Claude Code 2.1.260: Diff Panel, /reload-plugins, Fable 5.1 Fixes

Anthropic's Claude Code CLI updates to v2.1.260, adding a visual diff panel, expanding headless session commands, and fixing a batch of permission, caching, and model-switching bugs that have been tripping up developers.

New Features and Commands

• Diff panel: Opens beside the conversation in fullscreen mode, showing uncommitted changes as Claude edits. Toggle it with /diff.
• /reload-plugins: Now available in headless sessions (via -p and Agent SDK), so it appears in Claude Code Desktop and SDK command lists.
• Text form of /advisor: /advisor, /advisor <model>, /advisor off—for desktop app, Remote Control, and other headless sessions.
• OIDC scope_on_refresh: Added to the Claude apps gateway for identity providers that return an id_token on refresh only when requested again.
• New desktop policy keys: Support for userPluginMarketplacesEnabled and userPluginUploadsEnabled.

Notable Fixes

• Permission paths with parentheses: Fixed rules being dropped, which left read-only folders writable.
• Invalid regex in file permission rules: A single rule with an uncompilable pattern now guards the literal path instead of crashing all edits.
• Bash auto-approval bypass: zsh commands hiding command substitution in REPORTTIME, REPORTMEMORY, or DIRSTACKSIZE assignments now prompt for approval.
• Fable 5.1 context window: Agents pinned via ANTHROPIC_DEFAULT_FABLE_MODEL sometimes ignored the [1m] tag and ran with a 200K context window—now fixed.
• Fable 5.1 prompt caching: Context after tool results was re-sent uncached; caching now covers it.
• Model switching: Stuck after a plugin hook load failure or when an org-managed plugin's marketplace couldn't load; now re-checks each time and names the cause.
• SDK MCP servers: Desktop connectors sometimes missing from first turn; they now appear immediately.
• /rewind reliability: No more false success reports and stale file-read tracking after rewinds.
• Terminal rendering: Flags and joined emoji no longer split across lines or leave stale text.

Also fixed: Bedrock's local issuer certificate error when root CA is only in OS store, permissions.blockReadsOutsideWorkingDirectories hiding git config on macOS, managed settings not loading for Enterprise/Team users with leftover API keys, and Remote Control accepting invalid model picks.