Chores

• docs: say when a work heartbeat does not compare its value

Features

• sandboxes: add the Helm chart, dispatcher and sandbox image for running Claude Managed Agents self-hosted sandboxes on Kubernetes
• sandboxes: publish the dispatcher, sandbox and sandbox source images and the Helm chart to Google Artifact Registry

Chores

• bump go sdk to v2.7.0

Self-hosted sandbox images

cma-sandbox carries ant 2.5.0.
These were published by hand from sandboxes-v0.1.0, so they have no GitHub build attestation.
cma-sandbox-source holds the source of the sandbox image's GPL and LGPL packages.
Install the chart with helm install cma oci://us-docker.pkg.dev/anthropic-public-registry/sandboxes/charts/cma-sandboxes --version 0.1.0 --namespace cma -f cma-values.yaml. sandboxes/kubernetes/README.md says how to write cma-values.yaml.
To pin both images, add --set image.dispatcherDigest=sha256:237ec7884552a7c077b013e489e0ffa9a2bd8b4e863c07579f722d179a052a6e --set image.sandboxDigest=sha256:d686b816635367985352f25a28801d89a1953d0b1beff347b1a6e14e77b11956.

Features

• api: add support for signing organization members out everywhere

Bug Fixes

• apply: don't report a deployment, environment, vault or memory store as changed outside this config while its updated_at hasn't moved
• apply: don't report an agent as changed outside this config when the API starts returning a new field
• client: ask the terminal for its background color only in the explore view
• client: wait for the pager to exit before reporting a failed response
• cli: make --raw-output unquote strings picked with --transform-error
• cli: report a mid-stream error by its type and message, not 200 OK

Chores

• bump go sdk to v2.7.0
• internal: tell contributors when a runtime type check belongs
• sessions: ask the terminal for its background color when the terminal view opens

Features

• api: add ids filter to list workspaces
• foundry: add Microsoft Foundry support

Bug Fixes

• apply: let only its owner read the cache in the user cache directory, and use a private cache for each run when that directory is missing or unusable
• auth: show only the length of an AWS API key in auth status

Chores

• api: update example values for pattern-constrained string fields
• bump go sdk to v2.6.0
• docs: clarify some API field descriptions
• docs: correct Claude Tag direct message notes in usage reports
• docs: update the telemetry destination headers description
• docs: use the Claude Platform name in analytics filter docs
• internal: accept changelog entry files in the changelog check

Features

• api: add GA methods for analytics, spend limits and RBAC
• api: fill RBAC and spend limit request IDs from piped output

Bug Fixes

• cli: preload the explorer by terminal height, not width

Chores

• bump go sdk to v2.5.0
• deps: build with Go 1.26.10
• docs: link Dreams model fields to the supported models section
• internal: add a section for each repository's own review rules
• internal: plainer wording in worker comments
• tests: fix flaky flag tests that shared state

Documentation

• api: show each field's own description for speed

Features

• api: add user_profile_id to External Keys and Workspaces

Bug Fixes

• client: honor ANTHROPIC_CUSTOM_HEADERS in API requests

Chores

• bump go sdk to v2.4.0
• ci: remove unused build upload steps
• docs: update example user ID in Admin API examples

Features

• api: add Claude Tag endpoints for Claude Enterprise organizations

Bug Fixes

• cli: escape terminal control sequences in rendered output

Chores

• bump go sdk to v2.3.0
• client: stop sending query params hardcoded in endpoint paths
• docs: update descriptions of the per-user usage and cost reports
• internal: check the repository by owner and public name in workflows
• internal: read the Go SDK's repo name from a CI variable
• internal: remove preview build upload from CI

Documentation

• update the README and the example request

Features

• api: add support for message threads
• api: add usage and cost reports by dimension, mark older reports legacy

Bug Fixes

• apply: print control characters in plan output, warnings and errors as visible escapes
• sessions: show the full input of MCP and custom tool calls in the --web session viewer
• sessions: show the full input of MCP and custom tool calls in the terminal view, including at its approval prompt
• sessions: show the input fields a built-in tool's layout leaves out at the terminal view's approval prompt
• sessions: in the terminal view, drop bidirectional control characters from session text, and show control and invisible characters in names and tool input as escapes such as \x1b or \u200b

Chores

• bump go sdk to v2.2.0
• ci: update the runner label for internal CI jobs
• docs: fix usage and cost report examples and ending_at docs

Features

• api: add enforcement status, actions and filter to user profiles

Chores

• bump go sdk to v2.1.0

⚠ BREAKING CHANGES

• api: add support for new API version 2026-10-21

Features

• api: add a workspace_id filter and the usage_tier scope type to list spend limits
• api: add support for new API version 2026-10-21

Chores

• bump go sdk to v2.0.0

Documentation

• api: remove outdated system role note from messages description