docs: Claude Code v2.1.260 - security fixes, /diff panel, revert of Read() deny regression

[claude-yolo]

Night shift report

WHY THIS MATTERS: Two security bugs were silently letting more through than intended: permission rules whose path contained parentheses were dropped entirely (leaving those "read-only" folders actually writable), and zsh command substitutions hidden inside REPORTTIME/REPORTMEMORY/DIRSTACKSIZE assignments were auto-approved without prompting. Both are fixed in 2.1.260. On top of that, the 2.1.259 change that applied Read() deny rules to Bash arguments — which broke npm run build and made cd … && grep prompt in auto mode — is fully reverted. And there's a new /diff panel in fullscreen mode showing uncommitted changes alongside the conversation in real time.

HIGHLIGHTS:

• Security: parenthesized paths in permission rules were silently dropped — Edit(/some/(project)/src/**) style rules were treated as invalid and ignored, leaving those directories unprotected (fixed)
• Security: zsh variable assignment bypass — commands like REPORTTIME=0 evil-cmd were passing permission checks without triggering a prompt (fixed)
• Revert of 2.1.259 Read() deny regression — applying Read() deny rules to Bash arguments broke npm run build under any Read(./**/build/**) rule and caused cd … && grep to prompt in auto mode; now reverted
• New /diff panel — fullscreen mode gets a live side-by-side diff of uncommitted changes; toggle with /diff
• Fable 5.1 prompt caching fixed — context after tool results was re-sent uncached on every turn, now fixed; also /effort changes mid-session no longer invalidate the cache
• Agent team reliability — fixed: subagent wakeup on SendMessage completion going to wrong session, teammate transcripts going blank during API retry waits, phantom duplicate in ListAgents, 1-hour cap on background subagent commands removed
• Auto-compact improved — Opus and Fable sessions on 1M-context models now compact shortly before the limit; recovery compaction no longer times out at 10 minutes
• Bedrock corporate CA fix — model discovery, token counting, and SSO/STS calls no longer fail when the root CA is only in the OS cert store
• /ultrareview timeout extended — 30 min → 45 min for long-running cloud reviews
• ! bash-mode now always runs outside sandbox — even with sandbox.allowUnsandboxedCommands: false, matching the expectation of typing into your own terminal
• Self-hosted runner changed — --kill-session-after-min now releases sessions waiting on user input instead of killing them and reporting failure
• discovery.json / tombstones.json — date-only update; no new domains, repos, or dead/resurrected pages

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning