Claude Code 2.1.296 is a maintenance-heavy release with three changes worth checking before the next long agent run: subagents can compact earlier than the main conversation, managed hooks now enforce two blocking cases correctly, and the Read tool can accept an explicit large-file request. Anthropic published the release on October 9, 2026.
On this page
Subagents can compact on their own schedule
A custom subagent can now set autoCompactWindow in its frontmatter. The same option is available in definitions passed through --agents. That gives a subagent its own compaction threshold instead of tying it to the main conversation’s window.
The release notes do not prescribe a value or promise lower token use. The practical change is control: a long-running research or review agent can be configured to compact sooner while the parent session keeps more of its context. Teams that already maintain agent files should treat this as a per-agent setting and review it alongside the model, tools and permissions in those files.
Anthropic also added CLAUDE_CODE_WORKFLOW_SUBAGENT_MODEL. It selects one model for workflow agents while leaving other subagents on their existing choices. That is narrower than a global model override and matters when a workflow contains several repeatable steps.
Managed hooks now block the call without ending the turn
Two managed-hook bugs were fixed. A managed-settings PreToolUse hook that denies a tool call with "continue": false now refuses the call without ending the rest of the turn. Managed prompt hooks received the same correction for blocked prompts.
The release also fixes some sessions ignoring updatedMCPToolOutput returned by a managed PostToolUse hook. If an organisation uses hooks to redact or replace MCP output, that line is the one to verify after updating.
These changes apply to managed settings. They do not replace the event and exit-code rules described in the Claude Code hooks guide, and they do not prove that an existing hook policy covers every tool. The release notes describe corrected handling, not a new security boundary.
Large files require an explicit request
The Read tool gained an allow_large option. When the file exceeds the usual size limit, Claude can request the whole text in one call if the context window has room.
This is an opt-in escape hatch instead of a new default. A large generated file can still consume most of a conversation’s available context, so repository instructions should continue to point agents toward the smallest relevant files. If those instructions live in project or user memory, the global CLAUDE.md guide shows which locations Claude Code reads.
MCP and headless fixes
Claude Code 2.1.296 fixes headless sessions starting a folder’s disabled .mcp.json server or a disabled plugin MCP server after a directory change or plugin reload. It also fixes a resumed turn running again after an MCP result had already completed it when CLAUDE_CODE_RESUME_INTERRUPTED_TURN was enabled.
On Windows, stdio MCP servers now get a chance to stop cleanly: Claude Code closes stdin first, then kills the process tree only if it is still running after 300 milliseconds. PowerShell commands longer than about 1 KB can now be checked against allow rules and read-only detection up to 32 KB instead of always asking for approval.
Those are behaviour fixes, not configuration changes. Existing server definitions remain where the Claude Code MCP setup guide documents them.
Other changes to check
The release adds code to a Claude apps gateway’s managed.policies[], applying the same settings as cli to Claude Desktop’s Code tab. It also adds CLAUDE_CODE_OVERLOADED_RETRY_MAX_DELAY_MS for a longer maximum backoff on overloaded 529 responses.
Two fixes are worth noting for shared environments. Secret redaction in shared transcripts and debug logs now catches more values that follow a key without a value, including JSON inside a shell string. Edit and NotebookEdit now refuse to modify a non-UTF-8 file instead of replacing every non-ASCII character in encodings such as Windows-1252, Shift-JIS or GBK.
The full release contains many interface, plugin, gateway, Windows, cloud-session and code-review fixes. The items above are the ones most likely to change repository instructions or automation checks.
Version checked: Claude Code 2.1.296, released October 9, 2026. Source: Anthropic’s official v2.1.296 release notes.
