New cross-session messaging (@name, /hold, /refuse) lets Claude sessions talk to each other; subagent forking now defaults on, plus critical Windows permission-bypass fixes.
name-word-word variant and tells you/config rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)glrt-, gloas-, glptt-, glagent-, glimt-, glsoat-, glcbt-, glft-, glffct-) and full redaction of routable glpat-/gldt- tokens; the glab CLI config store gets the same sandbox and credential-path protection as ghgitlab.com repo URLs (including nested subgroups) now clone like github.com URLs, and clone auth-failure hints name your actual git hostsandbox.bwrapPath, sandbox.socatPath, sandbox.ripgrep)$PSDefaultParameterValues and redirect later commands' file access/login exiting silently or leaving an unresponsive terminal after "Press Enter to continue" when managed settings failed to load; the reason is now shownknown_marketplaces.json/update and /tui refusing to restart while work that survives the relaunch was running--advisor fable launches, which told you to run /model fable in an interactive session that had just exited/tasks footer hint, and the "↓ N more" overflow indicator moved left for visibilitysandbox.ripgrep to be honored only from user, managed, and --settings settings; project settings can no longer override the sandbox's ripgrep binary/powerup toursubagent_type: "fork" subagent inherits the full conversation and prompt cache, and non-teammate agent spawns in interactive sessions now run in the background by default@ in the prompt to mention another Claude session by name; Claude then uses SendMessage to reach that session directlySendMessage now delivers to a bare name that exactly matches one live session, instead of asking to confirm with a ref firstadditionalMarketplaces and allowedMarketplaces are now accepted as friendlier aliases for extraKnownMarketplaces and strictKnownMarketplacesblockedMarketplaces entry for a bare repo URL keeps blocking that URL when the CLI classifies it as a git clonedesktop: overlay now accepts every released Desktop setting (was 11 hand-listed keys), validated at boot against Desktop's own schema; unknown or invalid keys fail bootmanaged.policies[].match.groups/admin.admin_groups entries and malformed email_domain values (empty, or containing @, whitespace, or commas) now fail at boot instead of silently matching no one or granting admin access/advisor again for organizations with Fable access, with usage-credits consent set up through /model fable/feedback and /bug now open immediately when invoked while Claude is responding, instead of waiting for the turn to finish/plugin install plugin@marketplace now refreshes the marketplace first, so newly published plugins install without a manual marketplace update/code-review at high, xhigh, and max effort now runs in a background agent like the other levels/remote-control there to move it< file) are now permission-checked like their argument spellings on all platforms/tmp: a pre-planted symlink or another user's directory is now refused instead of used