Claude Code 2.1.317 has some nice safety changes.
Safety
- /schedule warns when a new cloud scheduled task gets connectors you didn’t ask for, and shows how to remove them
- It asks before a web or shell tool call sends your account email address to the network
- Agent SDK hook callbacks get
onFailure: "block", so a failing callback blocks the action instead of letting it through - A notice when auto mode’s check has no answer for a subagent’s tool call
Also
- A cost report endpoint on the Claude apps gateway admin API
- Fixes for project and local MCP servers disconnecting after the first turn, and for
claude auth statusexiting before a slow token refresh was saved
My take
Hooks failing closed is the right default for anything that guards an agent.
Review before you install: read the release notes yourself, back up your config, and try new versions somewhere you can afford to break first.
God Bless, and Happy hacking!