What's changed

• Added the Workflow tool for deterministic multi-agent orchestration. It is off by default — set CLAUDE_CODE_WORKFLOWS=1 to enable
• Pinned background sessions (Ctrl+T in claude agents) now stay alive when idle, are restarted in place to apply Claude Code updates, and are shed under memory pressure only after non-pinned sessions
• Renamed /simplify to /code-review. It now reports correctness bugs at a chosen effort level (e.g., /code-review high); pass --comment to post findings as inline GitHub PR comments. The old cleanup-and-fix behavior has been removed
• Hardened REPL and Workflow tool sandboxes against prototype-pollution and thenable-based escapes
• Improved auto-updater: retries transient network failures, reports specific error categories and OS error codes on failure, and shows the current version when an update fails
• Improved diff rendering performance for large file edits
• Prompt history no longer records consecutive duplicate entries — recalling a prompt with arrow-up and submitting it again won't add another copy
• Fixed enterprise login restrictions (forceLoginOrgUUID and forceLoginMethod managed-settings) not being enforced against third-party-provider and API-key sessions
• Fixed & in ! command output displaying as &, which broke copy-pasting URLs from commands like gcloud auth login on headless machines
• Fixed unknown slash commands silently doing nothing in headless/SDK mode — they now show an error message
• Fixed /help rendering a broken tab header and showing only one command per page on small terminals when not in fullscreen mode
• Fixed shell snapshot dropping user functions whose names start with a single underscore, which broke aliases referencing them
• Fixed plugin agents that declare multiple Agent(...) types in tools: frontmatter dropping all but the last entry
• Fixed hook if conditions like PowerShell(git push*) never matching — only PowerShell(*) worked
• Fixed PowerShell tool dropping output for commands that rely on the default formatter
• Fixed: on Windows, "Yes, and don't ask again" for a PowerShell script invocation now writes a rule that actually matches on subsequent runs
• Fixed PowerShell tool failing on Windows with exit code 1 when pwsh is installed via winget or the Microsoft Store
• Fixed /effort opening with the slider on the wrong level — it now starts at your current effort
• Fixed paginating MCP servers dropping resources, templates, and prompts past page 1
• Fixed full-screen strobing in attached background sessions on Windows Terminal while Claude is streaming
• Fixed: on Windows, removing a background-job worktree no longer follows NTFS junctions into the main repo
• Fixed /background refusing sessions whose only typed input was a skill or custom slash command
• Fixed auto mode suppressing AskUserQuestion when the user or a skill explicitly relies on it; the auto-mode classifier now sees the user's answers as intent signal
• Fixed /theme "New custom theme" and color editor dialogs not responding to Esc
• Fixed an uncaught exception at the end of streaming sessions when running via the Agent SDK
• Fixed a rare hang when waiting for scroll to settle on Windows
• Fixed stale and doubled rows in the agent view list on Windows when background session results contain wide (CJK) characters
• Fixed pasted text being delivered to agents as an unreadable [Pasted text #N] placeholder instead of the actual content
• Fixed plugin component counts in claude plugin details and /plugin being doubled when a plugin's manifest listed paths overlapping its default directories
• Fixed backgrounded sessions re-prompting for tool permissions you already granted with "don't ask again"
• Fixed GNOME Terminal right-click and middle-click paste not inserting text
• Fixed CLAUDE_CODE_SUBAGENT_MODEL not applying to teammate processes spawned by agent teams
• Fixed slash commands followed by a tab or newline being treated as an unknown command
• Fixed several spacing and layout glitches in the /plugin, /status, /mobile, /sandbox, and /permissions menus
• Fixed stripped images prompting the model to repeatedly re-read media that was no longer present