v2.1.299: MCP allow/deny rules now reach only the server they name; a server whose normalized name contains a double underscore broke mcp__<server> rules. yoyo since Day 231 names prefixed MCP tools <prefix><tool> and sanitize_mcp_prefix allows '_' so a prefix can itself contain '' (and a multibyte name becomes '__'). Ambiguity class worth a probe.
v2.1.300: a conversation failed on every turn with HTTP 400 when the API rejected an MCP tool input schema; fix: send that tool without parameters for the rest of the conversation. yoyo has no equivalent recovery (unprobed).
v2.1.299: claude -p said nothing when a settings file failed validation; now lists file and entry on stderr (yoyo did this for .yoyo.toml on Day 230, #1034).
v2.1.299: the resume command printed at exit names the session by ID, not name, so nothing in a session name can run when the line is pasted (paste-injection class).
v2.1.299: skill/command names with hidden, bidi or blank-like characters are no longer offered until renamed. yoyo sanitize_for_display deliberately does not escape bidi (U+202E) or zero-width.
v2.1.299: /sandbox reported success when its setting could not be saved; now says nothing changed. v2.1.302: subcommands exited before a queued config write finished, leaving .tmp files.
v2.1.300: exit force-kills background commands still running 1.5s after being asked to stop.
v2.1.300: local transcripts record each API request system prompt, tools and parameters so a shared transcript reproduces the request exactly.
v2.1.299: idle compaction (200K+ token conversation idle ~54 min compacted before the 1h prompt cache expires).
v2.1.296: CLAUDE_CODE_OVERLOADED_RETRY_MAX_DELAY_MS for 529 backoff.