Startup report adds auth_conflict and other_hook_ask_outranks_host

What

When Claude Code starts under a program that drives it through the SDK (software development kit), it sends an init message describing the session. That message, and the SDK's model-info description, gain new fields:

• auth_conflict: added when Claude Code detects a conflict between ways of signing in. It names the token_source and the api_key_source, so you can see which login token and which API key were both found.
• other_hook_ask_outranks_host: added for local sessions, not remote ones, when certain other conditions hold. A hook is a script you configure to run at set moments; this field tells the host that a hook asking for permission takes priority over the host's own prompt.

The artifact upload approval prompt also changed. It previously listed CSV, Markdown, JSON and plain-text files as covered when approving later uploads; it now says .xlsx files still ask.

The setting behind the exit check for headless auto-mode runs, tengu_truthful_wren, is unchanged here: v2.1.319 compiled it on by default, and no reading has been taken under this release.

Why

A program hosting Claude Code can now tell when two sign-in methods clash and which one is in play, and whether hook permission prompts outrank its own. Spreadsheet uploads keep asking for approval each time.