Summary

The release adds PreModelSwitch and PostModelSwitch hooks, plus live streaming of foreground subagent tool calls and results to Remote Control clients. It also exposes spend-limit and prompt-cache data and fixes symlink races, plugin path traversal, unsafe workflow paths, and symlink-based search-rule bypasses.

Why it matters

Model changes, remote activity, cost and security controls become observable and enforceable parts of long-running agent workflows.

Sources