code session."

"Claude Code 第一次把「用户代理决定权」让渡给模型的自动判断。" "The first time Claude Code traded user agency for model-side auto-tuning."

"云上的 `model: opus` 一直在被悄悄降级到老版本——这条路今天截住了。" "On the cloud providers, `model: opus` had been silently downgraded to older versions. Cut off today."

"1M 上下文从「按用量解锁」改成订阅默认，门槛被一脚踢平。" "1M context shifts from a metered unlock to the subscription default — the gate gets kicked over."

"Remote Control 的四个静默故障一次性按掉——这次它真的能挂在长会话上了。" "Four silent failures in Remote Control all get pinned down at once — long sessions can actually live on it now."

"一个 PreToolUse 钩子曾经能用 `"allow"` 一句话推翻企业 deny 规则——这扇门今天被焊上。" "A PreToolUse hook used to be able to override an enterprise deny rule with a single "allow". Welded shut today."

"源代码被翻了个底朝天的那一周，团队选择把每一处可滑出的边界各打一颗钉。" "The week the source got picked apart in public, the team spent it driving a nail into every boundary that could slip."

"这是 Claude Code 第一次遭遇「用户信任撤回」这类无法靠补丁收尾的问题。" "The first Claude Code incident that couldn't be resolved by a patch alone — once trust leaks, it doesn't stop on command."

"Linux sandbox 一度漏发了 seccomp helper，unix socket 拦截整个失效——今天补回来。" "The Linux sandbox had been shipping without its seccomp helper, leaving unix-socket blocking wide open. Restored today."

"这是一次从分发形态到执行信任模型的升级，标志着 Claude Code 正在向更稳固、更可控的平台形态演进。" "This is an upgrade in both delivery model and execution trust, marking Claude Code’s move toward a more durable and controllable platform shape."

"当会话稳定性和执行约束同时升级，Claude Code就从“能跑”走向“可长期托付”。" "When session reliability and execution boundaries improve together, Claude Code moves from merely working to being trustworthy over the long haul."