•Fixed permission previews relayed to chat channels not neutralizing bidirectional-override, zero-width, and look-alike quote characters, so tool inputs cannot visually alter the approval message
•Fixed auto mode overriding a PreToolUse hook's ask decision for unsandboxed Bash — a hook ask now floors the decision at a prompt
•Fixed parallel Claude Code sessions all logging out simultaneously after wake-from-sleep when many sessions share one credential store
•Fixed plugin MCP servers not reconnecting after an idle web session woke, leaving MCP calls failing until the next message
•Fixed Claude Code on Vertex and Bedrock attempting the default Opus model at startup and printing a spurious fallback notice when a model is explicitly configured
•Fixed subagents spawned with an explicit model override reverting to the parent's model when resumed or sent a follow-up message
•Fixed nested .claude/rules/*.md files loading even when setting sources exclude project settings
•Fixed file upload validation: filenames ending in a DOS device suffix (.prn) or trailing dot are now accepted, and files with multiple hard links are refused
•Fixed file uploads to Claude in Chrome from remote and CLI sessions
•Fixed edits that leave the input as "?" being silently swallowed and toggling the shortcuts panel
•Fixed a startup hang when the Claude in Chrome extension is enabled but Chrome is not running
•Fixed a 300ms delay revealing async content (Settings tabs, Stats, diff views, and other loading states)
•Fixed reopening a just-stopped background session from the agents view starting a blank conversation under the same session id
•Fixed /loop hiding the session from /resume after a single use
•Fixed screen reader users losing the audible terminal bell after /terminal-setup or onboarding terminal setup
•Fixed background jobs on LLM gateway auth (ANTHROPIC_AUTH_TOKEN + ANTHROPIC_BASE_URL) coming back "Not logged in" after the daemon respawns them
•Fixed claude agents jobs becoming permanently undeletable when git no longer recognizes their worktree — the row now shows why the delete was refused instead of silently reappearing
•Fixed /clear not resetting the session cost counter — the statusline's cost now starts at $0 after /clear
•Fixed Claude in Chrome setup pages failing to open in the browser on Windows
•Fixed headless print-mode sessions on Windows crashing or silently exiting when stdin is unreadable
•Fixed background session titles in the agents view showing the naming model's refusal text when the prompt contains a link
•Fixed background agents killed by the user auto-respawning, and revived agents re-running stale prompts from old sessions
•Fixed routines with no schedule reporting a next run time in the year 1
•Fixed a prompt-caching regression on Bedrock, Vertex, Mantle, and Foundry that billed the trailing system context block as fresh input tokens on every request.