release aidev SIG 3/5

Claude Code 2.1.183: auto mode blocks destructive git and IaC destroy commands

Auto mode now refuses a set of destructive commands unless you actually asked for them — hard git resets, unrequested --amend, and terraform/pulumi/cdk destroy. Also adds a deprecated-model warning and an attribution.sessionUrl setting to keep claude.ai session links out of commits and PRs.

PUBLISHED2026-06-19
OBSERVED2026-08-11
AGE1mo
SOURCES1
  • Auto mode blocks git reset --hard, git checkout -- ., git clean -fd, git stash drop when discarding local work wasn't requested
  • Auto mode blocks git commit --amend when the commit wasn't made by the agent this session
  • Auto mode blocks terraform destroy / pulumi destroy / cdk destroy unless the specific stack was requested
  • Warning on stderr in -p when the requested model is deprecated or auto-upgraded; now also covers models set in agent frontmatter
  • New attribution.sessionUrl setting omits the claude.ai session link from commits and PRs in web and Remote Control sessions
  • /config --help lists shorthand keys for /config key=value
  • Changed: in /config, Enter and Space both change the selected setting; Esc saves and closes instead of reverting
  • Removed the startup "setup issues" line under the logo — use /doctor or --debug
  • Fix: thinking.disabled.display: Extra inputs are not permitted 400s on subagent spawns and session-title generation
  • Fix: WebSearch returning empty results in subagents
  • Fix: MCP servers requiring auth exposing auth-stub tools to the model in headless/SDK mode
  • Fix: turns silently completing when the model returned only a thinking block; now re-prompts once
  • Fix: background tasks started by a teammate killed when that teammate finished a turn
  • Fix: scheduled task and webhook deliveries treated as keyboard input — they can no longer approve a pending action or set the session title in auto mode
securityfeaturefix

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.