[claude-yolo]

Night shift report

WHY THIS MATTERS: Claude Code now documents a way to remove the last safety net in bypass mode. With CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS=1, rm -rf ~-class commands on critical paths run without asking. That is the security story of the night. The MCP project also accepted a formal release calendar that moves the next spec release from December 2026 to late March 2027. Two admin-facing defaults flip in early November (Enterprise plugin publishing on Nov 4, Unified Claude on Desktop 3P on Nov 10), and admins who want the old behavior have to act before those dates. Most of the 405 changed files are noise: upstream swept platform.claude.com to curly quotes. After filtering that out, about 100 files have real content changes. The CLI version is unchanged at 2.1.311 (the manifest only lost readmeFilename). No deletions, and no tombstone or discovery changes.

HIGHLIGHTS:

• New: turn off the critical-path removal prompt (permission-modes.md, env-vars.md, settings-reference.md, agent-sdk/permissions.md). CLAUDE_CODE_EVEN_MORE_DANGEROUSLY_SKIP_PERMISSIONS=1 lets Bash/Monitor rm/rmdir on critical paths run with no prompt, in bypassPermissions mode only. It is read from the launch environment only and ignored in every settings file. The docs add startup notices to check whether it took effect, and a long list of cases where it silently doesn't: VS Code/Desktop sessions, nested claude, background sessions, deny/ask rules, unreadable managed settings or Windows registry. They carry an explicit warning that rm -rf ~ can then run unasked.
• MCP SEP-3398 accepted: Release Cycle Updates (new content/mcp/seps/3398-release-cycle-updates.md). Spec releases move to every six months (last Tuesday of March and September) on an eight-month overlapping cycle with soft freeze and release managers. The December 2026 release target moves to late March 2027.
• Claude Desktop 3P: Unified Claude on by default from Nov 10, 2026 (unified-claude.md, admin-console.md, chat.md). It was previously described as "enforced". It now becomes default-on where desktopHome is unset, with exceptions (a Chat retention period that differs from Cowork's, everything off, older app versions). The docs warn admins to set coworkSessionRetentionDays first.
• Enterprise plugin/skill publishing default changes to Open on Nov 4, 2026 (claude/plugins/admin.md), for orgs with security scanning on. Published items list once they pass the automatic scan, with no admin review. Admins must explicitly pick Requires review to keep gating.
• Claude Desktop 3P: move to Claude Enterprise now supports letting users switch between their cloud provider and Enterprise at sign-in, and adds a "Nothing migrated" troubleshooting section.
• Claude Desktop 3P: new behavesAs field maps gateway routing aliases to a real Claude model, so users get its Effort control and context window. Also new: a sessionRetentionHold legal-hold section, a Storage window / /storage command (Desktop 3.6556.1+), and a procedure for moving a plugin marketplace to a new source without uninstalling users' plugins.
• Claude Code features:
  • Skills/slash commands get a background: false frontmatter field for context: fork
  • Emoji shortcodes (:name:) in the prompt input
  • mcp_server_errors in stream-json system/init for skipped --mcp-config entries
  • claude mcp list/get now shows connection-failure details
  • Mods get a settings.read hook that can rewrite Claude Code's own merged settings, multi-line Input (rows, v2.1.301+), and Button children (v2.1.295+)
  • Worktree hardening: symlink and .. path refusal in WorktreeCreate hooks, a capped origin/HEAD fetch for fresh bases, lock-release sweeps, and project-scope plugins loading in worktrees
  • Project subagent frontmatter hooks now need workspace trust
  • claude -p '/code-review ultra' doesn't return findings, so docs point scripts to claude ultrareview
• Desktop/web: the "Settings > Claude Code" menu is being renamed "Settings > Code". Docs now name both throughout.
• API:
  • New DELETE /v1/user_profiles/{id} (DeleteUserProfile IAM action on AWS)
  • User profiles now work on Google Cloud (Anthropic managed), with a per-platform support table
  • Refusal fallback blocks gain a trigger field ({type: "refusal", category})
  • ant CLI and Go SDK bumped 2.3.0 -> 2.4.0
  • Compliance activity feed organization_id can be null
• github mirror: the official code-review plugin's command was rewritten. It used 5 Sonnet reviewers with 0-100 confidence scoring; now it runs Sonnet CLAUDE.md agents plus Opus bug agents with validation subagents. It prints to the terminal by default, and --comment posts inline comments.
• Noise: curly-quote/apostrophe normalization across ~300 platform docs, API-reference anchor links added to field names, removal of stale "requires v2.1.2xx" notes, and support article refreshes.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning