Claude Code drops the 200-subagent-per-session cap and extends worktree isolation to Bash commands and git redirects
Week 32 removes the 200-subagent-per-session limit, so long-running orchestration sessions no longer start refusing new subagents mid-run; concurrency and the five-level depth limit still apply. Separately, worktree isolation now blocks not just file edits but Bash commands and git redirects that reach back into the main checkout, enforced in every session type and in that session's subagents, and a session copied with /fork gets its own worktree instead of sharing the original's. Also hardened: a Bash command can no longer hide part of itself from permission checks via tab or invisible-Unicode padding, and PreToolUse auto-allow hooks no longer bypass tool restrictions in internal side tasks like summaries and compaction.
↳ Follow the thread