Auto mode now blocks destructive commands you didn't ask for. Destructive git commands — git reset --hard, git checkout -- ., git clean -fd, git stash drop — are blocked when you didn't request to discard local work; git commit --amend is blocked when the commit wasn't made by the agent this session; and terraform destroy / pulumi destroy / cdk destroy are blocked unless you asked for that specific stack. A meaningful guardrail against an over-eager agent nuking uncommitted work or tearing down infrastructure in unattended runs.
Scheduled-task and webhook deliveries can no longer approve actions. Task and webhook trigger deliveries were being classified as keyboard input; they're now treated as task notifications and cannot approve a pending action or set the session title in auto mode. Paired with a fix that stops MCP servers requiring authentication from exposing auth-stub tools to the model in headless/SDK mode, this is a solid hardening pass for automated and remote setups.
New settings: attribution.sessionUrl, /config --help, deprecated-model warnings. attribution.sessionUrl omits the claude.ai session link from commits and PRs in web and Remote Control sessions; /config --help lists every shorthand key for the /config key=value syntax; /config toggles now save-and-close on Esc instead of reverting; and a warning fires (on stderr in -p mode, now also for models set in agent frontmatter) when the requested model is deprecated or auto-upgraded.
Fixes worth knowing. WebSearch returning empty results inside subagents is fixed; fullscreen TUI corruption (mid-screen statusline, duplicated spinner rows, merged text) in Windows Terminal under heavy nested-subagent load is repaired; turns that silently completed when the model returned only a thinking block now re-prompt once; thinking.disabled.display 400 errors on subagent spawns are fixed; background tasks started by a teammate are no longer killed when that teammate finishes a turn; and user-level skills no longer appear multiple times in slash-command autocomplete with multiple plugins enabled.