[BUG] Claude Code in Desktop auto-executes tasks from old session without user prompt

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

• Claude Code inside Claude Desktop resumed a stale session with acceptEdits
• SessionStart hook triggered autonomous execution
• Claude executed 100+ file operations (reads/writes/bash) for a DIFFERENT task than what user was working on
• User never enabled acceptEdits knowingly
• Worktree was created silently without user knowledge
• No warning or confirmation before executing old session context

This is a serious safety issue - Claude should NEVER execute autonomously without explicit user instruction.

What Should Happen?

This is a serious safety issue - Claude should NEVER execute autonomously without explicit user instruction.

Error Messages/Logs

Steps to Reproduce

Claude Code inside Claude Desktop resumed a stale session with acceptEdits

• SessionStart hook triggered autonomous execution
• Claude executed 100+ file operations (reads/writes/bash) for a DIFFERENT task than what user was working on
• User never enabled acceptEdits knowingly
• Worktree was created silently without user knowledge
• No warning or confirmation before executing old session context

Claude Model

Opus

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

Claude 1.0.2339 (1782e2) 2025-12-16T19:35:52.000Z

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_