docs: Claude Code v2.1.273 - Gateway public-IP networks, hint headers, new Agent SDK configuration page

[claude-yolo]

Night shift report

WHY THIS MATTERS: v2.1.273 is a meaty release — 60+ changelog entries covering new enterprise gateway infrastructure, a behavior change for Bedrock/Vertex/Foundry auto mode, a new Agent SDK configuration reference page, and two new Managed Agents quickstarts. The gateway work alone (gatewayInternalNetworks) closes a real gap for enterprises whose internal networks use public IPv4 space. The auto-mode classifier default flip on cloud providers could surprise teams who relied on the server-side classifier.

HIGHLIGHTS:

• New: gatewayInternalNetworks managed setting — orgs whose internal networks are numbered from public IPv4 space they own (legacy /8, carrier blocks, etc.) can now declare those CIDRs so /login accepts a gateway there. Full validation rules and a <Warning> about not exposing to the internet documented in claude-apps-gateway.md. Requires v2.1.268+ on developer machines.
• New: LLM gateway hint headers (CLAUDE_CODE_GATEWAY_HINT_HEADERS=1) — opt-in sends x-claude-code-request-class, x-claude-code-agent-type, x-claude-code-prev-tool-durations, x-claude-code-compaction, and x-claude-code-context-compacted on every model request, giving gateway operators context to route/prioritize traffic.
• New: Agent SDK configuration.md — brand-new page documenting how to compose the options object, load settings files, choose a model, and configure environment; replaces scattered inline notes across other SDK pages. New untracked file.
• Auto-mode classifier default flip — Bedrock, Vertex, and Foundry now use the local classifier by default; opt back into the server-side classifier with CLAUDE_CODE_AUTO_MODE_SERVER=1. Teams using cloud-provider auto mode should verify behavior.
• New: Remote Control session forking — sessions started via claude --remote-control or /remote-control from the Claude app can now be forked as background sessions on the developer's machine.
• New managed-agent quickstarts — claude-quickstarts/managed-agents/sentry/ (daily Sentry triage via cron) and claude-quickstarts/managed-agents/slack/ (Slack @-mention bridge) are new untracked files showing the Managed Agents API patterns.
• 3 new env vars documented: CLAUDE_CODE_BASH_EDIT_DIFF (toggle post-Bash file diffs), CLAUDE_CODE_SESSIONEND_HOOKS_TIMEOUT_MS (override SessionEnd hook budget), CLAUDE_CODE_SYNC_SKILLS (download claude.ai skills in non-interactive mode).
• errors.md expanded — new entries for cloud session policy enforcement (Cloud sessions are disabled by your organization's policy), OAuth port exhaustion, WebFetch localhost restriction, teammate agent definition restore failure, and worktree-with-unpushed-commits variants.
• Bug fix parade — notably: permissions.blockReadsOutsideWorkingDirectories memory-directory bypass fixed; OTEL_LOG_TOOL_DETAILS=1 now logs real agent/skill/plugin names; auto-compact context meter was double-counting advisor turns (firing at ~half the real window); scheduled tasks running in the wrong session after worktree copy; SDK dropping subagent messages after moving to background.
• Claude Tag fixes — Enterprise Grid disconnect ghost sessions, scheduled tasks in shared private channels, mid-task reply restarts, AWS region-less endpoint signing, OAuth lowercase token type, channel manager on shared/legacy channels.
• Code Review fixes — ultrareview --post retry now posts exactly once; re-review skipped on empty/content-identical pushes for mixed-case repo names.
• discovery.json / tombstones.json — date-only bumps; no new domains, no new dead pages.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning