docs: Claude Code v2.1.235 - Redirection permission checks, FileChanged hooks expanded, SDK 0.123.0

[claude-yolo]

Night shift report

WHY THIS MATTERS: This release tightens permission enforcement around shell redirections (a previously unchecked write path), significantly expands FileChanged hook docs with a working example and dynamic watchPaths guidance, and ships Python SDK 0.123.0 / TypeScript SDK 0.118.0 with API additions to files, memory stores, user profiles, and skill — plus a removal of the unsupported mid_conv_system content block that could affect anyone using it.

HIGHLIGHTS:

• New: Redirection permission checks (permissions.md) — >, >>, 2> targets are now checked against Edit allow/deny rules and protected paths. Bash(git commit *) no longer implicitly permits its output target. /dev/null is exempt; ~-prefixed or glob targets always require approval. This is a behavior change that could prompt existing users who redirect in previously-approved Bash commands.
• Breaking note in settings.md: strictKnownMarketplaces hostPattern matching for git-type sources changed in v2.1.234 — SSH addresses without a scheme (git@host:path) now correctly extract the host; before v2.1.234 some non-SSH forms also matched, which was wrong.
• FileChanged hooks (hooks.md) — now documented as using a filesystem watcher (not tool call inspection), so it fires for Bash rewrites and external processes too. New complete example: normalize line endings in data.csv after any write, with a guard to avoid infinite re-trigger loops. New guidance: use watchPaths return from hooks to build the watch list dynamically; seed it from SessionStart/CwdChanged when you can't name files upfront.
• PostToolUse clarification (hooks.md) — new note: omit matcher or use "*" to catch every successful tool call; use git status --porcelain inside the hook to see untracked files git diff misses. Explicit cross-reference: PostToolUse matching Edit|Write does NOT fire when Bash or an external process rewrites the file — use FileChanged for that.
• Python SDK 0.123.0 / TypeScript SDK 0.118.0 — API additions to files and memory stores, updates to skill and user profiles, new workspace ID helpers in response headers. Bug fix: mid_conv_system content block removed (was never supported). Python fix: platform headers no longer spawn a subprocess. Session-runner fix: retry tool-result sends for at least the lease TTL.
• hooks-guide.md — added cross-reference pointing PostToolUse reformatting hooks to FileChanged when the trigger is any file write, not just Claude's tool calls.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning