Massive stability pass — 49 fixes across Bash sandboxing, MCP OAuth/reconnects, VS Code, and --resume — plus new per-command allowed_domains sandboxing for Bash/PowerShell.
/fast typed in the session applies where your organization allows it/config panel in fullscreen mode: the wheel scrolls the settings list, a click on a setting's value changes it, and the row under the pointer is highlightedclaude self-hosted-runner --drain-marker-file <path>: when that file exists at a SIGTERM drain, the runner reports its exit to the server as a host drain (telemetry only)allowed_domains to Bash, PowerShell and Monitor in auto mode with sandboxing: the hosts a command needs are reviewed with it and opened for it alone; other hosts are refusedomitClaudeMd to agent frontmatter and --agents JSON, letting custom and plugin subagents run without user, project and local CLAUDE.md files; managed policy files still load--accept-command <sha256> to claude plugin install and claude plugin update to accept exactly the command a previous --json run displayed, instead of -ymultiplier above 1, up to 10, in the modelPricing managed setting and the Claude apps gateway pricing block, for marked-up internal chargeback rates/desktop, which offers to download the appclaude mcp serve: a running tool call now sends a progress update every 30 seconds, so clients show it is still running and idle timeouts don't abort a long command that prints nothingalwaysLoad MCP server that finishes connecting mid-conversation is usable on the next turn without a tool-search round trip/mobile to show a single QR code for claude.ai/mobile, which opens the right app store for your phonemanaged-mcp.json that can't be read or parsed being ignored: it now keeps exclusive MCP control (user, project and plugin servers don't load) and warns at startupANTHROPIC_UNIX_SOCKET; they are again treated like other custom gateways, including for Remote Control/fast off answering "Fast mode unavailable" instead of turning fast mode off when the organization has fast mode disabledCLAUDE_CODE_SKIP_FAST_MODE_ORG_CHECK re-sending fast requests every turn after the API rejected fast mode; the rejection now stands and its reason is shownCLAUDE_CODE_RETRY_WATCHDOG failing the turn on a usage-credits limit, or retrying an overload at fast speed, instead of falling back to standard speedfmt, column and similar commands read when it follows an option the checker doesn't recognizegrep -v dir/* file)cd+git chain skipping the prompt under permissions.blockReadsOutsideWorkingDirectories in bypass and auto mode.git/config.lock breaking git checkout -b, git push -u and git config for the rest of a session after a sandboxed command failed to start (Linux)claude -p sessions whose tools all come from MCP servers failing with "At least one tool must have defer_loading=false"text/plainlist_changed notifications in a tight loopmcp__server__tool name/mcp sent from Remote Control failing while the transcript view is openSendMessage results no longer imply it was read/model warning about losing the conversation cache when switching back to the model the conversation actually ran on/reload-skills reporting a skill count that disagreed with the slash menu after /cd/resume and /continue showing only 1-2 sessions in fullscreen mode on short terminals/resume and /teleport keeping the previous conversation's file-read tracking, so Claude could edit files the resumed conversation had never read--resume dropping the 1M context window ([1m]) when the resumed session's model family differs from the configured default model/artifacts disappearing from the session after --resumeclaude --bg, claude agents) not watching the artifacts they publish for republishes made elsewhere--host-config-snapshot disk|memorycleanupPeriodDays now move to the recoverable trash at the next launch/add-dir path input: the left and right arrow keys now move the cursor, and Enter adds only the typed path instead of also adding the highlighted completion! to the end of what you typed (!foo came out as foo!)/hooks menu crashing when a hook matcher is named after an inherited object property such as __proto__ or constructor^[[?1;2c) appearing at the shell prompt or in an editor when Claude Code exits, is suspended, or opens an editor right after startingCLAUDE_CONFIG_DIR changed in the environmentVariables setting! shell commands follow default-mode permission rules instead of the classifier; a command no rule decides runs as a reviewed tool call-p runs) and notify Claude to re-arm, replacing the no-timeout persistent option[⧉ …] pill that wraps with the text instead of squeezing multi-line prompts; delete it with Backspace to leave the selection outclaude-api skill to enable eager_input_streaming on streaming custom tools, and to start deliverable-shaped Managed Agents work with user.define_outcome