Commit 2bfb629

## 2.1.289

- Fixed a deny or ask rule on a nested part of a compound shell command not holding over a user-installed mod's approval on managed machines

- Fixed the terminal freezing on short code blocks with many unclosed `<script>` tags or deeply nested `${` substitutions

- Fixed `Read` deny rules not applying to files @-mentioned, changed, or selected in the IDE through a symlink

- [VSCode] Reverted a 2.1.288 change to `claude auth status` that may have made sign-outs more frequent

- Improved how quickly large files open in a plugin code pane by laying the highlighted view out once at its final width

- Fixed `plugin list`, `plugin eval` and `plugin update` showing a stale copy of a plugin installed from a local folder marketplace, and hot reload for a symlinked `--plugin-dir`

- Fixed installed mods not loading in the first session after an upgrade

- Fixed a plugin's rows above the prompt showing a stale row while the Background tasks dialog was open in fullscreen

- Fixed plugin panes drawing nothing when a link used a localhost address, an `@` in its path, an uppercase host or a `file:` path

- Fixed a user-installed plugin being able to rewrite the descriptions of an organization-managed MCP server's sign-in tools

- Fixed a freeze or forced quit at launch when a plugin drew a Box with a border style the terminal does not know

- Fixed supervised and background sessions ending when a plugin's on-screen handler threw asynchronously

- Fixed sessions ending with an interface error when a plugin region with no height kept growing

- Fixed Bash deny and ask rules missing a command behind an environment variable prefix with an expanded value (e.g. `TZ="$HOME" rm -rf build`) when the sandbox auto-allows commands

- Fixed a Bash deny or ask rule being skipped under sandbox auto-allow when a bare variable assignment came before the command

- Fixed `claude plugin validate` skipping the plugin when the folder also holds a marketplace manifest

- Added `agent.spawn` for teammates, one agent id across plugin hook events, and idle and waiting states in `$.agent.list()`

- Fixed sessions ending with "unrecoverable interface error" when a value a mod's `ui.render` hook wrote made a row throw while drawn; the engine now draws its own row instead

- Fixed text with a tab, a stray escape and a C1 control, or a short text with a tab and CRLF line endings, drawing over the rows below it

- Fixed right-aligned content in a mod's pane or band drawing under the close mark or `[-]`, which now also keep one column in from the terminal's edge

- Fixed a mod's `Client` that fails while drawn taking down everything the mod drew around it; it now fails alone and raises `ui.fault`

- Fixed `claude plugin validate` failing an Anthropic marketplace's own plugin and listing a clean `plugin.json` in `--json`

- Fixed a mod's band that fails to draw briefly telling the cards under it to step aside

- Fixed a failed plugin component showing `Error` or nothing as its reason when the failure carried no message

- Improved the line a mod's author sees when its band or pane fails to draw: it names the mod and says nothing was drawn

- Fixed published artifact pages freezing or crashing the reader's browser tab on short code blocks with many unclosed `<script>` tags

- Fixed a mod's Client region staying failed for the whole session after the terminal threw while drawing it