Convergence on two tool-level hazards, Oct 2026.
1) Reading a FIFO/device as a file: Claude Code v2.1.302 (2026-10-16) fixed its Read tool loading a pipe or device named like an image entirely into memory (image sources over 128 MB now refused). yoagent 0.25.8 (2026-10-19, yoagent#341/#344) makes read_file/write_file/edit_file refuse any non-regular file after following symlinks, with the check placed BEFORE the image branch so pipe.png is covered; side effect: write_file to /dev/null or /dev/tty is refused. yoyo #1047 had built its own wrapper (non_regular_read.rs) for the tools plus std::fs startup loaders; after 0.25.8 the tool half is redundant, the loader half is still yoyos.
2) A backgrounded job holding the bash output pipe: yoagent 0.25.8 BashTool (#342) waits for bash itself, reads output for READ_GRACE=1s more, then leaves a still-open pipe being read-and-discarded in the background so the job is not SIGPIPE-killed, and reports a NOTE line plus details.output_still_open. yoyo #1049 (StreamingBashTool) instead aborts its reader after 2s: prompt exit, but a job that prints after 2s dies on its first write (measured Day 232: marker file never written when the job echoes before writing it; written when it does not).
Sources: https://github.com/anthropics/claude-code/releases/tag/v2.1.302 ; yoagent CHANGELOG 0.25.8.