docs: Claude Code v2.1.233 - auto mode default, Windows security fix, memory limits for Bash

[claude-yolo]

Night shift report

WHY THIS MATTERS: v2.1.233 is a dense release with two security fixes, a behavior change affecting all Pro/Max/Team users (auto mode is now the default), a deprecation that changes how todos work in agentic pipelines, and several infra improvements that affect self-hosted and enterprise deployments. Anyone building on Claude Code or running it at scale needs to read this one.

HIGHLIGHTS:

• Auto mode now on by default for Pro/Max/Team — documented in permission-modes.md with a new "Which mode a session starts in" section and decision table. Native Windows gets this in 2.1.233; macOS/Linux/WSL had it from 2.1.228. Enterprise plans and API keys stay on Manual. First session after install stays on Manual.
• Security fix: Windows NTLM credential-leak vector closed — NT \??\ device-prefix paths were bypassing UNC path validation. This is an actual security regression being patched.
• Todo/task tools removed from newer models — TaskCreate/Get/Update/List and TodoWrite are no longer available on Opus 4.8, Sonnet 5, Fable 5, Mythos 5, and newer. Agentic pipelines that relied on these tools silently break unless CLAUDE_CODE_ENABLE_TODO_TOOLS=1 is set.
• Linux Bash memory cgroup support (CLAUDE_CODE_TOOL_MEMORY_LIMIT) — opt-in cap on runaway build commands eating memory; useful for CI.
• forward_user_identity apps gateway setting — sends signed-in user identity as headers to proxies behind the gateway; enables per-user spend attribution for enterprises.
• CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS — new env var to tune the WebFetch session URL cache TTL (default 15 min).
• Hooks doc clarified: skill hooks now persist for the rest of the session (not just while skill runs); use once: true to run once. Hook stdout parsing rule documented: starts with { → parsed as JSON, anything else → plain text.
• MCP v2 reconnection loop fixed — affected serverless MCP hosts that terminate long-held streams on a timeout.
• Windows auto-mode regression from 2.1.232 reverted — repeated manual approval prompts on ordinary cd && command > file Bash commands.
• GitLab MR URL support in --worktree flag and claude agents view (MRs show as !N).

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning