release aidev SIG 3/5

Claude Code 2.1.232: subagent forking on by default, cross-session @-mentions, GitLab support

Subagent forking is now the default behavior for non-teammate agent spawns, inheriting the full conversation and prompt cache. Users can type @ to mention another Claude session by name, which triggers a SendMessage to that session. GitLab gets token redaction, marketplace URL cloning, and credential-path protection.

PUBLISHED2026-08-13
OBSERVED2026-08-21
AGE12d
SOURCES1
  • Subagent forking is now on by default; subagent_type: "fork" inherits full conversation and prompt cache; non-teammate agent spawns in interactive sessions run in the background by default
  • Type @ in the prompt to mention another Claude session by name; SendMessage delivers to that session directly
  • SendMessage now delivers to a bare name matching one live session without asking for confirmation
  • Interactive sessions on one machine now get unique names; starting/renaming to a taken name produces a name-word-word variant
  • Added /config rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)
  • Added GitLab token redaction for glrt-, gloas-, glptt-, glagent-, glimt-, glsoat-, glcbt-, glft-, glffct- families; full redaction of glpat-/gldt- tokens; glab CLI config gets the same sandbox/credential-path protection as gh
  • GitLab plugin marketplaces: bare gitlab.com repo URLs (including nested subgroups) clone like github.com URLs; clone auth-failure hints name the actual git host
  • New settings aliases: additionalMarketplaces and allowedMarketplaces for extraKnownMarketplaces/strictKnownMarketplaces
  • Enterprise policy: blockedMarketplaces entries for bare repo URLs block git clones when classified as such
  • Gateway: desktop: overlay now accepts all released Desktop settings (was 11 hand-listed keys), validated against Desktop's schema at boot
  • Gateway: empty managed.policies[].match.groups/admin.admin_groups entries and malformed email_domain values now fail at boot instead of silently matching no one or granting admin access
  • Fable 5 is offered as an /advisor again for organizations with Fable access, with usage-credits consent through /model fable
  • Fixed PowerShell permission bypass via $PSDefaultParameterValues overwrite
  • Fixed Windows permission bypass where Git Bash followed Cygwin-style symlinks past path validation
  • Fixed nested git repos inheriting trust from parent directory; each repo now requires its own trust confirmation
  • Fixed MCP connections hanging for 30-second timeout on unresponsive or malformed protocol-version probe replies
  • Fixed Remote Control bridge sessions sharing cloud session credentials/transcript
  • Fixed Remote Control sessions appearing as new claude.ai sessions on resume; they now reattach
  • Fixed Remote Control sessions appearing unreachable while idle
  • Fixed Remote Control bridge sessions not restoring conversation history on session worker restart
  • Remote Control: resuming a deleted session now starts a replacement instead of failing
  • Fixed Cloud gateway /login exiting silently when managed settings fail to load
  • Fixed voice mode on native builds stuck on "listening..." when voice service rejects the connection
  • Fixed mTLS client certificate rotation requiring a restart; now reloads on connection errors
  • Fixed malformed AWS/Vertex region values falling back to default region instead of breaking request URLs
  • Fixed stream idle timeout errors failing requests instead of recovering on Bedrock, Vertex, and gateway deployments
  • Fixed content-sized overlays with truncated text rendering one column too wide
  • Fixed stray garbled character when preview cut off mid-emoji
  • Fixed startup race that unregistered a plugin marketplace due to concurrent writes
  • Fixed /update and /tui refusing to restart while surviving work running
  • Fixed usage-limit guidance suggesting unavailable slash commands in SDK/remote sessions
  • Fixed consent message for interactive --advisor fable launches
  • Improved fullscreen streaming: long sessions stay responsive without re-normalizing the whole conversation on every update
  • Improved managed settings approval dialog: shows endpoint URLs, clearer telemetry wording, requires approval for sandbox binary overrides
  • /feedback and /bug open immediately when invoked during a response, no longer waiting for the turn to finish
  • /plugin install plugin@marketplace now refreshes the marketplace first
  • /code-review at high/xhigh/max effort now runs in a background agent
  • Pasted/clipboard images read without blocking the event loop
  • Remote Control reconnects for ~30 minutes after a network blip; no longer drops after a few blips across an hour
featurefixsecurityapi-change

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.