Auto mode now defaults external sessions to Sonnet 5, validated & pinned per session. Plus 22 fixes for crashes, hangs, claude attach, MCP resync, and worktree locks.
Write(path), NotebookEdit(path), and Glob(path) permission rules — use Edit(path) or Read(path) insteadisolation: 'worktree' subagents being able to run git-mutating commands against the main repo checkout instead of their own isolated worktreeultracode keyword opt-in firing on non-human-originated input such as webhook payloads and relayed PR commentsclaude attach sometimes failing with "job not found" or "agent is still starting" errors during session transitions — attach now waits for the daemon to settle, and terminal resizes during a slow attach are applied once it completescd took effect after its command was moved to the background; the tool result now states the working directory is unchanged/doctor skipping its auto-mode-default proposal on Bedrock, Vertex, and Foundry, where auto mode no longer needs an opt-in$1/$2 positional placeholders in skills and commands being silently stripped; they are now preserved verbatimclaude agents --effort ultracode not reaching dispatched sessions; the value was silently droppedgit worktree lock behind; the periodic sweep now releases locks whose owning process is goneinitialize control request waiting until the next turn to start connectingCLAUDE_CODE_DISABLE_ALTERNATE_SCREEN=1.claude/* symlinks not being reconciled into the sandbox deny-write list