diff --git a/.devcontainer/devcontainer-lock.json b/.devcontainer/devcontainer-lock.json
index d2ca48d..6b1d280 100644
--- a/.devcontainer/devcontainer-lock.json
+++ b/.devcontainer/devcontainer-lock.json
@@ -6,9 +6,9 @@
       "integrity": "sha256:71c2b371cf12ab7fcec47cf17369c6f59156100dad9abf9e4c593049d789de72"
     },
     "ghcr.io/helpers4/devcontainer/claude-dev:1": {
-      "version": "1.4.1",
-      "resolved": "ghcr.io/helpers4/devcontainer/claude-dev@sha256:82628c443bceb586d6463faef94b8a2a0f605b54bc2beffe5123cf714006ad68",
-      "integrity": "sha256:82628c443bceb586d6463faef94b8a2a0f605b54bc2beffe5123cf714006ad68",
+      "version": "1.4.2",
+      "resolved": "ghcr.io/helpers4/devcontainer/claude-dev@sha256:ac0d1c3a7e705a474477838f954e9ba111b7fca15b1f1a6448eacbf2b753ef8a",
+      "integrity": "sha256:ac0d1c3a7e705a474477838f954e9ba111b7fca15b1f1a6448eacbf2b753ef8a",
       "dependsOn": [
         "ghcr.io/helpers4/devcontainer/helpers4-common:1"
       ]
@@ -35,9 +35,9 @@
       "integrity": "sha256:b036ea02856d332a234ed720d35d395f0d5f9ca92bdf0940f5e1111a7f936480"
     },
     "ghcr.io/helpers4/devcontainer/helpers4-common:1": {
-      "version": "1.2.3",
-      "resolved": "ghcr.io/helpers4/devcontainer/helpers4-common@sha256:c7a3699fd60b5da8702d7d74ce48c58a84dfea4ee1f0f5370e8ce901b875aa8c",
-      "integrity": "sha256:c7a3699fd60b5da8702d7d74ce48c58a84dfea4ee1f0f5370e8ce901b875aa8c"
+      "version": "1.2.4",
+      "resolved": "ghcr.io/helpers4/devcontainer/helpers4-common@sha256:0aec7c2d5d322a23c2b7a84fcfbfdb0be2fabae23238ca314579f7dc580dd066",
+      "integrity": "sha256:0aec7c2d5d322a23c2b7a84fcfbfdb0be2fabae23238ca314579f7dc580dd066"
     },
     "ghcr.io/helpers4/devcontainer/openbao-env:1": {
       "version": "1.0.1",
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index d2a1490..330e778 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -32,7 +32,9 @@
       "remoteControl": true,
       "remoteControlAutoTrust": true,
       // Sessions started from claude.ai run unwatched: a permission prompt would stall them.
-      "remoteControlPermissionMode": "auto"
+      "remoteControlPermissionMode": "auto",
+      // Default model of those sessions (claude-dev ≥ 1.4.2).
+      "remoteControlModel": "sonnet"
     }
   },
   "customizations": {