You'll notice
Forking a subagent from an in-process tool call is now blocked in plan and dontAsk permission modes
What
When a subagent (a secondary Claude instance handling part of a task) is launched from an in-process, tool-triggered call rather than a direct user action, Claude Code now checks the parent's permission mode. If the parent is in plan mode or dontAsk mode, forking a new agent is refused with a message explaining that the fork would otherwise run without the parent's restriction, and suggesting starting a fresh context instead.
Why
This closes a gap where a tool-triggered fork could bypass the stricter permission restrictions of plan or dontAsk mode, since a forked agent wasn't previously bound by the mode its parent was running under.