Claude Code v2.1.152: /code-review --fix, plugin disallowed-tools, MessageDisplay hook

Anthropic shipped Claude Code v2.1.152 with a batch of practical improvements for agentic coding workflows. The headline: /code-review --fix now applies review findings directly to your working tree, and /simplify now delegates to /code-review --fix. Another systematic improvement: plugins and skills can restrict the model's toolset via disallowed-tools in frontmatter.

Key new features

• /code-review --fix: After running a review, suggestions for reuse, simplification, and efficiency are applied to your working tree. /simplify now invokes this under the hood.
• disallowed-tools in skills/commands: Skill YAML and slash command frontmatter can specify tools to remove from the model while the skill is active. Useful for restricting file write or execution tools during review flows.
• /reload-skills: Re-scans skill directories without restarting the session. SessionStart hooks can return reloadSkills: true to make newly installed skills available immediately.
• SessionStart hooks can now set the session title via hookSpecificOutput.sessionTitle on startup and resume.
• MessageDisplay hook event: Lets hooks transform or hide assistant message text before it's rendered.

Plugin & marketplace changes

• New managed setting pluginSuggestionMarketplaces: admins can allowlist org marketplaces whose plugins may be suggested via context-aware tips.
• claude plugin marketplace remove now accepts --scope user|project|local, matching add, install, and uninstall.

Model & UX improvements

• Fallback model: When the primary model is not found, Claude Code switches to your --fallback-model for the rest of the session instead of failing every request.
• Auto mode no longer requires opt-in consent.
• Vim mode: / in NORMAL mode opens reverse history search (like Ctrl+R), matching bash/zsh vi-mode.
• /usage now includes large session files via streaming read — memory stays flat.
• Thinking summaries stay readable for ≥3 seconds, render as markdown, capped at 10 lines; Ctrl+O shows full thinking.
• Fullscreen “Thinking for Ns” indicator counts up live and persists on interrupt.
• Post-response timer shows “Waiting for N background agents/workflows to finish” and cumulative time when tasks are still running.
• Session entrypoint added as OpenTelemetry metric attribute (app.entrypoint), opt-in via OTEL_METRICS_INCLUDE_ENTRYPOINT=true.

Bug fixes (selection)

• Terminal styling no longer degrades in very long sessions (renderer style pool recycling).
• Sandbox-enabled warning now shows in condensed startup mode.
• Loading spinner no longer shows “still thinking”/“almost done thinking” while a tool runs; resets to “thinking” after each tool.
• Focus mode no longer shows spurious “N messages hidden” on turns with no hidden activity.
• Clicking a link inside expanded tool result no longer collapses the section.
• Markdown table cell border colors, wrapped continuation line styles, and empty header cell labels in narrow-terminal stacked layout all fixed.
• Plugin MCP servers with same command but different env vars are no longer incorrectly deduplicated.
• /doctor no longer reports “marketplace not found” for stale enabledPlugins entries.
• Git branch–tracking plugins now receive updates after registry rebuild.
• Remote MCP servers connect correctly in Claude Code Remote sessions with egress proxy.
• Effort-change confirmation dialog no longer appears on empty conversations or same-value switches.
• Agent tool description no longer references undelivered agent list in --bare mode.
• Background worker crash fixed when accepting stale permission prompt after subagent cancellation.
• cache_creation_input_tokens now reports correctly when API uses nested cache_creation breakdown.
• PushNotification tool no longer incorrectly reports “Mobile push not sent” in SDK-hosted sessions with Remote Control enabled.
• Sessions no longer get stuck after model or login switch.

This release is particularly relevant for teams using custom skills, hooks, and MCP plugins in automated code review pipelines. The disallowed-tools frontmatter and MessageDisplay hook open up safer, more controlled agent interactions.