# Claude Code 2.1.232: subagent forking on by default, cross-session @-mentions, GitLab support

> Subagent forking is now the default behavior for non-teammate agent spawns, inheriting the full conversation and prompt cache. Users can type @ to mention another Claude session by name, which triggers a SendMessage to that session. GitLab gets token redaction, marketplace URL cloning, and credential-path protection.

| | |
|---|---|
| **Tool** | Claude Code |
| **Version** | 2.1.232 |
| **Kind** | release |
| **Published** | 2026-08-13 |
| **Observed** | 2026-08-21 |
| **Significance** | 3/5 |
| **Breaking** | no |
| **Categories** | feature, fix, security, api-change |

## What changed


- Subagent forking is now on by default; `subagent_type: "fork"` inherits full conversation and prompt cache; non-teammate agent spawns in interactive sessions run in the background by default
- Type `@` in the prompt to mention another Claude session by name; `SendMessage` delivers to that session directly
- `SendMessage` now delivers to a bare name matching one live session without asking for confirmation
- Interactive sessions on one machine now get unique names; starting/renaming to a taken name produces a `name-word-word` variant
- Added `/config` rows for "Dialog expiry" and "Messages from your other sessions" (cross-session inbound accept/hold/refuse)
- Added GitLab token redaction for `glrt-`, `gloas-`, `glptt-`, `glagent-`, `glimt-`, `glsoat-`, `glcbt-`, `glft-`, `glffct-` families; full redaction of `glpat-`/`gldt-` tokens; `glab` CLI config gets the same sandbox/credential-path protection as `gh`
- GitLab plugin marketplaces: bare `gitlab.com` repo URLs (including nested subgroups) clone like `github.com` URLs; clone auth-failure hints name the actual git host
- New settings aliases: `additionalMarketplaces` and `allowedMarketplaces` for `extraKnownMarketplaces`/`strictKnownMarketplaces`
- Enterprise policy: `blockedMarketplaces` entries for bare repo URLs block git clones when classified as such
- Gateway: `desktop:` overlay now accepts all released Desktop settings (was 11 hand-listed keys), validated against Desktop's schema at boot
- Gateway: empty `managed.policies[].match.groups`/`admin.admin_groups` entries and malformed `email_domain` values now fail at boot instead of silently matching no one or granting admin access
- Fable 5 is offered as an `/advisor` again for organizations with Fable access, with usage-credits consent through `/model fable`
- Fixed PowerShell permission bypass via `$PSDefaultParameterValues` overwrite
- Fixed Windows permission bypass where Git Bash followed Cygwin-style symlinks past path validation
- Fixed nested git repos inheriting trust from parent directory; each repo now requires its own trust confirmation
- Fixed MCP connections hanging for 30-second timeout on unresponsive or malformed protocol-version probe replies
- Fixed Remote Control bridge sessions sharing cloud session credentials/transcript
- Fixed Remote Control sessions appearing as new claude.ai sessions on resume; they now reattach
- Fixed Remote Control sessions appearing unreachable while idle
- Fixed Remote Control bridge sessions not restoring conversation history on session worker restart
- Remote Control: resuming a deleted session now starts a replacement instead of failing
- Fixed Cloud gateway `/login` exiting silently when managed settings fail to load
- Fixed voice mode on native builds stuck on "listening..." when voice service rejects the connection
- Fixed mTLS client certificate rotation requiring a restart; now reloads on connection errors
- Fixed malformed AWS/Vertex region values falling back to default region instead of breaking request URLs
- Fixed stream idle timeout errors failing requests instead of recovering on Bedrock, Vertex, and gateway deployments
- Fixed content-sized overlays with truncated text rendering one column too wide
- Fixed stray garbled character when preview cut off mid-emoji
- Fixed startup race that unregistered a plugin marketplace due to concurrent writes
- Fixed `/update` and `/tui` refusing to restart while surviving work running
- Fixed usage-limit guidance suggesting unavailable slash commands in SDK/remote sessions
- Fixed consent message for interactive `--advisor fable` launches
- Improved fullscreen streaming: long sessions stay responsive without re-normalizing the whole conversation on every update
- Improved managed settings approval dialog: shows endpoint URLs, clearer telemetry wording, requires approval for sandbox binary overrides
- `/feedback` and `/bug` open immediately when invoked during a response, no longer waiting for the turn to finish
- `/plugin install plugin@marketplace` now refreshes the marketplace first
- `/code-review` at high/xhigh/max effort now runs in a background agent
- Pasted/clipboard images read without blocking the event loop
- Remote Control reconnects for ~30 minutes after a network blip; no longer drops after a few blips across an hour


## Sources

- [changelog_md](https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md) — retrieved 2026-08-21


## Community

_No curated reactions recorded. Facts and community takes are kept in separate layers
and never blended._

---
Canonical: https://changelogs.info/claude-code/2-1-232
Entity: https://changelogs.info/claude-code
Event ID: `evt_2026-08-13_claude-code_2-1-232`
Licence: event synthesis © changelogs.info, CC BY 4.0. Linked sources belong to their vendors.