Claude Code v2.1.288 Ships Resume Fixes, Ctrl+C Draft Recovery, and /code-review --max-findings

Claude Code v2.1.288 is a bug-fix release, but the fixes land on the parts of the CLI that hurt most: session resume, mid-turn timeouts, and plugin loading. If you've been burned by --resume losing context, this version is worth pulling.

\n\n

Session resume actually works now

\n

Several fixes target resume reliability, which had a cluster of overlapping failure modes:

\n

\n
• --resume no longer drops files and other context that a compaction had just restored.
\n
• A resumed session now saves the last response of a turn — previously the next --resume showed the prompt unanswered.
\n
• Resume won't load a transcript cut short when the same session rewrote the file during the load.
\n
• Resuming a conversation started on 2.1.286 or earlier no longer drops the model's earlier thinking.
\n

\n\n

Prompt and timeout behavior

\n

If you clear a prompt with Ctrl+C, pressing Up on the empty prompt now brings the draft back — including pasted text and images. Mid-response API timeouts no longer fail the turn: non-interactive sessions and subagents continue from the partial response, and thinking-only responses are retried.

\n

A separate fix: long conversations that reported zero token usage on the last reply now auto-compact instead of failing with \"Prompt is too long\".

\n\n

New flags and keybindings

\n

\n
• /code-review --max-findings <n>|all — report more or fewer findings than the usual limit. The choice is reused until you pass --max-findings default.
\n
• Ctrl+F finds a session by name; Alt+↑/↓ jumps between groups in the agents view. Both, plus rename, can be rebound in keybindings.json.
\n
• Mods get $.ui.selection(), returning the last selected text in fullscreen mode and, when the selection lies within one transcript row, that row.
\n

\n\n

Plugins and cloud sessions

\n

Plugin fixes are extensive: LSP servers no longer receive literal ${user_config.*} and ${CLAUDE_PLUGIN_ROOT} placeholders in initializationOptions and settings; git-subdir installs no longer fail or cache an incomplete plugin on git before 2.39 (e.g. Ubuntu 22.04's 2.34); and plugins loaded with --plugin-dir now show \"Configure options\" in /plugin.

\n

For cloud sessions without the GitHub CLI, a built-in gh api is now available. Gateways that reject structured outputs (Mantle, some proxies) can set CLAUDE_CODE_DISABLE_STRUCTURED_OUTPUTS to turn them off — this fixes session titles, memory recall, and prompt hooks failing behind those gateways.

\n\n

Permissions and sandboxing

\n

Sandboxed heredocs with an unquoted delimiter (python3 <<EOF) no longer ask for approval on every run under sandbox auto-allow when the body holds only plain text and simple $VAR references. The Bash permission check now prompts before a BASHPID assignment the shell would evaluate as arithmetic, instead of silently allowing it. Auto mode denial messages no longer point at a Bash permission rule when the blocked tool wasn't Bash.

\n

Full release notes also cover MCP OAuth re-authentication prompts, screen reader announcements for permission mode changes, OpenTelemetry span fixes, and Cowork cloud session prompt suggestions.

\n\n