[BREAKING] Claude Code 2.1.223: Bash permission bypass fixed, /review folded into /code-review

Fixes three permission-enforcement holes — a crafted Bash command hiding parts of itself from permission checks, workflow scripts escaping the sandbox via dynamic `import()`, and agent-definition `bypassPermissions` ignoring the org disable policy. `/review` becomes an alias of `/code-review`, and auto-compaction now enforces context windows more broadly.

Tool: claude-code · Version: 2.1.223 · Significance: 4/5 · BREAKING CHANGE · security, fix, breaking, context-window, feature