docs: Claude Code v2.1.268 - task tools restricted to older models, gateway pricing, security fixes

[claude-yolo]

Night shift report

WHY THIS MATTERS: v2.1.268 is a dense patch release that changes default behavior for anyone using task-tracking tools on newer Claude models, fixes a regression that has been silently breaking all third-party Anthropic-compatible endpoints since v2.1.265, and ships several security fixes around credential leakage and permission-rule bypasses via symlinks. SDK users on Bedrock/Vertex/Foundry also get system-prompt delivery changes that match first-party behavior. There is also a new doc page for Claude Tag personal connectors, which marks a new capability entering beta.

HIGHLIGHTS:

• Behavior change (SDK/CLI): Task tools now gated to older models by default. TaskCreate, TaskUpdate, TaskGet, TaskList, and TodoWrite are no longer offered by default on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, or any model Claude Code doesn't recognize. Users on newer models must set CLAUDE_CODE_ENABLE_TODO_TOOLS=1 to re-enable. Applies from TypeScript Agent SDK v0.3.268. Anyone relying on these tools in agentic workflows on modern models will silently lose them after updating unless they opt in.
• Regression fix (critical): Third-party ANTHROPIC_BASE_URL endpoints broken since v2.1.265. A regex in the Artifact tool's input schema that those endpoints reject caused every turn to fail with HTTP 400. Fixed in this release — 3 versions of silent failure.
• Security: Credentials no longer leak from git source URLs or MCP ${VAR} configs. Plugin/marketplace errors were exposing tokens/passwords from git URLs; /mcp, /plugin, claude mcp list/get, and MCP login errors were resolving and printing secrets from ${VAR} placeholders in MCP configs. Both fixed.
• Security: Permission rules on symlinked paths now apply correctly. Deny/ask rules on /etc, /tmp, /var (macOS) and /bin (Linux) were not applying when the real path was used, and Bash commands were ignoring deny rules on symlinked path spellings. Also fixed: env -C/eval on the same line as a Read/Edit could bypass deny rules.
• New doc: Claude Tag personal connectors. content/claude/claude-tag/concepts/personal-connectors.md is a brand-new page documenting how users' own claude.ai connectors (calendar, email, etc.) can be used in Claude Tag channels — per-user approval flow, review-before-post controls, and what other channel members can see. This is a limited-availability beta feature.
• Gateway: pricing parity and CIDR warnings. With pricing: in gateway.yaml, Claude Code clients now see rates via managed settings so /cost and telemetry match the spend meter. New startup warning when allow_cidrs is empty; new gatewayInternalNetworks managed setting for orgs with their own public IPv4 block.
• WebFetch hard deadline: 300 seconds. WebFetch now fails if a server holds the response open indefinitely. Override with CLAUDE_CODE_WEBFETCH_DEADLINE_MS (0 disables).
• Bedrock/Vertex/Foundry: system prompt as attachments, byte-stable tool list. These sessions now match first-party behavior — environment/model/settings delivered as attachments, tool list stable across turns. Prompt caching and extended thinking should be more reliable on these platforms.
• Plugin UX: no more /reload-plugins. Installing, enabling, or disabling a plugin takes effect when the menu closes.
• High CPU in idle sessions fixed. A busy loop was pinning a CPU core in long-running idle sessions.
• API docs: per-model error messages for thinking.type.disabled clarified. Mythos Preview (the one that accepts extended thinking) gets a different error than Fable 5.1/Mythos 5.1/Fable 5/Mythos 5 (which only accept adaptive). The docs now accurately reflect which message each model returns.
• claude auth status --json now includes configDirectory.
• claude plugin commands gain --json output (install/uninstall/update/enable/disable) with errorDetails/noteDetails in plugin list --json.
• VSCode: multiple fixes — CLAUDE_CONFIG_DIR in settings, model pill blanking on login/logout, Auto mode disappearing, session names reverting, Windows/WSL issues.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning