[claude-yolo]

Night shift report

WHY THIS MATTERS: v2.1.304 is a big release (~70 changelog lines). It adds /auto-mode-setup, a guided setup that teaches auto mode about your environment, and it now runs on Bedrock, Vertex, Foundry and gateways too. Separately, upstream renamed "routines" to "scheduled tasks" across the Claude Code docs, which changes the vocabulary users will search for. On the platform side, a new Compliance API endpoint lets org admins read every member's personal "Instructions for Claude" and Cowork global instructions. That is a privacy-relevant capability compliance and security teams will want to know about. Web fetch also gained a url_sources control for exfiltration hardening.

HIGHLIGHTS:

• Claude Code v2.1.304 (2.1.303 -> 2.1.304). Notable entries:
  • /auto-mode-setup: guided auto-mode onboarding from your project and recent sessions, now on 3P clouds, gateways and telemetry-disabled sessions
  • /claude-api managed-agents-secure: audits a Managed Agents agent against Anthropic's security guide (read-only)
  • Mods: decider: "person" on tool.check (only a human or host callback can approve), e.isReadOnly, and settings.read hooks that see every settings layer, so a managed mod can enforce org settings as a ceiling
  • Safety fixes: rm -r of mounted drives (/Volumes, /media, WSL /mnt/c) now prompts. claude --worktree no longer deletes a worktree and branch at exit without asking when HEAD was detached (this could lose commits)
  • Pro/Max warning before resuming an inactive conversation that would burn a noticeable share of the 5-hour limit
  • Tool search is now on by default behind a custom ANTHROPIC_BASE_URL. CLAUDE_CODE_AUTO_COMPACT_WINDOW accepts k/M suffixes (200k used to silently become 100K)
  • /fast drops the "(research preview)" label on Opus 5.5
• Routines -> "scheduled tasks": routines.md / web-scheduled-tasks.md were rewritten (~300 lines each) under the new name. The admin toggle moved to Organization settings > Capabilities > Remote sessions. The old name stays in URLs, the CLI and the API. desktop-scheduled-tasks.md and scheduled-tasks.md now cross-link a "compare scheduling options" section.
• New API endpoint: GET /v1/compliance/organizations/{org_uuid}/user_preferences (new files under content/en/api/compliance/organizations/user_preferences*). It returns members' account-level personal instructions, paginated, with include_unset and a user_ids filter (max 10). The large compliance/activities diff is a schema rework of actor types and fields.
• Web fetch url_sources: a new optional parameter to exclude user input, client tool results, or server tool results (or specific tools) as allowed URL sources. Useful for stopping a code-runner tool from laundering URLs Claude wrote itself.
• permission-modes.md: new "mounted drive prompt" section with the path table and the CLAUDE_CODE_DISABLE_MOUNTED_DRIVE_RM_PROMPT=1 opt-out. dontAsk docs now say installed mods can still approve calls.
• model-config.md: a warning/values table for CLAUDE_CODE_AUTO_COMPACT_WINDOW.
• Managed Agents vault credential docs: wording rewrite across all SDK languages ("Get" -> "Retrieve", clearer field descriptions), no schema change spotted.
• No deletions. tombstones.json and discovery.json changed only their updated date: no new deaths, no resurrections, no new sources.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning