v3.5.2 is a stability patch with targeted fixes for auto-update reliability, subagent lifecycle, and MCP tool safety.
Highlights
Auto-Update Safety
- Pinned plugin versions are now respected — auto-update skips when you've explicitly locked a version
- If an update install fails, the config pin reverts to prevent version mismatch between config and disk
Subagent Lifecycle
- Fixed zombie sessions caused by
permission.question=denyoverride in subagent spawning - Added optional chaining guard on
session_idsto prevent crashes in boulder state reads
MCP Tool Guard
- Tool after-hooks now safely guard
output.outputfor MCP tools that return non-standard shapes (#1720)
Atlas Intelligence
- Boulder verification reminders now include a notepad reading step — Atlas checks its own notes before prompting
Category Control
- New
disablefield in CategoryConfigSchema — turn off entire categories without removing their config
What's Changed
Features
- categories: add disable field to CategoryConfigSchema
- atlas: add notepad reading step to boulder verification reminders
Bug Fixes
- guard output.output in tool after-hooks for MCP tools (#1720)
- respect user-pinned plugin version, skip auto-update when explicitly pinned
- auto-update: revert config pin on install failure to prevent version mismatch
- subagent: remove permission.question=deny override that caused zombie sessions
- guard session_ids with optional chaining to prevent crash
- ci: add web-flow to CLA allowlist
Other Changes
- Merge pull request #1754 from code-yeongyu/fix/issue-1745-auto-update-pin
- Merge pull request #1756 from code-yeongyu/fix/mcp-tool-output-guard
- @ojh102 has signed the CLA in #1750
- Merge pull request #1683 from code-yeongyu/fix/issue-1672
- @danpung2 has signed the CLA in #1741
Full Changelog: v3.5.1...v3.5.2