chore: Update CHANGELOG.md

When lifecycle labels (needs-info, needs-repro, invalid, stale, autoclose)
are applied to an issue, the author currently only sees a label change with
no explanation. They then get a closing comment days later without ever
being nudged to respond.

Add a GitHub Actions workflow that triggers on issues.labeled and runs a
new lifecycle-comment.ts script to post a comment explaining what's needed
and how long before auto-close.

Extract lifecycle config (labels, timeouts, close reasons, nudge messages)
into a shared issue-lifecycle.ts so the sweep script and comment script
stay in sync. Previously the timeouts were duplicated between the sweep
script and the comment messages.

- needs-info: asks for version, OS, error messages
- needs-repro: asks for steps to trigger the issue
- invalid: links to the Claude Code repo and Anthropic support
- stale/autoclose: explains inactivity auto-close

The script no-ops for non-lifecycle labels, so the workflow fires on every
label event and lets the script decide — single source of truth.

## Test plan

Dry-run all labels locally:
GITHUB_REPOSITORY=anthropics/claude-code LABEL=needs-info ISSUE_NUMBER=12345 bun run scripts/lifecycle-comment.ts --dry-run
GITHUB_REPOSITORY=anthropics/claude-code LABEL=needs-repro ISSUE_NUMBER=12345 bun run scripts/lifecycle-comment.ts --dry-run
GITHUB_REPOSITORY=anthropics/claude-code LABEL=invalid ISSUE_NUMBER=12345 bun run scripts/lifecycle-comment.ts --dry-run
GITHUB_REPOSITORY=anthropics/claude-code LABEL=stale ISSUE_NUMBER=12345 bun run scripts/lifecycle-comment.ts --dry-run
GITHUB_REPOSITORY=anthropics/claude-code LABEL=autoclose ISSUE_NUMBER=12345 bun run scripts/lifecycle-comment.ts --dry-run

Verified sweep.ts still works:
GITHUB_TOKEN=$(gh auth token) GITHUB_REPOSITORY_OWNER=anthropics GITHUB_REPOSITORY_NAME=claude-code bun run scripts/sweep.ts --dry-run

.github/workflows/issue-lifecycle-comment.yml

@@ -0,0 +1,27 @@
+name: "Issue Lifecycle Comment"
+
+on:
+  issues:
+    types: [labeled]
+
+permissions:
+  issues: write
+
+jobs:
+  comment:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Post lifecycle comment
+        run: bun run scripts/lifecycle-comment.ts
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          LABEL: ${{ github.event.label.name }}
+          ISSUE_NUMBER: ${{ github.event.issue.number }}

CHANGELOG.md

@@ -1,6 +1,24 @@
 # Changelog
 
-## 2.1.39
+## 2.1.44
+
+- Fixed auth refresh errors
+
+## 2.1.43
+
+- Fixed AWS auth refresh hanging indefinitely by adding a 3-minute timeout
+- Fixed spurious warnings for non-agent markdown files in `.claude/agents/` directory
+- Fixed structured-outputs beta header being sent unconditionally on Vertex/Bedrock
+
+## 2.1.42
+
+- Improved startup performance by deferring Zod schema construction
+- Improved prompt cache hit rates by moving date out of system prompt
+- Added one-time Opus 4.6 effort callout for eligible users
+- Fixed /resume showing interrupt messages as session titles
+- Fixed image dimension limit errors to suggest /compact
+
+## 2.1.41
 
 - Added guard against launching Claude Code inside another Claude Code session
 - Fixed Agent Teams using wrong model identifier for Bedrock, Vertex, and Foundry customers
@@ -10,11 +28,23 @@
 - Fixed plugin browse showing misleading "Space to Toggle" hint for already-installed plugins
 - Fixed hook blocking errors (exit code 2) not showing stderr to the user
 - Added `speed` attribute to OTel events and trace spans for fast mode visibility
-- Fixed /resume showing interrupt messages as session titles
-- Fixed Opus 4.6 launch announcement showing for Bedrock/Vertex/Foundry users
-- Improved error message for many-image dimension limit errors with /compact suggestion
-- Fixed structured-outputs beta header being sent unconditionally on Vertex/Bedrock
-- Fixed spurious warnings for non-agent markdown files in `.claude/agents/` directory
+- Added `claude auth login`, `claude auth status`, and `claude auth logout` CLI subcommands
+- Added Windows ARM64 (win32-arm64) native binary support
+- Improved `/rename` to auto-generate session name from conversation context when called without arguments
+- Improved narrow terminal layout for prompt footer
+- Fixed file resolution failing for @-mentions with anchor fragments (e.g., `@README.md#installation`)
+- Fixed FileReadTool blocking the process on FIFOs, `/dev/stdin`, and large files
+- Fixed background task notifications not being delivered in streaming Agent SDK mode
+- Fixed cursor jumping to end on each keystroke in classifier rule input
+- Fixed markdown link display text being dropped for raw URL
+- Fixed auto-compact failure error notifications being shown to users
+- Fixed permission wait time being included in subagent elapsed time display
+- Fixed proactive ticks firing while in plan mode
+- Fixed clear stale permission rules when settings change on disk
+- Fixed hook blocking errors showing stderr content in UI
+
+## 2.1.39
+
 - Improved terminal rendering performance
 - Fixed fatal errors being swallowed instead of displayed
 - Fixed process hanging after session close

plugins/security-guidance/hooks/disk_space_utils.py

@@ -1,173 +0,0 @@
-#!/usr/bin/env python3
-"""
-Disk space utilities for Claude Code hooks.
-
-Provides helper functions to detect and handle disk space issues (ENOSPC errors)
-in a user-friendly manner.
-"""
-
-import errno
-import os
-import sys
-from typing import Optional, Tuple
-
-
-# ENOSPC errno value (28 on Linux/Mac)
-ENOSPC_ERRNO = errno.ENOSPC
-
-
-def is_disk_space_error(exception: Exception) -> bool:
-    """Check if an exception is related to disk space issues.
-
-    Args:
-        exception: The exception to check
-
-    Returns:
-        True if the exception indicates a disk space issue
-    """
-    # Check for OSError with ENOSPC errno
-    if isinstance(exception, OSError):
-        if hasattr(exception, 'errno') and exception.errno == ENOSPC_ERRNO:
-            return True
-        # Also check strerror for various disk space error messages
-        if hasattr(exception, 'strerror') and exception.strerror:
-            strerror_lower = exception.strerror.lower()
-            disk_space_indicators = [
-                'no space left on device',
-                'disk quota exceeded',
-                'not enough space',
-                'insufficient disk space',
-            ]
-            if any(indicator in strerror_lower for indicator in disk_space_indicators):
-                return True
-
-    # Check error message string as fallback
-    error_str = str(exception).lower()
-    if 'enospc' in error_str or 'no space left' in error_str:
-        return True
-
-    return False
-
-
-def get_disk_space_warning() -> str:
-    """Get a user-friendly warning message for disk space issues.
-
-    Returns:
-        Warning message string
-    """
-    return (
-        "WARNING: Disk space issue detected. Your disk may be full or nearly full.\n"
-        "This can cause Claude Code to become unresponsive or crash.\n"
-        "\n"
-        "Recommended actions:\n"
-        "  1. Free up disk space by deleting unnecessary files\n"
-        "  2. Check available space with: df -h\n"
-        "  3. Clean up temporary files: sudo rm -rf /tmp/* (use with caution)\n"
-        "  4. Empty trash/recycle bin\n"
-        "  5. Consider removing old Docker images: docker system prune"
-    )
-
-
-def check_available_disk_space(path: str = None, min_bytes: int = 10 * 1024 * 1024) -> Tuple[bool, Optional[str]]:
-    """Check if there's sufficient disk space available.
-
-    Args:
-        path: Path to check (defaults to home directory)
-        min_bytes: Minimum required bytes (default: 10MB)
-
-    Returns:
-        Tuple of (has_space, warning_message)
-        - has_space: True if sufficient space available
-        - warning_message: Warning string if low on space, None otherwise
-    """
-    if path is None:
-        path = os.path.expanduser("~")
-
-    try:
-        # Get disk usage statistics
-        stat = os.statvfs(path)
-        available_bytes = stat.f_frsize * stat.f_bavail
-
-        if available_bytes < min_bytes:
-            available_mb = available_bytes / (1024 * 1024)
-            required_mb = min_bytes / (1024 * 1024)
-            return False, (
-                f"Low disk space warning: Only {available_mb:.1f}MB available "
-                f"(recommended minimum: {required_mb:.1f}MB)\n"
-                f"{get_disk_space_warning()}"
-            )
-
-        return True, None
-
-    except (OSError, AttributeError):
-        # os.statvfs not available on all platforms (e.g., Windows)
-        # Return True and let actual write operations fail if there's no space
-        return True, None
-
-
-def safe_write_file(path: str, content: str, warn_on_disk_error: bool = True) -> Tuple[bool, Optional[str]]:
-    """Safely write content to a file with disk space error handling.
-
-    Args:
-        path: Path to write to
-        content: Content to write
-        warn_on_disk_error: If True, print warning to stderr on disk space errors
-
-    Returns:
-        Tuple of (success, error_message)
-        - success: True if write succeeded
-        - error_message: Error description if failed, None otherwise
-    """
-    try:
-        # Ensure directory exists
-        dir_path = os.path.dirname(path)
-        if dir_path:
-            os.makedirs(dir_path, exist_ok=True)
-
-        with open(path, 'w') as f:
-            f.write(content)
-
-        return True, None
-
-    except Exception as e:
-        if is_disk_space_error(e):
-            error_msg = f"Disk space error writing to {path}: {e}\n{get_disk_space_warning()}"
-            if warn_on_disk_error:
-                print(error_msg, file=sys.stderr)
-            return False, error_msg
-        else:
-            return False, f"Error writing to {path}: {e}"
-
-
-def safe_append_file(path: str, content: str, warn_on_disk_error: bool = True) -> Tuple[bool, Optional[str]]:
-    """Safely append content to a file with disk space error handling.
-
-    Args:
-        path: Path to append to
-        content: Content to append
-        warn_on_disk_error: If True, print warning to stderr on disk space errors
-
-    Returns:
-        Tuple of (success, error_message)
-        - success: True if append succeeded
-        - error_message: Error description if failed, None otherwise
-    """
-    try:
-        # Ensure directory exists
-        dir_path = os.path.dirname(path)
-        if dir_path:
-            os.makedirs(dir_path, exist_ok=True)
-
-        with open(path, 'a') as f:
-            f.write(content)
-
-        return True, None
-
-    except Exception as e:
-        if is_disk_space_error(e):
-            error_msg = f"Disk space error appending to {path}: {e}\n{get_disk_space_warning()}"
-            if warn_on_disk_error:
-                print(error_msg, file=sys.stderr)
-            return False, error_msg
-        else:
-            return False, f"Error appending to {path}: {e}"

plugins/security-guidance/hooks/security_reminder_hook.py

@@ -10,40 +10,18 @@ import random
 import sys
 from datetime import datetime
 
-# Import disk space utilities
-try:
-    from disk_space_utils import (
-        is_disk_space_error,
-        get_disk_space_warning,
-        check_available_disk_space,
-        safe_write_file,
-        safe_append_file,
-    )
-    DISK_UTILS_AVAILABLE = True
-except ImportError:
-    # Fallback if disk_space_utils not available
-    DISK_UTILS_AVAILABLE = False
-
 # Debug log file
 DEBUG_LOG_FILE = "/tmp/security-warnings-log.txt"
 
-# Track if we've already warned about disk space in this session
-_disk_space_warned = False
-
 
 def debug_log(message):
     """Append debug message to log file with timestamp."""
-    global _disk_space_warned
     try:
         timestamp = datetime.now().strftime("%Y-%m-%d %H:%M:%S.%f")[:-3]
         with open(DEBUG_LOG_FILE, "a") as f:
             f.write(f"[{timestamp}] {message}\n")
     except Exception as e:
-        # Check if this is a disk space error and warn the user
-        if DISK_UTILS_AVAILABLE and is_disk_space_error(e) and not _disk_space_warned:
-            _disk_space_warned = True
-            print(f"[Security Hook] {get_disk_space_warning()}", file=sys.stderr)
-        # Continue silently to avoid disrupting the hook
+        # Silently ignore logging errors to avoid disrupting the hook
         pass
 
 
@@ -180,44 +158,26 @@ def cleanup_old_state_files():
 
 def load_state(session_id):
     """Load the state of shown warnings from file."""
-    global _disk_space_warned
     state_file = get_state_file(session_id)
     if os.path.exists(state_file):
         try:
             with open(state_file, "r") as f:
                 return set(json.load(f))
-        except json.JSONDecodeError:
-            debug_log(f"JSON decode error reading state file: {state_file}")
-            return set()
-        except Exception as e:
-            # Check for disk-related errors (corrupted filesystem, etc.)
-            if DISK_UTILS_AVAILABLE and is_disk_space_error(e):
-                if not _disk_space_warned:
-                    _disk_space_warned = True
-                    print(f"[Security Hook] {get_disk_space_warning()}", file=sys.stderr)
-            debug_log(f"Error loading state file: {e}")
+        except (json.JSONDecodeError, IOError):
             return set()
     return set()
 
 
 def save_state(session_id, shown_warnings):
     """Save the state of shown warnings to file."""
-    global _disk_space_warned
     state_file = get_state_file(session_id)
     try:
         os.makedirs(os.path.dirname(state_file), exist_ok=True)
         with open(state_file, "w") as f:
             json.dump(list(shown_warnings), f)
-    except Exception as e:
-        # Check for disk space errors and provide user-friendly warning
-        if DISK_UTILS_AVAILABLE and is_disk_space_error(e):
-            if not _disk_space_warned:
-                _disk_space_warned = True
-                print(f"[Security Hook] {get_disk_space_warning()}", file=sys.stderr)
-            debug_log(f"Disk space error saving state file: {e}")
-        else:
-            debug_log(f"Failed to save state file: {e}")
-        # Fail silently to not disrupt operation
+    except IOError as e:
+        debug_log(f"Failed to save state file: {e}")
+        pass  # Fail silently if we can't save state
 
 
 def check_patterns(file_path, content):
@@ -256,8 +216,6 @@ def extract_content_from_input(tool_name, tool_input):
 
 def main():
     """Main hook function."""
-    global _disk_space_warned
-
     # Check if security reminders are enabled
     security_reminder_enabled = os.environ.get("ENABLE_SECURITY_REMINDER", "1")
 
@@ -265,13 +223,6 @@ def main():
     if security_reminder_enabled == "0":
         sys.exit(0)
 
-    # Check for low disk space and warn user (only once per session)
-    if DISK_UTILS_AVAILABLE and not _disk_space_warned:
-        has_space, warning = check_available_disk_space()
-        if not has_space:
-            _disk_space_warned = True
-            print(f"[Security Hook] {warning}", file=sys.stderr)
-
     # Periodically clean up old state files (10% chance per run)
     if random.random() < 0.1:
         cleanup_old_state_files()

scripts/issue-lifecycle.ts

@@ -0,0 +1,38 @@
+// Single source of truth for issue lifecycle labels, timeouts, and messages.
+
+export const lifecycle = [
+  {
+    label: "invalid",
+    days: 3,
+    reason: "this doesn't appear to be about Claude Code",
+    nudge: "This doesn't appear to be about [Claude Code](https://github.com/anthropics/claude-code). For general Anthropic support, visit [support.anthropic.com](https://support.anthropic.com).",
+  },
+  {
+    label: "needs-repro",
+    days: 7,
+    reason: "we still need reproduction steps to investigate",
+    nudge: "We weren't able to reproduce this. Could you provide steps to trigger the issue — what you ran, what happened, and what you expected?",
+  },
+  {
+    label: "needs-info",
+    days: 7,
+    reason: "we still need a bit more information to move forward",
+    nudge: "We need more information to continue investigating. Can you make sure to include your Claude Code version (`claude --version`), OS, and any error messages or logs?",
+  },
+  {
+    label: "stale",
+    days: 14,
+    reason: "inactive for too long",
+    nudge: "This issue has been automatically marked as stale due to inactivity.",
+  },
+  {
+    label: "autoclose",
+    days: 14,
+    reason: "inactive for too long",
+    nudge: "This issue has been marked for automatic closure.",
+  },
+] as const;
+
+export type LifecycleLabel = (typeof lifecycle)[number]["label"];
+
+export const STALE_UPVOTE_THRESHOLD = 10;

scripts/lifecycle-comment.ts

@@ -0,0 +1,53 @@
+#!/usr/bin/env bun
+
+// Posts a comment when a lifecycle label is applied to an issue,
+// giving the author a heads-up and a chance to respond before auto-close.
+
+import { lifecycle } from "./issue-lifecycle.ts";
+
+const DRY_RUN = process.argv.includes("--dry-run");
+const token = process.env.GITHUB_TOKEN;
+const repo = process.env.GITHUB_REPOSITORY; // owner/repo
+const label = process.env.LABEL;
+const issueNumber = process.env.ISSUE_NUMBER;
+
+if (!DRY_RUN && !token) throw new Error("GITHUB_TOKEN required");
+if (!repo) throw new Error("GITHUB_REPOSITORY required");
+if (!label) throw new Error("LABEL required");
+if (!issueNumber) throw new Error("ISSUE_NUMBER required");
+
+const entry = lifecycle.find((l) => l.label === label);
+if (!entry) {
+  console.log(`No lifecycle entry for label "${label}", skipping`);
+  process.exit(0);
+}
+
+const body = `${entry.nudge} This issue will be closed automatically if there's no activity within ${entry.days} days.`;
+
+// --
+
+if (DRY_RUN) {
+  console.log(`Would comment on #${issueNumber} for label "${label}":\n\n${body}`);
+  process.exit(0);
+}
+
+const response = await fetch(
+  `https://api.github.com/repos/${repo}/issues/${issueNumber}/comments`,
+  {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${token}`,
+      Accept: "application/vnd.github.v3+json",
+      "Content-Type": "application/json",
+      "User-Agent": "lifecycle-comment",
+    },
+    body: JSON.stringify({ body }),
+  }
+);
+
+if (!response.ok) {
+  const text = await response.text();
+  throw new Error(`GitHub API ${response.status}: ${text}`);
+}
+
+console.log(`Commented on #${issueNumber} for label "${label}"`);

scripts/sweep.ts

@@ -1,23 +1,15 @@
 #!/usr/bin/env bun
 
+import { lifecycle, STALE_UPVOTE_THRESHOLD } from "./issue-lifecycle.ts";
+
 // --
 
 const NEW_ISSUE = "https://github.com/anthropics/claude-code/issues/new/choose";
 const DRY_RUN = process.argv.includes("--dry-run");
-const STALE_DAYS = 14;
-const STALE_UPVOTE_THRESHOLD = 10;
 
 const CLOSE_MESSAGE = (reason: string) =>
   `Closing for now — ${reason}. Please [open a new issue](${NEW_ISSUE}) if this is still relevant.`;
 
-const lifecycle = [
-  { label: "invalid",     days: 3,  reason: "this doesn't appear to be about Claude Code" },
-  { label: "needs-repro", days: 7,  reason: "we still need reproduction steps to investigate" },
-  { label: "needs-info",  days: 7,  reason: "we still need a bit more information to move forward" },
-  { label: "stale",       days: 14, reason: "inactive for too long" },
-  { label: "autoclose",   days: 14, reason: "inactive for too long" },
-];
-
 // --
 
 async function githubRequest<T>(
@@ -51,12 +43,13 @@ async function githubRequest<T>(
 // --
 
 async function markStale(owner: string, repo: string) {
+  const staleDays = lifecycle.find((l) => l.label === "stale")!.days;
   const cutoff = new Date();
-  cutoff.setDate(cutoff.getDate() - STALE_DAYS);
+  cutoff.setDate(cutoff.getDate() - staleDays);
 
   let labeled = 0;
 
-  console.log(`\n=== marking stale (${STALE_DAYS}d inactive) ===`);
+  console.log(`\n=== marking stale (${staleDays}d inactive) ===`);
 
   for (let page = 1; page <= 10; page++) {
     const issues = await githubRequest<any[]>(
@@ -115,6 +108,7 @@ async function closeExpired(owner: string, repo: string) {
 
       for (const issue of issues) {
         if (issue.pull_request) continue;
+        if (issue.locked) continue;
         const base = `/repos/${owner}/${repo}/issues/${issue.number}`;
 
         const events = await githubRequest<any[]>(`${base}/events?per_page=100`);
@@ -144,20 +138,14 @@ async function closeExpired(owner: string, repo: string) {
 
 // --
 
-async function main() {
-  const owner = process.env.GITHUB_REPOSITORY_OWNER;
-  const repo = process.env.GITHUB_REPOSITORY_NAME;
-  if (!owner || !repo)
-    throw new Error("GITHUB_REPOSITORY_OWNER and GITHUB_REPOSITORY_NAME required");
+const owner = process.env.GITHUB_REPOSITORY_OWNER;
+const repo = process.env.GITHUB_REPOSITORY_NAME;
+if (!owner || !repo)
+  throw new Error("GITHUB_REPOSITORY_OWNER and GITHUB_REPOSITORY_NAME required");
 
-  if (DRY_RUN) console.log("DRY RUN — no changes will be made\n");
+if (DRY_RUN) console.log("DRY RUN — no changes will be made\n");
 
-  const labeled = await markStale(owner, repo);
-  const closed = await closeExpired(owner, repo);
+const labeled = await markStale(owner, repo);
+const closed = await closeExpired(owner, repo);
 
-  console.log(`\nDone: ${labeled} ${DRY_RUN ? "would be labeled" : "labeled"} stale, ${closed} ${DRY_RUN ? "would be closed" : "closed"}`);
-}
-
-main().catch(console.error);
-
-export {};
+console.log(`\nDone: ${labeled} ${DRY_RUN ? "would be labeled" : "labeled"} stale, ${closed} ${DRY_RUN ? "would be closed" : "closed"}`);