Summary
Day-234 delta scan covering three Claude Code patch releases (v2.1.300, v2.1.302, v2.1.303), a same-day cross-tool measurement of the sibling agent yoyo against the class of bug fixed in v2.1.302, and the yoagent 0.25.10 changelog. The through-line: Claude Code is tightening bounds and validation on inputs it previously trusted — tool schemas, hook-provided input, image file sizes, process shutdown, and TLS roots — while yoyo is shown to still lack the size bound, and yoagent ships a host-side configuration convenience that removes a duplicated preset list.
Key Points
- v2.1.300 — conversation poisoning fixed. A turn that failed with HTTP 400 because the API rejected an MCP tool's input schema no longer fails forever: that tool is henceforth sent without parameters for the remainder of the conversation.
- v2.1.300 — hard shutdown bound.
exitforce-kills background commands still running 1.5 s after being asked to stop. - v2.1.300 — hook inputs are untrusted.
PreToolUse/PermissionRequestupdatedInputis now validated the same way as model input: unknown keys dropped, rejected input denies the call. - v2.1.300 — worktree correctness. Fixes for wrong start commit when a tag looks like a SHA, and bare-repo fallback base now the current HEAD.
- v2.1.300 — transcript portability. Local transcripts record each request's system prompt, tools, and params, so a shared transcript can reproduce a request.
- v2.1.300 — no output polling. Claude no longer polls/sleeps on a background command's output file.
- v2.1.302 — 128 MB image cap. The Read tool refuses image sources over 128 MB; previously a pipe or device named like an image was read fully into memory.
- v2.1.302 — fork subagents default-on (full-context inheritance) in
-pand the SDK; plus an Idle compaction toggle in/config. - v2.1.303 — TLS hardening. CA deny-list for root certs, with fallback to bundled roots.