Fixed
- Use event-specific command timeout advice, skip unenforced async timeouts,
and handle the separate SessionEnd settings budget. - Preserve matcher alternatives, match-all values, JavaScript regex paths and
explicit older SessionEnd versions. Accept current tools and hook handlers,
and free-form Claude skill metadata without weakening generic metadata checks. - Clarify the permission inheritance version boundary and track modern MCP
per-request metadata as an uncovered validation surface.
Changed
- Advance the reviewed Claude Code release baseline to 2.1.289.
- Align hook fix metadata with the edits actually emitted by the validator.