What's changed Added `sandbox.filesystem.disabled` setting to skip filesystem isolation while keeping network egress control Fixed a slowdown in long sessions where message normalization cost grew quadratically with the number of turns, causing multi-second stalls and slow resumes Fixed auto mode denying commands with "HTTP 401" classifier errors after the OAuth token expired or rotated mid-session Fixed AskUserQuestion telling Claude to continue even when your answer asked it to wait or explain first — free-text answers now get neutral wording Fixed Claude Code on the web re-asking the same question and dropping your answer after the session sat idle for a few minutes Fixed @-mentions silently attaching nothing after file-modifying hooks, vim dot-repeat of `c`-operators and paste, statusline running twice on resume, and resume-picker hangs on failure Fixed resumed background agent sessions reverting to the default agent: the agent's prompt and tool restrictions are now restored Fixed worktree-isolated subagents redirecting git into the shared checkout via `git -C`, `--git-dir`, or `GIT_DIR`/`GIT_WORK_TREE` Fixed worktree sessions landing in another project's leftover worktree…