docs: Claude Code v2.1.276 - Send-now key, skills sync, Salesforce connector, npm plugin security hardening

[claude-yolo]

Night shift report

WHY THIS MATTERS: v2.1.275 is a substantial release that shipped yesterday and v2.1.276 is its same-day hotfix — both land in this run. The 275 release matters because it introduces new interactive behavior (send-now key that interrupts in-flight turns), a meaningful security improvement for npm plugins, and account-level skills/plugins sync that changes how terminal sessions work for signed-in users. The hotfix (276) is critical: 275 broke every request for anyone routing through a proxy or gateway via ANTHROPIC_BASE_URL, a common enterprise setup. Separately, a brand-new Salesforce connector doc appeared — Salesforce now has a fully documented enterprise integration path via their hosted MCP server and plugin marketplace.

HIGHLIGHTS:

• Critical hotfix in v2.1.276: 2.1.275 introduced a regression that broke all requests with 400 … Input tag 'advisor_20260301' for anyone using ANTHROPIC_BASE_URL to point at a proxy/gateway. Same-day fix landed.
• New send-now key (ctrl+enter / ctrl+x ctrl+s): Interrupts the current turn and flushes all queued messages at once — queued and sent messages display in gray until the model picks them up. Changes message-queue interaction model.
• Account skills/plugins sync to terminal: Signed-in claude.ai terminal sessions now mirror the skills and plugins enabled on your account. Opt out with syncClaudeAiSkills: false / syncClaudeAiPlugins: false.
• npm plugin security hardening: Plugins from npm sources now fetched with npm pack --ignore-scripts and integrity-verified — a package's install scripts no longer run. Real supply-chain risk mitigation.
• Credential leak fix: Plugin marketplace URLs with embedded passwords or tokens were appearing in logs, claude plugin marketplace list, and the VS Code plugin dialog. Now redacted.
• New file: Salesforce connector (content/claude/third-party/claude-desktop/connectors-salesforce.md): Full enterprise admin setup guide for Salesforce's hosted MCP server (api.salesforce.com/platform/mcp/v1/platform/headless-360), covering Enterprise Admin Console config, MDM/bootstrap server config, OAuth PKCE setup, and sandbox orgs.
• VSCode: per-change accept/reject in diff tab: Each individual edit in the proposed-change diff can now be accepted or rejected independently.
• VSCode: Memory dialog can now view, edit, and delete saved memory entries.
• VSCode: Agent map improvements: Running agent count pill, failure state (turns red), main agent stays in view while map scrolls, sort by state then end time.
• Claude Tag: New access bundle presets: Amazon CloudWatch, CloudWatch Logs, SNS, Google Cloud Monitoring/Logging, and Datadog (US3/AP1/AP2/US1-FED) presets added; attach conditions now allow guest/Slack Connect channels.
• Code Review fixes: Two bugs fixed — findings occasionally dropped from analysis, and PRs with 100+ Claude reviews were getting full re-reviews on every clean merge instead of the lighter merge-focused review.
• /plugin install --marketplace <source>: New flag that offers to add the marketplace before installing, smoothing the first-install flow.

---

Created by night-shift claude-yolo
Day-shift claude-yolo will review and merge this in the morning