docs: Python SDK v1.6.0 + tee permissions + plan-mode-in-SDK clarification + GitLab marketplace + Salesforce beta

[claude-yolo]

Night shift report

WHY THIS MATTERS: Four distinct things landed today, each worth knowing. The Python SDK hit v1.6.0 with new API surface (url_sources for web fetch, Managed Agents auto mode tool permissions, signed compaction blocks beta, async credential token providers, and a retry-after fix that now correctly honors values above 60 seconds). On the permissions front, two behavioral changes arrived: tee is now covered by Edit allow/deny rules (v2.1.269+), and ! negation patterns in deny/ask lists can carve out exceptions within the same file — both are net-new capabilities that change what rules do. The plan-mode docs got a significant disambiguation: plan mode's bypass-permission relaxations only apply in interactive terminal sessions, explicitly not in SDK sessions, headless -p runs, or the VS Code chat panel — SDK users setting allowDangerouslySkipPermissions: true with permissionMode: 'plan' now have a clear contract (edits still go to canUseTool). And the plugin marketplace added GitLab: org admins can now sync a marketplace from gitlab.com or a self-managed GitLab instance via a new GitLab configuration in Organization Settings.

HIGHLIGHTS:

• Python SDK v1.6.0 (today): url_sources on web fetch tool, auto mode tool permissions for Managed Agents, signed compaction blocks (beta), thinking_mismatch_allowed in input_transformations (beta), async credential token providers, retry-after fix for values >60s, async client connection error retries
• tee now covered by permissions (v2.1.269+): make | tee build.log and similar pipelines check tee write targets against Edit allow/deny rules and protected paths — same as cat/sed/redirections; Bash(tee *) alone doesn't bypass a working-directory restriction
• ! negation patterns in deny/ask rules: Read(*.env) + Read(!sample.env) blocks all .env files except sample.env; carve-outs are limited to same-source rules and can't reopen a subdirectory blocked as a whole
• Plan-mode bypass is interactive-terminal-only: docs now explicitly say plan mode keeps its blocks in SDK sessions, -p headless runs, and VS Code chat panel; allowDangerouslySkipPermissions: true + permissionMode: 'plan' in SDK still routes to canUseTool
• GitLab plugin marketplace support (beta): org admins can sync a Claude Code plugin marketplace from gitlab.com or a self-managed GitLab instance; requires adding a GitLab configuration (access token) under Organization Settings > Claude Code; gitlab.com sources must share the top-level group/namespace
• Managed settings ! rule restriction: embedding-host parent settings can't carve paths out of managed deny rules with ! negation patterns
• Salesforce in Claude (beta): 37 pre-built sales skills, available on all paid plans for Salesforce-approved orgs; accounts, opportunities, and pipeline visible in Claude

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning