diff --git a/content/.metadata.json b/content/.metadata.json
index f46b217462..fcddcd0c4e 100644
--- a/content/.metadata.json
+++ b/content/.metadata.json
@@ -1,7 +1,7 @@
 {
   "metadata": {
     "version": "2.0",
-    "fetch_date": "2026-09-17T19:22:25.515409Z",
+    "fetch_date": "2026-09-18T05:21:48.494263Z",
     "section": "all"
   },
   "items": [
@@ -30,7 +30,7 @@
       "url": "https://platform.claude.com/docs/en/get-started",
       "status": "success",
       "path": "en/get-started.md",
-      "sha256": "8f089710465a9c627f3a33dfaec33dcd3352a81c80013967206187b81245422c",
+      "sha256": "736a3b24909164c5ad6e2f972645368b444970aa9d5e393b589b6715006284a9",
       "size": 19464
     },
     {
@@ -58,8 +58,8 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/handling-stop-reasons",
       "status": "success",
       "path": "en/build-with-claude/handling-stop-reasons.md",
-      "sha256": "efd90d3307adede99c65ae6faf26c590849b8ab2bf63e365825480e91855cdfd",
-      "size": 121102
+      "sha256": "687d8372b3f8a04cdfc101cb6a753a14c3a374518a0002f427b9271f71bc45cf",
+      "size": 121288
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/refusals-and-fallback",
@@ -100,8 +100,8 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/structured-outputs",
       "status": "success",
       "path": "en/build-with-claude/structured-outputs.md",
-      "sha256": "4e500fed30c759764ba06bcd96b9df7160ecb8e5e7611aae9bc229086e0b9204",
-      "size": 110492
+      "sha256": "d5ffcb2a35df0070fa77e003d0f2faa92045abb1f93bf7fd5f67b9bfc60d34de",
+      "size": 110517
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/citations",
@@ -114,15 +114,15 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/streaming",
       "status": "success",
       "path": "en/build-with-claude/streaming.md",
-      "sha256": "b0fefc9a3d98b06f5f18736c833527ccbad28ab5c01cd0270a8b1dffe243787a",
-      "size": 50872
+      "sha256": "2cde13ddd3550a97ed019bc89fb1d1af36926c899f11d423227980aab48cd1ff",
+      "size": 50978
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/batch-processing",
       "status": "success",
       "path": "en/build-with-claude/batch-processing.md",
-      "sha256": "16e64554cda0e626e61dd9614de4fdb60aebdfcf7b04654786f8c92307a1dab0",
-      "size": 73682
+      "sha256": "fc513a279f548b2b6cb497db87681de9365ede2ca331673c8f9a9b11a0b72949",
+      "size": 74137
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/search-results",
@@ -156,8 +156,8 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/thinking",
       "status": "success",
       "path": "en/build-with-claude/thinking.md",
-      "sha256": "0d92b54b019d206dd03d60d7d7e4bcdb8e4c2f9f9b6b8a91f5bab810c77c0ed2",
-      "size": 72055
+      "sha256": "20e28393b937d8436091423bf2afbeabeccd2c97b5d9db72aef2da7858752f00",
+      "size": 72899
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/thinking-steering-and-cost",
@@ -191,8 +191,8 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/extended-thinking",
       "status": "success",
       "path": "en/build-with-claude/extended-thinking.md",
-      "sha256": "f36ffca7bb81f3a718ac63d4feddc5d0579349aa60e328285bea1b996afc466b",
-      "size": 22064
+      "sha256": "cb6d05be6b84ca90b2f36c1993ef56655d4a47959e190d3ed26437e9bd7aadc6",
+      "size": 22182
     },
     {
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/overview",
@@ -240,8 +240,8 @@
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/tool-runner",
       "status": "success",
       "path": "en/agents-and-tools/tool-use/tool-runner.md",
-      "sha256": "db04c59098955d6f262f3c64053a341690a96faba7b419527d86c750bca4b45f",
-      "size": 63739
+      "sha256": "20005bb5e9611aba08ec8436c5b25d7575318acbff8338abdba67ffb3c601818",
+      "size": 63966
     },
     {
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/strict-tool-use",
@@ -282,8 +282,8 @@
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/advisor-tool",
       "status": "success",
       "path": "en/agents-and-tools/tool-use/advisor-tool.md",
-      "sha256": "e798608a5dfa622e88c58c702ea92d194e53b19d6d35af59857ed01dddea26ab",
-      "size": 97089
+      "sha256": "d022531041a070a4d8ffa8208db88cb31bef9f3b5de335b045d82c0d21151f8a",
+      "size": 95968
     },
     {
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/tool-search-tool",
@@ -310,22 +310,22 @@
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/text-editor-tool",
       "status": "success",
       "path": "en/agents-and-tools/tool-use/text-editor-tool.md",
-      "sha256": "177d2635fdb6362ac4880d096f3046f73bf79cc947c8abb6d8e5036e64835759",
-      "size": 81068
+      "sha256": "5895976bb3f2058da30462d17515307377f68b3a629c5294bb877cb15f5ae015",
+      "size": 81145
     },
     {
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/computer-use-tool",
       "status": "success",
       "path": "en/agents-and-tools/tool-use/computer-use-tool.md",
-      "sha256": "23aa6bf74b1040e9628082f6e64adaa89d9e448e9af03e78594c73deffd452b3",
-      "size": 115654
+      "sha256": "9c36950db9e5d900d715eb233e807b71574e3c7cc77c0ae56f3efd060e631193",
+      "size": 115751
     },
     {
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/browser-use-tool",
       "status": "success",
       "path": "en/agents-and-tools/tool-use/browser-use-tool.md",
-      "sha256": "8119432f8aaee579c2a63b50183e20e46f9ccc6347ac780651ca55150497b558",
-      "size": 107323
+      "sha256": "cab42ac0c7ade7c3a8a6edbd41b1c15361a0e4b645d3ff32892c61be5126ff01",
+      "size": 107358
     },
     {
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/troubleshooting-tool-use",
@@ -373,8 +373,8 @@
       "url": "https://platform.claude.com/docs/en/agents-and-tools/tool-use/fine-grained-tool-streaming",
       "status": "success",
       "path": "en/agents-and-tools/tool-use/fine-grained-tool-streaming.md",
-      "sha256": "59b4014da614f1c40b7540d793a7a3d81f7a73b745ec02120d11817314b6befc",
-      "size": 35555
+      "sha256": "47de62c46c5fe04e104d5573207782d153659b654dfdd370b626c95b67bd4e51",
+      "size": 36125
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/context-windows",
@@ -387,8 +387,8 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/compaction",
       "status": "success",
       "path": "en/build-with-claude/compaction.md",
-      "sha256": "a9a1090a14a88c683044df4db409ce306d9af87cc9e82c373be2def3e2a66430",
-      "size": 127557
+      "sha256": "562043fd4fdca1b2491501207f61205f56215d43ea9362fb4905b4df9541dbed",
+      "size": 136181
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/context-editing",
@@ -415,15 +415,15 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/mid-conversation-effort-example",
       "status": "success",
       "path": "en/build-with-claude/mid-conversation-effort-example.md",
-      "sha256": "88a2fa6d07b354b90d37bbab7c6c1f65502776a31e4be76eaefe73d788798fbd",
-      "size": 165002
+      "sha256": "76362f33e12381f9c8740881713af9343d05913b259eaa5f139f86d9be785ed6",
+      "size": 165337
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/cache-diagnostics",
       "status": "success",
       "path": "en/build-with-claude/cache-diagnostics.md",
-      "sha256": "6c70c63566162d11cbe51abb10c94225e0c090b1f2efd1c0589dc9ff16159dd2",
-      "size": 48968
+      "sha256": "d3e28ffed4926bb94eb4007a6592f53357e9a9d28a87e0822fb2db536118da17",
+      "size": 49157
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/token-counting",
@@ -506,8 +506,8 @@
       "url": "https://platform.claude.com/docs/en/agents-and-tools/mcp-connector",
       "status": "success",
       "path": "en/agents-and-tools/mcp-connector.md",
-      "sha256": "eed74bbeb6a246b30e9a1ae2d00abf5599d291f16bda75f3c1cb045b7648a0a6",
-      "size": 49439
+      "sha256": "773fcff1c17504f467db332367447a21aa74fe72ff82ce6679b0fcd9f33cb97e",
+      "size": 49734
     },
     {
       "url": "https://platform.claude.com/docs/en/agents-and-tools/mcp-tunnels/overview",
@@ -576,36 +576,36 @@
       "url": "https://platform.claude.com/docs/en/build-with-claude/claude-in-amazon-bedrock",
       "status": "success",
       "path": "en/build-with-claude/claude-in-amazon-bedrock.md",
-      "sha256": "4e91cdf822bf5b478532fdfde35f67b52f70dbb5474178081f8108f24be51c62",
-      "size": 20397
+      "sha256": "aba0c1a2b2f55118b1ed051acfdde95354b4e41d43e3baba5ac8d79f0665be79",
+      "size": 20637
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/claude-on-amazon-bedrock-legacy",
       "status": "success",
       "path": "en/build-with-claude/claude-on-amazon-bedrock-legacy.md",
-      "sha256": "ad53967a84bb65c81279f4cf3c367f96a1c551cbfb1e4449474b539f6684a834",
-      "size": 40298
+      "sha256": "214583274e1592a08573f02994efe03d395b5509866371d33309e41ae8d9dac2",
+      "size": 40526
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws",
       "status": "success",
       "path": "en/build-with-claude/claude-platform-on-aws.md",
-      "sha256": "0ff935251ef5bee607ae9d604d1c665269af87e8eda7c66c98362c1d5906779c",
-      "size": 86337
+      "sha256": "95d6892924e5e6dde77da6b2f7fcb1fd38f67985fbe437c7e0efb47f67c2a4ba",
+      "size": 87248
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/claude-on-vertex-ai",
       "status": "success",
       "path": "en/build-with-claude/claude-on-vertex-ai.md",
-      "sha256": "8157c52a75bb1ba88529a7c3e02e0456ec1d3b8b68401c398033b178290cd331",
+      "sha256": "4025f2c904a8be00a4525269430287ddf3edb151993df0d71e6f9794e5c7c420",
       "size": 32635
     },
     {
       "url": "https://platform.claude.com/docs/en/build-with-claude/claude-in-microsoft-foundry",
       "status": "success",
       "path": "en/build-with-claude/claude-in-microsoft-foundry.md",
-      "sha256": "f8e3dda0d43c9cd7976aab818d1b0d9f06f7d425812ee4a5e9aa5cb49c99ed60",
-      "size": 37242
+      "sha256": "6988971f491ba5e1ea14f954454b532d0e9b156f4818f69045e368b222744b5d",
+      "size": 37482
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/overview",
@@ -618,8 +618,8 @@
       "url": "https://platform.claude.com/docs/en/managed-agents/quickstart",
       "status": "success",
       "path": "en/managed-agents/quickstart.md",
-      "sha256": "df09544732f9a161b67a2c9db33f28ab05a5e5df2a32e19e9fd8d34513728729",
-      "size": 30735
+      "sha256": "789dbec9dc5cf387f23ce55acd669557ceab40aeda5129d24afad264a661fd97",
+      "size": 31226
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/onboarding",
@@ -632,8 +632,8 @@
       "url": "https://platform.claude.com/docs/en/managed-agents/migration",
       "status": "success",
       "path": "en/managed-agents/migration.md",
-      "sha256": "4624fa13705f3c0b9f32aafbf59692450c4b75ee582934b71b77c5609198790a",
-      "size": 53080
+      "sha256": "49e179c6a278e247ffce713f2f6a9cc4053809edee440ae91019ac65264f73a4",
+      "size": 54269
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/agent-setup",
@@ -667,8 +667,8 @@
       "url": "https://platform.claude.com/docs/en/managed-agents/skills",
       "status": "success",
       "path": "en/managed-agents/skills.md",
-      "sha256": "35d65d57b1acdd09241ff5b13fd74545d182d690e6b065569479c606d76687f2",
-      "size": 22504
+      "sha256": "9103ef787e4627af1795423fb40622414e5ecc81bfbb79eb135803e5f9689976",
+      "size": 23273
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/environments",
@@ -716,8 +716,8 @@
       "url": "https://platform.claude.com/docs/en/managed-agents/events-and-streaming",
       "status": "success",
       "path": "en/managed-agents/events-and-streaming.md",
-      "sha256": "6864fe7b305b5aa36895c016a598473288803df55de2b59529c8c096127904db",
-      "size": 117860
+      "sha256": "57357dafc3134675f7d29492382d17a50757b7d94106f931b4c495733f6e5600",
+      "size": 120194
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/budgets",
@@ -744,8 +744,8 @@
       "url": "https://platform.claude.com/docs/en/managed-agents/vaults",
       "status": "success",
       "path": "en/managed-agents/vaults.md",
-      "sha256": "7f19f26fa99c2fcfe55b0bcaed09798c68ba363a0e2bd709fe6133c333cb8ad0",
-      "size": 46505
+      "sha256": "50cdf58be928566dd357a92e960eade32c61bf813966b050500a0d59c9e9ee79",
+      "size": 46540
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/github",
@@ -758,8 +758,8 @@
       "url": "https://platform.claude.com/docs/en/managed-agents/files",
       "status": "success",
       "path": "en/managed-agents/files.md",
-      "sha256": "8908d422a446ed5606901247f5c710eb8b95c327755d84dd6c8b601030357351",
-      "size": 21873
+      "sha256": "6e8298ee92853581cdbbbad3c25c122c6a145f842c3930162d6ee9ffbe547da7",
+      "size": 21939
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/memory",
@@ -779,8 +779,8 @@
       "url": "https://platform.claude.com/docs/en/managed-agents/multiagent-orchestration",
       "status": "success",
       "path": "en/managed-agents/multiagent-orchestration.md",
-      "sha256": "7f8e329e71df454f4cb6df44123e1f3aff8dfa5e99e5edff9bbc6b377be499de",
-      "size": 61081
+      "sha256": "9a4afa7cd93b30333d3b858e1d17b0bea21362530a0d8e77739be422f488b21f",
+      "size": 61582
     },
     {
       "url": "https://platform.claude.com/docs/en/managed-agents/scheduled-deployments",
@@ -1038,8 +1038,8 @@
       "url": "https://platform.claude.com/docs/en/manage-claude/compliance-sessions",
       "status": "success",
       "path": "en/manage-claude/compliance-sessions.md",
-      "sha256": "ac6365e4d14477f4ee487ab8480215fff26e028cb6896fe6ac30f4009d360f89",
-      "size": 49934
+      "sha256": "f833a369be5b47db1620b58deec5a528ea48f34a63e319ab9ede51f9981859a3",
+      "size": 50049
     },
     {
       "url": "https://platform.claude.com/docs/en/manage-claude/compliance-org-data",
@@ -1052,8 +1052,8 @@
       "url": "https://platform.claude.com/docs/en/manage-claude/compliance-integration-patterns",
       "status": "success",
       "path": "en/manage-claude/compliance-integration-patterns.md",
-      "sha256": "e754883edc9c4825cdebb5e43b00f9112e77899d0d66bf8d2a5be518523237a2",
-      "size": 17534
+      "sha256": "eed8ca349247004d27e826c36e031e90fb750a1d577ea98f127c5d863569b8ee",
+      "size": 17663
     },
     {
       "url": "https://platform.claude.com/docs/en/manage-claude/compliance-errors",
@@ -1066,8 +1066,8 @@
       "url": "https://platform.claude.com/docs/en/manage-claude/compliance-faq",
       "status": "success",
       "path": "en/manage-claude/compliance-faq.md",
-      "sha256": "e38364c9ee038e90ece00bd7e1302f1f59612f2f0a0ccb6229b89b5c5d89e1e4",
-      "size": 25395
+      "sha256": "98050b39a2f34f8d98ab71bdb66fd963586d62e0f1c7cb66d803f05124754601",
+      "size": 25619
     },
     {
       "url": "https://platform.claude.com/docs/en/about-claude/use-case-guides/overview",
@@ -1094,8 +1094,8 @@
       "url": "https://platform.claude.com/docs/en/about-claude/use-case-guides/content-moderation",
       "status": "success",
       "path": "en/about-claude/use-case-guides/content-moderation.md",
-      "sha256": "a2fd9611424fe82c707a5826fc9ab42556ce700bee805fffd94759551df95cd3",
-      "size": 115096
+      "sha256": "3dce0826e8f5602e48fc0da0d2e8bbead3b2b03e98db0b49e5db02d0f1e32c55",
+      "size": 115176
     },
     {
       "url": "https://platform.claude.com/docs/en/about-claude/use-case-guides/legal-summarization",
@@ -1164,8 +1164,8 @@
       "url": "https://platform.claude.com/docs/en/test-and-evaluate/develop-tests",
       "status": "success",
       "path": "en/test-and-evaluate/develop-tests.md",
-      "sha256": "df88c8c7e4b3990cbb558d16fcf6e02c4a542e576079e96b377ecaf24e525138",
-      "size": 137666
+      "sha256": "007bdee68b71817910e7a5ceefca77dcc6d36768a4fafd6de5f89dcc9c215c21",
+      "size": 137786
     },
     {
       "url": "https://platform.claude.com/docs/en/test-and-evaluate/strengthen-guardrails/reduce-latency",
@@ -1220,8 +1220,8 @@
       "url": "https://platform.claude.com/docs/en/models/overview",
       "status": "success",
       "path": "en/models/overview.md",
-      "sha256": "b2ae292320b5d068b20c426e6e4e0333d1a11e25c8457748ca39de25de283c27",
-      "size": 16851
+      "sha256": "24cee96a02abd68ca1bae07a6791fc1a9f4ba66fbbc3f6385369d7f9d4ebd7e1",
+      "size": 16849
     },
     {
       "url": "https://platform.claude.com/docs/en/models/fable-5-1/overview",
@@ -1248,8 +1248,8 @@
       "url": "https://platform.claude.com/docs/en/models/opus-5/overview",
       "status": "success",
       "path": "en/models/opus-5/overview.md",
-      "sha256": "00f5422160fe2e84f50394b06d01f6e412bbe2553a28f6ddbd56bf6379455593",
-      "size": 12624
+      "sha256": "6e6ea214138685300cefa55ede9ed8393f76d7b2ab527449164c4df863a301f7",
+      "size": 13383
     },
     {
       "url": "https://platform.claude.com/docs/en/models/opus-5/whats-new-opus-5",
@@ -1262,8 +1262,8 @@
       "url": "https://platform.claude.com/docs/en/models/opus-5/migration-guide",
       "status": "success",
       "path": "en/models/opus-5/migration-guide.md",
-      "sha256": "2c90776b634505f2d6035e2f08ffac4bf934f8e5be4f77391f159416c7bd5cc5",
-      "size": 94684
+      "sha256": "e6494704d2743676c6408165baa96bdcca155282392f8dde918c73896cc70d24",
+      "size": 94708
     },
     {
       "url": "https://platform.claude.com/docs/en/models/sonnet-5/overview",
@@ -1283,8 +1283,8 @@
       "url": "https://platform.claude.com/docs/en/models/sonnet-5/migration-guide",
       "status": "success",
       "path": "en/models/sonnet-5/migration-guide.md",
-      "sha256": "ffbb0da772db9854827013343a9461030ab0b5a885813b965b97a830dcd0c55f",
-      "size": 38352
+      "sha256": "756681842fe2d97a4873e4abbab03a2e6e8c9668682f1d2573206261bf089b68",
+      "size": 38667
     },
     {
       "url": "https://platform.claude.com/docs/en/models/haiku-4-5/overview",
@@ -1409,7 +1409,7 @@
       "url": "https://platform.claude.com/docs/en/about-claude/pricing",
       "status": "success",
       "path": "en/about-claude/pricing.md",
-      "sha256": "a24307b29df318ab8dae2878df958421527716fda65de9c178969e8d946b20f2",
+      "sha256": "52ec9ccca111bc1635c300684c893fcedff8b146e5f6bed3c1c8c0fdf29a8d84",
       "size": 45062
     },
     {
@@ -1633,8 +1633,8 @@
       "url": "https://platform.claude.com/docs/en/cli-sdks-libraries/sdks/java",
       "status": "success",
       "path": "en/cli-sdks-libraries/sdks/java.md",
-      "sha256": "213fc898515dcf613957d158d4b4bd97abce90b4aa28ab5a81af6fdea5b2b09e",
-      "size": 47701
+      "sha256": "3e39dc1049863b01000a29cc177c5ad91d2c4a73ba49b0db057912eef712b2c7",
+      "size": 47848
     },
     {
       "url": "https://platform.claude.com/docs/en/cli-sdks-libraries/sdks/php",
@@ -1675,8 +1675,8 @@
       "url": "https://platform.claude.com/docs/en/api/beta-headers",
       "status": "success",
       "path": "en/api/beta-headers.md",
-      "sha256": "cfa06bd20fb1c32ccac5e24a128b8bdb494b31167ea675156a16a5cba4ce5502",
-      "size": 7800
+      "sha256": "0bbcb58acf1b62e0237f75213f1f79011c8dd6a37fecc0865f809ee4dedb2c67",
+      "size": 8080
     },
     {
       "url": "https://platform.claude.com/docs/en/api/errors",
@@ -1689,8 +1689,8 @@
       "url": "https://platform.claude.com/docs/en/api/rate-limits",
       "status": "success",
       "path": "en/api/rate-limits.md",
-      "sha256": "6bd36bc714a3b2ce3fda8099f990f5257b3abc2fe3ed6a001ace9aa31bc0ded4",
-      "size": 33086
+      "sha256": "573eafeaf45350bba94b3ddb275c8bf60cc5ad685d914971e2098e200f397429",
+      "size": 33137
     },
     {
       "url": "https://platform.claude.com/docs/en/api/service-tiers",
@@ -3957,29 +3957,29 @@
       "url": "https://platform.claude.com/docs/en/api/compliance",
       "status": "success",
       "path": "en/api/compliance.md",
-      "sha256": "a7d546bd52fe02ed3b1bdd614483d5b267e3c9bbe100eaebb6d444ac24ef85b2",
-      "size": 3326515
+      "sha256": "1cc5e548a6a5d7e3e8ecc34205df917ad2a6c8ad04f29ad0ee7eb4ca91238d96",
+      "size": 3339310
     },
     {
       "url": "https://platform.claude.com/docs/en/api/compliance/activities",
       "status": "success",
       "path": "en/api/compliance/activities.md",
-      "sha256": "ecb04b0dd7683084f89f5073f2289953d7ba6aa94e1204f57496d03d6a831c94",
-      "size": 6286160
+      "sha256": "4a9db70ea3ae44d6eac1e3ba01a9c0343e3c5f937afe3f374e67db0a2729e997",
+      "size": 6309584
     },
     {
       "url": "https://platform.claude.com/docs/en/api/compliance/activities/list",
       "status": "success",
       "path": "en/api/compliance/activities/list.md",
-      "sha256": "9d39eff7fcc30a40dd4c303a021ccc77c21688012a080823b2fc97953cd65405",
-      "size": 3203883
+      "sha256": "c56a060996b9cf329a186203be5977e2ea95fc767ae0c183af21ac60e2290b0a",
+      "size": 3215999
     },
     {
       "url": "https://platform.claude.com/docs/en/api/compliance/organizations",
       "status": "success",
       "path": "en/api/compliance/organizations.md",
-      "sha256": "135ea4deaf1ecf15cd63d9df1bcaa271a8ea76287824aff2ea4440febef42c3f",
-      "size": 17751
+      "sha256": "28801f86dc19316e098751f5295cd6217af2ef6fe4eb97787b7f16b82d249707",
+      "size": 18430
     },
     {
       "url": "https://platform.claude.com/docs/en/api/compliance/organizations/list",
@@ -4041,15 +4041,15 @@
       "url": "https://platform.claude.com/docs/en/api/compliance/organizations/settings",
       "status": "success",
       "path": "en/api/compliance/organizations/settings.md",
-      "sha256": "f8c536730c17e7d30bb288f1630c0d7871c34d322aa85791a3e8058a6fcce19f",
-      "size": 16043
+      "sha256": "2468abff596ee60650c946f70b0558ca99f078404c97c4f287ae4e23d7a6f172",
+      "size": 17424
     },
     {
       "url": "https://platform.claude.com/docs/en/api/compliance/organizations/settings/retrieve",
       "status": "success",
       "path": "en/api/compliance/organizations/settings/retrieve.md",
-      "sha256": "ea0a306b214615856a3e2776a4e80f005b74612372d8a6f90de2e6229935a774",
-      "size": 8512
+      "sha256": "d5dfb74b2b057c16bcb7e9aa1d870f468915d208e6de7aab8be737dd1bc727c3",
+      "size": 9191
     },
     {
       "url": "https://platform.claude.com/docs/en/api/compliance/groups",
@@ -4391,8 +4391,8 @@
       "url": "https://platform.claude.com/docs/en/claude_api_primer",
       "status": "success",
       "path": "en/claude_api_primer.md",
-      "sha256": "606cd1bee7353e93f3a3d244d6561bd708a3e49ae6d0d9cf5cc9d60eba9b6317",
-      "size": 28147
+      "sha256": "5ab0f687bb1d81286fc5628bbfbc1ff774e6e00d92db215d0499d21a853591a8",
+      "size": 28169
     },
     {
       "url": "https://platform.claude.com/docs/en/models/fable-5/introducing-claude-fable-5-and-claude-mythos-5",
@@ -4426,8 +4426,8 @@
       "url": "https://code.claude.com/docs/en/changelog",
       "status": "success",
       "path": "en/docs/claude-code/changelog.md",
-      "sha256": "00911181ed9205015a66350a2877efb3c9e139eb1e024183e878dc3eedec4f8a",
-      "size": 753228
+      "sha256": "91154c90ef0f2959a50159a5f76238255d87034bd33fbf4b9423df03d3ebf53c",
+      "size": 767853
     },
     {
       "url": "https://code.claude.com/docs/en/how-claude-code-works",
@@ -4447,8 +4447,8 @@
       "url": "https://code.claude.com/docs/en/claude-directory",
       "status": "success",
       "path": "en/docs/claude-code/claude-directory.md",
-      "sha256": "af8d8473fea0aceb8eb6c2173a9cf092c2160afbb0da19a6e96de41f75427079",
-      "size": 100642
+      "sha256": "808b6a06b86abe4a20cc21002785210b89a08280b47e98f21cf76ffcf3fef626",
+      "size": 102185
     },
     {
       "url": "https://code.claude.com/docs/en/context-window",
@@ -4461,15 +4461,15 @@
       "url": "https://code.claude.com/docs/en/prompt-caching",
       "status": "success",
       "path": "en/docs/claude-code/prompt-caching.md",
-      "sha256": "718e4cff0c3081f44897cb2b51c999f069e617eabb2334dfa81220f6fa1efbd5",
-      "size": 41232
+      "sha256": "b020c8ef85293f3bf8691aee40422e2a599cd8e5628a7a24b3f8560548c00bf2",
+      "size": 41301
     },
     {
       "url": "https://code.claude.com/docs/en/memory",
       "status": "success",
       "path": "en/docs/claude-code/memory.md",
-      "sha256": "f212449ea6fbdb88bea34ad85c967ae3681470bdbd376ac84bda7f535029e677",
-      "size": 38070
+      "sha256": "98c6d06ea754d557011393608849dfbe23eed8634edb3db318f77178b6ce0f1b",
+      "size": 38430
     },
     {
       "url": "https://code.claude.com/docs/en/sessions",
@@ -4510,22 +4510,22 @@
       "url": "https://code.claude.com/docs/en/remote-control",
       "status": "success",
       "path": "en/docs/claude-code/remote-control.md",
-      "sha256": "33d123c723a01390e89649a6af83ba9201931fe07bb9735cfd7d9a2f5657c35b",
-      "size": 62308
+      "sha256": "50a895893e7dd87323bc8f55f37fb13ef21b42737521ebdca8d22ee514c3b05d",
+      "size": 62676
     },
     {
       "url": "https://code.claude.com/docs/en/claude-projects",
       "status": "success",
       "path": "en/docs/claude-code/claude-projects.md",
-      "sha256": "7548889590cd0a89710f6028e4dd95e4f6ca1d743be1a5041d2ca73527a664f8",
-      "size": 59836
+      "sha256": "868bb79b66c9f22d0d8789db963ec8994133471e57835f00d91d24dd7a16bce7",
+      "size": 60423
     },
     {
       "url": "https://code.claude.com/docs/en/mobile",
       "status": "success",
       "path": "en/docs/claude-code/mobile.md",
-      "sha256": "88ad021221b456e6b5ad66d91c0d72e3be90e3a5a9748d6ca0f7f672a89521d1",
-      "size": 8901
+      "sha256": "c319542dff99bb04203997d68befd85dc6d9958a92efe3c8044475d498e01070",
+      "size": 9307
     },
     {
       "url": "https://code.claude.com/docs/en/chrome",
@@ -4545,8 +4545,8 @@
       "url": "https://code.claude.com/docs/en/vs-code",
       "status": "success",
       "path": "en/docs/claude-code/vs-code.md",
-      "sha256": "f7b8726be7b8218e43f8dc53e1edcd637c3e7ebfa37f995354c2be904fabc6ce",
-      "size": 72978
+      "sha256": "75284fcd4e6e8b146f00854fa9872b8a82b54d0ca8b4d9cfc1f4f64f72372173",
+      "size": 73249
     },
     {
       "url": "https://code.claude.com/docs/en/jetbrains",
@@ -4573,29 +4573,29 @@
       "url": "https://code.claude.com/docs/en/web-quickstart",
       "status": "success",
       "path": "en/docs/claude-code/web-quickstart.md",
-      "sha256": "d4c25d82e3f5b6767da60974de78e8eb795d6cbdf91203ff98f81ea6367a9955",
-      "size": 26254
+      "sha256": "3e1276fde82eb25e52e8813c6efa212378d3db6b0ee669ecc44a0fa072a41ae7",
+      "size": 26065
     },
     {
       "url": "https://code.claude.com/docs/en/claude-code-on-the-web",
       "status": "success",
       "path": "en/docs/claude-code/claude-code-on-the-web.md",
-      "sha256": "fa0f0c6e6745d09c3405342d6913e4bb97fe2463d842a4fad07f0ef9ab203ba6",
-      "size": 41668
+      "sha256": "167c5456e0649ced062e5fe06757ebf69ae6499e50fd5970db137b90427eec27",
+      "size": 41992
     },
     {
       "url": "https://code.claude.com/docs/en/routines",
       "status": "success",
       "path": "en/docs/claude-code/routines.md",
-      "sha256": "ae7ae570e21efa1e83b046415f8613439882577f3731740e6c08109c9c75a4b8",
-      "size": 33659
+      "sha256": "d76aa5af0d53c71ec2496c591db62a2774baf98e4455e5876adc328eaf1e5d2d",
+      "size": 33670
     },
     {
       "url": "https://code.claude.com/docs/en/ultrareview",
       "status": "success",
       "path": "en/docs/claude-code/ultrareview.md",
-      "sha256": "5c67a641eb48ad9e74871876d4fc36613f3c4cd772f5c181e94e232a3aff71e0",
-      "size": 18563
+      "sha256": "2b253058f3be32f575821fdd4ee217a4abc3c30e2b679e72ee28bcaeb74ebcd5",
+      "size": 18765
     },
     {
       "url": "https://code.claude.com/docs/en/desktop-quickstart",
@@ -4713,8 +4713,8 @@
       "url": "https://code.claude.com/docs/en/agent-teams",
       "status": "success",
       "path": "en/docs/claude-code/agent-teams.md",
-      "sha256": "953216d8650c039c20ef1bc507a5a6280407a7958ee1d90786869bc987d1ba4a",
-      "size": 41115
+      "sha256": "277e67df91e054c113b91fc4a42fe324d55da0f3da9df16cde5caf3276c6dbc1",
+      "size": 42029
     },
     {
       "url": "https://code.claude.com/docs/en/cross-session-messaging",
@@ -4727,15 +4727,15 @@
       "url": "https://code.claude.com/docs/en/workflows",
       "status": "success",
       "path": "en/docs/claude-code/workflows.md",
-      "sha256": "48bb1efa5cf8f1d0277d8f281606f006a9c021c7748d261c073a52e77f303e7e",
-      "size": 41889
+      "sha256": "4ce35dc5460d6230fe3338c60a4e160ab2a24baf47b07ebcf2e8d1c4085a5e07",
+      "size": 43505
     },
     {
       "url": "https://code.claude.com/docs/en/worktrees",
       "status": "success",
       "path": "en/docs/claude-code/worktrees.md",
-      "sha256": "69cbc30b83b71144bc9f98e200fc12f679765cab9ce6f01e5292b9646d926f17",
-      "size": 37222
+      "sha256": "ebbf49c2d8d0edf248b5b609f2ecc8316364696e6ffb185a46d20a172873a964",
+      "size": 37648
     },
     {
       "url": "https://code.claude.com/docs/en/mcp-quickstart",
@@ -4748,22 +4748,22 @@
       "url": "https://code.claude.com/docs/en/mcp",
       "status": "success",
       "path": "en/docs/claude-code/mcp.md",
-      "sha256": "67dccd0f48a35655d560f921f3974ed2a8c50fb999a9859439d3748dd8a48221",
-      "size": 117143
+      "sha256": "d872a8aded51160476e935bad371f10a06e31d244f23f3f4f28f057c0f0ca36e",
+      "size": 117610
     },
     {
       "url": "https://code.claude.com/docs/en/skills",
       "status": "success",
       "path": "en/docs/claude-code/skills.md",
-      "sha256": "94f93f724453ef8bd9cb94af5fe9cb73aa77b3573019f6f06e7a7844bbb49af1",
-      "size": 114929
+      "sha256": "5a2e0e2ee821fb7b79bff173358f48c036a2c9406a0446bc8292aa0221eee4af",
+      "size": 115336
     },
     {
       "url": "https://code.claude.com/docs/en/discover-plugins",
       "status": "success",
       "path": "en/docs/claude-code/discover-plugins.md",
-      "sha256": "b5235a7b83b95192aeadfc078fcbd424ecdeb949fa88bc5bfd82513d6e633b11",
-      "size": 35829
+      "sha256": "2600fca633e0c31edd0ac5a0f8816e1fedee1f554c4c3ed6acc393966b2a1784",
+      "size": 38564
     },
     {
       "url": "https://code.claude.com/docs/en/plugins",
@@ -4804,8 +4804,8 @@
       "url": "https://code.claude.com/docs/en/scheduled-tasks",
       "status": "success",
       "path": "en/docs/claude-code/scheduled-tasks.md",
-      "sha256": "5f59637b18745f0e55bab0e7881e27a633b41dce78fd14ef0f95318b609b213a",
-      "size": 17717
+      "sha256": "11a74cf0d77d8c0cd9576d760b4c6d5b4c55e0d5a5ea566816513078ebabb33c",
+      "size": 17963
     },
     {
       "url": "https://code.claude.com/docs/en/goal",
@@ -4818,8 +4818,8 @@
       "url": "https://code.claude.com/docs/en/headless",
       "status": "success",
       "path": "en/docs/claude-code/headless.md",
-      "sha256": "72521df6ef71d978d8c8298e518db15a4362b4fbf97f32a36626e31d088675a1",
-      "size": 36247
+      "sha256": "a17fc295554efd8ec6860edf3ea0b45ba60edfe431bb888ff5bc1d86530c759c",
+      "size": 36448
     },
     {
       "url": "https://code.claude.com/docs/en/deep-links",
@@ -4860,8 +4860,8 @@
       "url": "https://code.claude.com/docs/en/errors",
       "status": "success",
       "path": "en/docs/claude-code/errors.md",
-      "sha256": "760c0cc89c957c478ff48868c48b800af7ff509c67c6c60a9ffa077b76dfbb6c",
-      "size": 440885
+      "sha256": "6a0195a164b013439616064a80b4fcc3296c8475f10fc208742b9571c27cb319",
+      "size": 463543
     },
     {
       "url": "https://code.claude.com/docs/en/admin-setup",
@@ -4888,22 +4888,22 @@
       "url": "https://code.claude.com/docs/en/managed-settings",
       "status": "success",
       "path": "en/docs/claude-code/managed-settings.md",
-      "sha256": "da3cf2184feaba41349980bac68ce19f7df6fe7e01d11d9569c6f5bb05a8591d",
-      "size": 65533
+      "sha256": "a9b2c960078379e71cff11d742d632dc072312ae86f9c445ab882c9633efeab5",
+      "size": 66967
     },
     {
       "url": "https://code.claude.com/docs/en/server-managed-settings",
       "status": "success",
       "path": "en/docs/claude-code/server-managed-settings.md",
-      "sha256": "adff1ad2888ed0f9ddd282ff2ad702e627765a1ed4c8851cc2d904f30726b9e2",
-      "size": 47102
+      "sha256": "5dbc2de84da3fdb50184d5496bf8a8007c7e103d9394a9754d768f9f2c3b9af8",
+      "size": 47105
     },
     {
       "url": "https://code.claude.com/docs/en/managed-mcp",
       "status": "success",
       "path": "en/docs/claude-code/managed-mcp.md",
-      "sha256": "5faa9995aee3a12a718568f28c89c41ae5ffcd352115a6dba15993a1ec17bde5",
-      "size": 51029
+      "sha256": "537dd650bfe3537d8274ce381a6602c8a4f07390c454c066626420ce3b1657e1",
+      "size": 50436
     },
     {
       "url": "https://code.claude.com/docs/en/auto-mode-config",
@@ -4930,8 +4930,8 @@
       "url": "https://code.claude.com/docs/en/amazon-bedrock",
       "status": "success",
       "path": "en/docs/claude-code/amazon-bedrock.md",
-      "sha256": "4fd46c0244951439e66a99df21f6692da049b1c53ef8d21d6abd23a7fb8417ef",
-      "size": 42647
+      "sha256": "ef4f6b5dec0bc8ad1fe6c4df969030cd2c91d0842f810f56886af7d966410d78",
+      "size": 42619
     },
     {
       "url": "https://code.claude.com/docs/en/claude-platform-on-aws",
@@ -4986,8 +4986,8 @@
       "url": "https://code.claude.com/docs/en/claude-apps-gateway",
       "status": "success",
       "path": "en/docs/claude-code/claude-apps-gateway.md",
-      "sha256": "4c39400632d5d10eef18295266d0779287d927b4653b1e560132157d3193be92",
-      "size": 66252
+      "sha256": "671e69a51f9bc544d2f651f8728e0b310d202501590a11bd915f9a7beaf4995a",
+      "size": 66568
     },
     {
       "url": "https://code.claude.com/docs/en/claude-apps-gateway-config",
@@ -5007,8 +5007,8 @@
       "url": "https://code.claude.com/docs/en/claude-apps-gateway-deploy",
       "status": "success",
       "path": "en/docs/claude-code/claude-apps-gateway-deploy.md",
-      "sha256": "0546c29586a024835752a08c4447e0019fa3004871eff7065971ec4732b1551c",
-      "size": 75869
+      "sha256": "3474b661a72413e9040f79e25a8e5906b2c2e78e1b33393840de95409862cba1",
+      "size": 77164
     },
     {
       "url": "https://code.claude.com/docs/en/claude-apps-gateway-on-aws",
@@ -5049,8 +5049,8 @@
       "url": "https://code.claude.com/docs/en/llm-gateway-protocol",
       "status": "success",
       "path": "en/docs/claude-code/llm-gateway-protocol.md",
-      "sha256": "8e2d29d0db638a5d3ddd5523b12300206127f9a952e2e7540fbfb1df0847a385",
-      "size": 35528
+      "sha256": "19c52d46285264754c3e271d8234e98767b5d6fd25201f92ed883ab5a00c2e0e",
+      "size": 35740
     },
     {
       "url": "https://code.claude.com/docs/en/monitoring-usage",
@@ -5077,15 +5077,15 @@
       "url": "https://code.claude.com/docs/en/plugin-marketplaces",
       "status": "success",
       "path": "en/docs/claude-code/plugin-marketplaces.md",
-      "sha256": "31e8773f0cff90d72c6ef8530ba3a6c52438c47c95cb419be4fff315d7ec47f5",
-      "size": 124668
+      "sha256": "6564466c4d9d9e93a67ddbcd1781fe4cf73ec1aa06a41383eeb47f6637b0a689",
+      "size": 127235
     },
     {
       "url": "https://code.claude.com/docs/en/plugin-dependencies",
       "status": "success",
       "path": "en/docs/claude-code/plugin-dependencies.md",
-      "sha256": "00a0c4ecf579422dcf1e8cced5d41ef0cbc0f9f49875495f08db3bee04237cfd",
-      "size": 24404
+      "sha256": "51a35b04e9dca54f568fcd70351f8db009aa75a40cdb87a34e5a4b309c93d434",
+      "size": 24428
     },
     {
       "url": "https://code.claude.com/docs/en/plugin-hints",
@@ -5098,8 +5098,8 @@
       "url": "https://code.claude.com/docs/en/plugin-relevance",
       "status": "success",
       "path": "en/docs/claude-code/plugin-relevance.md",
-      "sha256": "1dd6dcbd13adf115d9728d92bf152976b1e65d955ea5f933e5d5b1724b2c03c1",
-      "size": 15665
+      "sha256": "0f54c213e843fb758ef4c5131cc9a34beb094bbb014ad66d70402a27c7b42a05",
+      "size": 15811
     },
     {
       "url": "https://code.claude.com/docs/en/security",
@@ -5147,8 +5147,8 @@
       "url": "https://code.claude.com/docs/en/settings-reference",
       "status": "success",
       "path": "en/docs/claude-code/settings-reference.md",
-      "sha256": "8fdd564085ed6e40e0f4e1ba962c9cdc483b85c33fd2ef59806cfed4f081fc66",
-      "size": 443329
+      "sha256": "912a26a5f027e0495aa9ddf1ffc41723c6275efaf083eb6e3c20dfaabdee5219",
+      "size": 443586
     },
     {
       "url": "https://code.claude.com/docs/en/settings-example",
@@ -5168,15 +5168,15 @@
       "url": "https://code.claude.com/docs/en/permission-modes",
       "status": "success",
       "path": "en/docs/claude-code/permission-modes.md",
-      "sha256": "77bbe7bccf66d50594d1c2209b209ee652d01c99580705917a88f24976d7eab2",
-      "size": 82080
+      "sha256": "6f3718d5a765fe18e3b8f916dd149ea6fb0a892d3ccbc723c23cc5f898f2fd58",
+      "size": 82151
     },
     {
       "url": "https://code.claude.com/docs/en/sandboxing",
       "status": "success",
       "path": "en/docs/claude-code/sandboxing.md",
-      "sha256": "f4aea577087c100af55310a11beb32fc079684124c00d34d487bd7c9be9419b6",
-      "size": 77876
+      "sha256": "c1b48d15ec7181a1839b6c519757fd51d499ec72c6718a6296d7a8629baa18d0",
+      "size": 77859
     },
     {
       "url": "https://code.claude.com/docs/en/sandbox-environments",
@@ -5189,8 +5189,8 @@
       "url": "https://code.claude.com/docs/en/cloud-environments",
       "status": "success",
       "path": "en/docs/claude-code/cloud-environments.md",
-      "sha256": "c3b33dadfb56e294adcdbbdb0dbc89659e42b925c29de64d20ce23bdf8d4936c",
-      "size": 65629
+      "sha256": "4ce623ebfa9a19052925c248803d90533076f71ea78eb04346cc64d6ea35f4a4",
+      "size": 65760
     },
     {
       "url": "https://code.claude.com/docs/en/self-hosted-environments",
@@ -5266,8 +5266,8 @@
       "url": "https://code.claude.com/docs/en/output-styles",
       "status": "success",
       "path": "en/docs/claude-code/output-styles.md",
-      "sha256": "ee687cf4fca32cf584f711e0e53a2dc161e9874d61bdd0e9d21fff9696edf71e",
-      "size": 11621
+      "sha256": "0ac762eddac12fd76edf7837f39b471c9fecb834f511319c89fa216f053b2512",
+      "size": 12105
     },
     {
       "url": "https://code.claude.com/docs/en/terminal-config",
@@ -5287,8 +5287,8 @@
       "url": "https://code.claude.com/docs/en/accessibility",
       "status": "success",
       "path": "en/docs/claude-code/accessibility.md",
-      "sha256": "62728ac7ccaa16f72f2c53bc2dcd418ac3b56331bab27bd0c067b906b6da1cd9",
-      "size": 14604
+      "sha256": "3321cce3168345b521b48ff3dae4bdea041c7f2002362f6b03a64d893e2fd5fa",
+      "size": 14439
     },
     {
       "url": "https://code.claude.com/docs/en/voice-dictation",
@@ -5322,29 +5322,29 @@
       "url": "https://code.claude.com/docs/en/commands",
       "status": "success",
       "path": "en/docs/claude-code/commands.md",
-      "sha256": "46f7b66b9b35b2a2eb9ee8f0a3006cfa8ef2bab0b88045ac2aad92fc868c5c18",
-      "size": 175118
+      "sha256": "1ba21dd2fbe7151da4dbc0a7d78ad82673eda45eea33857763d911e094e1c952",
+      "size": 176593
     },
     {
       "url": "https://code.claude.com/docs/en/env-vars",
       "status": "success",
       "path": "en/docs/claude-code/env-vars.md",
-      "sha256": "3b2476ef129a40f7ea055bae089c5ee17031f1d872a7cd8518be258bb98de749",
-      "size": 488155
+      "sha256": "4c12354ed5b3015794d2c8868c40f7ccd9dd67a04371e838f93d733a25098509",
+      "size": 496121
     },
     {
       "url": "https://code.claude.com/docs/en/tools-reference",
       "status": "success",
       "path": "en/docs/claude-code/tools-reference.md",
-      "sha256": "b04a5e501761d932a73ab0a4edb03e8ca945d9314fb09d090fe7bb664d0128e3",
-      "size": 109682
+      "sha256": "db05442248b85c9bd4302e70b86a0ad14ea9d82ee567956694922e323bd85d82",
+      "size": 109948
     },
     {
       "url": "https://code.claude.com/docs/en/interactive-mode",
       "status": "success",
       "path": "en/docs/claude-code/interactive-mode.md",
-      "sha256": "6ea4606207c9a740c076d141f5601f9bb55d41704807fd3aa50c40b3b502535d",
-      "size": 90046
+      "sha256": "fb1e00c168c9640c979ed302a18726443246049b9a7d82684a0684871db65c4d",
+      "size": 90149
     },
     {
       "url": "https://code.claude.com/docs/en/checkpointing",
@@ -5357,22 +5357,22 @@
       "url": "https://code.claude.com/docs/en/hooks",
       "status": "success",
       "path": "en/docs/claude-code/hooks.md",
-      "sha256": "745bd4fd4d198c6919f6f282d26f4b19ecbeaf5a89934174afc4eaa47a8e2e6a",
-      "size": 327786
+      "sha256": "84dee417bb2ee0b6a858f5f874ebd9a1690c0ddcfef479abdb49f625cf19a4c1",
+      "size": 328716
     },
     {
       "url": "https://code.claude.com/docs/en/plugins-reference",
       "status": "success",
       "path": "en/docs/claude-code/plugins-reference.md",
-      "sha256": "d5de53e3435750235e0cd4549b51f1bf19ad8b622a5ff945901d8484f0cedba2",
-      "size": 141087
+      "sha256": "5c1824cd1851c35e079c72db49e383bac26cd376fddb6b96ca6df2ecf980e544",
+      "size": 141869
     },
     {
       "url": "https://code.claude.com/docs/en/channels-reference",
       "status": "success",
       "path": "en/docs/claude-code/channels-reference.md",
-      "sha256": "9ea1a92e784f8960727f463f3c9040bd3f665d28ff91a95257d5d516e04e2c09",
-      "size": 50423
+      "sha256": "ff07eaca09f2fe7a89b148682eccc8a9fdadd915c05dd950ae60f9ac5e87e826",
+      "size": 50377
     },
     {
       "url": "https://code.claude.com/docs/en/glossary",
@@ -5490,8 +5490,8 @@
       "url": "https://code.claude.com/docs/en/agent-sdk/mcp",
       "status": "success",
       "path": "en/docs/claude-code/agent-sdk/mcp.md",
-      "sha256": "c6c92f6d55a03b8c0dd198833b29885a7827441d834db438b83b0e33b37c38a8",
-      "size": 35899
+      "sha256": "c05c0471ff3869ccac89e2b43ed37fe5335d32f18d6f5a00add64e0a6bd91b11",
+      "size": 37615
     },
     {
       "url": "https://code.claude.com/docs/en/agent-sdk/tool-search",
@@ -5511,15 +5511,15 @@
       "url": "https://code.claude.com/docs/en/agent-sdk/modifying-system-prompts",
       "status": "success",
       "path": "en/docs/claude-code/agent-sdk/modifying-system-prompts.md",
-      "sha256": "1c1bb26b5c85e93062a9f1f222e31744f451ddaf2d741f6997bf481929f67c9a",
-      "size": 28820
+      "sha256": "4d57e2b00ed1c5537269d85fe4560d0c1f6974c59101a549ce03e6402f98aa0f",
+      "size": 28946
     },
     {
       "url": "https://code.claude.com/docs/en/agent-sdk/skills",
       "status": "success",
       "path": "en/docs/claude-code/agent-sdk/skills.md",
-      "sha256": "367d6194fc6145c1ff77c583c7bd375f7830f42655350628df6b60fd9c32c482",
-      "size": 26863
+      "sha256": "c490d4f3e1724845171ad2c8ee7dba2d354f4b969500e0e26fc9891729063041",
+      "size": 27470
     },
     {
       "url": "https://code.claude.com/docs/en/agent-sdk/plugins",
@@ -5588,8 +5588,8 @@
       "url": "https://code.claude.com/docs/en/agent-sdk/typescript",
       "status": "success",
       "path": "en/docs/claude-code/agent-sdk/typescript.md",
-      "sha256": "c9966da9e3d62c6795df0233a7b1cfa940b057c21e0663b8dfeba9def1217591",
-      "size": 359847
+      "sha256": "664acfb9aaa0d7129a9bef6a74988c937589710d51e1f5e48e3c863f9ab88091",
+      "size": 369962
     },
     {
       "url": "https://code.claude.com/docs/en/agent-sdk/typescript-v2-preview",
@@ -8374,8 +8374,8 @@
       "url": "https://support.claude.com/en/articles/8230524-delete-or-rename-a-conversation",
       "status": "success",
       "path": "support/8230524-delete-or-rename-a-conversation.md",
-      "sha256": "a975e76216742cd6b91b4a39a0ba8c4650d0ef667fade90ed2992ec40fb389a2",
-      "size": 5885
+      "sha256": "64fd7341ce78e02d4d4444897b29ea72f12d438e281de2d87d3cfb798a7223bd",
+      "size": 5879
     },
     {
       "url": "https://support.claude.com/en/articles/8241126-upload-files-to-claude",
@@ -8444,8 +8444,8 @@
       "url": "https://support.claude.com/en/articles/8325618-paid-plan-billing-faqs",
       "status": "success",
       "path": "support/8325618-paid-plan-billing-faqs.md",
-      "sha256": "bc5af25ba119262ff87074cf550cbd62b173f25409f313e4196ca849aa28f67e",
-      "size": 4555
+      "sha256": "a92eba2d2789e648d6e2c893fc2a6a88f0841f1977e547f3f779585347129ed7",
+      "size": 4553
     },
     {
       "url": "https://support.claude.com/en/articles/8325621-i-would-like-to-input-sensitive-data-into-my-chats-with-claude-who-can-view-my-conversations",
@@ -8507,8 +8507,8 @@
       "url": "https://support.claude.com/en/articles/8887527-customizing-your-appearance-settings",
       "status": "success",
       "path": "support/8887527-customizing-your-appearance-settings.md",
-      "sha256": "9b2327d44e829793c3a604e71d60b2534d86b20399799765352c7681994cf5ec",
-      "size": 1874
+      "sha256": "d44674034817e04b225d43c5051609ad1aea852c526e81b8a8cd2daf76e871f7",
+      "size": 1866
     },
     {
       "url": "https://support.claude.com/en/articles/8896518-does-anthropic-crawl-data-from-the-web-and-how-can-site-owners-block-the-crawler",
@@ -8682,8 +8682,8 @@
       "url": "https://support.claude.com/en/articles/9267400-move-your-personal-claude-account-to-a-team-or-enterprise-organization",
       "status": "success",
       "path": "support/9267400-move-your-personal-claude-account-to-a-team-or-enterprise-organization.md",
-      "sha256": "b0610b6e8328c57afae7da6badf073902c2431fc4cac095839174747e0c8ab05",
-      "size": 9725
+      "sha256": "016d65414369cff13969fafe8bec4eaa925ce288d535ab457b310ec8eac8b8f9",
+      "size": 9727
     },
     {
       "url": "https://support.claude.com/en/articles/9301722-updates-to-our-acceptable-use-policy-now-usage-policy-consumer-terms-of-service-and-privacy-policy",
@@ -8731,15 +8731,15 @@
       "url": "https://support.claude.com/en/articles/9519177-how-can-i-create-and-manage-projects",
       "status": "success",
       "path": "support/9519177-how-can-i-create-and-manage-projects.md",
-      "sha256": "b2f889752f40d6f64c69fb6b0c68ccdc35b6ecb6165b83a388b6e80117f4c565",
-      "size": 8855
+      "sha256": "b30304dc3c43174575e7aef4ee3e068f8b60ba75ff0a2a30816c128244463118",
+      "size": 8853
     },
     {
       "url": "https://support.claude.com/en/articles/9519189-manage-project-visibility-and-sharing",
       "status": "success",
       "path": "support/9519189-manage-project-visibility-and-sharing.md",
-      "sha256": "b60e1d1ac6ad980e1084f65f468ee05c6f83a61693a536523f76d19f9304154f",
-      "size": 8557
+      "sha256": "4738c436a985ae73f775a63cb8deaf7519c122583d747f8a389a3392a7a646ff",
+      "size": 8563
     },
     {
       "url": "https://support.claude.com/en/articles/9519291-what-is-anthropic-s-policy-for-handling-governmental-requests-for-user-information",
@@ -8759,8 +8759,8 @@
       "url": "https://support.claude.com/en/articles/9534590-cost-and-usage-reporting-in-the-claude-console",
       "status": "success",
       "path": "support/9534590-cost-and-usage-reporting-in-the-claude-console.md",
-      "sha256": "c80e178ec78b7fab790ba8a103e7ef2a2da1039090b947a41a293a8b2a7badf7",
-      "size": 5096
+      "sha256": "ae04c95a206845b18a3270642c5c289eadde43f71f74e75272b33e6bb4f6de2e",
+      "size": 5102
     },
     {
       "url": "https://support.claude.com/en/articles/9547008-publish-and-share-artifacts",
@@ -8843,7 +8843,7 @@
       "url": "https://support.claude.com/en/articles/9927533-disable-public-projects-for-your-organization",
       "status": "success",
       "path": "support/9927533-disable-public-projects-for-your-organization.md",
-      "sha256": "46f18639fcad51f21b7ee2f1bd15cecf40553b68e73aa534b6323152e3242c1e",
+      "sha256": "0fa020ec0483cbc97580676609bbe76c399311c6638a90c924da36c78b71acd9",
       "size": 2578
     },
     {
@@ -8983,15 +8983,15 @@
       "url": "https://support.claude.com/en/articles/10310342-how-do-i-log-out-of-all-active-sessions",
       "status": "success",
       "path": "support/10310342-how-do-i-log-out-of-all-active-sessions.md",
-      "sha256": "318e6ca62a857fc3c25bd5c2ea7edbdd43956690a23363898a3ce78c3dd930aa",
-      "size": 2494
+      "sha256": "8ad5a5e71a0cbefa4cd96543f481ba89aeedd6aad7e4add3db372b32d54e3e44",
+      "size": 2492
     },
     {
       "url": "https://support.claude.com/en/articles/10366376-how-can-i-delete-my-claude-console-account",
       "status": "success",
       "path": "support/10366376-how-can-i-delete-my-claude-console-account.md",
-      "sha256": "e911688b158751053b93dd111529f47a75a655a305e55c8ff77011d95cc6d13f",
-      "size": 3171
+      "sha256": "5515c193110f39e9bc5ac4c451708d2e43471dff198c1c90ab9231bb723678a6",
+      "size": 3167
     },
     {
       "url": "https://support.claude.com/en/articles/10366389-how-can-i-get-higher-rate-limits-on-the-claude-api",
@@ -9032,15 +9032,15 @@
       "url": "https://support.claude.com/en/articles/10504844-manage-user-feedback-settings-on-team-and-enterprise-plans",
       "status": "success",
       "path": "support/10504844-manage-user-feedback-settings-on-team-and-enterprise-plans.md",
-      "sha256": "d7e4c4209a4ca441bd47b19a51e6bfd445cf4bc4903e0ff7c153768fd3dc72e3",
+      "sha256": "74077c9c710a75b2ba92e84275510acfbeb689fe76a12d13b2b3d18f1744446d",
       "size": 1038
     },
     {
       "url": "https://support.claude.com/en/articles/10504853-manage-user-feedback-settings-on-claude-console",
       "status": "success",
       "path": "support/10504853-manage-user-feedback-settings-on-claude-console.md",
-      "sha256": "cc2ada8110642ec72aefecae7590aa658fb0b62de6b7f9bfea8387b6f8b692c5",
-      "size": 999
+      "sha256": "2c27b842d43d2e3979964aeb0cff9d166c848dc1a27c3e1b846923e1052b327a",
+      "size": 997
     },
     {
       "url": "https://support.claude.com/en/articles/10534883-use-the-claude-widget-on-android",
@@ -9053,8 +9053,8 @@
       "url": "https://support.claude.com/en/articles/10593882-share-and-unshare-chats",
       "status": "success",
       "path": "support/10593882-share-and-unshare-chats.md",
-      "sha256": "06883b8b8f134bd6891042b0dcb9671b3fcf707c2685b5b75554b4175244a1f1",
-      "size": 4016
+      "sha256": "dffa67904b9d22dd393d20722e66bc7628a56ea78b1d3ff1f0eb8c7a4e3f3f12",
+      "size": 4014
     },
     {
       "url": "https://support.claude.com/en/articles/10684626-enable-and-use-web-search",
@@ -9081,7 +9081,7 @@
       "url": "https://support.claude.com/en/articles/10949351-getting-started-with-local-mcp-servers-on-claude-desktop",
       "status": "success",
       "path": "support/10949351-getting-started-with-local-mcp-servers-on-claude-desktop.md",
-      "sha256": "cc350c4f928e6056efff90cbac1b0481ad4a764d005c4fd0d212da76af0493ab",
+      "sha256": "68a5f80581f8ce9dc9fb8774f8748ec221d04f7d3a9fd662cad8b23c3e8b3077",
       "size": 8269
     },
     {
@@ -9249,8 +9249,8 @@
       "url": "https://support.claude.com/en/articles/11725453-set-up-the-claude-lti-in-canvas-by-instructure",
       "status": "success",
       "path": "support/11725453-set-up-the-claude-lti-in-canvas-by-instructure.md",
-      "sha256": "6f96fff6bde82c42cb79a239aa09408963d9f108bac2ecde422c979f4d8b4d64",
-      "size": 2750
+      "sha256": "7104b8c9617984ba832413740e1aa19138f702232f4c640c7fa06889fe91dcc8",
+      "size": 2748
     },
     {
       "url": "https://support.claude.com/en/articles/11732894-who-owns-and-manages-the-data-of-my-claude-for-education-account",
@@ -9263,14 +9263,14 @@
       "url": "https://support.claude.com/en/articles/11817273-use-claude-s-chat-search-and-memory-to-build-on-previous-context",
       "status": "success",
       "path": "support/11817273-use-claude-s-chat-search-and-memory-to-build-on-previous-context.md",
-      "sha256": "97338fc9afc6ae91537f84fe7c94d53e65094c28f01b33e280dfd8f54c6a068d",
-      "size": 25856
+      "sha256": "f26e598f7a0cca61936cc7c04d77330ed870e87189d7b43e7c77382abcf1da76",
+      "size": 25860
     },
     {
       "url": "https://support.claude.com/en/articles/11818288-why-am-i-being-asked-to-verify-my-payment-method",
       "status": "success",
       "path": "support/11818288-why-am-i-being-asked-to-verify-my-payment-method.md",
-      "sha256": "2f9f8e0fe8d10076f8e58fd46cca51d4c1625fe2fcc99fc6017d4f0e44217dc7",
+      "sha256": "cf967d650a55b7b39af8913d270b87b46de1282f4e2e041728504ebc4af105e0",
       "size": 818
     },
     {
@@ -9305,8 +9305,8 @@
       "url": "https://support.claude.com/en/articles/11869629-use-claude-with-android-apps",
       "status": "success",
       "path": "support/11869629-use-claude-with-android-apps.md",
-      "sha256": "8c99d44376c1861feba7d382326c5c287858bb80a325342b76a983a8edb44992",
-      "size": 13991
+      "sha256": "4cb8d346603e8dc4b7ef3a221fba726b7a388964390829d8defb0b8d172e49bc",
+      "size": 13993
     },
     {
       "url": "https://support.claude.com/en/articles/11932705-automated-security-reviews-in-claude-code",
@@ -9340,14 +9340,14 @@
       "url": "https://support.claude.com/en/articles/12005970-manage-usage-credits-for-team-and-seat-based-enterprise-plans",
       "status": "success",
       "path": "support/12005970-manage-usage-credits-for-team-and-seat-based-enterprise-plans.md",
-      "sha256": "4a07135eed26dff2dbf8c7b6e9a3b7a66ad63fee0c79f148c5daffb17ed7177b",
-      "size": 9709
+      "sha256": "bc756046ed2a7626361e5f9667229888cd5dec4e516340aadfd333e7b25b6f42",
+      "size": 9707
     },
     {
       "url": "https://support.claude.com/en/articles/12012173-get-started-with-claude-in-chrome",
       "status": "success",
       "path": "support/12012173-get-started-with-claude-in-chrome.md",
-      "sha256": "b69da6ce77086d31be8a80222cadb974c1b2ae23832ed9aaf056615fdd8a4780",
+      "sha256": "3381ba4dcda09b44d89ad0d4c2611ffc834f1856cf351e5cd5667db046270539",
       "size": 14857
     },
     {
@@ -9361,8 +9361,8 @@
       "url": "https://support.claude.com/en/articles/12083917-change-your-team-plan-from-monthly-to-annual-billing",
       "status": "success",
       "path": "support/12083917-change-your-team-plan-from-monthly-to-annual-billing.md",
-      "sha256": "912c3b4e4b2e4c656885ac3e094b3ab12439ea68785fc52a67942ad6c1f6f549",
-      "size": 1394
+      "sha256": "f574c0bcc9474311ed216ca5662452faedae04d6189ab20edf0ba50660a05f73",
+      "size": 1398
     },
     {
       "url": "https://support.claude.com/en/articles/12109679-creating-a-new-account-after-deletion",
@@ -9375,8 +9375,8 @@
       "url": "https://support.claude.com/en/articles/12111783-create-and-edit-files-with-claude",
       "status": "success",
       "path": "support/12111783-create-and-edit-files-with-claude.md",
-      "sha256": "71e722df26e5d6b9ea1eec4d228eaa367ffa030d2a22f0212b7d0abe2240b4b3",
-      "size": 17964
+      "sha256": "899357b3db8a1d3bfcc1c67b01c631f136b2e27e045082d279a71a1b31785e8c",
+      "size": 17966
     },
     {
       "url": "https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program",
@@ -9403,7 +9403,7 @@
       "url": "https://support.claude.com/en/articles/12157520-claude-code-usage-analytics",
       "status": "success",
       "path": "support/12157520-claude-code-usage-analytics.md",
-      "sha256": "d3fd9a3f0a94778c65ae781741c428ea5b9fb6798a3d8fb89c269a601f9b6e4d",
+      "sha256": "b5167f5aad0cc244a04b029ce2a234233b17ba9db6eead9b73c892a99f8db56d",
       "size": 6427
     },
     {
@@ -9417,8 +9417,8 @@
       "url": "https://support.claude.com/en/articles/12293051-use-claude-in-xcode",
       "status": "success",
       "path": "support/12293051-use-claude-in-xcode.md",
-      "sha256": "e8f7a523f1d83933eae20f00726f1d2dfa32e4ed03d82b07b2260ad28333a0f0",
-      "size": 1909
+      "sha256": "a575784861552ea60e1b3e383beb1304f52959bf63f06ed7374b1e7b28cedbab",
+      "size": 1905
     },
     {
       "url": "https://support.claude.com/en/articles/12304248-manage-api-key-environment-variables-in-claude-code",
@@ -9459,15 +9459,15 @@
       "url": "https://support.claude.com/en/articles/12429409-manage-usage-credits-for-paid-claude-plans",
       "status": "success",
       "path": "support/12429409-manage-usage-credits-for-paid-claude-plans.md",
-      "sha256": "235b875bdb7da48a54d43a6f0a8496951195c49ebe74af8321f781d86a9bb09d",
-      "size": 6412
+      "sha256": "c246a3d36e1435d5745199607266dbf0ed3bc757c52ff50374bdd9d195fa2570",
+      "size": 6414
     },
     {
       "url": "https://support.claude.com/en/articles/12466728-troubleshoot-claude-error-messages",
       "status": "success",
       "path": "support/12466728-troubleshoot-claude-error-messages.md",
-      "sha256": "a28f47234053d39fc08200cacfa24cd35e3ebeed72660d9d1988283ec52cad04",
-      "size": 4232
+      "sha256": "89c56e98fc36019428aaeb5f5e2ed5b7deaa1feb8d7f67d371a0bafe8ab67bdc",
+      "size": 4234
     },
     {
       "url": "https://support.claude.com/en/articles/12489464-use-enterprise-search",
@@ -9487,8 +9487,8 @@
       "url": "https://support.claude.com/en/articles/12512180-use-skills-in-claude",
       "status": "success",
       "path": "support/12512180-use-skills-in-claude.md",
-      "sha256": "dfda2220a683bbf3ab23abd76f3cab71674ca5bdbe6508d91b88d7031abbe7f3",
-      "size": 15916
+      "sha256": "52c934bc628d9382d4f1ab7ad42e0bf5e314b7aaf96bce5a2640a975b1a91355",
+      "size": 15918
     },
     {
       "url": "https://support.claude.com/en/articles/12512198-how-to-create-custom-skills",
@@ -9508,8 +9508,8 @@
       "url": "https://support.claude.com/en/articles/12592343-enabling-and-using-the-desktop-extension-allowlist",
       "status": "success",
       "path": "support/12592343-enabling-and-using-the-desktop-extension-allowlist.md",
-      "sha256": "7fb2ef90205a94118af841ef41f136e9fd83473e5fbdee6b41b2c5dd48d20b39",
-      "size": 5718
+      "sha256": "70a806f94c2808c312a9ed0774a236ba1972b6b68756cf6809f27ddd71378dde",
+      "size": 5716
     },
     {
       "url": "https://support.claude.com/en/articles/12611117-deploy-claude-desktop-for-macos",
@@ -9522,8 +9522,8 @@
       "url": "https://support.claude.com/en/articles/12618689-claude-code-on-the-web",
       "status": "success",
       "path": "support/12618689-claude-code-on-the-web.md",
-      "sha256": "ffe3cb21fb6da728503e7a759cdf794122a3b7875c73ac07e286326bf7e67dc3",
-      "size": 10964
+      "sha256": "c9a616b283830897eb42841f1f24bffc2a5eda35ff1cd2abe90e4770152434b1",
+      "size": 10962
     },
     {
       "url": "https://support.claude.com/en/articles/12622667-enterprise-configuration-for-claude-desktop",
@@ -9543,8 +9543,8 @@
       "url": "https://support.claude.com/en/articles/12626668-use-quick-entry-with-claude-desktop-on-mac",
       "status": "success",
       "path": "support/12626668-use-quick-entry-with-claude-desktop-on-mac.md",
-      "sha256": "c0f2dbb509efa66028fbee9f0bf7bc5a413fd92bdf2a92a156cd86bd370f3734",
-      "size": 5972
+      "sha256": "3c1c2af08a1911c8a82cbca679b9cf9811ebd0b39f7e45d8344bb8af4532e45c",
+      "size": 5970
     },
     {
       "url": "https://support.claude.com/en/articles/12684923-microsoft-365-connector-security-guide",
@@ -9578,8 +9578,8 @@
       "url": "https://support.claude.com/en/articles/12883420-view-usage-analytics-for-team-and-enterprise-plans",
       "status": "success",
       "path": "support/12883420-view-usage-analytics-for-team-and-enterprise-plans.md",
-      "sha256": "439dee3c27aab12894182ef1a5e5670bad3f3b9d2f12725d10ec0162994d4a50",
-      "size": 14509
+      "sha256": "25ce5e4d48104acbcec3d07978089d12dae4e295c2858363521bfb60111ffbbf",
+      "size": 14513
     },
     {
       "url": "https://support.claude.com/en/articles/12902405-claude-in-chrome-troubleshooting",
@@ -9599,8 +9599,8 @@
       "url": "https://support.claude.com/en/articles/12902446-claude-in-chrome-permissions-guide",
       "status": "success",
       "path": "support/12902446-claude-in-chrome-permissions-guide.md",
-      "sha256": "885b4a3f58ae39ff3ac4fb4d6ae9dfb9f0eb616b8b4912538616cfd84a8b47ba",
-      "size": 9563
+      "sha256": "7cf1c29f838023a0169203bb78fcd4f955b0c67a6f80d21bf00ff3c8a4557f14",
+      "size": 9565
     },
     {
       "url": "https://support.claude.com/en/articles/12938627-how-to-gift-a-claude-subscription",
@@ -9627,8 +9627,8 @@
       "url": "https://support.claude.com/en/articles/12997503-team-plan-billing-faqs",
       "status": "success",
       "path": "support/12997503-team-plan-billing-faqs.md",
-      "sha256": "027fd6b7c7437257cf82a035028badea5b2ac44107c37084daf0bafaa2a06253",
-      "size": 4855
+      "sha256": "52f2b5091f464fb1317ddbd0aa1ac6c6012ea19e588f679f6a126185af0aa29a",
+      "size": 4851
     },
     {
       "url": "https://support.claude.com/en/articles/13015708-access-the-compliance-api",
@@ -9662,8 +9662,8 @@
       "url": "https://support.claude.com/en/articles/13119606-provision-and-manage-skills-for-your-organization",
       "status": "success",
       "path": "support/13119606-provision-and-manage-skills-for-your-organization.md",
-      "sha256": "d8cbce3f40b8371a53ab188d7f4de43f368bb71f15b35e35548709a274001040",
-      "size": 11688
+      "sha256": "d30714ed95a3a5150e08f0f72eac2655bd7b7b87fc0b016812c3d52655ac44df",
+      "size": 15650
     },
     {
       "url": "https://support.claude.com/en/articles/13124001-managing-your-active-sessions",
@@ -9676,8 +9676,8 @@
       "url": "https://support.claude.com/en/articles/13132885-set-up-single-sign-on-sso",
       "status": "success",
       "path": "support/13132885-set-up-single-sign-on-sso.md",
-      "sha256": "f6711c25c0ac976e252bcc0669978175aa473cc17b17acfc70b575a4e5758bc6",
-      "size": 13323
+      "sha256": "9cf7025b66c505a00eb4b34e11d679ce5533480445bee1c8d916cf17d222c08d",
+      "size": 13335
     },
     {
       "url": "https://support.claude.com/en/articles/13133195-set-up-jit-or-scim-provisioning",
@@ -9711,8 +9711,8 @@
       "url": "https://support.claude.com/en/articles/13163631-configuring-session-security-settings",
       "status": "success",
       "path": "support/13163631-configuring-session-security-settings.md",
-      "sha256": "7f196e1d3dedfd68569271be9068b9fb5d6cbd8f2c56ba435e3d7b6c7a28f7f0",
-      "size": 3694
+      "sha256": "5576cc818d66be19bdf75ac8428cfc3b3c78f58fa66d23ae08195b3a1deb7555",
+      "size": 3700
     },
     {
       "url": "https://support.claude.com/en/articles/13171706-crisis-helpline-support-in-claude",
@@ -9725,8 +9725,8 @@
       "url": "https://support.claude.com/en/articles/13189465-log-in-to-your-claude-account",
       "status": "success",
       "path": "support/13189465-log-in-to-your-claude-account.md",
-      "sha256": "97597f7e61f863d67d9619d2e46d5eae6f1e4bc0ce08e6044ae38212e91f7d6f",
-      "size": 7040
+      "sha256": "be5decd8b02e4f79107c87d7b395741f17ac103bdd638e0849303ab8dabd797a",
+      "size": 7036
     },
     {
       "url": "https://support.claude.com/en/articles/13198485-enforce-network-level-access-control-with-tenant-restrictions",
@@ -9753,8 +9753,8 @@
       "url": "https://support.claude.com/en/articles/13325567-account-management-faqs",
       "status": "success",
       "path": "support/13325567-account-management-faqs.md",
-      "sha256": "a2dc6582e3514326b89d61f0ecf75ba3f6829c55104fe059f415fa97353cf0db",
-      "size": 2634
+      "sha256": "592f5158a618939eaeadf7c6c1e8e86fa44c1fe2bccb6ff5f0c568934349d8ea",
+      "size": 2636
     },
     {
       "url": "https://support.claude.com/en/articles/13345190-get-started-with-claude-cowork",
@@ -9767,8 +9767,8 @@
       "url": "https://support.claude.com/en/articles/13346458-customizing-your-console-appearance-settings",
       "status": "success",
       "path": "support/13346458-customizing-your-console-appearance-settings.md",
-      "sha256": "8a1ae44aae5a368e7b9dbad8612f64dd4f481e65eb4c0378524f408fd7297455",
-      "size": 605
+      "sha256": "d7823b5fd3ab65d4ad1e5514bbf9eeb2d86108374e5b2b49ff1eb952ebff146a",
+      "size": 609
     },
     {
       "url": "https://support.claude.com/en/articles/13346720-export-your-organization-s-data",
@@ -9788,8 +9788,8 @@
       "url": "https://support.claude.com/en/articles/13371040-log-in-to-your-console-account",
       "status": "success",
       "path": "support/13371040-log-in-to-your-console-account.md",
-      "sha256": "6c76fd046b478aa88e07f171b1e6d722241050a0f7dba583e6bbdbd015e2e938",
-      "size": 4609
+      "sha256": "f76d2b2269b0880da7ae0b118e3a8e413222e8150fd0bb83bc814d2b9908a1b1",
+      "size": 4611
     },
     {
       "url": "https://support.claude.com/en/articles/13393991-purchase-and-manage-seats-on-enterprise-plans",
@@ -9844,8 +9844,8 @@
       "url": "https://support.claude.com/en/articles/13641943-visual-and-interactive-content",
       "status": "success",
       "path": "support/13641943-visual-and-interactive-content.md",
-      "sha256": "43f2b4d90305cce8be856ebbcf47539f7e938232e7c922d92f29d11675724071",
-      "size": 6517
+      "sha256": "ad1e4150704d2224a4f99b2ccac459d440de05f96b8032fd7f36b69b75e572b1",
+      "size": 6505
     },
     {
       "url": "https://support.claude.com/en/articles/13663666-use-visual-and-interactive-content-on-team-and-enterprise-plans",
@@ -9872,8 +9872,8 @@
       "url": "https://support.claude.com/en/articles/13756069-public-sector-faqs",
       "status": "success",
       "path": "support/13756069-public-sector-faqs.md",
-      "sha256": "2300097a5ed16561840c35227ab05b67c2ba282cee7c596f15d4ffd313746b6a",
-      "size": 8378
+      "sha256": "372d6111507e8fa428d545d262f5bf73125b31913e90f6af7e9e48221073ac75",
+      "size": 8382
     },
     {
       "url": "https://support.claude.com/en/articles/13776697-join-an-organization-via-invite-link",
@@ -9900,15 +9900,15 @@
       "url": "https://support.claude.com/en/articles/13837433-manage-plugins-for-your-organization",
       "status": "success",
       "path": "support/13837433-manage-plugins-for-your-organization.md",
-      "sha256": "e2a3902fedfb304de0edadf6046df2bb7270195084eab50bca5944c37915cec5",
-      "size": 21285
+      "sha256": "e572c0330c1003b32fe4ad056e64857513ba60b71477bbd9a5550cb427eb7b6f",
+      "size": 21291
     },
     {
       "url": "https://support.claude.com/en/articles/13837440-use-plugins-in-claude",
       "status": "success",
       "path": "support/13837440-use-plugins-in-claude.md",
-      "sha256": "42a05b457cec4764e110facbda71e61c3971fda8152fef9d216e8b398ba6a20f",
-      "size": 10869
+      "sha256": "fa75317bf1a0510e184d8f68ccd0510bb2a86a7a9da1b0e7c4cc2e67a8900074",
+      "size": 10871
     },
     {
       "url": "https://support.claude.com/en/articles/13854387-schedule-recurring-tasks-in-claude-cowork",
@@ -10096,8 +10096,8 @@
       "url": "https://support.claude.com/en/articles/14499648-how-scim-sync-works-for-enterprise-organizations",
       "status": "success",
       "path": "support/14499648-how-scim-sync-works-for-enterprise-organizations.md",
-      "sha256": "800291566cb554ce259c34d383d45d523b13ef1aaece0762d9c2b3a8a6552c85",
-      "size": 7672
+      "sha256": "0fd74943b9c8095e74fcb6f7b562d8ff94c0a8299dbb9fa051557ecabb0a8737",
+      "size": 7670
     },
     {
       "url": "https://support.claude.com/en/articles/14503520-available-beta-and-research-preview-features",
@@ -10117,15 +10117,15 @@
       "url": "https://support.claude.com/en/articles/14503613-sso-login",
       "status": "success",
       "path": "support/14503613-sso-login.md",
-      "sha256": "508795170e384c0d1adcb6b2c189c308e89d9757a8d35e91db5de37d7e2f2b6f",
-      "size": 6686
+      "sha256": "05b6a6f477baed3fe48fb8f50046458ba0a8c14f13762259d71ebad6ced7c142",
+      "size": 6692
     },
     {
       "url": "https://support.claude.com/en/articles/14503643-set-up-scim-in-claude-for-government",
       "status": "success",
       "path": "support/14503643-set-up-scim-in-claude-for-government.md",
-      "sha256": "e6667eda958c6e79914a0b397611a81e9ca771433960968265fa7f6adff51c71",
-      "size": 6421
+      "sha256": "a663460470c31d702edb4abccd7a45337f92c3f93b695a6d104f4d49fb63cae3",
+      "size": 6417
     },
     {
       "url": "https://support.claude.com/en/articles/14503675-organization-instructions-in-claude-for-government",
@@ -10152,8 +10152,8 @@
       "url": "https://support.claude.com/en/articles/14503775-mcp-web-search",
       "status": "success",
       "path": "support/14503775-mcp-web-search.md",
-      "sha256": "b560a42733ea1478e1135ef5b560e8f4dbba8a2c6a18ad5e0032ab85bae15d27",
-      "size": 4675
+      "sha256": "c1df7e6e2905dad16ba967ff10f640d260065342af36eac83982388b6ee56207",
+      "size": 4677
     },
     {
       "url": "https://support.claude.com/en/articles/14503794-model-availability-in-claude-for-government",
@@ -10502,8 +10502,8 @@
       "url": "https://support.claude.com/en/articles/15694740-manage-model-access-for-your-organization",
       "status": "success",
       "path": "support/15694740-manage-model-access-for-your-organization.md",
-      "sha256": "0cf9af9acf29d3efcfc02287309e042c5f290755129768de21b6ac7ebe1ae926",
-      "size": 10147
+      "sha256": "5db3174b4b214f84df99847563f2af1790ffcd6df84a74fc5ecbdc3b78976d03",
+      "size": 10145
     },
     {
       "url": "https://support.claude.com/en/articles/15707726-using-claude-for-legal-work-privilege-confidentiality-and-how-to-think-about-configuration",
@@ -10537,8 +10537,8 @@
       "url": "https://support.claude.com/en/articles/15936181-get-started-with-1password-for-claude",
       "status": "success",
       "path": "support/15936181-get-started-with-1password-for-claude.md",
-      "sha256": "8692182358980f59448254d621d73bd67c4cfda64a5bd8ac27dc666417f45a7e",
-      "size": 5056
+      "sha256": "3821f5cf4bd05b4eb8f64b78f5be2f105bd52b58c70c7d82990e78c3363542ee",
+      "size": 5058
     },
     {
       "url": "https://support.claude.com/en/articles/16049681-why-claude-switched-models-in-your-conversation-with-opus-5",
@@ -10586,8 +10586,8 @@
       "url": "https://support.claude.com/en/articles/16607638-understanding-your-pro-or-max-plan-invoices",
       "status": "success",
       "path": "support/16607638-understanding-your-pro-or-max-plan-invoices.md",
-      "sha256": "bea0c6dd8b956ed9ab13d8db9c7de7d3a53ca6bb188f4e06646db3b83141a88f",
-      "size": 5435
+      "sha256": "9117ad9d3081518d4402a3b94be5be955ddc98df3c89e93a03026452a8ae416d",
+      "size": 5439
     },
     {
       "url": "https://support.claude.com/en/articles/16607668-understanding-your-team-plan-invoices",
@@ -10656,8 +10656,8 @@
       "url": "https://support.claude.com/en/articles/16764810-assign-a-program-to-workspaces-in-claude-console",
       "status": "success",
       "path": "support/16764810-assign-a-program-to-workspaces-in-claude-console.md",
-      "sha256": "ce13a1bba66e9df1326ba2e8526f996cd366fd5cbbd07953d78db9c614e683c5",
-      "size": 5107
+      "sha256": "b11b1e72dbfc04b25da296ae6f3f8e405fc863ddc8e043b2e085fea9f9f5a555",
+      "size": 5099
     },
     {
       "url": "https://support.claude.com/en/articles/16824617-turn-on-data-retention-for-a-workspace-in-a-zero-data-retention-organization",
@@ -10670,8 +10670,8 @@
       "url": "https://support.claude.com/en/articles/16893491-get-started-with-smart-reports",
       "status": "success",
       "path": "support/16893491-get-started-with-smart-reports.md",
-      "sha256": "23b58a0735433308d14ea5cb5f734c4075ef096100c22709aefc0e9b3adcd358",
-      "size": 14108
+      "sha256": "482560e05e947d8eb532d8b42c20ba44c1147d51446997374aa68a2d9cead938",
+      "size": 14098
     },
     {
       "url": "https://support.claude.com/en/articles/16923645-get-started-with-claude-docs",
@@ -11685,8 +11685,8 @@
       "url": "https://claude.com/docs/cowork/changelog",
       "status": "success",
       "path": "claude/cowork/changelog.md",
-      "sha256": "2399856eee7096bd70c95d1120b12185b49a16f6f412ffa025d44a651ad09690",
-      "size": 154920
+      "sha256": "41f057e52e1c84a008fb9caa27f7d8ac270760ebf44940dea43429dcf4198482",
+      "size": 155342
     },
     {
       "url": "https://claude.com/docs/cowork/guide/dispatch",
@@ -12119,8 +12119,8 @@
       "url": "https://claude.com/docs/third-party/claude-desktop/admin-console",
       "status": "success",
       "path": "claude/third-party/claude-desktop/admin-console.md",
-      "sha256": "ecbc0b5ca3bb36fdf5d7b3c1c7deddadeee22d9e4c7c01916b89297990a06c65",
-      "size": 64085
+      "sha256": "751d9b96b5579dd44632f2367614f423a27f7353bc71d47e0bd2be1bfcbfef50",
+      "size": 64208
     },
     {
       "url": "https://claude.com/docs/third-party/claude-desktop/bedrock",
@@ -12182,8 +12182,8 @@
       "url": "https://claude.com/docs/third-party/claude-desktop/configuration-changelog",
       "status": "success",
       "path": "claude/third-party/claude-desktop/configuration-changelog.md",
-      "sha256": "d16c90f9624fb3a905fcbe48665b53326aa9f92186ab324eee554cea2124582c",
-      "size": 67567
+      "sha256": "ea62fbee4e5bada3f9d247a29d74361c7a71aba87dcbc3d5f0fe73d3216145a8",
+      "size": 67674
     },
     {
       "url": "https://claude.com/docs/third-party/claude-desktop/connectors-box",
@@ -12213,6 +12213,13 @@
       "sha256": "1f374849489818f483567522cb8ea1bda9a22780c00d85b321ebb802cdbd8368",
       "size": 51944
     },
+    {
+      "url": "https://claude.com/docs/third-party/claude-desktop/connectors-salesforce",
+      "status": "success",
+      "path": "claude/third-party/claude-desktop/connectors-salesforce.md",
+      "sha256": "8bab8a58c8f40ab3b23818792a274b7a42cb4ad0cc4dd7d0430290d0f6136e5a",
+      "size": 6168
+    },
     {
       "url": "https://claude.com/docs/third-party/claude-desktop/credential-helper",
       "status": "success",
@@ -12238,8 +12245,8 @@
       "url": "https://claude.com/docs/third-party/claude-desktop/extensions",
       "status": "success",
       "path": "claude/third-party/claude-desktop/extensions.md",
-      "sha256": "d8984bfedda493a620cd833fb8349fa0199237c69446d9c27795ca2ccd94fbb7",
-      "size": 58661
+      "sha256": "2776494d623a432c5e7564752b8796dcb7d796b91de2fbf66dde7a0c9719c488",
+      "size": 58675
     },
     {
       "url": "https://claude.com/docs/third-party/claude-desktop/feature-matrix",
@@ -12308,8 +12315,8 @@
       "url": "https://claude.com/docs/third-party/claude-desktop/mcp-sign-in",
       "status": "success",
       "path": "claude/third-party/claude-desktop/mcp-sign-in.md",
-      "sha256": "14364422efb477be81556988e80c8e28678e7d3db81391c217fc2a22da2983a6",
-      "size": 15626
+      "sha256": "08f23e7e71d389b9d789050fe8cf3ef0b9694945b10ab80ac1913aaa9d225f6a",
+      "size": 15732
     },
     {
       "url": "https://claude.com/docs/third-party/claude-desktop/mdm",
@@ -12378,15 +12385,15 @@
       "url": "https://code.claude.com/docs/en/slash-commands",
       "status": "success",
       "path": "en/docs/claude-code/slash-commands.md",
-      "sha256": "94f93f724453ef8bd9cb94af5fe9cb73aa77b3573019f6f06e7a7844bbb49af1",
-      "size": 114929
+      "sha256": "5a2e0e2ee821fb7b79bff173358f48c036a2c9406a0446bc8292aa0221eee4af",
+      "size": 115336
     },
     {
       "url": "https://code.claude.com/docs/en/web-scheduled-tasks",
       "status": "success",
       "path": "en/docs/claude-code/web-scheduled-tasks.md",
-      "sha256": "ae7ae570e21efa1e83b046415f8613439882577f3731740e6c08109c9c75a4b8",
-      "size": 33659
+      "sha256": "d76aa5af0d53c71ec2496c591db62a2774baf98e4455e5876adc328eaf1e5d2d",
+      "size": 33670
     },
     {
       "url": "https://code.claude.com/docs/en/ultraplan",
@@ -12406,8 +12413,8 @@
       "url": "https://code.claude.com/docs/en/agent-sdk/slash-commands",
       "status": "success",
       "path": "en/docs/claude-code/agent-sdk/slash-commands.md",
-      "sha256": "367d6194fc6145c1ff77c583c7bd375f7830f42655350628df6b60fd9c32c482",
-      "size": 26863
+      "sha256": "c490d4f3e1724845171ad2c8ee7dba2d354f4b969500e0e26fc9891729063041",
+      "size": 27470
     },
     {
       "url": "https://platform.claude.com/docs/en/api/java/completions",
@@ -28123,8 +28130,8 @@
     }
   ],
   "summary": {
-    "total": 4119,
-    "downloaded": 3879,
+    "total": 4120,
+    "downloaded": 3880,
     "skipped": 0,
     "failed": 0,
     "dead": 240,
diff --git a/content/CHANGELOG.md b/content/CHANGELOG.md
index 4dd31b57e4..73440d356f 100644
--- a/content/CHANGELOG.md
+++ b/content/CHANGELOG.md
@@ -1,5 +1,108 @@
 # Changelog
 
+## 2.1.276
+
+- Fixed every request failing with `400 … Input tag 'advisor_20260301'` when `ANTHROPIC_BASE_URL` points at a proxy or gateway (2.1.275 regression)
+
+## 2.1.275
+
+- Added the signed-in account to Claude apps gateway sign-in: when the gateway names it, you confirm it before the credential is saved, and `/status` shows it
+- Added a send-now key (ctrl+enter, or ctrl+x ctrl+s) that interrupts the current turn and sends all queued messages at once; sent and queued messages show in gray until the model receives them
+- Added a startup warning when a configured `otelHeadersHelper` fails, so sessions that silently export no telemetry are noticed
+- Added syncing of the skills and plugins enabled on your claude.ai account to terminal sessions signed in with it; opt out with `syncClaudeAiSkills: false` or `syncClaudeAiPlugins: false`
+- Added `/plugin install <plugin> --marketplace <source>`, which offers to add the marketplace before installing the plugin
+- Fixed a restored memory file's age note changing between requests after a compaction or resume, which caused prompt cache misses
+- Fixed `--forward-subagent-text` stream-json and SDK output dropping the messages of subagents spawned by a `context: fork` skill, and of forked skills invoked by a subagent or another forked skill
+- Fixed @-mention file suggestions being buried below MCP resources when using a custom `fileSuggestion` command or typing `@.`/`@./`
+- Fixed fullscreen mode placing background-task completion notices beneath a long turn's collapsed tool row instead of where they arrived; each notice now closes the open row
+- Fixed `claude plugin marketplace update` deleting a GitHub marketplace's local copy when the fetch failed and the marketplace was named after its repository
+- Fixed plugin and marketplace messages, logs and `claude plugin marketplace list` showing a password or token stored in a git, ssh or marketplace URL
+- Fixed a resumed cloud session leaving an unanswered question open in the transcript after a queued message superseded it
+- Fixed vim mode placing the cursor one character right after a dot-repeated "!" or a fast-typed "i!" switched a non-empty prompt into shell mode
+- Fixed fullscreen mode freezing or blanking for several seconds when scrolling up past a large file diff
+- Fixed a stray `</ccmemory>`-style closing tag occasionally appearing in responses
+- Fixed plugin messages, logs and the VS Code plugin dialog showing the wrong server for some git addresses
+- Fixed a terminal `API Error: 400` on every turn for users behind a network gateway that rewrites API error responses when a beta request header is rejected
+- Fixed sandboxed Bash commands on Linux reporting exit code 0 for failed commands when the shell is zsh
+- Fixed the Read tool hanging instead of reporting an error when part of a large file could not be decoded under memory pressure
+- Fixed `--resume`, the resume picker preview, resumed background agents and the transcript view failing on a session whose saved history contains a malformed task-reminder or @-file attachment entry
+- Fixed a crash when resuming a conversation whose transcript contains a malformed message entry, and a fullscreen crash when such a conversation received new messages while scrolled up
+- Fixed sessions failing to resume or start when their saved transcript contains a malformed message content block
+- Fixed Grep, Glob and @-file suggestions hanging or running out of memory on searches over the 20MB output cap, and system ripgrep reporting "no matches" instead of an error after a flood of warnings
+- Fixed `/rewind` in a forked or background session restoring a zero-filled or truncated file when the session's file-history backups could not be fully copied
+- Fixed fullscreen sessions sometimes exiting with "Claude Code exited after an unrecoverable interface error" when typing fast or holding a key with the slash-command dropdown open
+- Fixed background sessions crashing and restarting their worker when a command fed through stdin ran on a machine that had run out of file descriptors
+- Fixed a crash at launch when `~/.claude.json` holds a malformed `mcpNeedsAuthNoticed` value
+- Fixed `--resume` and `--continue` dropping a conversation's earlier thinking when a built-in tool it started with has since been switched off by a server-side flag
+- Fixed text selected with the mouse in the fullscreen `claude --resume` session picker never reaching the clipboard
+- Fixed plugin reload previews replacing a running session's extracted plugin files when the plugin was loaded from a `--plugin-dir` or `--plugin-url` archive
+- Fixed self-hosted runners with `--drain-wait-sec` losing the final result of a turn that finished during a SIGTERM drain; the runner now waits briefly for the turn to be reported
+- Fixed `SubagentStop` hooks with a specific `matcher` firing for every stopping subagent whose agent type was empty
+- Fixed sandboxed Bash commands being unable to write to project directories named `hooks/` or `config/`
+- Fixed Artifact updates failing with "File not found" after a session resumes on another machine or its scratchpad is cleared: the page's last published version is restored
+- Fixed `/update-config` writing `Write(path)` permission rules, which file permission checks don't match, instead of `Edit(path)` rules
+- Fixed four dead documentation URLs (Pricing, Computer Use, Skills, CLI) in the bundled claude-api skill's live-sources table
+- Improved prompt caching for a `--system-prompt` that contains a `__SYSTEM_PROMPT_DYNAMIC_BOUNDARY__` line: the text above it is now cached globally, as the SDK's array form already is
+- Improved the `/desktop` error when Claude Desktop does not open: it now says why and what to do next
+- Improved the Artifact tool's publish and read results: they now say who can open the page and what the owner's Share menu offers
+- Improved artifact publish results: they name the tab icon sent, warn when the page contains a NUL byte, and retry a flaky fetch of the newer page to merge after a stale publish
+- Improved pasted and attached images: they are now saved where Claude can open them as files without a permission prompt, including in Desktop and VS Code
+- Improved the Artifact tool's guidance so Claude updates a shared artifact in place when you were given edit access to it, instead of publishing a separate copy
+- Improved plan-usage reads: editor windows and non-interactive sessions on one machine now share a read made in the last minute instead of each calling the usage endpoint
+- Improved the `ListPlugins` tool description so Claude knows it lists plugins enabled on your claude.ai account, not plugins installed locally with `/plugin`
+- Improved responsiveness when the terminal is slow or paused: output no longer falls further behind while the terminal catches up
+- Improved Write and Edit results for files in the synced account-skills folder: they now say the change is not saved to your account and how to save it
+- Updated `/logout` for Claude apps gateway sign-ins to also end the session on gateways that advertise token revocation
+- Changed hosted sessions to keep an unanswered permission prompt up after a container restart, instead of asking again
+- Changed the Artifact tool to ask for a one-word tab icon on a first publish instead of an emoji favicon
+- Changed Claude in Chrome in auto mode to skip the extension's per-site check for classifier-approved calls, as bypass mode does, fixing `browser_batch` "Permission denied" after a redirect
+- Changed plugins installed from an npm source to be fetched with `npm pack --ignore-scripts` and integrity-verified, so a package's install scripts no longer run
+- Changed scheduled and Run now routine runs to save data to, and republish the page of, an artifact you can edit without asking; public artifacts, first publishes and deletes still ask
+- Removed the startup notice that told you a one-off scheduled routine had run since your last session
+- [VSCode] Added viewing, editing and deleting a saved memory inside the Memory dialog
+- [VSCode] Added sending an attached image without typing any text
+- [VSCode] Added a Retry link to the MCP servers dialog when the server list fails to load
+- [VSCode] Added accept and reject buttons under each change in the proposed-change diff tab, so an edit can be reviewed change by change
+- [VSCode] Fixed the transcript creeping toward the bottom in small steps while a permission card waits and content keeps arriving
+- [VSCode] Fixed rewound and forked conversations not keeping the permission mode you had picked for the original conversation
+- [VSCode] Fixed an empty `CLAUDE_CONFIG_DIR` entry in the `environmentVariables` setting making Claude Code keep its files in the workspace
+- [VSCode] Fixed plugin install links opening the Manage plugins dialog for plugin names and marketplace addresses that can't be used in a link
+- [VSCode] Fixed Remote Control staying shown as connected after a turn-off that Claude Code reported as failed; it now shows as off
+- [VSCode] Fixed the scroll to the bottom on send stopping short of the reply when the reply starts arriving during the scroll
+- [VSCode] Fixed the agent map showing agents a crash left unfinished as stopped instead of failed once the session is reopened
+- [VSCode] Fixed the "Continuing the step" notice not appearing, and the continue limit resetting, after a reload that follows a crash with background tasks still running
+- [VSCode] Fixed the session list showing when a session was last reopened, such as after a window reload, instead of when its last message was sent
+- [VSCode] Fixed "Fork conversation from here" failing on the message right after one sent while Claude was working
+- [VSCode] Fixed the prompt cache clock showing too few minutes after reopening a session with a message sent while Claude was working
+- [VSCode] Fixed a background agent that finished while Claude was running a tool losing its completion notice, and its result on the agent map, after a window reload
+- [VSCode] Fixed a rare case where text selected in a git-ignored file could be sent to Claude after the extension was unresponsive for several seconds
+- [VSCode] Fixed renaming a running session reverting to the generated name (regression in 2.1.269)
+- [VSCode] Fixed some claude.ai/code sessions opening in VS Code as an empty conversation with no messages
+- [VSCode] Fixed slash commands typed while Claude is responding being sent to the model as text instead of running once the response finishes
+- [VSCode] Fixed unreadable code in the plan preview and the Hooks and Permission rules dialogs with the High Contrast Light theme
+- [VSCode] Fixed `/remote-control` being ignored while Remote Control is still connecting: running it again now turns Remote Control off immediately
+- [VSCode] Fixed the conversation pulling you back to the bottom while a reply streams after you scroll up, and added a `claudeCode.scrollToBottomOnSend` setting to turn off the jump on send
+- [VSCode] Fixed the Manage plugins dialog showing a password or token that was typed into a marketplace URL
+- [VSCode] Improved the agent map: the pill counts running agents and turns red after a failure, the main agent stays in view while the map scrolls, and agents sort by state then end time
+- [VSCode] Changed New session in a Claude editor tab to open in the sidebar when Preferred Location is set to Sidebar, instead of always opening another tab
+- [VSCode] Changed a message sent while Claude is working to wait at the bottom of the conversation until Claude starts on it
+- [Claude Code on the web] Added a "New routine" button to the page shown when a routine link no longer resolves, next to the link back to your routines list
+- [Claude Code on the web] Fixed routine "paused" and "on hold" notifications being cut off mid-sentence; the paused-subscription notice now says to turn the routine back on yourself
+- [Claude Code on the web] Fixed cloud environments with a very long allowed-domains list saving fine and then failing every session start; saving now fails up front and says how much to trim
+- [Claude Code on the web] Fixed Claude's guidance when a cloud session on a personal account is denied GitHub access: it now links to claude.ai/connect-github instead of an admin settings page
+- [Claude Code on the web] Improved what Claude tells you when asked to edit, delete or run a routine it didn't create: it now links to the routine's page so you can do it yourself
+- [Claude Tag] Added attach conditions for access bundles in Claude Tag settings: an Owner can let a bundle also apply in channels with guests or Slack Connect channels, not just member-only
+- [Claude Tag] Added Amazon CloudWatch, CloudWatch Logs, Amazon SNS, Google Cloud Monitoring and Cloud Logging presets to an access bundle's Credentials tab in Claude Tag admin settings
+- [Claude Tag] Added Datadog presets for the US3, AP1, AP2 and US1-FED sites; new Datadog connections are now limited to Datadog's read and query API routes
+- [Claude Tag] Fixed S3 uploads from recent AWS CLI and SDK versions failing with a 502 error when sent through an AWS connection
+- [Claude Tag] Fixed Claude treating a channel as inactive, and skipping untagged messages there, while it was still posting in that channel from a routine or a thread
+- [Claude Tag] Fixed a thread's "Claude [task]" display name reverting to plain "Claude" after the session behind that thread was refreshed or restarted
+- [Claude Tag] Fixed the model you switched to in a Slack thread silently reverting to the channel's default after that thread's session was restarted or refreshed
+- [Claude Tag] Fixed Claude sometimes replying twice when another app or bot @mentioned it in a top-level channel message
+- [Claude Tag] Improved Claude's notices in Enterprise Grid channels shared across workspaces: they now say when no workspace is set up yet, or why only organization defaults apply
+- [Code Review] Fixed reviews occasionally dropping part of their analysis when one of the reviewing agents returned its findings in an unexpected format
+- [Code Review] Fixed pull requests with more than 100 Claude reviews getting a full re-review on every clean merge from the base branch instead of the lighter merge-focused review
+
 ## 2.1.274
 
 - Added a visible warning when memory usage is critical, with steps to free memory or restart safely
diff --git a/content/claude-code-manifest.json b/content/claude-code-manifest.json
index e15d4a0225..fb44f0aaf7 100644
--- a/content/claude-code-manifest.json
+++ b/content/claude-code-manifest.json
@@ -6,25 +6,25 @@
     "url": "https://github.com/anthropics/claude-code/issues"
   },
   "dist": {
-    "shasum": "9fe3efc2385bd3c528d5b0c15c5cdc5d59994654",
-    "tarball": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-2.1.274.tgz",
+    "shasum": "e79ef89036ba8ed956dd96caefd3d7c33c0d6b2e",
+    "tarball": "https://registry.npmjs.org/@anthropic-ai/claude-code/-/claude-code-2.1.276.tgz",
     "fileCount": 7,
-    "integrity": "sha512-UI8TGoOO0fYT38VSoAjtu9C0EQkOwgwA4+ETFCgQhTO9NZvpgCERANL0UzioEW89b2zbcoL1B3z+7W37QdBxOA==",
+    "integrity": "sha512-xgVXCbFdqOhSAcMTSC61gjL1jCQuoAA4TNU1I7Dmf/yuYcDxHf796r6LaB3Jswm1floKnP1V+/zfphtDlPdlkg==",
     "signatures": [
       {
-        "sig": "MEQCIFATAp0Ar6mIkqqiORV77Xudx3H6Pld/ekz4NOWmRq86AiAPeq18xT8t0wExq9mhHLLuAhRLv+X5xEp2v5MTG/aqfA==",
+        "sig": "MEQCIHpQecH4nUAWz2gdptLi7Hkijv8qqo6w4SpaMQFb8/r4AiB9SAdWawkJ8tZQJcLGtLmcfKgiKJqb/QNWy3VRSKhFPw==",
         "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"
       },
       {
-        "sig": "MEUCIQC6g6bJC4OEaVsVincyexVfEvQggxc3dWASMVRDmYDkJQIgEpuMa546fs6/duNclLgp1yiQp/0vFNdFkuAABQbFpyk=",
+        "sig": "MEYCIQDpDrFKX+GwAUKAaVUiw28rCktGotEsu5n1A+Y118S4fwIhAJumek2Xs69jPwQAgCvNUL16e+XFW0wGNRS59+UlVUBE",
         "keyid": "SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"
       }
     ],
-    "unpackedSize": 184602
+    "unpackedSize": 186461
   },
   "name": "@anthropic-ai/claude-code",
   "type": "module",
-  "_from": "file:staged-npm/anthropic-ai-claude-code-2.1.274.tgz",
+  "_from": "file:staged-npm/anthropic-ai-claude-code-2.1.276.tgz",
   "author": {
     "name": "Anthropic",
     "email": "support@anthropic.com"
@@ -42,8 +42,8 @@
     "email": "wolffiex@anthropic.com"
   },
   "homepage": "https://github.com/anthropics/claude-code",
-  "_resolved": "/home/runner/work/claude-cli-internal/claude-cli-internal/staged-npm/anthropic-ai-claude-code-2.1.274.tgz",
-  "_integrity": "sha512-UI8TGoOO0fYT38VSoAjtu9C0EQkOwgwA4+ETFCgQhTO9NZvpgCERANL0UzioEW89b2zbcoL1B3z+7W37QdBxOA==",
+  "_resolved": "/home/runner/work/claude-cli-internal/claude-cli-internal/staged-npm/anthropic-ai-claude-code-2.1.276.tgz",
+  "_integrity": "sha512-xgVXCbFdqOhSAcMTSC61gjL1jCQuoAA4TNU1I7Dmf/yuYcDxHf796r6LaB3Jswm1floKnP1V+/zfphtDlPdlkg==",
   "_npmVersion": "11.19.0",
   "description": "Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.",
   "directories": {},
@@ -106,19 +106,19 @@
   "_hasShrinkwrap": false,
   "readmeFilename": "README.md",
   "optionalDependencies": {
-    "@anthropic-ai/claude-code-linux-x64": "2.1.274",
-    "@anthropic-ai/claude-code-win32-x64": "2.1.274",
-    "@anthropic-ai/claude-code-darwin-x64": "2.1.274",
-    "@anthropic-ai/claude-code-linux-arm64": "2.1.274",
-    "@anthropic-ai/claude-code-win32-arm64": "2.1.274",
-    "@anthropic-ai/claude-code-darwin-arm64": "2.1.274",
-    "@anthropic-ai/claude-code-linux-x64-musl": "2.1.274",
-    "@anthropic-ai/claude-code-linux-arm64-musl": "2.1.274"
+    "@anthropic-ai/claude-code-linux-x64": "2.1.276",
+    "@anthropic-ai/claude-code-win32-x64": "2.1.276",
+    "@anthropic-ai/claude-code-darwin-x64": "2.1.276",
+    "@anthropic-ai/claude-code-linux-arm64": "2.1.276",
+    "@anthropic-ai/claude-code-win32-arm64": "2.1.276",
+    "@anthropic-ai/claude-code-darwin-arm64": "2.1.276",
+    "@anthropic-ai/claude-code-linux-x64-musl": "2.1.276",
+    "@anthropic-ai/claude-code-linux-arm64-musl": "2.1.276"
   },
   "_npmOperationalInternal": {
-    "tmp": "tmp/claude-code_2.1.274_1789598169796_0.914194267676016",
+    "tmp": "tmp/claude-code_2.1.276_1789695571884_0.43057377569820776",
     "host": "s3://npm-registry-packages-npm-production"
   },
-  "_id": "@anthropic-ai/claude-code@2.1.274",
-  "version": "2.1.274"
+  "_id": "@anthropic-ai/claude-code@2.1.276",
+  "version": "2.1.276"
 }
\ No newline at end of file
diff --git a/content/claude/cowork/changelog.md b/content/claude/cowork/changelog.md
index 47825690c8..e0dff5df31 100644
--- a/content/claude/cowork/changelog.md
+++ b/content/claude/cowork/changelog.md
@@ -6,6 +6,26 @@
 
 > Release notes for Claude Desktop
 
+<Update label="v2.2553.1" description="2026-09-18">
+  Bundled Claude Code version: 2.1.275.
+
+  **General**
+
+  * Fixed sessions failing to start or resume when their saved transcript contained a malformed entry.
+
+  **Code**
+
+  * Fixed rewinding in forked and background sessions sometimes restoring a corrupted or truncated file.
+
+  **Cowork**
+
+  * No user-facing changes.
+
+  **3P**
+
+  * No user-facing changes.
+</Update>
+
 <Update label="v2.2553.0" description="2026-09-17">
   Bundled Claude Code version: 2.1.274.
 
diff --git a/content/claude/third-party/claude-desktop/admin-console.md b/content/claude/third-party/claude-desktop/admin-console.md
index ec19163e9c..b23380556b 100644
--- a/content/claude/third-party/claude-desktop/admin-console.md
+++ b/content/claude/third-party/claude-desktop/admin-console.md
@@ -152,7 +152,7 @@ For example, if the Traders policy (ranked first) turns Code off and selects the
 
 ### Plugin marketplaces
 
-On the **Plugins** page under Desktop 3P, list the [plugin marketplaces](/docs/third-party/claude-desktop/extensions#plugin-marketplaces-admin) that users' apps should fetch. The marketplaces you add are git repositories, or a `marketplace.json` file and plugin archives on an HTTPS origin you control. The **Add marketplace** menu also offers Anthropic's public plugin marketplaces under **Curated by Anthropic**. The app does not add the Anthropic marketplaces on its own in third-party mode.
+On the **Plugins** page under Desktop 3P, list the [plugin marketplaces](/docs/third-party/claude-desktop/extensions#plugin-marketplaces-admin) that users' apps should fetch. The marketplaces you add are git repositories, or a `marketplace.json` file and plugin archives on an HTTPS origin you control. The **Add** menu also offers Anthropic's public plugin marketplaces under **Curated by Anthropic**, and Salesforce's under **From partners**, which [Connect to Salesforce](/docs/third-party/claude-desktop/connectors-salesforce) walks through. The app does not add these marketplaces on its own in third-party mode.
 
 ### Telemetry defaults
 
diff --git a/content/claude/third-party/claude-desktop/configuration-changelog.md b/content/claude/third-party/claude-desktop/configuration-changelog.md
index 53430caebe..18f24db8cb 100644
--- a/content/claude/third-party/claude-desktop/configuration-changelog.md
+++ b/content/claude/third-party/claude-desktop/configuration-changelog.md
@@ -8,6 +8,10 @@
 
 Configuration keys by Claude Desktop release. Each section lists keys added in that release, with the MDM key name (for plist/registry deployment) and the equivalent JSON shape (for local-file or bootstrap remote configuration).
 
+<Update label="v2.2553.1" description="2026-09-18">
+  No configuration changes in this release.
+</Update>
+
 <Update label="v2.2553.0" description="2026-09-17">
   <div className="cfg-keys">
     | MDM key                                                                                                            | Type       | Description                                 |
diff --git a/content/claude/third-party/claude-desktop/connectors-salesforce.md b/content/claude/third-party/claude-desktop/connectors-salesforce.md
new file mode 100644
index 0000000000..5ca9121e18
--- /dev/null
+++ b/content/claude/third-party/claude-desktop/connectors-salesforce.md
@@ -0,0 +1,80 @@
+> ## Documentation Index
+> Fetch the complete documentation index at: https://claude.com/docs/llms.txt
+> Use this file to discover all available pages before exploring further.
+
+# Connect to Salesforce
+
+> Give Claude access to your Salesforce org through Salesforce's plugin and hosted MCP server, set up in the Enterprise Admin Console or your managed configuration with an OAuth client that a Salesforce admin creates.
+
+The Salesforce plugin and Salesforce's hosted MCP server let Claude work with your organization's Salesforce records. The plugin's marketplace is one of the preconfigured [plugin marketplaces](/docs/third-party/claude-desktop/extensions#plugin-marketplaces-admin) Claude Desktop offers.
+
+## Set up Salesforce
+
+<Steps>
+  <Step title="Prepare your Salesforce org">
+    In Salesforce Setup, turn on **Enable MCP Service**, then create an External Client App for Claude Desktop with these OAuth settings:
+
+    * The callback URL `http://127.0.0.1:53280/callback`
+    * The OAuth scopes `mcp_api` and `refresh_token`
+    * Proof Key for Code Exchange (PKCE) required
+    * Access tokens issued as JSON Web Tokens (JWTs)
+    * An OAuth policy that lets users self-authorize
+
+    Copy the app's **Consumer Key**, which is its client ID. With PKCE, Claude Desktop needs no client secret.
+  </Step>
+
+  <Step title="Add the Salesforce marketplace">
+    **In the Enterprise Admin Console.** Go to [claude.ai](https://claude.ai) → **Organization settings** and open the **Plugins** page under **Desktop 3P**. Under **Plugin marketplaces**, click **Add** and choose **Salesforce** under **From partners**. The new entry has **Source** set to **GitHub**, **Repository** set to `salesforce/salesforce-skills`, and **Ref** set to `claude-prod`, the branch Salesforce publishes its releases to. Leave **Installation** empty and click **Save changes**.
+
+    **With MDM or a bootstrap server.** Add this entry to the [`allowedPluginMarketplaces`](/docs/third-party/claude-desktop/configuration#allowedpluginmarketplaces) key of your managed configuration or bootstrap response:
+
+    ```json theme={null}
+    {
+      "source": "github",
+      "repo": "salesforce/salesforce-skills",
+      "ref": "claude-prod"
+    }
+    ```
+
+    Either way the marketplace stays **available**, and each user installs the plugin once, as described in step 4. To install the plugin on every device without user action instead, set the ref to a full 40-character commit SHA and the installation preference to `auto_install`. [Marketplace installation preferences](/docs/third-party/claude-desktop/extensions#marketplace-installation-preferences) explains why the SHA is required, and [Roll out marketplace updates](/docs/third-party/claude-desktop/extensions#roll-out-marketplace-updates) explains how to move to a newer release.
+  </Step>
+
+  <Step title="Add the Salesforce MCP server">
+    **In the Enterprise Admin Console.** Go to [claude.ai](https://claude.ai) → **Organization settings** and open the **Connectors** page under **Desktop 3P**. Under **Managed MCP servers**, click **Add → Blank**, fill in the entry as below, and click **Save changes**. [Set up sign-in for managed MCP servers](/docs/third-party/claude-desktop/mcp-sign-in) explains each **OAuth** field, and users' apps pick up console changes as described under [Configuration updates](/docs/third-party/claude-desktop/admin-console#configuration-updates).
+
+    | Field                    | Value                                                              |
+    | ------------------------ | ------------------------------------------------------------------ |
+    | **Name**                 | `salesforce-h360`                                                  |
+    | **Transport**            | **Streamable HTTP**                                                |
+    | **URL**                  | `https://api.salesforce.com/platform/mcp/v1/platform/headless-360` |
+    | **OAuth**                | **Bring your own client**                                          |
+    | **Client ID**            | The Consumer Key from step 1                                       |
+    | **Authorization server** | `["https://login.salesforce.com"]`                                 |
+
+    **With MDM or a bootstrap server.** Add this entry to the [`managedMcpServers`](/docs/third-party/claude-desktop/configuration#managedmcpservers) key of your managed configuration or bootstrap response:
+
+    ```json theme={null}
+    {
+      "name": "salesforce-h360",
+      "transport": "http",
+      "url": "https://api.salesforce.com/platform/mcp/v1/platform/headless-360",
+      "oauth": {
+        "clientId": "YOUR_CONSUMER_KEY",
+        "authorizationServer": ["https://login.salesforce.com"]
+      }
+    }
+    ```
+
+    Keep the name exactly as shown. The Salesforce plugin defines an MCP server with this name, and Claude Desktop matches your entry to it by name and connects it with your client ID. Without the entry, users get the plugin's skills but not its Salesforce tools.
+
+    Enter exactly one URL as the authorization server. To send users to your org's My Domain login page instead of the shared Salesforce login page, enter that URL, for example `["https://yourorg.my.salesforce.com"]`.
+
+    For a Salesforce sandbox org, create the External Client App in the sandbox and enter the sandbox's login URL as the authorization server, for example `["https://test.salesforce.com"]`. Set the URL to `https://api.salesforce.com/platform/mcp/v1/sandbox/platform/headless-360`.
+
+    Devices need git installed to fetch the marketplace, and outbound HTTPS access to `github.com`, `api.salesforce.com`, and your Salesforce login host.
+  </Step>
+
+  <Step title="Have users install the plugin and connect">
+    Each user opens **Customize → Plugins** in Claude Desktop and clicks **Discover**, which opens the **Directory**. On its **Organization** tab the user selects your marketplace's tab and clicks the **+** button on the Salesforce plugin to install it. The user then opens **Customize → Connectors**, clicks **Connect** next to **salesforce-h360**, and signs in to Salesforce in the browser.
+  </Step>
+</Steps>
diff --git a/content/claude/third-party/claude-desktop/extensions.md b/content/claude/third-party/claude-desktop/extensions.md
index 58fa529529..41ce520f80 100644
--- a/content/claude/third-party/claude-desktop/extensions.md
+++ b/content/claude/third-party/claude-desktop/extensions.md
@@ -137,7 +137,7 @@ Google Workspace and Microsoft 365 each have a dedicated setup path:
 
 ## Plugin marketplaces (admin)
 
-A **plugin marketplace** is a catalog file (`marketplace.json`) that lists one or more Claude plugins. You host it either as a git repository or as a plain file over HTTPS. Claude Desktop fetches it on each device, shows the plugins under **Settings → Plugins → Organization** in both **Cowork** and [**Code**](/docs/third-party/claude-desktop/code), and keeps them in sync with the revision you pin. You control which plugins are available, which install automatically, and which are required.
+A **plugin marketplace** is a catalog file (`marketplace.json`) that lists one or more Claude plugins. You host it either as a git repository or as a plain file over HTTPS. Claude Desktop fetches it on each device, lists its plugins under **Customize → Plugins → Discover → Organization** in both **Cowork** and [**Code**](/docs/third-party/claude-desktop/code), and keeps them in sync with the revision you pin. You control which plugins are available, which install automatically, and which are required.
 
 This is the recommended way to distribute organization plugins. For a git-hosted marketplace, Claude Desktop clones with the git already installed on each device, so include git in your device baseline (Git for Windows on Windows; the Xcode Command Line Tools provide it on macOS); devices without git can use a [marketplace hosted over HTTPS](#host-the-marketplace-over-https-instead-of-git) instead. Use the [system-wide directory](#organization-plugins-admin) path when end-user devices cannot reach a git server or an HTTPS file host.
 
@@ -231,7 +231,7 @@ On Windows, write the same string to the `allowedPluginMarketplaces` value in th
 | `credentialHelper`       | Path to an executable that prints an access token on stdout. Required, and only valid, when `credentialKind` is `"credentialHelper"`.                                                                                            |
 | `installationPreference` | `"available"` (default), `"auto_install"`, or `"required"`. See [Marketplace installation preferences](#marketplace-installation-preferences).                                                                                   |
 
-You can configure multiple marketplaces; each appears as its own sub-tab under **Settings → Plugins → Organization**. If an admin-configured marketplace has the same `repo`, `url`, or manifest `name` as one the user added themselves, the admin entry replaces the user's.
+You can configure multiple marketplaces, and each appears as its own sub-tab under **Organization** in the **Directory**. If an admin-configured marketplace has the same `repo`, `url`, or manifest `name` as one the user added themselves, the admin entry replaces the user's.
 
 ### Marketplace installation preferences
 
diff --git a/content/claude/third-party/claude-desktop/mcp-sign-in.md b/content/claude/third-party/claude-desktop/mcp-sign-in.md
index 7ca096ac67..aeade0924e 100644
--- a/content/claude/third-party/claude-desktop/mcp-sign-in.md
+++ b/content/claude/third-party/claude-desktop/mcp-sign-in.md
@@ -73,4 +73,4 @@ These messages appear in Claude Desktop, or in `main.log` in the [logs directory
 
 ## Related connector guides
 
-[Connect to Google Cloud](/docs/third-party/claude-desktop/connectors-google-cloud) and [Connect to Box](/docs/third-party/claude-desktop/connectors-box) walk through two servers that need a client you register and its secret. [Connect to GitHub](/docs/third-party/claude-desktop/connectors-github) and [Connect to Microsoft 365](/docs/third-party/claude-desktop/connectors-m365) cover those connectors end to end, including the [built-in servers](/docs/third-party/claude-desktop/built-in-connectors) that run inside the app. Some partners publish a plugin marketplace rather than an MCP server; add those on the **Plugins** page, as described under [Plugin marketplaces](/docs/third-party/claude-desktop/admin-console#plugin-marketplaces).
+[Connect to Google Cloud](/docs/third-party/claude-desktop/connectors-google-cloud) and [Connect to Box](/docs/third-party/claude-desktop/connectors-box) walk through two servers that need a client you register and its secret. [Connect to GitHub](/docs/third-party/claude-desktop/connectors-github) and [Connect to Microsoft 365](/docs/third-party/claude-desktop/connectors-m365) cover those connectors end to end, including the [built-in servers](/docs/third-party/claude-desktop/built-in-connectors) that run inside the app. [Connect to Salesforce](/docs/third-party/claude-desktop/connectors-salesforce) covers Salesforce's plugin marketplace and its hosted MCP server. Add other partners' plugin marketplaces on the **Plugins** page, as described under [Plugin marketplaces](/docs/third-party/claude-desktop/admin-console#plugin-marketplaces).
diff --git a/content/en/about-claude/pricing.md b/content/en/about-claude/pricing.md
index a681ddc8b9..05793231be 100644
--- a/content/en/about-claude/pricing.md
+++ b/content/en/about-claude/pricing.md
@@ -186,7 +186,7 @@ For more information, see [Fast mode](https://platform.claude.com/docs/en/build-
 The Batch API allows asynchronous processing of large volumes of requests with a 50% discount on both input and output tokens.
 
 | Model                                                                                                                                 | Batch input  | Batch output  |
-| ------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ------------- |
+| :------------------------------------------------------------------------------------------------------------------------------------ | :----------- | :------------ |
 | Claude Fable 5.1                                                                                                                      | $5 / MTok    | $25 / MTok    |
 | Claude Mythos 5.1 ([limited availability](https://anthropic.com/glasswing))                                                           | $5 / MTok    | $25 / MTok    |
 | Claude Fable 5                                                                                                                        | $5 / MTok    | $25 / MTok    |
diff --git a/content/en/about-claude/use-case-guides/content-moderation.md b/content/en/about-claude/use-case-guides/content-moderation.md
index 02beddf2ca..6432f0d51b 100644
--- a/content/en/about-claude/use-case-guides/content-moderation.md
+++ b/content/en/about-claude/use-case-guides/content-moderation.md
@@ -780,7 +780,7 @@ To use Claude for content moderation, Claude must understand the moderation requ
 
       // Parse the JSON response from Claude. The SDK decodes each content block
       // into its concrete class, so find the TextBlock before reading the text.
-      $textBlock = array_find($response->content, fn ($block) => $block instanceof TextBlock)
+      $textBlock = array_find($response->content, fn ($block) => $block instanceof \Anthropic\Messages\TextBlock)
           ?? throw new RuntimeException('Expected a text block in the response.');
       $assessment = json_decode($textBlock->text, associative: true, flags: JSON_THROW_ON_ERROR);
 
@@ -1333,7 +1333,7 @@ One additional consideration is that instead of treating content moderation as a
 
       // Parse the JSON response from Claude. The SDK decodes each content block
       // into its concrete class, so find the TextBlock before reading the text.
-      $textBlock = array_find($response->content, fn ($block) => $block instanceof TextBlock)
+      $textBlock = array_find($response->content, fn ($block) => $block instanceof \Anthropic\Messages\TextBlock)
           ?? throw new RuntimeException('Expected a text block in the response.');
       $assessment = json_decode($textBlock->text, associative: true, flags: JSON_THROW_ON_ERROR);
 
@@ -2073,7 +2073,7 @@ In addition to listing the unsafe categories in the prompt, further improvements
 
       // Parse the JSON response from Claude. The SDK decodes each content block
       // into its concrete class, so find the TextBlock before reading the text.
-      $textBlock = array_find($response->content, fn ($block) => $block instanceof TextBlock)
+      $textBlock = array_find($response->content, fn ($block) => $block instanceof \Anthropic\Messages\TextBlock)
           ?? throw new RuntimeException('Expected a text block in the response.');
       $assessment = json_decode($textBlock->text, associative: true, flags: JSON_THROW_ON_ERROR);
 
@@ -2648,7 +2648,7 @@ To reduce costs in situations where real-time moderation isn't necessary, consid
 
       // Parse the JSON response from Claude. The SDK decodes each content block
       // into its concrete class, so find the TextBlock before reading the text.
-      $textBlock = array_find($response->content, fn ($block) => $block instanceof TextBlock)
+      $textBlock = array_find($response->content, fn ($block) => $block instanceof \Anthropic\Messages\TextBlock)
           ?? throw new RuntimeException('Expected a text block in the response.');
 
       return json_decode($textBlock->text, associative: true, flags: JSON_THROW_ON_ERROR);
diff --git a/content/en/agents-and-tools/mcp-connector.md b/content/en/agents-and-tools/mcp-connector.md
index c10002e1e9..321605bbe5 100644
--- a/content/en/agents-and-tools/mcp-connector.md
+++ b/content/en/agents-and-tools/mcp-connector.md
@@ -658,21 +658,27 @@ Install both the Anthropic SDK and the MCP SDK:
   </Tab>
 
   <Tab title="Java">
-    The helpers live in the separate `anthropic-java-mcp` artifact, which requires Java 17 or later (the core SDK supports Java 8):
+    The helpers live in the separate `anthropic-java-mcp` artifact, which requires Java 17 or later (the base SDK supports Java 8). Add it alongside the base `anthropic-java` dependency:
 
     <Tabs>
       <Tab title="Gradle">
         ```kotlin
-        implementation("com.anthropic:anthropic-java-mcp:2.60.0")
+        implementation("com.anthropic:anthropic-java:2.63.0")
+        implementation("com.anthropic:anthropic-java-mcp:2.63.0")
         ```
       </Tab>
 
       <Tab title="Maven">
         ```xml
+        <dependency>
+            <groupId>com.anthropic</groupId>
+            <artifactId>anthropic-java</artifactId>
+            <version>2.63.0</version>
+        </dependency>
         <dependency>
             <groupId>com.anthropic</groupId>
             <artifactId>anthropic-java-mcp</artifactId>
-            <version>2.60.0</version>
+            <version>2.63.0</version>
         </dependency>
         ```
       </Tab>
diff --git a/content/en/agents-and-tools/tool-use/advisor-tool.md b/content/en/agents-and-tools/tool-use/advisor-tool.md
index 31b09688c6..05dc105cd3 100644
--- a/content/en/agents-and-tools/tool-use/advisor-tool.md
+++ b/content/en/agents-and-tools/tool-use/advisor-tool.md
@@ -566,18 +566,7 @@ Pass the full assistant content, including `advisor_tool_result` blocks, back to
   }
 
   // Append the full response content, including any advisor_tool_result blocks.
-  // BetaMessage.ToParam drops advisor result content as of anthropic-sdk-go
-  // v1.61.0, so re-parse each response block's raw JSON into a param block instead.
-  assistantContent := make([]anthropic.BetaContentBlockParamUnion, len(response.Content))
-  for i, block := range response.Content {
-  	if err := json.Unmarshal([]byte(block.RawJSON()), &assistantContent[i]); err != nil {
-  		log.Fatal(err)
-  	}
-  }
-  messages = append(messages, anthropic.BetaMessageParam{
-  	Role:    anthropic.BetaMessageParamRoleAssistant,
-  	Content: assistantContent,
-  })
+  messages = append(messages, response.ToParam())
 
   // Continue the conversation
   messages = append(messages, anthropic.NewBetaUserMessage(anthropic.NewBetaTextBlock("Now add a max-in-flight limit of 10.")))
@@ -1003,19 +992,7 @@ With the default `NUDGE_TURN` of 2, the reminder typically arrives after the mod
   			log.Fatal(err)
   		}
 
-  		// Append the full response content, including any advisor_tool_result blocks.
-  		// BetaMessage.ToParam drops advisor result content as of anthropic-sdk-go
-  		// v1.61.0, so re-parse each response block's raw JSON into a param block instead.
-  		assistantContent := make([]anthropic.BetaContentBlockParamUnion, len(response.Content))
-  		for i, block := range response.Content {
-  			if err := json.Unmarshal([]byte(block.RawJSON()), &assistantContent[i]); err != nil {
-  				log.Fatal(err)
-  			}
-  		}
-  		messages = append(messages, anthropic.BetaMessageParam{
-  			Role:    anthropic.BetaMessageParamRoleAssistant,
-  			Content: assistantContent,
-  		})
+  		messages = append(messages, response.ToParam())
 
   		for _, block := range response.Content {
   			if block.Type == "server_tool_use" && block.Name == "advisor" {
diff --git a/content/en/agents-and-tools/tool-use/browser-use-tool.md b/content/en/agents-and-tools/tool-use/browser-use-tool.md
index 295b790a78..36bc49cb76 100644
--- a/content/en/agents-and-tools/tool-use/browser-use-tool.md
+++ b/content/en/agents-and-tools/tool-use/browser-use-tool.md
@@ -978,7 +978,7 @@ The second part runs a batch in order, dispatches each block to those handlers,
       $failed = false;
       foreach ($response->content as $block) {
           // This example declares only the browser toolset; route other tools here if you add them.
-          if (!($block instanceof ToolUseBlock) || $block->toolsetName !== 'browser') {
+          if (!($block instanceof \Anthropic\Messages\ToolUseBlock) || $block->toolsetName !== 'browser') {
               continue;
           }
           $result = ['type' => 'tool_result', 'tool_use_id' => $block->id, 'toolset_name' => 'browser'];
@@ -1120,7 +1120,7 @@ Browser use carries risks that standard API features don't, because Claude reads
   1. Run the browser and your executor in a dedicated container or virtual machine with minimal privileges, a fresh profile that holds no credentials, and no access to sensitive filesystems or internal networks; isolate any tool you run alongside it the same way.
   2. Restrict the hosts the browser can reach to a domain allowlist enforced at the network layer and re-checked in your `navigate` handler after redirects, and block loopback, link-local, and private ranges unless the task needs them.
   3. Treat everything a page supplies as untrusted input, including the tab titles and URLs, and each download's `url`, `path`, and `error`, that you report in a [`browser_state`](https://platform.claude.com/docs/en/agents-and-tools/tool-use/browser-use-tool#track-tabs-and-page-state) block, and build page reads from what the page renders (the accessibility tree or visible text), not raw DOM source, so hidden text doesn't reach Claude.
-  4. In your `navigate` handler, accept the history keywords `"back"`, `"forward"`, and `"reload"`, treat a URL without a scheme as `https://`, then parse the URL and refuse any scheme other than `http` or `https` (`javascript:`, `file:`, `data:`, `chrome:`, and so on) with an [error result](https://platform.claude.com/docs/en/agents-and-tools/tool-use/browser-use-tool#return-errors-from-your-executor). Check the scheme with a URL parser rather than a string prefix; the API never sees the navigation and can't reject it for you.
+  4. In your `navigate` handler, accept the history keywords `"back"`, `"forward"`, and `"reload"`, treat a URL without a scheme as `https://`, then parse the URL and refuse any scheme other than `http` or `https` (`javascript:`, `file:`, `data:`, `chrome:`, and so on) with an [error result](https://platform.claude.com/docs/en/agents-and-tools/tool-use/browser-use-tool#return-errors-from-your-executor). Check the scheme with a URL parser rather than a string prefix; the API doesn't filter the URLs Claude opens, so it can't reject one for you.
   5. Leave `javascript_exec` and `file_upload` disabled unless you need them, and read [Enable optional members](https://platform.claude.com/docs/en/agents-and-tools/tool-use/browser-use-tool#enable-optional-member-tools) before turning either on.
   6. Have a human confirm consequential actions and anything that requires affirmative consent (purchasing, modifying accounts, messaging, and accepting terms), and make that check in your executor before each call, because one turn can carry several.
 </Warning>
diff --git a/content/en/agents-and-tools/tool-use/computer-use-tool.md b/content/en/agents-and-tools/tool-use/computer-use-tool.md
index 8d4991dfe8..972692b220 100644
--- a/content/en/agents-and-tools/tool-use/computer-use-tool.md
+++ b/content/en/agents-and-tools/tool-use/computer-use-tool.md
@@ -929,13 +929,14 @@ The computer use tool is implemented as a schema-less tool. When using this tool
 
 
       def handle_computer_action(name, tool_input):
-          if name == "screenshot":
-              return capture_screenshot()
-          elif name == "left_click":
-              # coordinate is optional; without it, click where the cursor already is
-              return click(tool_input.get("coordinate"))
-          elif name == "type":
-              return type_text(tool_input["text"])
+          match name:
+              case "screenshot":
+                  return capture_screenshot()
+              case "left_click":
+                  # coordinate is optional; without it, click where the cursor already is
+                  return click(tool_input.get("coordinate"))
+              case "type":
+                  return type_text(tool_input["text"])
           # Handle other actions as needed
           raise ValueError(f"Unknown or unimplemented member: {name}")
       ```
@@ -976,17 +977,21 @@ The computer use tool is implemented as a schema-less tool. When using this tool
       ): string | Anthropic.ImageBlockParam[] {
         const params: object =
           typeof input === "object" && input !== null ? input : {};
-        if (action === "screenshot") {
-          return captureScreenshot();
-        } else if (action === "left_click") {
-          // coordinate is optional on the toolset; without one, click at the cursor
-          if ("coordinate" in params && Array.isArray(params.coordinate)) {
-            const [x, y] = params.coordinate;
-            return clickAt(x, y);
-          }
-          return clickAtCursor();
-        } else if (action === "type" && "text" in params) {
-          return typeText(String(params.text));
+        switch (action) {
+          case "screenshot":
+            return captureScreenshot();
+          case "left_click":
+            // coordinate is optional on the toolset; without one, click at the cursor
+            if ("coordinate" in params && Array.isArray(params.coordinate)) {
+              const [x, y] = params.coordinate;
+              return clickAt(x, y);
+            }
+            return clickAtCursor();
+          case "type":
+            if ("text" in params) {
+              return typeText(String(params.text));
+            }
+            break;
         }
         // Handle other actions as needed
         throw new Error(`Unknown or unimplemented member: ${action}`);
@@ -1495,7 +1500,7 @@ The computer use tool is implemented as a schema-less tool. When using this tool
           $failed = false;
           foreach ($response->content as $block) {
               // This example declares only the computer toolset; route other tools here if you add them.
-              if (!($block instanceof ToolUseBlock) || $block->toolsetName !== 'computer') {
+              if (!($block instanceof \Anthropic\Messages\ToolUseBlock) || $block->toolsetName !== 'computer') {
                   continue;
               }
               $result = ['type' => 'tool_result', 'tool_use_id' => $block->id, 'toolset_name' => 'computer'];
diff --git a/content/en/agents-and-tools/tool-use/fine-grained-tool-streaming.md b/content/en/agents-and-tools/tool-use/fine-grained-tool-streaming.md
index 55b20cd0d9..5120f5d33a 100644
--- a/content/en/agents-and-tools/tool-use/fine-grained-tool-streaming.md
+++ b/content/en/agents-and-tools/tool-use/fine-grained-tool-streaming.md
@@ -402,17 +402,18 @@ The following example turns on fine-grained streaming for a `make_file` tool and
   $toolInputs = [];
 
   foreach ($stream as $event) {
-      if (
-          $event instanceof RawContentBlockStartEvent
-          && $event->contentBlock instanceof ToolUseBlock
-      ) {
-          $toolInputs[$event->index] = '';
-      } elseif (
-          $event instanceof RawContentBlockDeltaEvent
-          && $event->delta instanceof InputJSONDelta
-      ) {
-          echo $event->delta->partialJSON;
-          $toolInputs[$event->index] .= $event->delta->partialJSON;
+      switch (true) {
+          case $event instanceof RawContentBlockStartEvent:
+              if ($event->contentBlock instanceof ToolUseBlock) {
+                  $toolInputs[$event->index] = '';
+              }
+              break;
+          case $event instanceof RawContentBlockDeltaEvent:
+              if ($event->delta instanceof InputJSONDelta) {
+                  echo $event->delta->partialJSON;
+                  $toolInputs[$event->index] .= $event->delta->partialJSON;
+              }
+              break;
       }
   }
 
@@ -570,22 +571,32 @@ The type mismatch between the initial `input: {}` (object) and `partial_json` (s
   });
 
   for await (const event of stream) {
-    if (event.type === "content_block_start" && event.content_block.type === "tool_use") {
-      toolInputs.set(event.index, "");
-    } else if (event.type === "content_block_delta" && event.delta.type === "input_json_delta") {
-      toolInputs.set(
-        event.index,
-        (toolInputs.get(event.index) ?? "") + event.delta.partial_json
-      );
-    } else if (event.type === "content_block_stop" && toolInputs.has(event.index)) {
-      const rawInput = toolInputs.get(event.index)!;
-      try {
-        console.log("Tool input:", JSON.parse(rawInput));
-      } catch {
-        // The accumulated string is not guaranteed to be valid JSON.
-        // See "Handling invalid JSON in tool responses" on this page.
-        console.log("Invalid tool input:", rawInput);
-      }
+    switch (event.type) {
+      case "content_block_start":
+        if (event.content_block.type === "tool_use") {
+          toolInputs.set(event.index, "");
+        }
+        break;
+      case "content_block_delta":
+        if (event.delta.type === "input_json_delta") {
+          toolInputs.set(
+            event.index,
+            (toolInputs.get(event.index) ?? "") + event.delta.partial_json
+          );
+        }
+        break;
+      case "content_block_stop":
+        if (toolInputs.has(event.index)) {
+          const rawInput = toolInputs.get(event.index)!;
+          try {
+            console.log("Tool input:", JSON.parse(rawInput));
+          } catch {
+            // The accumulated string is not guaranteed to be valid JSON.
+            // See "Handling invalid JSON in tool responses" on this page.
+            console.log("Invalid tool input:", rawInput);
+          }
+        }
+        break;
     }
   }
   ```
@@ -742,26 +753,30 @@ The type mismatch between the initial `input: {}` (object) and `partial_json` (s
       var eventIterator = streamResponse.stream().iterator();
       while (eventIterator.hasNext()) {
           RawMessageStreamEvent event = eventIterator.next();
-          if (event.isContentBlockStart()) {
-              var blockStart = event.asContentBlockStart();
-              if (blockStart.contentBlock().isToolUse()) {
-                  toolInputs.put(blockStart.index(), new StringBuilder());
+          switch (event.type().value()) {
+              case CONTENT_BLOCK_START -> {
+                  var blockStart = event.asContentBlockStart();
+                  if (blockStart.contentBlock().isToolUse()) {
+                      toolInputs.put(blockStart.index(), new StringBuilder());
+                  }
               }
-          } else if (event.isContentBlockDelta()) {
-              var blockDelta = event.asContentBlockDelta();
-              if (blockDelta.delta().isInputJson() && toolInputs.containsKey(blockDelta.index())) {
-                  toolInputs.get(blockDelta.index()).append(blockDelta.delta().asInputJson().partialJson());
+              case CONTENT_BLOCK_DELTA -> {
+                  var blockDelta = event.asContentBlockDelta();
+                  if (blockDelta.delta().isInputJson() && toolInputs.containsKey(blockDelta.index())) {
+                      toolInputs.get(blockDelta.index()).append(blockDelta.delta().asInputJson().partialJson());
+                  }
               }
-          } else if (event.isContentBlockStop()) {
-              var blockStop = event.asContentBlockStop();
-              if (toolInputs.containsKey(blockStop.index())) {
-                  String accumulated = toolInputs.get(blockStop.index()).toString();
-                  try {
-                      IO.println("Tool input: " + objectMapper.readTree(accumulated));
-                  } catch (JsonProcessingException e) {
-                      // The accumulated string is not guaranteed to be valid JSON.
-                      // See "Handling invalid JSON in tool responses" on this page.
-                      IO.println("Invalid tool input: " + accumulated);
+              case CONTENT_BLOCK_STOP -> {
+                  var blockStop = event.asContentBlockStop();
+                  if (toolInputs.containsKey(blockStop.index())) {
+                      String accumulated = toolInputs.get(blockStop.index()).toString();
+                      try {
+                          IO.println("Tool input: " + objectMapper.readTree(accumulated));
+                      } catch (JsonProcessingException e) {
+                          // The accumulated string is not guaranteed to be valid JSON.
+                          // See "Handling invalid JSON in tool responses" on this page.
+                          IO.println("Invalid tool input: " + accumulated);
+                      }
                   }
               }
           }
@@ -803,29 +818,30 @@ The type mismatch between the initial `input: {}` (object) and `partial_json` (s
   );
 
   foreach ($stream as $event) {
-      if (
-          $event instanceof RawContentBlockStartEvent
-          && $event->contentBlock instanceof ToolUseBlock
-      ) {
-          $toolInputs[$event->index] = '';
-      } elseif (
-          $event instanceof RawContentBlockDeltaEvent
-          && $event->delta instanceof InputJSONDelta
-      ) {
-          $toolInputs[$event->index] .= $event->delta->partialJSON;
-      } elseif (
-          $event instanceof RawContentBlockStopEvent
-          && isset($toolInputs[$event->index])
-      ) {
-          $accumulated = $toolInputs[$event->index];
-          try {
-              $parsed = json_decode($accumulated, associative: true, flags: JSON_THROW_ON_ERROR);
-              echo "Tool input: " . json_encode($parsed) . "\n";
-          } catch (JsonException $e) {
-              // The accumulated string is not guaranteed to be valid JSON.
-              // See "Handling invalid JSON in tool responses" on this page.
-              echo "Invalid tool input: {$accumulated}\n";
-          }
+      switch (true) {
+          case $event instanceof RawContentBlockStartEvent:
+              if ($event->contentBlock instanceof ToolUseBlock) {
+                  $toolInputs[$event->index] = '';
+              }
+              break;
+          case $event instanceof RawContentBlockDeltaEvent:
+              if ($event->delta instanceof InputJSONDelta) {
+                  $toolInputs[$event->index] .= $event->delta->partialJSON;
+              }
+              break;
+          case $event instanceof RawContentBlockStopEvent:
+              if (isset($toolInputs[$event->index])) {
+                  $accumulated = $toolInputs[$event->index];
+                  try {
+                      $parsed = json_decode($accumulated, associative: true, flags: JSON_THROW_ON_ERROR);
+                      echo "Tool input: " . json_encode($parsed) . "\n";
+                  } catch (JsonException $e) {
+                      // The accumulated string is not guaranteed to be valid JSON.
+                      // See "Handling invalid JSON in tool responses" on this page.
+                      echo "Invalid tool input: {$accumulated}\n";
+                  }
+              }
+              break;
       }
   }
   ```
diff --git a/content/en/agents-and-tools/tool-use/text-editor-tool.md b/content/en/agents-and-tools/tool-use/text-editor-tool.md
index 7b267cf518..2c3f8c61f0 100644
--- a/content/en/agents-and-tools/tool-use/text-editor-tool.md
+++ b/content/en/agents-and-tools/tool-use/text-editor-tool.md
@@ -1504,18 +1504,19 @@ The tool type is `type: "text_editor_20250728"` for Claude 4 and later models.
           command = input_params.get("command", "")
           file_path = input_params.get("path", "")
 
-          if command == "view":
-              # Read and return file contents
-              pass
-          elif command == "str_replace":
-              # Replace text in file
-              pass
-          elif command == "create":
-              # Create new file
-              pass
-          elif command == "insert":
-              # Insert text at location
-              pass
+          match command:
+              case "view":
+                  # Read and return file contents
+                  pass
+              case "str_replace":
+                  # Replace text in file
+                  pass
+              case "create":
+                  # Create new file
+                  pass
+              case "insert":
+                  # Insert text at location
+                  pass
       ```
 
       ```typescript TypeScript
@@ -1524,14 +1525,19 @@ The tool type is `type: "text_editor_20250728"` for Claude 4 and later models.
         const command = inputParams.command ?? "";
         const filePath = inputParams.path ?? "";
 
-        if (command === "view") {
-          // Read and return file contents
-        } else if (command === "str_replace") {
-          // Replace text in file
-        } else if (command === "create") {
-          // Create new file
-        } else if (command === "insert") {
-          // Insert text at location
+        switch (command) {
+          case "view":
+            // Read and return file contents
+            break;
+          case "str_replace":
+            // Replace text in file
+            break;
+          case "create":
+            // Create new file
+            break;
+          case "insert":
+            // Insert text at location
+            break;
         }
       }
       ```
diff --git a/content/en/agents-and-tools/tool-use/tool-runner.md b/content/en/agents-and-tools/tool-use/tool-runner.md
index b9f154a4ec..a2f47786cf 100644
--- a/content/en/agents-and-tools/tool-use/tool-runner.md
+++ b/content/en/agents-and-tools/tool-use/tool-runner.md
@@ -438,6 +438,8 @@ Depending on the SDK's tool signature, a tool returns its result as a string or
     <?php
 
     use Anthropic\Client;
+    use Anthropic\Beta\Messages\BetaTextBlock;
+    use Anthropic\Beta\Messages\BetaToolUseBlock;
     use Anthropic\Lib\Tools\BetaRunnableTool;
     use Anthropic\Messages\Model;
 
@@ -495,10 +497,13 @@ Depending on the SDK's tool signature, a tool returns its result as a string or
 
     foreach ($runner as $message) {
         foreach ($message->content as $block) {
-            if ($block->type === 'text') {
-                echo $block->text, "\n";
-            } elseif ($block->type === 'tool_use') {
-                echo "[Tool call: {$block->name}]\n";
+            switch (true) {
+                case $block instanceof BetaTextBlock:
+                    echo $block->text, "\n";
+                    break;
+                case $block instanceof BetaToolUseBlock:
+                    echo "[Tool call: {$block->name}]\n";
+                    break;
             }
         }
     }
@@ -1451,7 +1456,7 @@ In the Python and TypeScript SDKs, use the tool response method to get the tool
     foreach ($runner as $message) {
         $toolResults = [];
         foreach ($message->content as $block) {
-            if ($block instanceof BetaToolUseBlock) {
+            if ($block instanceof \Anthropic\Beta\Messages\BetaToolUseBlock) {
                 $toolResults[] = [
                     'type' => 'tool_result',
                     'tool_use_id' => $block->id,
diff --git a/content/en/api/beta-headers.md b/content/en/api/beta-headers.md
index e827cbd1b1..343ffe4c8d 100644
--- a/content/en/api/beta-headers.md
+++ b/content/en/api/beta-headers.md
@@ -168,7 +168,15 @@ To use multiple beta features in a single request, include all feature names in
 anthropic-beta: feature1,feature2,feature3
 ```
 
-When using an SDK, list each feature in the `betas` parameter (for example, `betas=["feature1", "feature2"]`). With the CLI, pass a single `--beta` flag with the feature names separated by commas (for example, `--beta feature1,feature2`). Avoid repeating the flag: currently only the first flag's value takes effect.
+You can also send the `anthropic-beta` header more than once in the same request. The Claude API reads every `anthropic-beta` header, so the following is equivalent to the previous example:
+
+```http
+anthropic-beta: feature1
+anthropic-beta: feature2
+anthropic-beta: feature3
+```
+
+When using an SDK, list each feature in the `betas` parameter (for example, `betas=["feature1", "feature2"]`). With the CLI, pass a single `--beta` flag with the feature names separated by commas (for example, `--beta feature1,feature2`). You can also repeat the flag (for example, `--beta feature1 --beta feature2`).
 
 ### Endpoint-specific headers
 
diff --git a/content/en/api/compliance.md b/content/en/api/compliance.md
index 552fcd6a27..a6c18ee4e9 100644
--- a/content/en/api/compliance.md
+++ b/content/en/api/compliance.md
@@ -19,7 +19,7 @@ compliance activities that can be filtered by various criteria.
 
 #### Query parameters
 
-- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 499 more`
+- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 501 more`
 
   Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
 
@@ -1063,6 +1063,14 @@ compliance activities that can be filtered by various criteria.
 
     The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
 
+  - `"org_cowork_browser_pane_disabled"`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+  - `"org_cowork_browser_pane_enabled"`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
   - `"org_cowork_disabled"`
 
     Organization cowork was disabled.
@@ -2086,7 +2094,7 @@ compliance activities that can be filtered by various criteria.
 
     format: date-time
 
-- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 499 more`
+- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 501 more`
 
   Exclude activities of these types. Cannot be combined with `activity_types[]`.
 
@@ -3130,6 +3138,14 @@ compliance activities that can be filtered by various criteria.
 
     The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
 
+  - `"org_cowork_browser_pane_disabled"`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+  - `"org_cowork_browser_pane_enabled"`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
   - `"org_cowork_disabled"`
 
     Organization cowork was disabled.
@@ -4145,7 +4161,7 @@ compliance activities that can be filtered by various criteria.
 
 #### Returns
 
-- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 499 more`
+- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 501 more`
 
   List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
 
@@ -8729,11 +8745,11 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `audience: array of ArtifactSharingAudienceOrganization or ArtifactSharingAudienceUsers or ArtifactSharingAudienceAnyoneWithLink`
+    - `audience: array of Organization or Users or AnyoneWithLink`
 
       The artifact's sharing audience after the change. If empty, the artifact is visible only to its owner.
 
-      - `ArtifactSharingAudienceOrganization object`
+      - `Organization object`
 
         Sharing audience: visible to the owning organization.
 
@@ -8741,7 +8757,7 @@ compliance activities that can be filtered by various criteria.
 
           default: organization
 
-      - `ArtifactSharingAudienceUsers object`
+      - `Users object`
 
         Sharing audience: visible to an explicit allowlist of users.
 
@@ -8749,10 +8765,9 @@ compliance activities that can be filtered by various criteria.
 
           default: users
 
-      - `ArtifactSharingAudienceAnyoneWithLink object`
+      - `AnyoneWithLink object`
 
-        Sharing audience: anyone with the link, including anonymous viewers
-        (an artifact shared to the open internet).
+        Sharing audience: anyone with the link, including anonymous viewers (an artifact shared to the open internet).
 
         - `type: optional "anyone_with_link"`
 
@@ -59796,6 +59811,470 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
+  - `OrgCoworkBrowserPaneDisabled object`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+    - `type: optional "org_cowork_browser_pane_disabled"`
+
+      default: org_cowork_browser_pane_disabled
+
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
+
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
+  - `OrgCoworkBrowserPaneEnabled object`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
+    - `type: optional "org_cowork_browser_pane_enabled"`
+
+      default: org_cowork_browser_pane_enabled
+
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
+
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
   - `OrgCoworkDisabled object`
 
     Organization cowork was disabled.
@@ -129266,6 +129745,13 @@ enforced state after all policies are applied, which may differ from what
 is configured in the admin console. Settings an organization's
 administrators cannot change (for example, ones controlled by Anthropic
 policy or not available to the organization) are omitted from the list.
+Settings that report a compliance arrangement with Anthropic are the
+exception: the HIPAA and Access Transparency settings are always included;
+the API zero data retention setting is reported for Claude Console
+organizations, and the Claude Code zero data retention and customer-managed
+encryption keys (CMEK) settings for Claude Enterprise organizations. Each
+reports whether the arrangement is in place at the organization level; a
+retention setting on an individual workspace is not reflected.
 
 The organization must belong to the API key's organization hierarchy;
 unknown organizations and organizations outside the hierarchy return 404.
@@ -129338,12 +129824,16 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       default: boolean
 
-    - `name: "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or "artifact_connectors_enabled" or 53 more`
+    - `name: "access_transparency_enabled" or "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or 57 more`
+
+      - `"access_transparency_enabled"`
 
       - `"ai_powered_artifacts_enabled"`
 
       - `"api_workbench_feedback_collection_enabled"`
 
+      - `"api_zero_data_retention_enabled"`
+
       - `"artifact_connectors_enabled"`
 
       - `"ask_your_org_enabled"`
@@ -129382,6 +129872,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_design_enabled"`
 
+      - `"claude_enterprise_claude_code_zero_data_retention_enabled"`
+
       - `"claude_in_slack_enabled"`
 
       - `"claude_science_custom_connectors_enabled"`
@@ -129400,6 +129892,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_science_ssh_hosts_enabled"`
 
+      - `"cmek_enabled"`
+
       - `"code_execution_enabled"`
 
       - `"code_execution_network_egress_enabled"`
@@ -129606,7 +130100,7 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
   "organization_id": "organization_id",
   "settings": [
     {
-      "name": "ai_powered_artifacts_enabled",
+      "name": "access_transparency_enabled",
       "value": true,
       "type": "boolean"
     }
diff --git a/content/en/api/compliance/activities.md b/content/en/api/compliance/activities.md
index 81546766fd..ff912bb86c 100644
--- a/content/en/api/compliance/activities.md
+++ b/content/en/api/compliance/activities.md
@@ -17,7 +17,7 @@ compliance activities that can be filtered by various criteria.
 
 ### Query parameters
 
-- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 499 more`
+- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 501 more`
 
   Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
 
@@ -1061,6 +1061,14 @@ compliance activities that can be filtered by various criteria.
 
     The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
 
+  - `"org_cowork_browser_pane_disabled"`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+  - `"org_cowork_browser_pane_enabled"`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
   - `"org_cowork_disabled"`
 
     Organization cowork was disabled.
@@ -2084,7 +2092,7 @@ compliance activities that can be filtered by various criteria.
 
     format: date-time
 
-- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 499 more`
+- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 501 more`
 
   Exclude activities of these types. Cannot be combined with `activity_types[]`.
 
@@ -3128,6 +3136,14 @@ compliance activities that can be filtered by various criteria.
 
     The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
 
+  - `"org_cowork_browser_pane_disabled"`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+  - `"org_cowork_browser_pane_enabled"`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
   - `"org_cowork_disabled"`
 
     Organization cowork was disabled.
@@ -4143,7 +4159,7 @@ compliance activities that can be filtered by various criteria.
 
 ### Returns
 
-- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 499 more`
+- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 501 more`
 
   List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
 
@@ -8727,11 +8743,11 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `audience: array of ArtifactSharingAudienceOrganization or ArtifactSharingAudienceUsers or ArtifactSharingAudienceAnyoneWithLink`
+    - `audience: array of Organization or Users or AnyoneWithLink`
 
       The artifact's sharing audience after the change. If empty, the artifact is visible only to its owner.
 
-      - `ArtifactSharingAudienceOrganization object`
+      - `Organization object`
 
         Sharing audience: visible to the owning organization.
 
@@ -8739,7 +8755,7 @@ compliance activities that can be filtered by various criteria.
 
           default: organization
 
-      - `ArtifactSharingAudienceUsers object`
+      - `Users object`
 
         Sharing audience: visible to an explicit allowlist of users.
 
@@ -8747,10 +8763,9 @@ compliance activities that can be filtered by various criteria.
 
           default: users
 
-      - `ArtifactSharingAudienceAnyoneWithLink object`
+      - `AnyoneWithLink object`
 
-        Sharing audience: anyone with the link, including anonymous viewers
-        (an artifact shared to the open internet).
+        Sharing audience: anyone with the link, including anonymous viewers (an artifact shared to the open internet).
 
         - `type: optional "anyone_with_link"`
 
@@ -59794,13 +59809,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgCoworkDisabled object`
+  - `OrgCoworkBrowserPaneDisabled object`
 
-    Organization cowork was disabled.
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
 
-    - `type: optional "org_cowork_disabled"`
+    - `type: optional "org_cowork_browser_pane_disabled"`
 
-      default: org_cowork_disabled
+      default: org_cowork_browser_pane_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -60018,10 +60033,6 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
-    - `current_value: optional boolean or null`
-
-      Setting value immediately after this change
-
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -60030,17 +60041,245 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-    - `previous_value: optional boolean or null`
+  - `OrgCoworkBrowserPaneEnabled object`
 
-      Setting value immediately before this change
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
 
-  - `OrgCoworkEnabled object`
+    - `type: optional "org_cowork_browser_pane_enabled"`
 
-    Organization cowork was enabled.
+      default: org_cowork_browser_pane_enabled
 
-    - `type: optional "org_cowork_enabled"`
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
-      default: org_cowork_enabled
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
+  - `OrgCoworkDisabled object`
+
+    Organization cowork was disabled.
+
+    - `type: optional "org_cowork_disabled"`
+
+      default: org_cowork_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -60274,13 +60513,13 @@ compliance activities that can be filtered by various criteria.
 
       Setting value immediately before this change
 
-  - `OrgCoworkMcpAlwaysAllowDisabled object`
+  - `OrgCoworkEnabled object`
 
-    The "Always allow" option for connector tools in Cowork was disabled for the organization, so each use of a connector tool that can make changes requires approval. Read-only connector tools are not affected by this setting.
+    Organization cowork was enabled.
 
-    - `type: optional "org_cowork_mcp_always_allow_disabled"`
+    - `type: optional "org_cowork_enabled"`
 
-      default: org_cowork_mcp_always_allow_disabled
+      default: org_cowork_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -60498,6 +60737,10 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
+    - `current_value: optional boolean or null`
+
+      Setting value immediately after this change
+
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -60506,13 +60749,17 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgCoworkMcpAlwaysAllowEnabled object`
+    - `previous_value: optional boolean or null`
 
-    The "Always allow" option for connector tools in Cowork was enabled for the organization, letting members approve a connector tool that can make changes once and allow its later uses automatically. Read-only connector tools are not affected by this setting.
+      Setting value immediately before this change
 
-    - `type: optional "org_cowork_mcp_always_allow_enabled"`
+  - `OrgCoworkMcpAlwaysAllowDisabled object`
 
-      default: org_cowork_mcp_always_allow_enabled
+    The "Always allow" option for connector tools in Cowork was disabled for the organization, so each use of a connector tool that can make changes requires approval. Read-only connector tools are not affected by this setting.
+
+    - `type: optional "org_cowork_mcp_always_allow_disabled"`
+
+      default: org_cowork_mcp_always_allow_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -60738,13 +60985,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgCoworkOtlpSettingsUpdated object`
+  - `OrgCoworkMcpAlwaysAllowEnabled object`
 
-    The organization's Cowork OpenTelemetry monitoring export settings were updated.
+    The "Always allow" option for connector tools in Cowork was enabled for the organization, letting members approve a connector tool that can make changes once and allow its later uses automatically. Read-only connector tools are not affected by this setting.
 
-    - `type: optional "org_cowork_otlp_settings_updated"`
+    - `type: optional "org_cowork_mcp_always_allow_enabled"`
 
-      default: org_cowork_otlp_settings_updated
+      default: org_cowork_mcp_always_allow_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -60962,22 +61209,6 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
-    - `new_otlp_content_capture: optional array of string or null`
-
-      The organization's content-capture settings after the change, as a sorted list of category names. An empty list means content capture is explicitly turned off. Null if the settings are not set or were not modified by this update.
-
-    - `new_otlp_endpoint: optional string or null`
-
-      The OpenTelemetry export endpoint after the change. Credentials in the URL userinfo or query string are removed; path segments are retained. Null if the endpoint is unset or was not itself modified by this update.
-
-    - `new_otlp_protocol: optional string or null`
-
-      The OpenTelemetry export protocol after the change. Null if the protocol is unset or was not itself modified by this update.
-
-    - `new_otlp_resource_attributes: optional string or null`
-
-      The OpenTelemetry resource attributes after the change. Null if the attributes are unset or were not themselves modified by this update.
-
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -60986,39 +61217,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-    - `otlp_headers_change: optional "cleared" or "set" or "unspecified" or null`
-
-      Whether the OpenTelemetry export headers were set or cleared. 'set' is recorded for any non-empty submission, including resubmission of an unchanged value. Header values are never included.
-
-      - `"cleared"`
-
-      - `"set"`
-
-      - `"unspecified"`
-
-    - `previous_otlp_content_capture: optional array of string or null`
-
-      The organization's content-capture settings before the change, as a sorted list of category names. An empty list means content capture is explicitly turned off. Null if the settings were not previously set or were not modified by this update.
-
-    - `previous_otlp_endpoint: optional string or null`
-
-      The OpenTelemetry export endpoint before the change. Credentials in the URL userinfo or query string are removed; path segments are retained. Null if the endpoint was previously unset or was not itself modified by this update.
-
-    - `previous_otlp_protocol: optional string or null`
-
-      The OpenTelemetry export protocol before the change. Null if the protocol was previously unset or was not itself modified by this update.
-
-    - `previous_otlp_resource_attributes: optional string or null`
-
-      The OpenTelemetry resource attributes before the change. Null if the attributes were previously unset or were not themselves modified by this update.
-
-  - `OrgCoworkRemoteDisabled object`
+  - `OrgCoworkOtlpSettingsUpdated object`
 
-    Running Cowork in the cloud was disabled for the organization, so members can no longer run Cowork sessions in Anthropic-hosted remote environments.
+    The organization's Cowork OpenTelemetry monitoring export settings were updated.
 
-    - `type: optional "org_cowork_remote_disabled"`
+    - `type: optional "org_cowork_otlp_settings_updated"`
 
-      default: org_cowork_remote_disabled
+      default: org_cowork_otlp_settings_updated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -61236,6 +61441,22 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
+    - `new_otlp_content_capture: optional array of string or null`
+
+      The organization's content-capture settings after the change, as a sorted list of category names. An empty list means content capture is explicitly turned off. Null if the settings are not set or were not modified by this update.
+
+    - `new_otlp_endpoint: optional string or null`
+
+      The OpenTelemetry export endpoint after the change. Credentials in the URL userinfo or query string are removed; path segments are retained. Null if the endpoint is unset or was not itself modified by this update.
+
+    - `new_otlp_protocol: optional string or null`
+
+      The OpenTelemetry export protocol after the change. Null if the protocol is unset or was not itself modified by this update.
+
+    - `new_otlp_resource_attributes: optional string or null`
+
+      The OpenTelemetry resource attributes after the change. Null if the attributes are unset or were not themselves modified by this update.
+
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -61244,13 +61465,39 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgCoworkRemoteEnabled object`
+    - `otlp_headers_change: optional "cleared" or "set" or "unspecified" or null`
 
-    Running Cowork in the cloud was enabled for the organization, allowing members to run Cowork sessions in Anthropic-hosted remote environments.
+      Whether the OpenTelemetry export headers were set or cleared. 'set' is recorded for any non-empty submission, including resubmission of an unchanged value. Header values are never included.
 
-    - `type: optional "org_cowork_remote_enabled"`
+      - `"cleared"`
 
-      default: org_cowork_remote_enabled
+      - `"set"`
+
+      - `"unspecified"`
+
+    - `previous_otlp_content_capture: optional array of string or null`
+
+      The organization's content-capture settings before the change, as a sorted list of category names. An empty list means content capture is explicitly turned off. Null if the settings were not previously set or were not modified by this update.
+
+    - `previous_otlp_endpoint: optional string or null`
+
+      The OpenTelemetry export endpoint before the change. Credentials in the URL userinfo or query string are removed; path segments are retained. Null if the endpoint was previously unset or was not itself modified by this update.
+
+    - `previous_otlp_protocol: optional string or null`
+
+      The OpenTelemetry export protocol before the change. Null if the protocol was previously unset or was not itself modified by this update.
+
+    - `previous_otlp_resource_attributes: optional string or null`
+
+      The OpenTelemetry resource attributes before the change. Null if the attributes were previously unset or were not themselves modified by this update.
+
+  - `OrgCoworkRemoteDisabled object`
+
+    Running Cowork in the cloud was disabled for the organization, so members can no longer run Cowork sessions in Anthropic-hosted remote environments.
+
+    - `type: optional "org_cowork_remote_disabled"`
+
+      default: org_cowork_remote_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -61476,13 +61723,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgCreationBlocked object`
+  - `OrgCoworkRemoteEnabled object`
 
-    Organization creation was blocked.
+    Running Cowork in the cloud was enabled for the organization, allowing members to run Cowork sessions in Anthropic-hosted remote environments.
 
-    - `type: optional "org_creation_blocked"`
+    - `type: optional "org_cowork_remote_enabled"`
 
-      default: org_creation_blocked
+      default: org_cowork_remote_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -61708,17 +61955,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-    - `reason: optional string or null`
-
-      "blocked" when the organization started preventing users with an email address at one of its verified domains from creating new organizations, "unblocked" when it stopped.
-
-  - `OrgDataExportAccessed object`
+  - `OrgCreationBlocked object`
 
-    Organization data export file was accessed/downloaded via signed URL.
+    Organization creation was blocked.
 
-    - `type: optional "org_data_export_accessed"`
+    - `type: optional "org_creation_blocked"`
 
-      default: org_data_export_accessed
+      default: org_creation_blocked
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -61936,16 +62179,6 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
-    - `export_type: optional "conversations" or "unspecified" or "workbench" or null`
-
-      Which data set was downloaded. Absent on records written before this field was introduced.
-
-      - `"conversations"`
-
-      - `"unspecified"`
-
-      - `"workbench"`
-
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -61954,13 +62187,17 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDataExportCompleted object`
+    - `reason: optional string or null`
 
-    Organization data export was completed.
+      "blocked" when the organization started preventing users with an email address at one of its verified domains from creating new organizations, "unblocked" when it stopped.
 
-    - `type: optional "org_data_export_completed"`
+  - `OrgDataExportAccessed object`
 
-      default: org_data_export_completed
+    Organization data export file was accessed/downloaded via signed URL.
+
+    - `type: optional "org_data_export_accessed"`
+
+      default: org_data_export_accessed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -62180,7 +62417,7 @@ compliance activities that can be filtered by various criteria.
 
     - `export_type: optional "conversations" or "unspecified" or "workbench" or null`
 
-      Which data set was exported. Absent on records written before this field was introduced.
+      Which data set was downloaded. Absent on records written before this field was introduced.
 
       - `"conversations"`
 
@@ -62196,13 +62433,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDataExportStarted object`
+  - `OrgDataExportCompleted object`
 
-    Organization data export was started.
+    Organization data export was completed.
 
-    - `type: optional "org_data_export_started"`
+    - `type: optional "org_data_export_completed"`
 
-      default: org_data_export_started
+      default: org_data_export_completed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -62438,23 +62675,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-    - `scope: optional "member_own_data" or "organization" or "unspecified" or null`
-
-      Breadth of the export — the whole organization, or only the requesting member's own data. Absent on records written before this field was introduced.
-
-      - `"member_own_data"`
-
-      - `"organization"`
-
-      - `"unspecified"`
-
-  - `OrgDataResidencyUpdated object`
+  - `OrgDataExportStarted object`
 
-    The organization's inference data residency settings were updated.
+    Organization data export was started.
 
-    - `type: optional "org_data_residency_updated"`
+    - `type: optional "org_data_export_started"`
 
-      default: org_data_residency_updated
+      default: org_data_export_started
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -62672,43 +62899,41 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
-    - `organization_id: optional string or null`
-
-      Organization ID this activity is associated with
+    - `export_type: optional "conversations" or "unspecified" or "workbench" or null`
 
-    - `organization_uuid: optional string or null`
+      Which data set was exported. Absent on records written before this field was introduced.
 
-      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+      - `"conversations"`
 
-    - `updates: optional array of object`
+      - `"unspecified"`
 
-      The field-level changes applied in this update
+      - `"workbench"`
 
-      - `type: "allowed_inference_geos" or "default_inference_geo" or "unspecified"`
+    - `organization_id: optional string or null`
 
-        The data residency setting that changed
+      Organization ID this activity is associated with
 
-        - `"allowed_inference_geos"`
+    - `organization_uuid: optional string or null`
 
-        - `"default_inference_geo"`
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-        - `"unspecified"`
+    - `scope: optional "member_own_data" or "organization" or "unspecified" or null`
 
-      - `current_value: optional string or null`
+      Breadth of the export — the whole organization, or only the requesting member's own data. Absent on records written before this field was introduced.
 
-        Setting value immediately after this change. For allowed_inference_geos: a comma-separated list of geo codes (e.g. 'global,us'), or the literal 'unrestricted'. For default_inference_geo: a single geo code.
+      - `"member_own_data"`
 
-      - `previous_value: optional string or null`
+      - `"organization"`
 
-        Setting value immediately before this change. For allowed_inference_geos: a comma-separated list of geo codes (e.g. 'global,us'), or the literal 'unrestricted'. For default_inference_geo: a single geo code.
+      - `"unspecified"`
 
-  - `OrgDeletedViaBulk object`
+  - `OrgDataResidencyUpdated object`
 
-    Organization was deleted via bulk operation.
+    The organization's inference data residency settings were updated.
 
-    - `type: optional "org_deleted_via_bulk"`
+    - `type: optional "org_data_residency_updated"`
 
-      default: org_deleted_via_bulk
+      default: org_data_residency_updated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -62934,13 +63159,35 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDeletionRequested object`
+    - `updates: optional array of object`
 
-    Organization deletion was requested.
+      The field-level changes applied in this update
 
-    - `type: optional "org_deletion_requested"`
+      - `type: "allowed_inference_geos" or "default_inference_geo" or "unspecified"`
 
-      default: org_deletion_requested
+        The data residency setting that changed
+
+        - `"allowed_inference_geos"`
+
+        - `"default_inference_geo"`
+
+        - `"unspecified"`
+
+      - `current_value: optional string or null`
+
+        Setting value immediately after this change. For allowed_inference_geos: a comma-separated list of geo codes (e.g. 'global,us'), or the literal 'unrestricted'. For default_inference_geo: a single geo code.
+
+      - `previous_value: optional string or null`
+
+        Setting value immediately before this change. For allowed_inference_geos: a comma-separated list of geo codes (e.g. 'global,us'), or the literal 'unrestricted'. For default_inference_geo: a single geo code.
+
+  - `OrgDeletedViaBulk object`
+
+    Organization was deleted via bulk operation.
+
+    - `type: optional "org_deleted_via_bulk"`
+
+      default: org_deleted_via_bulk
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -63166,13 +63413,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDirectoryResyncCompleted object`
+  - `OrgDeletionRequested object`
 
-    Organization directory resync completed successfully.
+    Organization deletion was requested.
 
-    - `type: optional "org_directory_resync_completed"`
+    - `type: optional "org_deletion_requested"`
 
-      default: org_directory_resync_completed
+      default: org_deletion_requested
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -63380,10 +63627,6 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `resync_uuid: string`
-
-      UUID identifying the directory resync run that completed.
-
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -63402,13 +63645,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDirectoryResyncFailed object`
+  - `OrgDirectoryResyncCompleted object`
 
-    Organization directory resync failed.
+    Organization directory resync completed successfully.
 
-    - `type: optional "org_directory_resync_failed"`
+    - `type: optional "org_directory_resync_completed"`
 
-      default: org_directory_resync_failed
+      default: org_directory_resync_completed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -63618,7 +63861,7 @@ compliance activities that can be filtered by various criteria.
 
     - `resync_uuid: string`
 
-      UUID identifying the directory resync run that failed.
+      UUID identifying the directory resync run that completed.
 
     - `id: optional string`
 
@@ -63638,13 +63881,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDirectoryResyncStarted object`
+  - `OrgDirectoryResyncFailed object`
 
-    Organization directory resync was started asynchronously.
+    Organization directory resync failed.
 
-    - `type: optional "org_directory_resync_started"`
+    - `type: optional "org_directory_resync_failed"`
 
-      default: org_directory_resync_started
+      default: org_directory_resync_failed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -63854,7 +64097,7 @@ compliance activities that can be filtered by various criteria.
 
     - `resync_uuid: string`
 
-      UUID identifying this directory resync run
+      UUID identifying the directory resync run that failed.
 
     - `id: optional string`
 
@@ -63874,17 +64117,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-    - `sync_destinations: optional array of string`
-
-      Sync destinations the resync targets (for example, accounts and rbac)
-
-  - `OrgDirectorySyncActivated object`
+  - `OrgDirectoryResyncStarted object`
 
-    Organization directory sync was activated.
+    Organization directory resync was started asynchronously.
 
-    - `type: optional "org_directory_sync_activated"`
+    - `type: optional "org_directory_resync_started"`
 
-      default: org_directory_sync_activated
+      default: org_directory_resync_started
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -64092,6 +64331,10 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
+    - `resync_uuid: string`
+
+      UUID identifying this directory resync run
+
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -64110,13 +64353,17 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDirectorySyncAddInitiated object`
+    - `sync_destinations: optional array of string`
 
-    Organization directory sync setup was initiated.
+      Sync destinations the resync targets (for example, accounts and rbac)
 
-    - `type: optional "org_directory_sync_add_initiated"`
+  - `OrgDirectorySyncActivated object`
 
-      default: org_directory_sync_add_initiated
+    Organization directory sync was activated.
+
+    - `type: optional "org_directory_sync_activated"`
+
+      default: org_directory_sync_activated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -64342,13 +64589,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDirectorySyncDeleted object`
+  - `OrgDirectorySyncAddInitiated object`
 
-    Organization directory sync was deleted.
+    Organization directory sync setup was initiated.
 
-    - `type: optional "org_directory_sync_deleted"`
+    - `type: optional "org_directory_sync_add_initiated"`
 
-      default: org_directory_sync_deleted
+      default: org_directory_sync_add_initiated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -64574,13 +64821,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDiscoverabilityDisabled object`
+  - `OrgDirectorySyncDeleted object`
 
-    Admin disabled organization discoverability.
+    Organization directory sync was deleted.
 
-    - `type: optional "org_discoverability_disabled"`
+    - `type: optional "org_directory_sync_deleted"`
 
-      default: org_discoverability_disabled
+      default: org_directory_sync_deleted
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -64806,13 +65053,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDiscoverabilityEnabled object`
+  - `OrgDiscoverabilityDisabled object`
 
-    Admin enabled organization discoverability.
+    Admin disabled organization discoverability.
 
-    - `type: optional "org_discoverability_enabled"`
+    - `type: optional "org_discoverability_disabled"`
 
-      default: org_discoverability_enabled
+      default: org_discoverability_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -65038,13 +65285,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDiscoverabilitySettingsUpdated object`
+  - `OrgDiscoverabilityEnabled object`
 
-    Admin updated organization discoverability settings.
+    Admin enabled organization discoverability.
 
-    - `type: optional "org_discoverability_settings_updated"`
+    - `type: optional "org_discoverability_enabled"`
 
-      default: org_discoverability_settings_updated
+      default: org_discoverability_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -65270,13 +65517,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDomainAddInitiated object`
+  - `OrgDiscoverabilitySettingsUpdated object`
 
-    Organization domain verification was initiated.
+    Admin updated organization discoverability settings.
 
-    - `type: optional "org_domain_add_initiated"`
+    - `type: optional "org_discoverability_settings_updated"`
 
-      default: org_domain_add_initiated
+      default: org_discoverability_settings_updated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -65502,13 +65749,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDomainRemoved object`
+  - `OrgDomainAddInitiated object`
 
-    Organization domain was removed.
+    Organization domain verification was initiated.
 
-    - `type: optional "org_domain_removed"`
+    - `type: optional "org_domain_add_initiated"`
 
-      default: org_domain_removed
+      default: org_domain_add_initiated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -65726,10 +65973,6 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
-    - `domain: optional string or null`
-
-      The email domain that was removed from the organization, e.g. "example.com".
-
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -65738,13 +65981,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgDomainVerified object`
+  - `OrgDomainRemoved object`
 
-    Organization domain was verified.
+    Organization domain was removed.
 
-    - `type: optional "org_domain_verified"`
+    - `type: optional "org_domain_removed"`
 
-      default: org_domain_verified
+      default: org_domain_removed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -65964,7 +66207,7 @@ compliance activities that can be filtered by various criteria.
 
     - `domain: optional string or null`
 
-      The email domain that was verified for the organization, e.g. "example.com".
+      The email domain that was removed from the organization, e.g. "example.com".
 
     - `organization_id: optional string or null`
 
@@ -65974,13 +66217,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgExternalKeyCreated object`
+  - `OrgDomainVerified object`
 
-    A CMEK external key config was created.
+    Organization domain was verified.
 
-    - `type: optional "org_external_key_created"`
+    - `type: optional "org_domain_verified"`
 
-      default: org_external_key_created
+      default: org_domain_verified
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -66188,22 +66431,6 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `external_key_id: string`
-
-      Tagged ID of the created external key config
-
-    - `provider: "aws" or "azure" or "gcp" or "unspecified"`
-
-      KMS provider backing the key
-
-      - `"aws"`
-
-      - `"azure"`
-
-      - `"gcp"`
-
-      - `"unspecified"`
-
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -66214,6 +66441,10 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
+    - `domain: optional string or null`
+
+      The email domain that was verified for the organization, e.g. "example.com".
+
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -66222,13 +66453,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgExternalKeyDeleted object`
+  - `OrgExternalKeyCreated object`
 
-    A CMEK external key config was deleted.
+    A CMEK external key config was created.
 
-    - `type: optional "org_external_key_deleted"`
+    - `type: optional "org_external_key_created"`
 
-      default: org_external_key_deleted
+      default: org_external_key_created
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -66438,7 +66669,19 @@ compliance activities that can be filtered by various criteria.
 
     - `external_key_id: string`
 
-      Tagged ID of the deleted external key config
+      Tagged ID of the created external key config
+
+    - `provider: "aws" or "azure" or "gcp" or "unspecified"`
+
+      KMS provider backing the key
+
+      - `"aws"`
+
+      - `"azure"`
+
+      - `"gcp"`
+
+      - `"unspecified"`
 
     - `id: optional string`
 
@@ -66458,13 +66701,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgExternalKeyUpdated object`
+  - `OrgExternalKeyDeleted object`
 
-    A CMEK external key config was updated.
+    A CMEK external key config was deleted.
 
-    - `type: optional "org_external_key_updated"`
+    - `type: optional "org_external_key_deleted"`
 
-      default: org_external_key_updated
+      default: org_external_key_deleted
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -66674,7 +66917,7 @@ compliance activities that can be filtered by various criteria.
 
     - `external_key_id: string`
 
-      Tagged ID of the updated external key config
+      Tagged ID of the deleted external key config
 
     - `id: optional string`
 
@@ -66694,37 +66937,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-    - `updates: optional array of object`
-
-      The field-level changes applied in this update
-
-      - `type: "display_name" or "geo" or "provider_config" or "unspecified"`
-
-        The external key config field that changed
-
-        - `"display_name"`
-
-        - `"geo"`
-
-        - `"provider_config"`
-
-        - `"unspecified"`
-
-      - `current_value: string`
-
-        Field value immediately after this change
-
-      - `previous_value: string`
-
-        Field value immediately before this change
-
-  - `OrgExternalKeyValidated object`
+  - `OrgExternalKeyUpdated object`
 
-    A CMEK external key config was validated against the customer's KMS.
+    A CMEK external key config was updated.
 
-    - `type: optional "org_external_key_validated"`
+    - `type: optional "org_external_key_updated"`
 
-      default: org_external_key_validated
+      default: org_external_key_updated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -66934,17 +67153,7 @@ compliance activities that can be filtered by various criteria.
 
     - `external_key_id: string`
 
-      Tagged ID of the validated external key config
-
-    - `validation_result: "failure" or "success" or "unspecified"`
-
-      Outcome of the encrypt/decrypt roundtrip
-
-      - `"failure"`
-
-      - `"success"`
-
-      - `"unspecified"`
+      Tagged ID of the updated external key config
 
     - `id: optional string`
 
@@ -66964,13 +67173,37 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgHipaaSelfServeEnabled object`
+    - `updates: optional array of object`
 
-    A primary owner click-accepted the BAA and enabled HIPAA protections for the organization via the self-serve flow.
+      The field-level changes applied in this update
 
-    - `type: optional "org_hipaa_self_serve_enabled"`
+      - `type: "display_name" or "geo" or "provider_config" or "unspecified"`
 
-      default: org_hipaa_self_serve_enabled
+        The external key config field that changed
+
+        - `"display_name"`
+
+        - `"geo"`
+
+        - `"provider_config"`
+
+        - `"unspecified"`
+
+      - `current_value: string`
+
+        Field value immediately after this change
+
+      - `previous_value: string`
+
+        Field value immediately before this change
+
+  - `OrgExternalKeyValidated object`
+
+    A CMEK external key config was validated against the customer's KMS.
+
+    - `type: optional "org_external_key_validated"`
+
+      default: org_external_key_validated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -67178,17 +67411,19 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `baa_content_hash: string`
+    - `external_key_id: string`
 
-      SHA-256 digest (hex) of the Business Associate Agreement that was accepted.
+      Tagged ID of the validated external key config
 
-    - `baa_version_label: string`
+    - `validation_result: "failure" or "success" or "unspecified"`
 
-      Version label of the Business Associate Agreement that was accepted, e.g. "2026-05-06".
+      Outcome of the encrypt/decrypt roundtrip
 
-    - `setup_guide_content_hash: string`
+      - `"failure"`
 
-      SHA-256 digest (hex) of the HIPAA setup guide that was current when HIPAA protections were enabled.
+      - `"success"`
+
+      - `"unspecified"`
 
     - `id: optional string`
 
@@ -67208,13 +67443,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgIPRestrictionCreated object`
+  - `OrgHipaaSelfServeEnabled object`
 
-    Organization IP restriction was created.
+    A primary owner click-accepted the BAA and enabled HIPAA protections for the organization via the self-serve flow.
 
-    - `type: optional "org_ip_restriction_created"`
+    - `type: optional "org_hipaa_self_serve_enabled"`
 
-      default: org_ip_restriction_created
+      default: org_hipaa_self_serve_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -67422,6 +67657,18 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
+    - `baa_content_hash: string`
+
+      SHA-256 digest (hex) of the Business Associate Agreement that was accepted.
+
+    - `baa_version_label: string`
+
+      Version label of the Business Associate Agreement that was accepted, e.g. "2026-05-06".
+
+    - `setup_guide_content_hash: string`
+
+      SHA-256 digest (hex) of the HIPAA setup guide that was current when HIPAA protections were enabled.
+
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -67440,13 +67687,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgIPRestrictionDeleted object`
+  - `OrgIPRestrictionCreated object`
 
-    Organization IP restriction was deleted.
+    Organization IP restriction was created.
 
-    - `type: optional "org_ip_restriction_deleted"`
+    - `type: optional "org_ip_restriction_created"`
 
-      default: org_ip_restriction_deleted
+      default: org_ip_restriction_created
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -67672,13 +67919,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgIPRestrictionUpdated object`
+  - `OrgIPRestrictionDeleted object`
 
-    Organization IP restriction was updated.
+    Organization IP restriction was deleted.
 
-    - `type: optional "org_ip_restriction_updated"`
+    - `type: optional "org_ip_restriction_deleted"`
 
-      default: org_ip_restriction_updated
+      default: org_ip_restriction_deleted
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -67904,13 +68151,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgInviteLinkDisabled object`
+  - `OrgIPRestrictionUpdated object`
 
-    Organization invite link was disabled.
+    Organization IP restriction was updated.
 
-    - `type: optional "org_invite_link_disabled"`
+    - `type: optional "org_ip_restriction_updated"`
 
-      default: org_invite_link_disabled
+      default: org_ip_restriction_updated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -68136,13 +68383,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgInviteLinkGenerated object`
+  - `OrgInviteLinkDisabled object`
 
-    Organization invite link was generated.
+    Organization invite link was disabled.
 
-    - `type: optional "org_invite_link_generated"`
+    - `type: optional "org_invite_link_disabled"`
 
-      default: org_invite_link_generated
+      default: org_invite_link_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -68368,13 +68615,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgInviteLinkRegenerated object`
+  - `OrgInviteLinkGenerated object`
 
-    Organization invite link was regenerated (previous link invalidated).
+    Organization invite link was generated.
 
-    - `type: optional "org_invite_link_regenerated"`
+    - `type: optional "org_invite_link_generated"`
 
-      default: org_invite_link_regenerated
+      default: org_invite_link_generated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -68600,13 +68847,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgInviteViewed object`
+  - `OrgInviteLinkRegenerated object`
 
-    An organization invite was viewed.
+    Organization invite link was regenerated (previous link invalidated).
 
-    - `type: optional "org_invite_viewed"`
+    - `type: optional "org_invite_link_regenerated"`
 
-      default: org_invite_viewed
+      default: org_invite_link_regenerated
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -68814,10 +69061,6 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `invite_id: string`
-
-      Tagged ID of the viewed invite
-
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -68836,13 +69079,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgInvitesListed object`
+  - `OrgInviteViewed object`
 
-    Organization invites were listed.
+    An organization invite was viewed.
 
-    - `type: optional "org_invites_listed"`
+    - `type: optional "org_invite_viewed"`
 
-      default: org_invites_listed
+      default: org_invite_viewed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -69050,6 +69293,10 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
+    - `invite_id: string`
+
+      Tagged ID of the viewed invite
+
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -69068,13 +69315,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgJoinProposalDecided object`
+  - `OrgInvitesListed object`
 
-    Approve or reject decision on a parent-org join proposal.
+    Organization invites were listed.
 
-    - `type: optional "org_join_proposal_decided"`
+    - `type: optional "org_invites_listed"`
 
-      default: org_join_proposal_decided
+      default: org_invites_listed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -69282,8 +69529,6 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `approved: boolean`
-
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -69302,13 +69547,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgJoinRequestApproved object`
+  - `OrgJoinProposalDecided object`
 
-    Admin approved a join request.
+    Approve or reject decision on a parent-org join proposal.
 
-    - `type: optional "org_join_request_approved"`
+    - `type: optional "org_join_proposal_decided"`
 
-      default: org_join_request_approved
+      default: org_join_proposal_decided
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -69516,6 +69761,8 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
+    - `approved: boolean`
+
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -69534,13 +69781,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgJoinRequestCreated object`
+  - `OrgJoinRequestApproved object`
 
-    User requested to join an organization.
+    Admin approved a join request.
 
-    - `type: optional "org_join_request_created"`
+    - `type: optional "org_join_request_approved"`
 
-      default: org_join_request_created
+      default: org_join_request_approved
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -69766,13 +70013,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgJoinRequestDismissed object`
+  - `OrgJoinRequestCreated object`
 
-    Admin dismissed a join request.
+    User requested to join an organization.
 
-    - `type: optional "org_join_request_dismissed"`
+    - `type: optional "org_join_request_created"`
 
-      default: org_join_request_dismissed
+      default: org_join_request_created
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -69998,13 +70245,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgJoinRequestInstantApproved object`
+  - `OrgJoinRequestDismissed object`
 
-    Join request was instantly approved.
+    Admin dismissed a join request.
 
-    - `type: optional "org_join_request_instant_approved"`
+    - `type: optional "org_join_request_dismissed"`
 
-      default: org_join_request_instant_approved
+      default: org_join_request_dismissed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -70230,13 +70477,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgJoinRequestsBulkDismissed object`
+  - `OrgJoinRequestInstantApproved object`
 
-    Admin bulk-dismissed join requests.
+    Join request was instantly approved.
 
-    - `type: optional "org_join_requests_bulk_dismissed"`
+    - `type: optional "org_join_request_instant_approved"`
 
-      default: org_join_requests_bulk_dismissed
+      default: org_join_request_instant_approved
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -70462,13 +70709,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgMagicLinkSecondFactorToggled object`
+  - `OrgJoinRequestsBulkDismissed object`
 
-    Organization magic link second factor was toggled.
+    Admin bulk-dismissed join requests.
 
-    - `type: optional "org_magic_link_second_factor_toggled"`
+    - `type: optional "org_join_requests_bulk_dismissed"`
 
-      default: org_magic_link_second_factor_toggled
+      default: org_join_requests_bulk_dismissed
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -70676,10 +70923,6 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `enabled: boolean`
-
-      Whether members signing in with SSO must also complete a magic link as a second factor, after this change.
-
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -70698,13 +70941,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgMemberInvitesDisabled object`
+  - `OrgMagicLinkSecondFactorToggled object`
 
-    Admin disabled member invites for the organization.
+    Organization magic link second factor was toggled.
 
-    - `type: optional "org_member_invites_disabled"`
+    - `type: optional "org_magic_link_second_factor_toggled"`
 
-      default: org_member_invites_disabled
+      default: org_magic_link_second_factor_toggled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -70912,6 +71155,10 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
+    - `enabled: boolean`
+
+      Whether members signing in with SSO must also complete a magic link as a second factor, after this change.
+
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -70930,13 +71177,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgMemberInvitesEnabled object`
+  - `OrgMemberInvitesDisabled object`
 
-    Admin enabled member invites for the organization.
+    Admin disabled member invites for the organization.
 
-    - `type: optional "org_member_invites_enabled"`
+    - `type: optional "org_member_invites_disabled"`
 
-      default: org_member_invites_enabled
+      default: org_member_invites_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -71162,13 +71409,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgMembersExported object`
+  - `OrgMemberInvitesEnabled object`
 
-    Organization members list was exported as CSV.
+    Admin enabled member invites for the organization.
 
-    - `type: optional "org_members_exported"`
+    - `type: optional "org_member_invites_enabled"`
 
-      default: org_members_exported
+      default: org_member_invites_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -71394,23 +71641,13 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgModelDefaultUpdated object`
-
-    An organization or role default model setting was changed by an administrator.
-
-    - `type: optional "org_model_default_updated"`
-
-      default: org_model_default_updated
-
-    - `action: "cleared" or "set" or "unspecified"`
-
-      Whether the default model was set or cleared
+  - `OrgMembersExported object`
 
-      - `"cleared"`
+    Organization members list was exported as CSV.
 
-      - `"set"`
+    - `type: optional "org_members_exported"`
 
-      - `"unspecified"`
+      default: org_members_exported
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -71618,24 +71855,6 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `override_user_selection: boolean`
-
-      Whether the default is enforced as a fixed default, resetting members' own model selections at the start of each new conversation
-
-    - `principal_id: string`
-
-      Tagged ID of the organization or role the default applies to
-
-    - `principal_type: "org" or "rbac_role" or "unspecified"`
-
-      Whether the default applies to the whole organization or to a single role
-
-      - `"org"`
-
-      - `"rbac_role"`
-
-      - `"unspecified"`
-
     - `id: optional string`
 
       Unique identifier for the activity e.g. 'activity_abcd1234'
@@ -71646,41 +71865,301 @@ compliance activities that can be filtered by various criteria.
 
       format: date-time
 
-    - `default_model: optional string or null`
-
-      The model set as the default, when the action is set
-
-    - `model_access: optional array of object`
-
-      The per-model access overrides set for this principal; absent when no overrides are configured
-
-      - `api_name: string`
-
-        The model the decision applies to
+    - `organization_id: optional string or null`
 
-      - `enabled: boolean`
+      Organization ID this activity is associated with
 
-        Whether members with this principal may select the model
+    - `organization_uuid: optional string or null`
 
-      - `max_effort_level: optional string or null`
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-        The highest effort level members may select for this model, when capped
+  - `OrgModelDefaultUpdated object`
 
-    - `organization_id: optional string or null`
+    An organization or role default model setting was changed by an administrator.
 
-      Organization ID this activity is associated with
+    - `type: optional "org_model_default_updated"`
 
-    - `organization_uuid: optional string or null`
+      default: org_model_default_updated
 
-      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+    - `action: "cleared" or "set" or "unspecified"`
 
-  - `OrgParentJoinProposalCreated object`
+      Whether the default model was set or cleared
 
-    Organization parent join proposal was created.
+      - `"cleared"`
 
-    - `type: optional "org_parent_join_proposal_created"`
+      - `"set"`
 
-      default: org_parent_join_proposal_created
+      - `"unspecified"`
+
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
+
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `override_user_selection: boolean`
+
+      Whether the default is enforced as a fixed default, resetting members' own model selections at the start of each new conversation
+
+    - `principal_id: string`
+
+      Tagged ID of the organization or role the default applies to
+
+    - `principal_type: "org" or "rbac_role" or "unspecified"`
+
+      Whether the default applies to the whole organization or to a single role
+
+      - `"org"`
+
+      - `"rbac_role"`
+
+      - `"unspecified"`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `default_model: optional string or null`
+
+      The model set as the default, when the action is set
+
+    - `model_access: optional array of object`
+
+      The per-model access overrides set for this principal; absent when no overrides are configured
+
+      - `api_name: string`
+
+        The model the decision applies to
+
+      - `enabled: boolean`
+
+        Whether members with this principal may select the model
+
+      - `max_effort_level: optional string or null`
+
+        The highest effort level members may select for this model, when capped
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
+  - `OrgParentJoinProposalCreated object`
+
+    Organization parent join proposal was created.
+
+    - `type: optional "org_parent_join_proposal_created"`
+
+      default: org_parent_join_proposal_created
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -128819,7 +129298,7 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
 ### Activity List Response
 
-- `ActivityListResponse = AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 499 more`
+- `ActivityListResponse = AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 501 more`
 
   - `AbuseDecisionReceived object`
 
@@ -133401,11 +133880,11 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
         - `user_agent: optional string or null`
 
-    - `audience: array of ArtifactSharingAudienceOrganization or ArtifactSharingAudienceUsers or ArtifactSharingAudienceAnyoneWithLink`
+    - `audience: array of Organization or Users or AnyoneWithLink`
 
       The artifact's sharing audience after the change. If empty, the artifact is visible only to its owner.
 
-      - `ArtifactSharingAudienceOrganization object`
+      - `Organization object`
 
         Sharing audience: visible to the owning organization.
 
@@ -133413,7 +133892,7 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
           default: organization
 
-      - `ArtifactSharingAudienceUsers object`
+      - `Users object`
 
         Sharing audience: visible to an explicit allowlist of users.
 
@@ -133421,10 +133900,9 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
           default: users
 
-      - `ArtifactSharingAudienceAnyoneWithLink object`
+      - `AnyoneWithLink object`
 
-        Sharing audience: anyone with the link, including anonymous viewers
-        (an artifact shared to the open internet).
+        Sharing audience: anyone with the link, including anonymous viewers (an artifact shared to the open internet).
 
         - `type: optional "anyone_with_link"`
 
@@ -183524,13 +184002,253 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgCoworkAgentDisabled object`
+  - `OrgCoworkAgentDisabled object`
+
+    Organization Cowork Agent was disabled.
+
+    - `type: optional "org_cowork_agent_disabled"`
+
+      default: org_cowork_agent_disabled
+
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
+
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `current_value: optional boolean or null`
+
+      Setting value immediately after this change
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
+    - `previous_value: optional boolean or null`
 
-    Organization Cowork Agent was disabled.
+      Setting value immediately before this change
 
-    - `type: optional "org_cowork_agent_disabled"`
+  - `OrgCoworkAgentEnabled object`
 
-      default: org_cowork_agent_disabled
+    Organization Cowork Agent was enabled.
+
+    - `type: optional "org_cowork_agent_enabled"`
+
+      default: org_cowork_agent_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -183764,13 +184482,13 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
       Setting value immediately before this change
 
-  - `OrgCoworkAgentEnabled object`
+  - `OrgCoworkAutoModeDisabled object`
 
-    Organization Cowork Agent was enabled.
+    The "Auto" permission mode in Cowork was disabled for the organization, so members can no longer let Claude approve its own actions after a safety check.
 
-    - `type: optional "org_cowork_agent_enabled"`
+    - `type: optional "org_cowork_auto_mode_disabled"`
 
-      default: org_cowork_agent_enabled
+      default: org_cowork_auto_mode_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -183988,10 +184706,6 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
       format: date-time
 
-    - `current_value: optional boolean or null`
-
-      Setting value immediately after this change
-
     - `organization_id: optional string or null`
 
       Organization ID this activity is associated with
@@ -184000,17 +184714,245 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-    - `previous_value: optional boolean or null`
+  - `OrgCoworkAutoModeEnabled object`
 
-      Setting value immediately before this change
+    The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
 
-  - `OrgCoworkAutoModeDisabled object`
+    - `type: optional "org_cowork_auto_mode_enabled"`
 
-    The "Auto" permission mode in Cowork was disabled for the organization, so members can no longer let Claude approve its own actions after a safety check.
+      default: org_cowork_auto_mode_enabled
 
-    - `type: optional "org_cowork_auto_mode_disabled"`
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
-      default: org_cowork_auto_mode_disabled
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
+  - `OrgCoworkBrowserPaneDisabled object`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+    - `type: optional "org_cowork_browser_pane_disabled"`
+
+      default: org_cowork_browser_pane_disabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
@@ -184236,13 +185178,13 @@ curl https://api.anthropic.com/v1/compliance/activities \
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
-  - `OrgCoworkAutoModeEnabled object`
+  - `OrgCoworkBrowserPaneEnabled object`
 
-    The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
 
-    - `type: optional "org_cowork_auto_mode_enabled"`
+    - `type: optional "org_cowork_browser_pane_enabled"`
 
-      default: org_cowork_auto_mode_enabled
+      default: org_cowork_browser_pane_enabled
 
     - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
 
diff --git a/content/en/api/compliance/activities/list.md b/content/en/api/compliance/activities/list.md
index 351609855b..22d9f332b3 100644
--- a/content/en/api/compliance/activities/list.md
+++ b/content/en/api/compliance/activities/list.md
@@ -15,7 +15,7 @@ compliance activities that can be filtered by various criteria.
 
 ## Query parameters
 
-- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 499 more`
+- `activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 501 more`
 
   Filter activities by type. See the response `data` schema for the additional fields each type returns. Cannot be combined with `exclude_activity_types[]`.
 
@@ -1059,6 +1059,14 @@ compliance activities that can be filtered by various criteria.
 
     The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
 
+  - `"org_cowork_browser_pane_disabled"`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+  - `"org_cowork_browser_pane_enabled"`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
   - `"org_cowork_disabled"`
 
     Organization cowork was disabled.
@@ -2082,7 +2090,7 @@ compliance activities that can be filtered by various criteria.
 
     format: date-time
 
-- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 499 more`
+- `exclude_activity_types: optional array of "abuse_decision_received" or "account_deleted" or "admin_api_key_created" or 501 more`
 
   Exclude activities of these types. Cannot be combined with `activity_types[]`.
 
@@ -3126,6 +3134,14 @@ compliance activities that can be filtered by various criteria.
 
     The "Auto" permission mode in Cowork was enabled for the organization, allowing members to let Claude approve its own actions after a safety check.
 
+  - `"org_cowork_browser_pane_disabled"`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+  - `"org_cowork_browser_pane_enabled"`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
   - `"org_cowork_disabled"`
 
     Organization cowork was disabled.
@@ -4141,7 +4157,7 @@ compliance activities that can be filtered by various criteria.
 
 ## Returns
 
-- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 499 more`
+- `data: optional array of AbuseDecisionReceived or AccountDeleted or AdminAPIKeyCreated or 501 more`
 
   List of activity records. Each element's `type` field identifies which activity it is and which additional fields are present.
 
@@ -8725,11 +8741,11 @@ compliance activities that can be filtered by various criteria.
 
         - `user_agent: optional string or null`
 
-    - `audience: array of ArtifactSharingAudienceOrganization or ArtifactSharingAudienceUsers or ArtifactSharingAudienceAnyoneWithLink`
+    - `audience: array of Organization or Users or AnyoneWithLink`
 
       The artifact's sharing audience after the change. If empty, the artifact is visible only to its owner.
 
-      - `ArtifactSharingAudienceOrganization object`
+      - `Organization object`
 
         Sharing audience: visible to the owning organization.
 
@@ -8737,7 +8753,7 @@ compliance activities that can be filtered by various criteria.
 
           default: organization
 
-      - `ArtifactSharingAudienceUsers object`
+      - `Users object`
 
         Sharing audience: visible to an explicit allowlist of users.
 
@@ -8745,10 +8761,9 @@ compliance activities that can be filtered by various criteria.
 
           default: users
 
-      - `ArtifactSharingAudienceAnyoneWithLink object`
+      - `AnyoneWithLink object`
 
-        Sharing audience: anyone with the link, including anonymous viewers
-        (an artifact shared to the open internet).
+        Sharing audience: anyone with the link, including anonymous viewers (an artifact shared to the open internet).
 
         - `type: optional "anyone_with_link"`
 
@@ -59792,6 +59807,470 @@ compliance activities that can be filtered by various criteria.
 
       Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
 
+  - `OrgCoworkBrowserPaneDisabled object`
+
+    The in-app browser in Cowork was disabled for the organization, so Claude can no longer open or use websites in a browser pane during members' Cowork sessions.
+
+    - `type: optional "org_cowork_browser_pane_disabled"`
+
+      default: org_cowork_browser_pane_disabled
+
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
+
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
+  - `OrgCoworkBrowserPaneEnabled object`
+
+    The in-app browser in Cowork was enabled for the organization, letting Claude open and use websites in a browser pane during members' Cowork sessions.
+
+    - `type: optional "org_cowork_browser_pane_enabled"`
+
+      default: org_cowork_browser_pane_enabled
+
+    - `actor: APIActor or UserActor or UnauthenticatedUserActor or 8 more`
+
+      - `APIActor object`
+
+        - `type: optional "api_actor"`
+
+          default: api_actor
+
+        - `api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `UserActor object`
+
+        - `type: optional "user_actor"`
+
+          default: user_actor
+
+        - `email_address: string`
+
+          format: email
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `user_id: string`
+
+      - `UnauthenticatedUserActor object`
+
+        - `type: optional "unauthenticated_user_actor"`
+
+          default: unauthenticated_user_actor
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+        - `unauthenticated_email_address: optional string or null`
+
+          format: email
+
+      - `AnthropicActor object`
+
+        - `type: optional "anthropic_actor"`
+
+          default: anthropic_actor
+
+        - `email_address: optional string or null`
+
+          format: email
+
+      - `SystemActor object`
+
+        Automated background processing performed by Anthropic systems, acting
+        without a user or customer credential.
+
+        - `type: optional "system_actor"`
+
+          default: system_actor
+
+        - `service: optional string or null`
+
+          Name of the automated process that performed the action, when known.
+
+      - `AdminAPIKeyActor object`
+
+        - `type: optional "admin_api_key_actor"`
+
+          default: admin_api_key_actor
+
+        - `admin_api_key_id: string`
+
+        - `ip_address: string`
+
+        - `user_agent: string`
+
+      - `ServiceAccountActor object`
+
+        - `type: optional "service_account_actor"`
+
+          default: service_account_actor
+
+        - `ip_address: string`
+
+        - `service_account_id: string`
+
+        - `user_agent: string`
+
+      - `ScimDirectorySyncActor object`
+
+        - `type: optional "scim_directory_sync_actor"`
+
+          default: scim_directory_sync_actor
+
+        - `directory_id: string`
+
+        - `workos_event_id: string`
+
+        - `idp_connection_type: optional string or null`
+
+      - `FederatedIdentityActor object`
+
+        A federated external workload authenticated via a verified OIDC token.
+
+        Carries the verified issuer, subject, and audience claims from the
+        presented JWT.
+
+        - `type: optional "federated_identity_actor"`
+
+          default: federated_identity_actor
+
+        - `issuer: string`
+
+        - `subject: string`
+
+        - `audience: optional array of string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+      - `FederatedActor object`
+
+        An external identity asserted by a trusted provider — a cloud-provider
+        gateway or a customer-registered federation issuer — acting without an
+        Anthropic-provisioned account or service account.
+
+        - `type: optional "federated_actor"`
+
+          default: federated_actor
+
+        - `provider: FederatedActorAwsProvider or FederatedActorAzureProvider or FederatedActorGcpProvider or FederatedActorOidcProvider`
+
+          - `FederatedActorAwsProvider object`
+
+            Asserting party: the AWS account the organization is bound to.
+
+            - `type: optional "aws"`
+
+              default: aws
+
+            - `account_id: string`
+
+            - `signed_principal: string`
+
+              The AWS-signed ARN of the IAM principal that requested the token.
+
+          - `FederatedActorAzureProvider object`
+
+            Asserting party: the Azure subscription the organization is bound to.
+
+            - `type: optional "azure"`
+
+              default: azure
+
+            - `subscription_id: string`
+
+          - `FederatedActorGcpProvider object`
+
+            Asserting party: the GCP project the organization is bound to.
+
+            - `type: optional "gcp"`
+
+              default: gcp
+
+            - `project_number: string`
+
+          - `FederatedActorOidcProvider object`
+
+            Asserting party: a customer-registered OIDC federation issuer.
+
+            - `type: optional "oidc"`
+
+              default: oidc
+
+            - `issuer: optional string or null`
+
+              The federation issuer's URL. Null when the presented credential failed verification.
+
+        - `ip_address: optional string or null`
+
+        - `subject: optional string or null`
+
+          The provider's verified identifier for the caller; its form depends on the provider.
+
+        - `user_agent: optional string or null`
+
+      - `AttestedDeviceActor object`
+
+        An attested mobile device authenticated via Apple App Attest.
+
+        - `type: optional "attested_device_actor"`
+
+          default: attested_device_actor
+
+        - `external_client_id: string`
+
+        - `kid_hash: string`
+
+        - `ip_address: optional string or null`
+
+        - `user_agent: optional string or null`
+
+    - `id: optional string`
+
+      Unique identifier for the activity e.g. 'activity_abcd1234'
+
+    - `created_at: optional string`
+
+      When this activity occurred.
+
+      format: date-time
+
+    - `organization_id: optional string or null`
+
+      Organization ID this activity is associated with
+
+    - `organization_uuid: optional string or null`
+
+      Organization UUID where the activity occurred. Null when the activity is not tied to an organization (for example, login and logout events or calls to the Compliance API).
+
   - `OrgCoworkDisabled object`
 
     Organization cowork was disabled.
diff --git a/content/en/api/compliance/organizations.md b/content/en/api/compliance/organizations.md
index 20986c6371..4424ac184e 100644
--- a/content/en/api/compliance/organizations.md
+++ b/content/en/api/compliance/organizations.md
@@ -472,6 +472,13 @@ enforced state after all policies are applied, which may differ from what
 is configured in the admin console. Settings an organization's
 administrators cannot change (for example, ones controlled by Anthropic
 policy or not available to the organization) are omitted from the list.
+Settings that report a compliance arrangement with Anthropic are the
+exception: the HIPAA and Access Transparency settings are always included;
+the API zero data retention setting is reported for Claude Console
+organizations, and the Claude Code zero data retention and customer-managed
+encryption keys (CMEK) settings for Claude Enterprise organizations. Each
+reports whether the arrangement is in place at the organization level; a
+retention setting on an individual workspace is not reflected.
 
 The organization must belong to the API key's organization hierarchy;
 unknown organizations and organizations outside the hierarchy return 404.
@@ -544,12 +551,16 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       default: boolean
 
-    - `name: "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or "artifact_connectors_enabled" or 53 more`
+    - `name: "access_transparency_enabled" or "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or 57 more`
+
+      - `"access_transparency_enabled"`
 
       - `"ai_powered_artifacts_enabled"`
 
       - `"api_workbench_feedback_collection_enabled"`
 
+      - `"api_zero_data_retention_enabled"`
+
       - `"artifact_connectors_enabled"`
 
       - `"ask_your_org_enabled"`
@@ -588,6 +599,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_design_enabled"`
 
+      - `"claude_enterprise_claude_code_zero_data_retention_enabled"`
+
       - `"claude_in_slack_enabled"`
 
       - `"claude_science_custom_connectors_enabled"`
@@ -606,6 +619,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_science_ssh_hosts_enabled"`
 
+      - `"cmek_enabled"`
+
       - `"code_execution_enabled"`
 
       - `"code_execution_network_egress_enabled"`
@@ -812,7 +827,7 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
   "organization_id": "organization_id",
   "settings": [
     {
-      "name": "ai_powered_artifacts_enabled",
+      "name": "access_transparency_enabled",
       "value": true,
       "type": "boolean"
     }
diff --git a/content/en/api/compliance/organizations/settings.md b/content/en/api/compliance/organizations/settings.md
index 22a6910645..6f6bd922a0 100644
--- a/content/en/api/compliance/organizations/settings.md
+++ b/content/en/api/compliance/organizations/settings.md
@@ -16,6 +16,13 @@ enforced state after all policies are applied, which may differ from what
 is configured in the admin console. Settings an organization's
 administrators cannot change (for example, ones controlled by Anthropic
 policy or not available to the organization) are omitted from the list.
+Settings that report a compliance arrangement with Anthropic are the
+exception: the HIPAA and Access Transparency settings are always included;
+the API zero data retention setting is reported for Claude Console
+organizations, and the Claude Code zero data retention and customer-managed
+encryption keys (CMEK) settings for Claude Enterprise organizations. Each
+reports whether the arrangement is in place at the organization level; a
+retention setting on an individual workspace is not reflected.
 
 The organization must belong to the API key's organization hierarchy;
 unknown organizations and organizations outside the hierarchy return 404.
@@ -88,12 +95,16 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       default: boolean
 
-    - `name: "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or "artifact_connectors_enabled" or 53 more`
+    - `name: "access_transparency_enabled" or "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or 57 more`
+
+      - `"access_transparency_enabled"`
 
       - `"ai_powered_artifacts_enabled"`
 
       - `"api_workbench_feedback_collection_enabled"`
 
+      - `"api_zero_data_retention_enabled"`
+
       - `"artifact_connectors_enabled"`
 
       - `"ask_your_org_enabled"`
@@ -132,6 +143,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_design_enabled"`
 
+      - `"claude_enterprise_claude_code_zero_data_retention_enabled"`
+
       - `"claude_in_slack_enabled"`
 
       - `"claude_science_custom_connectors_enabled"`
@@ -150,6 +163,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_science_ssh_hosts_enabled"`
 
+      - `"cmek_enabled"`
+
       - `"code_execution_enabled"`
 
       - `"code_execution_network_egress_enabled"`
@@ -356,7 +371,7 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
   "organization_id": "organization_id",
   "settings": [
     {
-      "name": "ai_powered_artifacts_enabled",
+      "name": "access_transparency_enabled",
       "value": true,
       "type": "boolean"
     }
@@ -376,7 +391,14 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
   Settings appear at most once each, in a fixed relative order, and values
   reflect the enforced state. A setting the organization's administrators
   cannot change — for example, one controlled by Anthropic policy or not
-  available to the organization — is omitted from the list.
+  available to the organization — is omitted from the list. Settings that
+  report a compliance arrangement with Anthropic are the exception: the
+  HIPAA and Access Transparency settings are always included; the API zero
+  data retention setting is reported for Claude Console organizations, and
+  the Claude Code zero data retention and customer-managed encryption keys
+  (CMEK) settings for Claude Enterprise organizations. Each reports whether
+  the arrangement is in place at the organization level; a retention setting
+  on an individual workspace is not reflected.
 
   - `type: optional "effective_organization_settings"`
 
@@ -434,12 +456,16 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
 
         default: boolean
 
-      - `name: "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or "artifact_connectors_enabled" or 53 more`
+      - `name: "access_transparency_enabled" or "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or 57 more`
+
+        - `"access_transparency_enabled"`
 
         - `"ai_powered_artifacts_enabled"`
 
         - `"api_workbench_feedback_collection_enabled"`
 
+        - `"api_zero_data_retention_enabled"`
+
         - `"artifact_connectors_enabled"`
 
         - `"ask_your_org_enabled"`
@@ -478,6 +504,8 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
 
         - `"claude_design_enabled"`
 
+        - `"claude_enterprise_claude_code_zero_data_retention_enabled"`
+
         - `"claude_in_slack_enabled"`
 
         - `"claude_science_custom_connectors_enabled"`
@@ -496,6 +524,8 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
 
         - `"claude_science_ssh_hosts_enabled"`
 
+        - `"cmek_enabled"`
+
         - `"code_execution_enabled"`
 
         - `"code_execution_network_egress_enabled"`
diff --git a/content/en/api/compliance/organizations/settings/retrieve.md b/content/en/api/compliance/organizations/settings/retrieve.md
index 819c19a1eb..d3ad29cd18 100644
--- a/content/en/api/compliance/organizations/settings/retrieve.md
+++ b/content/en/api/compliance/organizations/settings/retrieve.md
@@ -14,6 +14,13 @@ enforced state after all policies are applied, which may differ from what
 is configured in the admin console. Settings an organization's
 administrators cannot change (for example, ones controlled by Anthropic
 policy or not available to the organization) are omitted from the list.
+Settings that report a compliance arrangement with Anthropic are the
+exception: the HIPAA and Access Transparency settings are always included;
+the API zero data retention setting is reported for Claude Console
+organizations, and the Claude Code zero data retention and customer-managed
+encryption keys (CMEK) settings for Claude Enterprise organizations. Each
+reports whether the arrangement is in place at the organization level; a
+retention setting on an individual workspace is not reflected.
 
 The organization must belong to the API key's organization hierarchy;
 unknown organizations and organizations outside the hierarchy return 404.
@@ -86,12 +93,16 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       default: boolean
 
-    - `name: "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or "artifact_connectors_enabled" or 53 more`
+    - `name: "access_transparency_enabled" or "ai_powered_artifacts_enabled" or "api_workbench_feedback_collection_enabled" or 57 more`
+
+      - `"access_transparency_enabled"`
 
       - `"ai_powered_artifacts_enabled"`
 
       - `"api_workbench_feedback_collection_enabled"`
 
+      - `"api_zero_data_retention_enabled"`
+
       - `"artifact_connectors_enabled"`
 
       - `"ask_your_org_enabled"`
@@ -130,6 +141,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_design_enabled"`
 
+      - `"claude_enterprise_claude_code_zero_data_retention_enabled"`
+
       - `"claude_in_slack_enabled"`
 
       - `"claude_science_custom_connectors_enabled"`
@@ -148,6 +161,8 @@ unknown organizations and organizations outside the hierarchy return 404.
 
       - `"claude_science_ssh_hosts_enabled"`
 
+      - `"cmek_enabled"`
+
       - `"code_execution_enabled"`
 
       - `"code_execution_network_egress_enabled"`
@@ -354,7 +369,7 @@ curl https://api.anthropic.com/v1/compliance/organizations/$ORGANIZATION_ID/sett
   "organization_id": "organization_id",
   "settings": [
     {
-      "name": "ai_powered_artifacts_enabled",
+      "name": "access_transparency_enabled",
       "value": true,
       "type": "boolean"
     }
diff --git a/content/en/api/rate-limits.md b/content/en/api/rate-limits.md
index 7d0377d8df..58da8b9d0c 100644
--- a/content/en/api/rate-limits.md
+++ b/content/en/api/rate-limits.md
@@ -5,7 +5,7 @@ description: To mitigate misuse and manage capacity on the API, limits are in pl
 ---
 
 <Note>
-  **[Claude Platform on AWS](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws):** The rate limits on this page apply to Claude Platform on AWS, but billing and limit management differ. Billing is through AWS Marketplace (not Anthropic credit purchases). Organizations on Claude Platform on AWS are placed on the Start tier and do not move between usage tiers automatically. To request higher limits, contact your Anthropic account representative or [Anthropic support](https://support.claude.com); the **Request rate limit increase** flow is not available. Per-workspace rate limit configuration and [fast mode](https://platform.claude.com/docs/en/build-with-claude/fast-mode) are not available on Claude Platform on AWS. For details, see [Rate limits and quotas on Claude Platform on AWS](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#rate-limits-and-quotas).
+  **[Claude Platform on AWS](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws):** The rate limits on this page apply to Claude Platform on AWS, but billing and limit management differ. Billing is through AWS Marketplace (not Anthropic credit purchases). Organizations on Claude Platform on AWS are placed on the Start tier and can move to a higher tier automatically as they build a history of paid AWS Marketplace invoices. To request higher limits, contact your Anthropic account representative or [Anthropic support](https://support.claude.com); the **Request rate limit increase** flow is not available. Per-workspace rate limit configuration and [fast mode](https://platform.claude.com/docs/en/build-with-claude/fast-mode) are not available on Claude Platform on AWS. For details, see [Rate limits and quotas on Claude Platform on AWS](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#rate-limits-and-quotas).
 </Note>
 
 There are two types of limits:
diff --git a/content/en/build-with-claude/batch-processing.md b/content/en/build-with-claude/batch-processing.md
index 5b8a800da5..4654b7cffe 100644
--- a/content/en/build-with-claude/batch-processing.md
+++ b/content/en/build-with-claude/batch-processing.md
@@ -82,7 +82,7 @@ A small number of Messages API parameters are **not** supported in batch request
 The Batches API offers significant cost savings. All usage is charged at 50% of the standard API prices.
 
 | Model                                                                                                                                 | Batch input  | Batch output  |
-| ------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ------------- |
+| :------------------------------------------------------------------------------------------------------------------------------------ | :----------- | :------------ |
 | Claude Fable 5.1                                                                                                                      | $5 / MTok    | $25 / MTok    |
 | Claude Mythos 5.1 ([limited availability](https://anthropic.com/glasswing))                                                           | $5 / MTok    | $25 / MTok    |
 | Claude Fable 5                                                                                                                        | $5 / MTok    | $25 / MTok    |
@@ -751,11 +751,12 @@ Results of the batch are available for download at the `results_url` property on
   for result in client.messages.batches.results(
       "msgbatch_01HkcTjaV5uDC8jWR4ZsDV8d",
   ):
-      match result.result.type:
+      outcome = result.result
+      match outcome.type:
           case "succeeded":
               print(f"Success! {result.custom_id}")
           case "errored":
-              if result.result.error.error.type == "invalid_request_error":
+              if outcome.error.error.type == "invalid_request_error":
                   # Request body must be fixed before re-sending request
                   print(f"Validation error {result.custom_id}")
               else:
@@ -863,39 +864,43 @@ Results of the batch are available for download at the `results_url` property on
         streamResponse
           .stream()
           .forEach(result -> {
-            if (result.result().isSucceeded()) {
-              System.out.println("Success! " + result.customId());
-            } else if (result.result().isErrored()) {
-              if (result.result().asErrored().error().error().isInvalidRequestError()) {
-                // Request body must be fixed before re-sending request
-                System.out.println("Validation error: " + result.customId());
-              } else {
-                // Request can be retried directly
-                System.out.println("Server error: " + result.customId());
+            switch (result.result().type().value()) {
+              case SUCCEEDED -> System.out.println("Success! " + result.customId());
+              case ERRORED -> {
+                if (result.result().asErrored().error().error().isInvalidRequestError()) {
+                  // Request body must be fixed before re-sending request
+                  System.out.println("Validation error: " + result.customId());
+                } else {
+                  // Request can be retried directly
+                  System.out.println("Server error: " + result.customId());
+                }
               }
-            } else if (result.result().isExpired()) {
-              System.out.println("Request expired: " + result.customId());
+              case EXPIRED -> System.out.println("Request expired: " + result.customId());
             }
           });
       }
   ```
 
   ```php PHP
+  use Anthropic\Messages\Batches\MessageBatchErroredResult;
+  use Anthropic\Messages\Batches\MessageBatchExpiredResult;
+  use Anthropic\Messages\Batches\MessageBatchSucceededResult;
+
   $client = new Client();
 
   foreach ($client->messages->batches->resultsStream(messageBatchID: 'msgbatch_01HkcTjaV5uDC8jWR4ZsDV8d') as $result) {
-      switch ($result->result->type) {
-          case "succeeded":
+      switch (true) {
+          case $result->result instanceof MessageBatchSucceededResult:
               echo "Success! {$result->customID}\n";
               break;
-          case "errored":
+          case $result->result instanceof MessageBatchErroredResult:
               if ($result->result->error->error->type === "invalid_request_error") {
                   echo "Validation error: {$result->customID}\n";
               } else {
                   echo "Server error: {$result->customID}\n";
               }
               break;
-          case "expired":
+          case $result->result instanceof MessageBatchExpiredResult:
               echo "Request expired: {$result->customID}\n";
               break;
       }
@@ -906,16 +911,17 @@ Results of the batch are available for download at the `results_url` property on
   client = Anthropic::Client.new
 
   client.messages.batches.results_streaming("msgbatch_01HkcTjaV5uDC8jWR4ZsDV8d").each do |result|
-    case result.result.type
-    when :succeeded
+    outcome = result.result
+    case outcome
+    when Anthropic::Models::Messages::MessageBatchSucceededResult
       puts "Success! #{result.custom_id}"
-    when :errored
-      if result.result.error.type == :invalid_request
+    when Anthropic::Models::Messages::MessageBatchErroredResult
+      if outcome.error.type == :invalid_request
         puts "Validation error: #{result.custom_id}"
       else
         puts "Server error: #{result.custom_id}"
       end
-    when :expired
+    when Anthropic::Models::Messages::MessageBatchExpiredResult
       puts "Request expired: #{result.custom_id}"
     end
   end
diff --git a/content/en/build-with-claude/cache-diagnostics.md b/content/en/build-with-claude/cache-diagnostics.md
index 79d9ab6e56..55a3430afc 100644
--- a/content/en/build-with-claude/cache-diagnostics.md
+++ b/content/en/build-with-claude/cache-diagnostics.md
@@ -680,11 +680,16 @@ In streaming responses, `diagnostics` appears on the `message_start` event.
 
   $diagnostics = null;
   foreach ($stream as $event) {
-      if ($event instanceof BetaRawMessageStartEvent) {
-          // diagnostics arrives on the message_start event's embedded BetaMessage
-          $diagnostics = $event->message->diagnostics;
-      } elseif ($event instanceof BetaRawContentBlockDeltaEvent && $event->delta instanceof BetaTextDelta) {
-          echo $event->delta->text;
+      switch (true) {
+          case $event instanceof \Anthropic\Beta\Messages\BetaRawMessageStartEvent:
+              // diagnostics arrives on the message_start event's embedded BetaMessage
+              $diagnostics = $event->message->diagnostics;
+              break;
+          case $event instanceof \Anthropic\Beta\Messages\BetaRawContentBlockDeltaEvent:
+              if ($event->delta instanceof \Anthropic\Beta\Messages\BetaTextDelta) {
+                  echo $event->delta->text;
+              }
+              break;
       }
   }
   echo PHP_EOL;
diff --git a/content/en/build-with-claude/claude-in-amazon-bedrock.md b/content/en/build-with-claude/claude-in-amazon-bedrock.md
index 7f97b67152..04741a1fcb 100644
--- a/content/en/build-with-claude/claude-in-amazon-bedrock.md
+++ b/content/en/build-with-claude/claude-in-amazon-bedrock.md
@@ -102,16 +102,22 @@ Anthropic's [client SDKs](https://platform.claude.com/docs/en/cli-sdks-libraries
     <Tabs>
       <Tab title="Gradle">
         ```kotlin
-        implementation("com.anthropic:anthropic-java-bedrock:2.60.0")
+        implementation("com.anthropic:anthropic-java:2.63.0")
+        implementation("com.anthropic:anthropic-java-bedrock:2.63.0")
         ```
       </Tab>
 
       <Tab title="Maven">
         ```xml
+        <dependency>
+            <groupId>com.anthropic</groupId>
+            <artifactId>anthropic-java</artifactId>
+            <version>2.63.0</version>
+        </dependency>
         <dependency>
             <groupId>com.anthropic</groupId>
             <artifactId>anthropic-java-bedrock</artifactId>
-            <version>2.60.0</version>
+            <version>2.63.0</version>
         </dependency>
         ```
       </Tab>
diff --git a/content/en/build-with-claude/claude-in-microsoft-foundry.md b/content/en/build-with-claude/claude-in-microsoft-foundry.md
index 05e074db3b..db289cb8e6 100644
--- a/content/en/build-with-claude/claude-in-microsoft-foundry.md
+++ b/content/en/build-with-claude/claude-in-microsoft-foundry.md
@@ -77,7 +77,8 @@ Anthropic's [client SDKs](https://platform.claude.com/docs/en/cli-sdks-libraries
     <Tabs>
       <Tab title="Gradle">
         ```kotlin
-        implementation("com.anthropic:anthropic-java-foundry:2.60.0")
+        implementation("com.anthropic:anthropic-java:2.63.0")
+        implementation("com.anthropic:anthropic-java-foundry:2.63.0")
 
         // For Entra ID authentication, also add the Azure Identity library
         implementation("com.azure:azure-identity:1.18.3")
@@ -86,10 +87,15 @@ Anthropic's [client SDKs](https://platform.claude.com/docs/en/cli-sdks-libraries
 
       <Tab title="Maven">
         ```xml
+        <dependency>
+            <groupId>com.anthropic</groupId>
+            <artifactId>anthropic-java</artifactId>
+            <version>2.63.0</version>
+        </dependency>
         <dependency>
             <groupId>com.anthropic</groupId>
             <artifactId>anthropic-java-foundry</artifactId>
-            <version>2.60.0</version>
+            <version>2.63.0</version>
         </dependency>
         <!-- For Entra ID authentication, also add the Azure Identity library -->
         <dependency>
diff --git a/content/en/build-with-claude/claude-on-amazon-bedrock-legacy.md b/content/en/build-with-claude/claude-on-amazon-bedrock-legacy.md
index f172041256..aa8449dcb2 100644
--- a/content/en/build-with-claude/claude-on-amazon-bedrock-legacy.md
+++ b/content/en/build-with-claude/claude-on-amazon-bedrock-legacy.md
@@ -54,14 +54,20 @@ Anthropic's [client SDKs](https://platform.claude.com/docs/en/cli-sdks-libraries
   <Tab title="Java">
     <CodeGroup>
       ```groovy Gradle
-      implementation("com.anthropic:anthropic-java-bedrock:2.60.0")
+      implementation("com.anthropic:anthropic-java:2.63.0")
+      implementation("com.anthropic:anthropic-java-bedrock:2.63.0")
       ```
 
       ```xml Maven
+      <dependency>
+          <groupId>com.anthropic</groupId>
+          <artifactId>anthropic-java</artifactId>
+          <version>2.63.0</version>
+      </dependency>
       <dependency>
           <groupId>com.anthropic</groupId>
           <artifactId>anthropic-java-bedrock</artifactId>
-          <version>2.60.0</version>
+          <version>2.63.0</version>
       </dependency>
       ```
 
diff --git a/content/en/build-with-claude/claude-on-vertex-ai.md b/content/en/build-with-claude/claude-on-vertex-ai.md
index ac1e7e5bc7..3315823b7b 100644
--- a/content/en/build-with-claude/claude-on-vertex-ai.md
+++ b/content/en/build-with-claude/claude-on-vertex-ai.md
@@ -45,20 +45,20 @@ First, install Anthropic's [client SDK](https://platform.claude.com/docs/en/cli-
   <Tab title="Java">
     <CodeGroup exclude="shell, python, typescript, csharp, go, php, ruby">
       ```groovy Gradle
-      implementation("com.anthropic:anthropic-java:2.60.0")
-      implementation("com.anthropic:anthropic-java-vertex:2.60.0")
+      implementation("com.anthropic:anthropic-java:2.63.0")
+      implementation("com.anthropic:anthropic-java-vertex:2.63.0")
       ```
 
       ```xml Maven
       <dependency>
           <groupId>com.anthropic</groupId>
           <artifactId>anthropic-java</artifactId>
-          <version>2.60.0</version>
+          <version>2.63.0</version>
       </dependency>
       <dependency>
           <groupId>com.anthropic</groupId>
           <artifactId>anthropic-java-vertex</artifactId>
-          <version>2.60.0</version>
+          <version>2.63.0</version>
       </dependency>
       ```
 
diff --git a/content/en/build-with-claude/claude-platform-on-aws.md b/content/en/build-with-claude/claude-platform-on-aws.md
index 1678693c64..a926d63690 100644
--- a/content/en/build-with-claude/claude-platform-on-aws.md
+++ b/content/en/build-with-claude/claude-platform-on-aws.md
@@ -14,7 +14,7 @@ Claude Platform on AWS gives you the full Anthropic platform experience, includi
 
 Claude models run on Anthropic-managed infrastructure. This is a commercial integration for billing and access through AWS. Anthropic is the data processor for inference inputs and outputs. AWS processes billing and identity metadata under the marketplace model. Customers using Claude through Claude Platform on AWS are subject to Anthropic's [data use terms](https://www.anthropic.com/legal).
 
-Claude Platform on AWS has the following operational characteristics: data might not reside in AWS, inference might route to Anthropic's primary cloud, and subservices might change without notice. Set the [`inference_geo`](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#data-residency) parameter per request to pin inference to a specific geography.
+Anthropic uses AWS infrastructure to process your API requests, run model inference, and store your workspace content (such as prompts, outputs, files, Skills, and batches). For workspaces created before September 18, 2026, 00:00 UTC, Anthropic might process requests, store data, and run inference outside AWS. In either case, subservices might change without notice. Set the [`inference_geo`](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#data-residency) parameter per request to pin inference to a specific geography.
 
 Claude Platform on AWS follows the same data retention policy as the first-party Claude API. Zero Data Retention (ZDR) is available on request. Contact your Anthropic account representative to enable it for your organization.
 
@@ -72,7 +72,7 @@ Setting up Claude Platform on AWS happens in four phases: sign up on the AWS Con
     If your organization has a private offer from Anthropic, the Console looks it up and prompts you to accept it in AWS Marketplace. See [Private offers](https://platform.claude.com/docs/en/about-claude/pricing#private-offers) for details.
 
     <Note>
-      If you use Claude Platform on AWS, your content (such as prompts and completions) is processed by Anthropic outside of AWS. See Anthropic's [data use policies](https://www.anthropic.com/legal) for details on how content and metadata are processed and stored.
+      When you use Claude Platform on AWS, Anthropic processes and stores your content (such as prompts and outputs) on AWS infrastructure. For workspaces created before September 18, 2026, 00:00 UTC, Anthropic might process and store that content outside AWS. Anthropic's [data use policies](https://www.anthropic.com/legal) describe how content and metadata are processed and stored.
     </Note>
   </Step>
 
@@ -111,7 +111,7 @@ Plan a move from an existing organization as a cutover to a new one:
 
 * **Create the new organization first.** Sign up through the AWS Console (see [Set up your account](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#set-up-your-account)). If your move involves a private offer, complete sign-up before the offer is accepted: discounts apply from acceptance, not retroactively. See [Private offers](https://platform.claude.com/docs/en/about-claude/pricing#private-offers).
 * **Recreate access and configuration.** API keys, workspaces, and Claude Console settings don't carry over from an existing organization. Create workspaces in the new organization and switch your applications to [Claude Platform on AWS authentication](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#authentication).
-* **Update your integration.** Claude Platform on AWS serves the Claude API (`/v1/{endpoint}`), so request and response shapes are unchanged from the first-party Claude API. What changes is the base URL, the authentication method, and the required `anthropic-workspace-id` header; see [Making requests](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#making-requests). Some platform features differ; see [Features not supported](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#features-not-supported).
+* **Update your integration.** Claude Platform on AWS serves the Claude API (`/v1/{endpoint}`), so request and response shapes are unchanged from the first-party Claude API. What changes is the base URL, the authentication method, and the `anthropic-workspace-id` header on inference and resource requests; see [Making requests](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#making-requests). Some platform features differ; see [Features not supported](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#features-not-supported).
 * **Cut over on your own schedule.** The new organization is independent of your existing one, and both can serve traffic in parallel. There's no need for a hard cutover: shift workloads gradually until all of your traffic is on the new organization.
 
 Once the new organization is running, the differences are concentrated in billing and authentication, which are handled through AWS:
@@ -305,14 +305,20 @@ Anthropic's [client SDKs](https://platform.claude.com/docs/en/cli-sdks-libraries
 
   <Tab title="Java">
     ```kotlin Gradle
-    implementation("com.anthropic:anthropic-java-aws:2.60.0")
+    implementation("com.anthropic:anthropic-java:2.63.0")
+    implementation("com.anthropic:anthropic-java-aws:2.63.0")
     ```
 
     ```xml Maven
+    <dependency>
+      <groupId>com.anthropic</groupId>
+      <artifactId>anthropic-java</artifactId>
+      <version>2.63.0</version>
+    </dependency>
     <dependency>
       <groupId>com.anthropic</groupId>
       <artifactId>anthropic-java-aws</artifactId>
-      <version>2.60.0</version>
+      <version>2.63.0</version>
     </dependency>
     ```
   </Tab>
@@ -339,16 +345,16 @@ Anthropic's [client SDKs](https://platform.claude.com/docs/en/cli-sdks-libraries
 The following models are available on Claude Platform on AWS:
 
 | Model             | Model ID          |
-| ----------------- | ----------------- |
+| :---------------- | :---------------- |
 | Claude Fable 5.1  | claude-fable-5-1  |
 | Claude Fable 5    | claude-fable-5    |
 | Claude Opus 5     | claude-opus-5     |
 | Claude Opus 4.8   | claude-opus-4-8   |
 | Claude Opus 4.7   | claude-opus-4-7   |
 | Claude Opus 4.6   | claude-opus-4-6   |
+| Claude Opus 4.5   | claude-opus-4-5   |
 | Claude Sonnet 5   | claude-sonnet-5   |
 | Claude Sonnet 4.6 | claude-sonnet-4-6 |
-| Claude Opus 4.5   | claude-opus-4-5   |
 | Claude Sonnet 4.5 | claude-sonnet-4-5 |
 | Claude Haiku 4.5  | claude-haiku-4-5  |
 
@@ -362,7 +368,7 @@ New models typically launch on Claude Platform on AWS the same day as the first-
 
 ## Making requests
 
-Claude Platform on AWS uses the same API endpoints as the first-party Claude API. The differences are the base URL, the authentication method, and a required `anthropic-workspace-id` header that identifies which [workspace](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#workspaces) the request targets.
+Claude Platform on AWS uses the same API endpoints as the first-party Claude API. The differences are the base URL, the authentication method, and the `anthropic-workspace-id` header, which identifies the [workspace](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#workspaces) a request targets. The header is required on inference and resource requests, such as calls to the Messages API, Models API, Files API, and Claude Managed Agents endpoints. Requests to the [Admin API](https://platform.claude.com/docs/en/manage-claude/admin-api) workspace and external key endpoints don't require it.
 
 Before running these examples, complete the steps in [Before making API calls](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#before-making-api-calls).
 
@@ -774,7 +780,7 @@ See [IAM policies](https://platform.claude.com/docs/en/build-with-claude/claude-
 
 ### Managing workspaces
 
-Create additional workspaces, rename a workspace, or archive a workspace from the AWS Console **Workspaces** page or with the [Admin API](https://platform.claude.com/docs/en/manage-claude/admin-api) workspace endpoints. A new workspace is bound to the AWS region of the endpoint you call to create it (see [Workspace scoping](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#workspace-scoping)). With the Admin role, you can also create, rename, and archive workspaces from the Claude Console **Workspaces** page.
+Create additional workspaces, rename a workspace, or archive a workspace from the AWS Console **Workspaces** page or with the [Admin API](https://platform.claude.com/docs/en/manage-claude/admin-api) workspace endpoints. These endpoints don't require the `anthropic-workspace-id` header. Create and list act on the organization; get, update, and archive take the workspace ID in the URL path. A new workspace is bound to the AWS region of the endpoint you call to create it (see [Workspace scoping](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#workspace-scoping)). With the Admin role, you can also create, rename, and archive workspaces from the Claude Console **Workspaces** page.
 
 ## Using the Claude Console
 
@@ -824,7 +830,7 @@ The Claude Console does not support organization switching for Claude Platform o
 
 Organizations on Claude Platform on AWS are placed on the Start tier. Anthropic manages rate limits directly, not through AWS quota systems.
 
-Organizations on Claude Platform on AWS do not move between usage tiers automatically. Usage-based tier advancement applies to first-party Claude API organizations, not to organizations billed through AWS Marketplace. The self-service **Request rate limit increase** flow in the Claude Console is also not available: the Rate limits page directs you to your Anthropic account representative instead.
+Organizations on Claude Platform on AWS can move to a higher usage tier automatically as they build a history of paid AWS Marketplace invoices. The self-service **Request rate limit increase** flow in the Claude Console is not available: the Rate limits page directs you to your Anthropic account representative instead.
 
 To request higher limits, contact your Anthropic account representative or [Anthropic support](https://support.claude.com). Include the following in your request:
 
@@ -1044,7 +1050,7 @@ The migration delta depends on which Bedrock integration you're coming from. The
 | **SDK package**            | `anthropic[bedrock]`, `@anthropic-ai/bedrock-sdk`, and others                                                   | `anthropic[bedrock]`, `@anthropic-ai/bedrock-sdk`, or AWS SDK                                                                       | `anthropic[aws]`, `@anthropic-ai/aws-sdk`, and others (see [Install an SDK](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#install-an-sdk))                                                                                          |
 | **SigV4 service name**     | `bedrock-mantle`                                                                                                | `bedrock`                                                                                                                           | `aws-external-anthropic`                                                                                                                                                                                                                                           |
 | **Streaming format**       | SSE                                                                                                             | AWS EventStream                                                                                                                     | SSE (same as Claude API)                                                                                                                                                                                                                                           |
-| **Workspace header**       | Not applicable                                                                                                  | Not applicable                                                                                                                      | `anthropic-workspace-id` required                                                                                                                                                                                                                                  |
+| **Workspace header**       | Not applicable                                                                                                  | Not applicable                                                                                                                      | `anthropic-workspace-id`, required on inference and resource requests                                                                                                                                                                                              |
 | **Region availability**    | See [Amazon Bedrock regions](https://docs.aws.amazon.com/bedrock/latest/userguide/bedrock-regions.html)         | See [Amazon Bedrock regions](https://docs.aws.amazon.com/bedrock/latest/userguide/bedrock-regions.html)                             | All AWS commercial regions                                                                                                                                                                                                                                         |
 | **Anthropic organization** | None required                                                                                                   | None required                                                                                                                       | New organization created at sign-up. Existing organizations can't be converted (see [Moving from an existing Anthropic organization](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#moving-from-an-existing-anthropic-organization)) |
 
diff --git a/content/en/build-with-claude/compaction.md b/content/en/build-with-claude/compaction.md
index 9047839093..4495dc56c6 100644
--- a/content/en/build-with-claude/compaction.md
+++ b/content/en/build-with-claude/compaction.md
@@ -1755,17 +1755,22 @@ The compaction block streams differently from text blocks. You receive a `conten
       context_management={"edits": [{"type": "compact_20260112"}]},
   ) as stream:
       for event in stream:
-          if event.type == "content_block_start":
-              if event.content_block.type == "compaction":
-                  print("Compaction started...")
-              elif event.content_block.type == "text":
-                  print("Text response started...")
-
-          elif event.type == "content_block_delta":
-              if event.delta.type == "compaction_delta":
-                  print(f"Compaction complete: {len(event.delta.content or '')} chars")
-              elif event.delta.type == "text_delta":
-                  print(event.delta.text, end="", flush=True)
+          match event.type:
+              case "content_block_start":
+                  block = event.content_block
+                  match block.type:
+                      case "compaction":
+                          print("Compaction started...")
+                      case "text":
+                          print("Text response started...")
+
+              case "content_block_delta":
+                  delta = event.delta
+                  match delta.type:
+                      case "compaction_delta":
+                          print(f"Compaction complete: {len(delta.content or '')} chars")
+                      case "text_delta":
+                          print(delta.text, end="", flush=True)
 
       # Get the final accumulated message
       message = stream.get_final_message()
@@ -1789,18 +1794,27 @@ The compaction block streams differently from text blocks. You receive a `conten
   });
 
   for await (const event of stream) {
-    if (event.type === "content_block_start") {
-      if (event.content_block.type === "compaction") {
-        console.log("Compaction started...");
-      } else if (event.content_block.type === "text") {
-        console.log("Text response started...");
-      }
-    } else if (event.type === "content_block_delta") {
-      if (event.delta.type === "compaction_delta") {
-        console.log(`Compaction complete: ${event.delta.content?.length ?? 0} chars`);
-      } else if (event.delta.type === "text_delta") {
-        process.stdout.write(event.delta.text);
-      }
+    switch (event.type) {
+      case "content_block_start":
+        switch (event.content_block.type) {
+          case "compaction":
+            console.log("Compaction started...");
+            break;
+          case "text":
+            console.log("Text response started...");
+            break;
+        }
+        break;
+      case "content_block_delta":
+        switch (event.delta.type) {
+          case "compaction_delta":
+            console.log(`Compaction complete: ${event.delta.content?.length ?? 0} chars`);
+            break;
+          case "text_delta":
+            process.stdout.write(event.delta.text);
+            break;
+        }
+        break;
     }
   }
 
@@ -1935,6 +1949,13 @@ The compaction block streams differently from text blocks. You receive a `conten
   ```
 
   ```php PHP
+  use Anthropic\Beta\Messages\BetaCompactionBlock;
+  use Anthropic\Beta\Messages\BetaCompactionContentBlockDelta;
+  use Anthropic\Beta\Messages\BetaRawContentBlockDeltaEvent;
+  use Anthropic\Beta\Messages\BetaRawContentBlockStartEvent;
+  use Anthropic\Beta\Messages\BetaTextBlock;
+  use Anthropic\Beta\Messages\BetaTextDelta;
+
   $client = new Client();
   $messages = [['role' => 'user', 'content' => 'Hello, Claude']];
 
@@ -1951,18 +1972,27 @@ The compaction block streams differently from text blocks. You receive a `conten
   );
 
   foreach ($stream as $event) {
-      if ($event->type === 'content_block_start') {
-          if ($event->contentBlock->type === 'compaction') {
-              echo "Compaction started...\n";
-          } elseif ($event->contentBlock->type === 'text') {
-              echo "Text response started...\n";
-          }
-      } elseif ($event->type === 'content_block_delta') {
-          if ($event->delta->type === 'compaction_delta') {
-              echo "Compaction complete: " . strlen($event->delta->content ?? '') . " chars\n";
-          } elseif ($event->delta->type === 'text_delta') {
-              echo $event->delta->text;
-          }
+      switch (true) {
+          case $event instanceof BetaRawContentBlockStartEvent:
+              switch (true) {
+                  case $event->contentBlock instanceof BetaCompactionBlock:
+                      echo "Compaction started...\n";
+                      break;
+                  case $event->contentBlock instanceof BetaTextBlock:
+                      echo "Text response started...\n";
+                      break;
+              }
+              break;
+          case $event instanceof BetaRawContentBlockDeltaEvent:
+              switch (true) {
+                  case $event->delta instanceof BetaCompactionContentBlockDelta:
+                      echo "Compaction complete: " . strlen($event->delta->content ?? '') . " chars\n";
+                      break;
+                  case $event->delta instanceof BetaTextDelta:
+                      echo $event->delta->text;
+                      break;
+              }
+              break;
       }
   }
   ```
@@ -1982,18 +2012,21 @@ The compaction block streams differently from text blocks. You receive a `conten
   )
 
   stream.each do |event|
-    case event.type
-    when :content_block_start
-      if event.content_block.type == :compaction
+    case event
+    when Anthropic::Models::BetaRawContentBlockStartEvent
+      case event.content_block
+      when Anthropic::Models::BetaCompactionBlock
         puts "Compaction started..."
-      elsif event.content_block.type == :text
+      when Anthropic::Models::BetaTextBlock
         puts "Text response started..."
       end
-    when :content_block_delta
-      if event.delta.type == :compaction_delta
-        puts "Compaction complete: #{(event.delta.content || "").length} chars"
-      elsif event.delta.type == :text_delta
-        print event.delta.text
+    when Anthropic::Models::BetaRawContentBlockDeltaEvent
+      delta = event.delta
+      case delta
+      when Anthropic::Models::BetaCompactionContentBlockDelta
+        puts "Compaction complete: #{(delta.content || "").length} chars"
+      when Anthropic::Models::BetaTextDelta
+        print delta.text
       end
     end
   end
@@ -3421,10 +3454,11 @@ Send the `compact-2026-09-04` beta header on the request that asks for the summa
 
 ### Request a summary
 
-Send the conversation as it stands with `"compaction": {"type": "summarize"}`. The API summarizes every message in the request once, generates no reply after it, and returns the block alone with `stop_reason` `"compaction"`. Send the same `system` prompt and `tools` that you use for the rest of the conversation. The summarizer reads them, and on models with preserved thinking, the turns you keep stay valid only if they match:
+Send the conversation as it stands with `"compaction": {"type": "summarize"}`. The API summarizes every message in the request once, generates no reply after it, and returns the block alone with `stop_reason` `"compaction"`. Send the same `system` prompt and `tools` that you use for the rest of the conversation. The summarizer reads them, and on models with preserved thinking, the turns you keep stay valid only if they match. The conversation in this example has no `system` prompt or tools, so the request sends neither:
 
-<CodeGroup exclude="python, typescript, csharp, go, java, php, ruby">
+<CodeGroup>
   ```bash cURL
+  # max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
   curl https://api.anthropic.com/v1/messages \
     -H "x-api-key: $ANTHROPIC_API_KEY" \
     -H "anthropic-version: 2023-06-01" \
@@ -3450,6 +3484,7 @@ Send the conversation as it stands with `"compaction": {"type": "summarize"}`. T
     <File filename="request.yaml">
       ```yaml
       model: claude-opus-5
+      # max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
       max_tokens: 4096
       messages:
         - role: user
@@ -3463,6 +3498,206 @@ Send the conversation as it stands with `"compaction": {"type": "summarize"}`. T
       ```
     </File>
   </MultiFileExample>
+
+  ```python Python
+  from anthropic.types.beta import BetaMessageParam
+
+  client = anthropic.Anthropic()
+
+  history: list[BetaMessageParam] = [
+      {
+          "role": "user",
+          "content": "I am building a recipe app. Help me name the main entities in the data model.",
+      },
+      {
+          "role": "assistant",
+          "content": "Start with Recipe, Ingredient, and Step. Add a RecipeIngredient entry that holds the quantity and unit for each ingredient in a recipe.",
+      },
+      {"role": "user", "content": "Good. Now suggest field names for Recipe."},
+  ]
+
+  response = client.beta.messages.create(
+      model="claude-opus-5",
+      # max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
+      max_tokens=4096,
+      betas=["compact-2026-09-04"],
+      messages=history,
+      compaction={"type": "summarize"},
+  )
+  print(f"Stop reason: {response.stop_reason}")
+  ```
+
+  ```typescript TypeScript
+  const client = new Anthropic();
+
+  const history: Anthropic.Beta.Messages.BetaMessageParam[] = [
+    {
+      role: "user",
+      content: "I am building a recipe app. Help me name the main entities in the data model."
+    },
+    {
+      role: "assistant",
+      content:
+        "Start with Recipe, Ingredient, and Step. Add a RecipeIngredient entry that holds the quantity and unit for each ingredient in a recipe."
+    },
+    { role: "user", content: "Good. Now suggest field names for Recipe." }
+  ];
+
+  const response = await client.beta.messages.create({
+    model: "claude-opus-5",
+    // max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
+    max_tokens: 4096,
+    betas: ["compact-2026-09-04"],
+    messages: history,
+    compaction: { type: "summarize" }
+  });
+  console.log(`Stop reason: ${response.stop_reason}`);
+  ```
+
+  ```csharp C#
+  using Anthropic.Models.Beta;
+  using Anthropic.Models.Beta.Messages;
+  using Model = Anthropic.Models.Messages.Model;
+
+  AnthropicClient client = new();
+
+  List<BetaMessageParam> history =
+  [
+      new()
+      {
+          Role = Role.User,
+          Content = "I am building a recipe app. Help me name the main entities in the data model.",
+      },
+      new()
+      {
+          Role = Role.Assistant,
+          Content = "Start with Recipe, Ingredient, and Step. Add a RecipeIngredient entry that holds the quantity and unit for each ingredient in a recipe.",
+      },
+      new() { Role = Role.User, Content = "Good. Now suggest field names for Recipe." },
+  ];
+
+  var response = await client.Beta.Messages.Create(new MessageCreateParams
+  {
+      Model = Model.ClaudeOpus5,
+      // max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
+      MaxTokens = 4096,
+      Betas = [AnthropicBeta.Compact2026_09_04],
+      Messages = history,
+      Compaction = new BetaCompactionConfig(), // type defaults to "summarize"
+  });
+
+  Console.WriteLine($"Stop reason: {response.StopReason?.Raw()}");
+  ```
+
+  ```go Go
+  client := anthropic.NewClient()
+
+  history := []anthropic.BetaMessageParam{
+  	anthropic.NewBetaUserMessage(anthropic.NewBetaTextBlock("I am building a recipe app. Help me name the main entities in the data model.")),
+  	{
+  		Role:    anthropic.BetaMessageParamRoleAssistant,
+  		Content: []anthropic.BetaContentBlockParamUnion{anthropic.NewBetaTextBlock("Start with Recipe, Ingredient, and Step. Add a RecipeIngredient entry that holds the quantity and unit for each ingredient in a recipe.")},
+  	},
+  	anthropic.NewBetaUserMessage(anthropic.NewBetaTextBlock("Good. Now suggest field names for Recipe.")),
+  }
+
+  response, err := client.Beta.Messages.New(context.TODO(), anthropic.BetaMessageNewParams{
+  	Model: anthropic.ModelClaudeOpus5,
+  	// max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
+  	MaxTokens: 4096,
+  	Betas:     []anthropic.AnthropicBeta{anthropic.AnthropicBetaCompact2026_09_04},
+  	Messages:  history,
+  	Compaction: anthropic.BetaCompactionConfigUnionParam{
+  		OfSummarize: &anthropic.BetaSummarizeCompactionParam{},
+  	},
+  })
+  if err != nil {
+  	log.Fatal(err)
+  }
+  fmt.Println("Stop reason:", response.StopReason)
+  ```
+
+  ```java Java
+  import com.anthropic.models.beta.AnthropicBeta;
+  import com.anthropic.models.beta.messages.BetaCompactionConfig;
+  import com.anthropic.models.beta.messages.MessageCreateParams;
+
+  void main() {
+      var client = AnthropicOkHttpClient.fromEnv();
+
+      var params = MessageCreateParams.builder()
+          .model(Model.CLAUDE_OPUS_5)
+          // max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
+          .maxTokens(4096)
+          .addBeta(AnthropicBeta.COMPACT_2026_09_04)
+          .addUserMessage("I am building a recipe app. Help me name the main entities in the data model.")
+          .addAssistantMessage("Start with Recipe, Ingredient, and Step. Add a RecipeIngredient entry that holds the quantity and unit for each ingredient in a recipe.")
+          .addUserMessage("Good. Now suggest field names for Recipe.")
+          .compaction(BetaCompactionConfig.builder().build()) // type defaults to "summarize"
+          .build();
+
+      var response = client.beta().messages().create(params);
+      response.stopReason().ifPresent(reason -> IO.println("Stop reason: " + reason));
+  }
+  ```
+
+  ```php PHP
+  use Anthropic\Beta\AnthropicBeta;
+  use Anthropic\Beta\Messages\BetaCompactionConfig;
+  use Anthropic\Beta\Messages\BetaMessageParam;
+  use Anthropic\Beta\Messages\BetaMessageParam\Role;
+
+  $client = new Client();
+
+  $history = [
+      BetaMessageParam::with(
+          role: Role::USER,
+          content: 'I am building a recipe app. Help me name the main entities in the data model.',
+      ),
+      BetaMessageParam::with(
+          role: Role::ASSISTANT,
+          content: 'Start with Recipe, Ingredient, and Step. Add a RecipeIngredient entry that holds the quantity and unit for each ingredient in a recipe.',
+      ),
+      BetaMessageParam::with(role: Role::USER, content: 'Good. Now suggest field names for Recipe.'),
+  ];
+
+  $response = $client->beta->messages->create(
+      model: Model::CLAUDE_OPUS_5,
+      // max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
+      maxTokens: 4096,
+      betas: [AnthropicBeta::COMPACT_2026_09_04],
+      messages: $history,
+      compaction: BetaCompactionConfig::with(), // type defaults to 'summarize'
+  );
+
+  echo "Stop reason: {$response->stopReason}", PHP_EOL;
+  ```
+
+  ```ruby Ruby
+  client = Anthropic::Client.new
+
+  history = [
+    {
+      role: "user",
+      content: "I am building a recipe app. Help me name the main entities in the data model."
+    },
+    {
+      role: "assistant",
+      content: "Start with Recipe, Ingredient, and Step. Add a RecipeIngredient entry that holds the quantity and unit for each ingredient in a recipe."
+    },
+    { role: "user", content: "Good. Now suggest field names for Recipe." }
+  ]
+
+  response = client.beta.messages.create(
+    model: Anthropic::Model::CLAUDE_OPUS_5,
+    # max_tokens caps the whole call, including any thinking, so allow several thousand tokens.
+    max_tokens: 4096,
+    betas: [Anthropic::AnthropicBeta::COMPACT_2026_09_04],
+    messages: history,
+    compaction: { type: "summarize" }
+  )
+  puts "Stop reason: #{response.stop_reason}"
+  ```
 </CodeGroup>
 
 ```json Response
diff --git a/content/en/build-with-claude/extended-thinking.md b/content/en/build-with-claude/extended-thinking.md
index 0aa874fd7b..141b7da919 100644
--- a/content/en/build-with-claude/extended-thinking.md
+++ b/content/en/build-with-claude/extended-thinking.md
@@ -110,10 +110,13 @@ Here is an example of using extended thinking in the Messages API:
 
   // The response contains summarized thinking blocks and text blocks
   for (const block of response.content) {
-    if (block.type === "thinking") {
-      console.log(`\nThinking summary: ${block.thinking}`);
-    } else if (block.type === "text") {
-      console.log(`\nResponse: ${block.text}`);
+    switch (block.type) {
+      case "thinking":
+        console.log(`\nThinking summary: ${block.thinking}`);
+        break;
+      case "text":
+        console.log(`\nResponse: ${block.text}`);
+        break;
     }
   }
   ```
@@ -222,9 +225,9 @@ Here is an example of using extended thinking in the Messages API:
 
   // The response contains summarized thinking blocks and text blocks
   foreach ($response->content as $block) {
-      echo match ($block->type) {
-          'thinking' => "\nThinking summary: {$block->thinking}",
-          'text' => "\nResponse: {$block->text}",
+      echo match (true) {
+          $block instanceof \Anthropic\Messages\ThinkingBlock => "\nThinking summary: {$block->thinking}",
+          $block instanceof \Anthropic\Messages\TextBlock => "\nResponse: {$block->text}",
           default => '',
       };
   }
@@ -251,11 +254,10 @@ Here is an example of using extended thinking in the Messages API:
   # The response contains summarized thinking blocks and text blocks
   response.content.each do |block|
     case block
-    in {type: :thinking, thinking:}
-      puts "\nThinking summary: #{thinking}"
-    in {type: :text, text:}
-      puts "\nResponse: #{text}"
-    else
+    when Anthropic::Models::ThinkingBlock
+      puts "\nThinking summary: #{block.thinking}"
+    when Anthropic::Models::TextBlock
+      puts "\nResponse: #{block.text}"
     end
   end
   ```
diff --git a/content/en/build-with-claude/handling-stop-reasons.md b/content/en/build-with-claude/handling-stop-reasons.md
index de15f26749..f11473635c 100644
--- a/content/en/build-with-claude/handling-stop-reasons.md
+++ b/content/en/build-with-claude/handling-stop-reasons.md
@@ -2078,21 +2078,23 @@ Make it a habit to check the `stop_reason` in your response handling logic:
 <CodeGroup exclude="shell">
   ```python Python
   def handle_response(response):
-      if response.stop_reason == "tool_use":
-          return handle_tool_use(response)
-      elif response.stop_reason == "max_tokens":
-          return handle_truncation(response)
-      elif response.stop_reason == "model_context_window_exceeded":
-          return handle_context_limit(response)
-      elif response.stop_reason == "pause_turn":
-          return handle_pause(response)
-      elif response.stop_reason == "refusal":
-          return handle_refusal(response)
-      else:
-          # Handle end_turn and other cases
-          return next(
-              (block.text for block in response.content if block.type == "text"), ""
-          )
+      match response.stop_reason:
+          case "tool_use":
+              return handle_tool_use(response)
+          case "max_tokens":
+              return handle_truncation(response)
+          case "model_context_window_exceeded":
+              return handle_context_limit(response)
+          case "pause_turn":
+              return handle_pause(response)
+          case "refusal":
+              return handle_refusal(response)
+          case _:
+              # Handle end_turn and other cases
+              return next(
+                  (block.text for block in response.content if block.type == "text"),
+                  "",
+              )
   ```
 
   ```typescript TypeScript
@@ -2653,10 +2655,11 @@ It's important to distinguish between `stop_reason` values and actual errors:
 
   except anthropic.APIStatusError as e:
       # Handle actual errors
-      if e.status_code == 429:
-          print("Rate limit exceeded")
-      elif e.status_code == 500:
-          print("Server error")
+      match e.status_code:
+          case 429:
+              print("Rate limit exceeded")
+          case 500:
+              print("Server error")
   ```
 
   ```typescript TypeScript
@@ -2676,10 +2679,13 @@ It's important to distinguish between `stop_reason` values and actual errors:
   } catch (err) {
     // Handle actual errors
     if (err instanceof Anthropic.APIError) {
-      if (err.status === 429) {
-        console.log("Rate limit exceeded");
-      } else if (err.status === 500) {
-        console.log("Server error");
+      switch (err.status) {
+        case 429:
+          console.log("Rate limit exceeded");
+          break;
+        case 500:
+          console.log("Server error");
+          break;
       }
     } else {
       throw err;
@@ -2959,7 +2965,7 @@ When using streaming, `stop_reason` is:
   );
 
   foreach ($stream as $event) {
-      if ($event instanceof RawMessageDeltaEvent && $event->delta->stopReason !== null) {
+      if ($event instanceof \Anthropic\Messages\RawMessageDeltaEvent && $event->delta->stopReason !== null) {
           echo "Stream ended with: {$event->delta->stopReason}", PHP_EOL;
       }
   }
@@ -3458,17 +3464,22 @@ With the `model_context_window_exceeded` stop reason, you can request the maximu
           max_tokens=20000,  # Python SDK requires streaming for max_tokens above ~21k
       )
 
-      if response.stop_reason == "model_context_window_exceeded":
-          # Got the maximum possible tokens given input size
-          print(
-              f"Generated {response.usage.output_tokens} tokens (context limit reached)"
-          )
-      elif response.stop_reason == "max_tokens":
-          # Got exactly the requested tokens
-          print(f"Generated {response.usage.output_tokens} tokens (max_tokens reached)")
-      else:
-          # Natural completion
-          print(f"Generated {response.usage.output_tokens} tokens (natural completion)")
+      match response.stop_reason:
+          case "model_context_window_exceeded":
+              # Got the maximum possible tokens given input size
+              print(
+                  f"Generated {response.usage.output_tokens} tokens (context limit reached)"
+              )
+          case "max_tokens":
+              # Got exactly the requested tokens
+              print(
+                  f"Generated {response.usage.output_tokens} tokens (max_tokens reached)"
+              )
+          case _:
+              # Natural completion
+              print(
+                  f"Generated {response.usage.output_tokens} tokens (natural completion)"
+              )
 
       return next((block.text for block in response.content if block.type == "text"), "")
   ```
@@ -3482,15 +3493,18 @@ With the `model_context_window_exceeded` stop reason, you can request the maximu
     });
 
     const tokens = response.usage.output_tokens;
-    if (response.stop_reason === "model_context_window_exceeded") {
-      // Got the maximum possible tokens given input size
-      console.log(`Generated ${tokens} tokens (context limit reached)`);
-    } else if (response.stop_reason === "max_tokens") {
-      // Got exactly the requested tokens
-      console.log(`Generated ${tokens} tokens (max_tokens reached)`);
-    } else {
-      // Natural completion
-      console.log(`Generated ${tokens} tokens (natural completion)`);
+    switch (response.stop_reason) {
+      case "model_context_window_exceeded":
+        // Got the maximum possible tokens given input size
+        console.log(`Generated ${tokens} tokens (context limit reached)`);
+        break;
+      case "max_tokens":
+        // Got exactly the requested tokens
+        console.log(`Generated ${tokens} tokens (max_tokens reached)`);
+        break;
+      default:
+        // Natural completion
+        console.log(`Generated ${tokens} tokens (natural completion)`);
     }
 
     const textBlock = response.content.find(
diff --git a/content/en/build-with-claude/mid-conversation-effort-example.md b/content/en/build-with-claude/mid-conversation-effort-example.md
index 6b5029b7d5..e38199746b 100644
--- a/content/en/build-with-claude/mid-conversation-effort-example.md
+++ b/content/en/build-with-claude/mid-conversation-effort-example.md
@@ -247,7 +247,6 @@ The example is a single file. The constants control the effort level, the fan-ou
 
   ```php PHP
   use Anthropic\Client;
-  use Anthropic\Messages\TextBlock;
   use Anthropic\Messages\ToolUseBlock;
 
   $client = new Client();
@@ -1413,15 +1412,15 @@ The bash handler runs the requested command with a timeout, captures combined st
   # so reshape each block to the request schema before echoing it back.
   def assistant_content_param(content)
     content.map do |block|
-      case block.type
-      when :tool_use
+      case block
+      when Anthropic::Models::ToolUseBlock
         input = parse_tool_input(block.input)
         {type: "tool_use", id: block.id, name: block.name, input: input}
-      when :text
+      when Anthropic::Models::TextBlock
         {type: "text", text: block.text}
-      when :thinking
+      when Anthropic::Models::ThinkingBlock
         {type: "thinking", thinking: block.thinking, signature: block.signature}
-      when :redacted_thinking then {type: "redacted_thinking", data: block.data}
+      when Anthropic::Models::RedactedThinkingBlock then {type: "redacted_thinking", data: block.data}
       else
         block.to_h
       end
@@ -1469,13 +1468,14 @@ Each workflow subtask becomes its own small agent loop with the bash tool, runni
           for block in response.content:
               if block.type != "tool_use":
                   continue
-              if block.name == "report_findings":
-                  report = json.dumps(block.input, indent=2)
-                  output, is_error = "Findings recorded.", False
-              elif block.name == "bash":
-                  output, is_error = handle_bash_block(block)
-              else:
-                  output, is_error = f"unknown tool: {block.name}", True
+              match block.name:
+                  case "report_findings":
+                      report = json.dumps(block.input, indent=2)
+                      output, is_error = "Findings recorded.", False
+                  case "bash":
+                      output, is_error = handle_bash_block(block)
+                  case _:
+                      output, is_error = f"unknown tool: {block.name}", True
               tool_results.append(
                   {
                       "type": "tool_result",
@@ -1535,15 +1535,18 @@ Each workflow subtask becomes its own small agent loop with the bash tool, runni
         }
         let output: string;
         let isError: boolean;
-        if (block.name === "report_findings") {
-          report = JSON.stringify(block.input, null, 2);
-          output = "Findings recorded.";
-          isError = false;
-        } else if (block.name === "bash") {
-          ({ output, isError } = await handleBashBlock(block));
-        } else {
-          output = `unknown tool: ${block.name}`;
-          isError = true;
+        switch (block.name) {
+          case "report_findings":
+            report = JSON.stringify(block.input, null, 2);
+            output = "Findings recorded.";
+            isError = false;
+            break;
+          case "bash":
+            ({ output, isError } = await handleBashBlock(block));
+            break;
+          default:
+            output = `unknown tool: ${block.name}`;
+            isError = true;
         }
         toolResults.push({
           type: "tool_result",
@@ -1832,7 +1835,7 @@ Each workflow subtask becomes its own small agent loop with the bash tool, runni
           }
       }
       foreach ($jsonBuffers as $index => $buffer) {
-          if ($buffer !== '' && $blocks[$index] instanceof ToolUseBlock) {
+          if ($buffer !== '' && $blocks[$index] instanceof \Anthropic\Messages\ToolUseBlock) {
               $decoded = json_decode($buffer, true);
               $blocks[$index] = $blocks[$index]->withInput(is_array($decoded) ? $decoded : []);
           }
@@ -1869,7 +1872,7 @@ Each workflow subtask becomes its own small agent loop with the bash tool, runni
           if ($stopReason !== 'tool_use') {
               $text = '';
               foreach ($content as $block) {
-                  if ($block instanceof TextBlock) {
+                  if ($block instanceof \Anthropic\Messages\TextBlock) {
                       $text .= $block->text;
                   }
               }
@@ -1881,7 +1884,7 @@ Each workflow subtask becomes its own small agent loop with the bash tool, runni
           $report = null;
           $toolResults = [];
           foreach ($content as $block) {
-              if (!$block instanceof ToolUseBlock) {
+              if (!$block instanceof \Anthropic\Messages\ToolUseBlock) {
                   continue;
               }
               if ($block->name === 'report_findings') {
@@ -3024,12 +3027,13 @@ The agent appends the user's message first, then any system messages that are du
               for block in response.content:
                   if block.type != "tool_use":
                       continue
-                  if block.name == "Workflow":
-                      output, is_error = run_workflow(self.model, block.input.get("subtasks", []))
-                  elif block.name == "bash":
-                      output, is_error = handle_bash_block(block)
-                  else:
-                      output, is_error = f"unknown tool: {block.name}", True
+                  match block.name:
+                      case "Workflow":
+                          output, is_error = run_workflow(self.model, block.input.get("subtasks", []))
+                      case "bash":
+                          output, is_error = handle_bash_block(block)
+                      case _:
+                          output, is_error = f"unknown tool: {block.name}", True
                   tool_results.append(
                       {
                           "type": "tool_result",
@@ -3142,14 +3146,18 @@ The agent appends the user's message first, then any system messages that are du
           }
           let output: string;
           let isError: boolean;
-          if (block.name === "Workflow") {
-            const input = block.input as { subtasks?: unknown };
-            ({ output, isError } = await runWorkflow(this.model, input.subtasks ?? []));
-          } else if (block.name === "bash") {
-            ({ output, isError } = await handleBashBlock(block));
-          } else {
-            output = `unknown tool: ${block.name}`;
-            isError = true;
+          switch (block.name) {
+            case "Workflow": {
+              const input = block.input as { subtasks?: unknown };
+              ({ output, isError } = await runWorkflow(this.model, input.subtasks ?? []));
+              break;
+            }
+            case "bash":
+              ({ output, isError } = await handleBashBlock(block));
+              break;
+            default:
+              output = `unknown tool: ${block.name}`;
+              isError = true;
           }
           toolResults.push({
             type: "tool_result",
@@ -3642,7 +3650,7 @@ The agent appends the user's message first, then any system messages that are du
               if ($stopReason !== 'tool_use') {
                   $text = '';
                   foreach ($content as $block) {
-                      if ($block instanceof TextBlock) {
+                      if ($block instanceof \Anthropic\Messages\TextBlock) {
                           $text .= $block->text;
                       }
                   }
@@ -3656,7 +3664,7 @@ The agent appends the user's message first, then any system messages that are du
 
               $toolResults = [];
               foreach ($content as $block) {
-                  if (!$block instanceof ToolUseBlock) {
+                  if (!$block instanceof \Anthropic\Messages\ToolUseBlock) {
                       continue;
                   }
                   if ($block->name === 'Workflow') {
diff --git a/content/en/build-with-claude/streaming.md b/content/en/build-with-claude/streaming.md
index 1bebd5bbb2..1af90e4aeb 100644
--- a/content/en/build-with-claude/streaming.md
+++ b/content/en/build-with-claude/streaming.md
@@ -1013,10 +1013,12 @@ This request enables thinking with streaming. The `display: "summarized"` settin
   ) as stream:
       for event in stream:
           if event.type == "content_block_delta":
-              if event.delta.type == "thinking_delta":
-                  print(event.delta.thinking, end="", flush=True)
-              elif event.delta.type == "text_delta":
-                  print(event.delta.text, end="", flush=True)
+              delta = event.delta
+              match delta.type:
+                  case "thinking_delta":
+                      print(delta.thinking, end="", flush=True)
+                  case "text_delta":
+                      print(delta.text, end="", flush=True)
   ```
 
   ```typescript TypeScript
@@ -1036,10 +1038,13 @@ This request enables thinking with streaming. The `display: "summarized"` settin
 
   for await (const event of stream) {
     if (event.type === "content_block_delta") {
-      if (event.delta.type === "thinking_delta") {
-        process.stdout.write(event.delta.thinking);
-      } else if (event.delta.type === "text_delta") {
-        process.stdout.write(event.delta.text);
+      switch (event.delta.type) {
+        case "thinking_delta":
+          process.stdout.write(event.delta.thinking);
+          break;
+        case "text_delta":
+          process.stdout.write(event.delta.text);
+          break;
       }
     }
   }
@@ -1154,11 +1159,13 @@ This request enables thinking with streaming. The `display: "summarized"` settin
   )
 
   stream.each do |event|
-    if event.type == :content_block_delta
-      if event.delta.type == :thinking_delta
-        print(event.delta.thinking)
-      elsif event.delta.type == :text_delta
-        print(event.delta.text)
+    if event.is_a?(Anthropic::Models::RawContentBlockDeltaEvent)
+      delta = event.delta
+      case delta
+      when Anthropic::Models::ThinkingDelta
+        print(delta.thinking)
+      when Anthropic::Models::TextDelta
+        print(delta.text)
       end
     end
   end
diff --git a/content/en/build-with-claude/structured-outputs.md b/content/en/build-with-claude/structured-outputs.md
index fafa2311aa..9fcbb8b428 100644
--- a/content/en/build-with-claude/structured-outputs.md
+++ b/content/en/build-with-claude/structured-outputs.md
@@ -2546,10 +2546,13 @@ When combined, Claude can call tools with guaranteed-valid parameters AND return
   // Claude may call the tool first (tool_use) or respond with JSON (text)
   console.log("Stop reason:", response.stop_reason);
   for (const block of response.content) {
-    if (block.type === "tool_use") {
-      console.log(`Tool call: ${block.name}(${JSON.stringify(block.input)})`);
-    } else if (block.type === "text") {
-      console.log("Response:", block.text);
+    switch (block.type) {
+      case "tool_use":
+        console.log(`Tool call: ${block.name}(${JSON.stringify(block.input)})`);
+        break;
+      case "text":
+        console.log("Response:", block.text);
+        break;
     }
   }
   ```
diff --git a/content/en/build-with-claude/thinking.md b/content/en/build-with-claude/thinking.md
index 6973efb322..05b5c12253 100644
--- a/content/en/build-with-claude/thinking.md
+++ b/content/en/build-with-claude/thinking.md
@@ -98,10 +98,11 @@ On Claude Opus 4.8, Claude Opus 4.7, Claude Opus 4.6, and Claude Sonnet 4.6, thi
   )
 
   for block in response.content:
-      if block.type == "thinking":
-          print(f"\nThinking: {block.thinking}")
-      elif block.type == "text":
-          print(f"\nResponse: {block.text}")
+      match block.type:
+          case "thinking":
+              print(f"\nThinking: {block.thinking}")
+          case "text":
+              print(f"\nResponse: {block.text}")
   ```
 
   ```typescript TypeScript
@@ -123,10 +124,13 @@ On Claude Opus 4.8, Claude Opus 4.7, Claude Opus 4.6, and Claude Sonnet 4.6, thi
   });
 
   for (const block of response.content) {
-    if (block.type === "thinking") {
-      console.log(`\nThinking: ${block.thinking}`);
-    } else if (block.type === "text") {
-      console.log(`\nResponse: ${block.text}`);
+    switch (block.type) {
+      case "thinking":
+        console.log(`\nThinking: ${block.thinking}`);
+        break;
+      case "text":
+        console.log(`\nResponse: ${block.text}`);
+        break;
     }
   }
   ```
@@ -220,6 +224,9 @@ On Claude Opus 4.8, Claude Opus 4.7, Claude Opus 4.6, and Claude Sonnet 4.6, thi
   ```
 
   ```php PHP
+  use Anthropic\Messages\TextBlock;
+  use Anthropic\Messages\ThinkingBlock;
+
   $client = new Client();
 
   $message = $client->messages->create(
@@ -235,10 +242,13 @@ On Claude Opus 4.8, Claude Opus 4.7, Claude Opus 4.6, and Claude Sonnet 4.6, thi
   );
 
   foreach ($message->content as $block) {
-      if ($block->type === 'thinking') {
-          echo "\nThinking: " . $block->thinking;
-      } elseif ($block->type === 'text') {
-          echo "\nResponse: " . $block->text;
+      switch (true) {
+          case $block instanceof ThinkingBlock:
+              echo "\nThinking: " . $block->thinking;
+              break;
+          case $block instanceof TextBlock:
+              echo "\nResponse: " . $block->text;
+              break;
       }
   }
   ```
@@ -262,10 +272,10 @@ On Claude Opus 4.8, Claude Opus 4.7, Claude Opus 4.6, and Claude Sonnet 4.6, thi
   )
 
   message.content.each do |block|
-    case block.type
-    when :thinking
+    case block
+    when Anthropic::Models::ThinkingBlock
       puts "\nThinking: #{block.thinking}"
-    when :text
+    when Anthropic::Models::TextBlock
       puts "\nResponse: #{block.text}"
     end
   end
@@ -552,13 +562,16 @@ The following examples stream a response with adaptive thinking, printing thinki
       ],
   ) as stream:
       for event in stream:
-          if event.type == "content_block_start":
-              print(f"\nStarting {event.content_block.type} block...")
-          elif event.type == "content_block_delta":
-              if event.delta.type == "thinking_delta":
-                  print(event.delta.thinking, end="", flush=True)
-              elif event.delta.type == "text_delta":
-                  print(event.delta.text, end="", flush=True)
+          match event.type:
+              case "content_block_start":
+                  print(f"\nStarting {event.content_block.type} block...")
+              case "content_block_delta":
+                  delta = event.delta
+                  match delta.type:
+                      case "thinking_delta":
+                          print(delta.thinking, end="", flush=True)
+                      case "text_delta":
+                          print(delta.text, end="", flush=True)
   ```
 
   ```typescript TypeScript
@@ -572,14 +585,20 @@ The following examples stream a response with adaptive thinking, printing thinki
   });
 
   for await (const event of stream) {
-    if (event.type === "content_block_start") {
-      console.log(`\nStarting ${event.content_block.type} block...`);
-    } else if (event.type === "content_block_delta") {
-      if (event.delta.type === "thinking_delta") {
-        process.stdout.write(event.delta.thinking);
-      } else if (event.delta.type === "text_delta") {
-        process.stdout.write(event.delta.text);
-      }
+    switch (event.type) {
+      case "content_block_start":
+        console.log(`\nStarting ${event.content_block.type} block...`);
+        break;
+      case "content_block_delta":
+        switch (event.delta.type) {
+          case "thinking_delta":
+            process.stdout.write(event.delta.thinking);
+            break;
+          case "text_delta":
+            process.stdout.write(event.delta.text);
+            break;
+        }
+        break;
     }
   }
   ```
@@ -667,22 +686,24 @@ The following examples stream a response with adaptive thinking, printing thinki
 
       try (var streamResponse = client.messages().createStreaming(params)) {
           streamResponse.stream().forEach(event -> {
-              if (event.contentBlockStart().isPresent()) {
-                  var startEvent = event.contentBlockStart().get();
-                  var block = startEvent.contentBlock();
-                  if (block.isThinking()) {
-                      IO.println("\nStarting thinking block...");
-                  } else if (block.isText()) {
-                      IO.println("\nStarting text block...");
+              switch (event.type().value()) {
+                  case CONTENT_BLOCK_START -> {
+                      var startEvent = event.asContentBlockStart();
+                      var block = startEvent.contentBlock();
+                      switch (block.type().value()) {
+                          case THINKING -> IO.println("\nStarting thinking block...");
+                          case TEXT -> IO.println("\nStarting text block...");
+                      }
+                  }
+                  case CONTENT_BLOCK_DELTA -> {
+                      var deltaEvent = event.asContentBlockDelta();
+                      deltaEvent.delta().thinking().ifPresent(td ->
+                          IO.print(td.thinking())
+                      );
+                      deltaEvent.delta().text().ifPresent(td ->
+                          IO.print(td.text())
+                      );
                   }
-              } else if (event.contentBlockDelta().isPresent()) {
-                  var deltaEvent = event.contentBlockDelta().get();
-                  deltaEvent.delta().thinking().ifPresent(td ->
-                      IO.print(td.thinking())
-                  );
-                  deltaEvent.delta().text().ifPresent(td ->
-                      IO.print(td.text())
-                  );
               }
           });
       }
@@ -690,6 +711,11 @@ The following examples stream a response with adaptive thinking, printing thinki
   ```
 
   ```php PHP
+  use Anthropic\Messages\RawContentBlockDeltaEvent;
+  use Anthropic\Messages\RawContentBlockStartEvent;
+  use Anthropic\Messages\TextDelta;
+  use Anthropic\Messages\ThinkingDelta;
+
   $client = new Client();
 
   $stream = $client->messages->createStream(
@@ -702,14 +728,20 @@ The following examples stream a response with adaptive thinking, printing thinki
   );
 
   foreach ($stream as $event) {
-      if ($event->type === 'content_block_start') {
-          echo "\nStarting {$event->contentBlock->type} block...\n";
-      } elseif ($event->type === 'content_block_delta') {
-          if ($event->delta->type === 'thinking_delta') {
-              echo $event->delta->thinking;
-          } elseif ($event->delta->type === 'text_delta') {
-              echo $event->delta->text;
-          }
+      switch (true) {
+          case $event instanceof RawContentBlockStartEvent:
+              echo "\nStarting {$event->contentBlock->type} block...\n";
+              break;
+          case $event instanceof RawContentBlockDeltaEvent:
+              switch (true) {
+                  case $event->delta instanceof ThinkingDelta:
+                      echo $event->delta->thinking;
+                      break;
+                  case $event->delta instanceof TextDelta:
+                      echo $event->delta->text;
+                      break;
+              }
+              break;
       }
   }
   ```
@@ -1131,22 +1163,23 @@ You can't prefill the assistant response while thinking is on. Forced tool use (
 
 Each model accepts `max_tokens` up to the ceiling listed here. On the [Message Batches API](https://platform.claude.com/docs/en/build-with-claude/batch-processing#extended-output-beta), the `output-300k-2026-03-24` [beta header](https://platform.claude.com/docs/en/api/beta-headers) raises that ceiling for the models with a batches ceiling listed.
 
-| Model                 | Max output tokens | Batches beta ceiling |
-| --------------------- | ----------------- | -------------------- |
-| Claude Fable 5.1      | 128k              | —                    |
-| Claude Mythos 5.1     | 128k              | —                    |
-| Claude Fable 5        | 128k              | —                    |
-| Claude Mythos 5       | 128k              | —                    |
-| Claude Mythos Preview | 128k              | Not available        |
-| Claude Opus 5         | 128k              | 300k                 |
-| Claude Opus 4.8       | 128k              | 300k                 |
-| Claude Opus 4.7       | 128k              | 300k                 |
-| Claude Sonnet 5       | 128k              | 300k                 |
-| Claude Opus 4.6       | 128k              | 300k                 |
-| Claude Sonnet 4.6     | 128k              | 300k                 |
-| Claude Haiku 4.5      | 64k               | Not available        |
-| Claude Sonnet 4.5     | 64k               | Not available        |
-| Claude Opus 4.5       | 64k               | Not available        |
+| Model             | Max output tokens | Batches beta ceiling |
+| :---------------- | :---------------- | :------------------- |
+| Claude Fable 5.1  | 128K              | —                    |
+| Claude Mythos 5.1 | 128K              | —                    |
+| Claude Fable 5    | 128K              | —                    |
+| Claude Mythos 5   | 128K              | —                    |
+| Claude Opus 5     | 128K              | 300K                 |
+| Claude Opus 4.8   | 128K              | 300K                 |
+| Claude Opus 4.7   | 128K              | 300K                 |
+| Claude Opus 4.6   | 128K              | 300K                 |
+| Claude Opus 4.5   | 64K               | Not available        |
+| Claude Sonnet 5   | 128K              | 300K                 |
+| Claude Sonnet 4.6 | 128K              | 300K                 |
+| Claude Sonnet 4.5 | 64K               | Not available        |
+| Claude Haiku 4.5  | 64K               | Not available        |
+
+[Claude Mythos Preview](https://anthropic.com/glasswing) accepts `max_tokens` up to 128K; the Batches beta ceiling is not available for it.
 
 See the [models overview](https://platform.claude.com/docs/en/models/overview) for limits on legacy models.
 
diff --git a/content/en/claude_api_primer.md b/content/en/claude_api_primer.md
index 09814b96bf..a14ff66199 100644
--- a/content/en/claude_api_primer.md
+++ b/content/en/claude_api_primer.md
@@ -294,10 +294,11 @@ When thinking is on, Claude creates `thinking` content blocks where it outputs i
 
   # The response contains summarized thinking blocks and text blocks
   for block in response.content:
-      if block.type == "thinking":
-          print(f"\nThinking summary: {block.thinking}")
-      elif block.type == "text":
-          print(f"\nResponse: {block.text}")
+      match block.type:
+          case "thinking":
+              print(f"\nThinking summary: {block.thinking}")
+          case "text":
+              print(f"\nResponse: {block.text}")
   ```
 </CodeGroup>
 
@@ -530,12 +531,13 @@ On older models that use manual extended thinking (Claude 4, 4.5, and Sonnet 4.6
   )
 
   for block in response.content:
-      if block.type == "thinking":
-          print(f"Thinking: {block.thinking}")
-      elif block.type == "tool_use":
-          print(f"Tool call: {block.name}({block.input})")
-      elif block.type == "text":
-          print(f"Response: {block.text}")
+      match block.type:
+          case "thinking":
+              print(f"Thinking: {block.thinking}")
+          case "tool_use":
+              print(f"Tool call: {block.name}({block.input})")
+          case "text":
+              print(f"Response: {block.text}")
   ```
 </CodeGroup>
 
diff --git a/content/en/cli-sdks-libraries/sdks/java.md b/content/en/cli-sdks-libraries/sdks/java.md
index 409a2eb73d..8d01049211 100644
--- a/content/en/cli-sdks-libraries/sdks/java.md
+++ b/content/en/cli-sdks-libraries/sdks/java.md
@@ -15,7 +15,7 @@ The Anthropic Java SDK provides convenient access to the Claude API from applica
 <Tabs>
   <Tab title="Gradle">
     ```kotlin
-    implementation("com.anthropic:anthropic-java:2.60.0")
+    implementation("com.anthropic:anthropic-java:2.63.0")
     ```
   </Tab>
 
@@ -24,7 +24,7 @@ The Anthropic Java SDK provides convenient access to the Claude API from applica
     <dependency>
         <groupId>com.anthropic</groupId>
         <artifactId>anthropic-java</artifactId>
-        <version>2.60.0</version>
+        <version>2.63.0</version>
     </dependency>
     ```
   </Tab>
@@ -1084,7 +1084,7 @@ The Java SDK supports the following platforms through separate dependencies that
 
 Use `BedrockMantleBackend` for new projects; `BedrockBackend` remains for existing applications using the Bedrock `InvokeModel` API.
 
-Each `Backend` implementation is passed to the client with `.backend()` on `AnthropicOkHttpClient.builder()`. Each cloud backend pulls in its respective cloud-platform SDK classes as transitive dependencies.
+The platform artifacts are add-ons to the base `com.anthropic:anthropic-java` dependency, which provides `AnthropicOkHttpClient`, so install both. Each `Backend` implementation is passed to the client with `.backend()` on `AnthropicOkHttpClient.builder()`. Each cloud backend pulls in its respective cloud-platform SDK classes as transitive dependencies.
 
 ## Advanced usage
 
diff --git a/content/en/docs/claude-code/accessibility.md b/content/en/docs/claude-code/accessibility.md
index a8c2dabf54..1c025c8027 100644
--- a/content/en/docs/claude-code/accessibility.md
+++ b/content/en/docs/claude-code/accessibility.md
@@ -10,8 +10,6 @@ Claude Code has a screen reader mode that replaces its visual terminal interface
 
 Screen reader mode is opt-in. If you use a screen magnifier, reduced motion, or a colorblind-friendly theme instead of a screen reader, set `CLAUDE_CODE_ACCESSIBILITY`, `prefersReducedMotion`, or `theme` from the [Accessibility settings](#accessibility-settings) table. Screen reader mode adapts the terminal interface only, so you don't need it in the VS Code extension's chat panel. On Claude Code v2.1.236 or later, the extension [announces conversation activity to your screen reader](/docs/en/vs-code#use-a-screen-reader) there without any setting.
 
-Screen reader mode requires Claude Code v2.1.181 or later. Earlier versions reject the `--ax-screen-reader` flag with `error: unknown option '--ax-screen-reader'`.
-
 ## Turn on screen reader mode
 
 Pick the method that matches how often you use a screen reader:
diff --git a/content/en/docs/claude-code/agent-sdk/mcp.md b/content/en/docs/claude-code/agent-sdk/mcp.md
index e29f3e05c0..b592bfcc84 100644
--- a/content/en/docs/claude-code/agent-sdk/mcp.md
+++ b/content/en/docs/claude-code/agent-sdk/mcp.md
@@ -146,7 +146,7 @@ Create a `.mcp.json` file at your project root. The file is picked up when the `
 
 ## Connection timing
 
-Claude Code registers the servers you pass in `options.mcpServers` at startup and emits the [init message](#error-handling) once the first-turn wait, if any, resolves. Without `options.mcpServers`, Claude Code waits 2 seconds for pending servers before the first turn, so servers loaded from [settings files](#from-a-config-file) such as `.mcp.json` commonly show `pending` at init. When each `options.mcpServers` server connects, and whether it delays the first turn, depends on its type:
+Claude Code registers the servers you pass in `options.mcpServers` at startup and emits the [init message](#error-handling) once the first-turn wait, if any, resolves. Whether each `options.mcpServers` server delays the first turn, and when it connects, depends on its type:
 
 | Server type                                                                            | Delays the first turn?                                 | First-turn wait timeout                                                                     |
 | :------------------------------------------------------------------------------------- | :----------------------------------------------------- | :------------------------------------------------------------------------------------------ |
@@ -154,6 +154,17 @@ Claude Code registers the servers you pass in `options.mcpServers` at startup an
 | Remote server with a cached tool list, saved by Claude Code from a previous connection | No; the cached tools are available from the first turn | None; connects on its first tool call, and that deferred connect has its own timeout        |
 | In-process [SDK server](#sdk-mcp-servers)                                              | Yes, until it connects and lists its tools             | None; the connect and tool listing requests each have their own timeout                     |
 
+Servers loaded from [settings files](#from-a-config-file) such as `.mcp.json` or from plugins commonly show `pending` in the init message. When `options.mcpServers` holds a stdio, HTTP, or SSE server, the first turn waits for these pending servers too, up to `MCP_TIMEOUT`. When `options.mcpServers` is empty or holds only SDK servers, the first turn waits up to 2 seconds instead:
+
+* **With [tool search](/docs/en/agent-sdk/tool-search), the default**: the wait covers still-pending servers configured with [`alwaysLoad: true`](/docs/en/mcp#exempt-a-server-from-deferral) and not the rest. The rest keep connecting in the background. [Tool availability](/docs/en/mcp#tool-availability) describes how Claude reaches their tools once they connect.
+* **Without tool search**: the wait covers every pending server. [Configure tool search](/docs/en/agent-sdk/tool-search#configure-tool-search) covers what turns tool search off. If you exclude the `ToolSearch` tool from the session, for example through `disallowedTools`, the session also runs without tool search.
+
+If you set `permissionPromptToolName`, the first turn also waits for that tool's server in every case, up to `MCP_TIMEOUT`.
+
+To set the first-turn wait yourself, add `CLAUDE_CODE_MCP_STARTUP_WAIT_MS` to the [`env` option](/docs/en/agent-sdk/configuration#set-environment-variables), for example `CLAUDE_CODE_MCP_STARTUP_WAIT_MS: "5000"`. The first turn then waits up to that many milliseconds for every pending server, whether or not tool search is available. This deadline also replaces the `MCP_TIMEOUT` first-turn wait for stdio, HTTP, and SSE servers in `options.mcpServers`. `CLAUDE_CODE_MCP_STARTUP_WAIT_MS` requires Claude Code v2.1.274 or later.
+
+Servers still pending when the wait ends keep connecting in the background. Set the variable to `0` to skip the wait. A `permissionPromptToolName` server keeps its own `MCP_TIMEOUT` wait regardless of the value.
+
 To block startup itself at a separate, earlier phase than the first-turn wait, before the init message is sent:
 
 * Set [`MCP_CONNECTION_NONBLOCKING`](/docs/en/env-vars) to `0` to block on the whole connection batch. Claude Code caps that wait at 5 seconds by default. Adjust the cap with the [`MCP_CONNECT_TIMEOUT_MS`](/docs/en/env-vars) environment variable, in milliseconds. Servers still pending at that deadline keep connecting in the background.
diff --git a/content/en/docs/claude-code/agent-sdk/modifying-system-prompts.md b/content/en/docs/claude-code/agent-sdk/modifying-system-prompts.md
index e08617c6bb..f45575dc3d 100644
--- a/content/en/docs/claude-code/agent-sdk/modifying-system-prompts.md
+++ b/content/en/docs/claude-code/agent-sdk/modifying-system-prompts.md
@@ -136,7 +136,7 @@ For every code submission:
 
 Once created, activate output styles via:
 
-* **CLI**: run `/config` and select an output style
+* **CLI**: run `/output-style <style>`, for example `/output-style concise`, or run `/config` and select one. The `/output-style` command requires Claude Code v2.1.269 or later.
 * **Settings**: set `outputStyle` in `.claude/settings.local.json`
 * **TypeScript SDK**: set `outputStyle` inside the inline `settings` object passed to `query()`, or point `settings` at a settings file that sets it. `outputStyle` is not a top-level `Options` field:
 
diff --git a/content/en/docs/claude-code/agent-sdk/skills.md b/content/en/docs/claude-code/agent-sdk/skills.md
index b9c9884049..acc6c2346e 100644
--- a/content/en/docs/claude-code/agent-sdk/skills.md
+++ b/content/en/docs/claude-code/agent-sdk/skills.md
@@ -165,6 +165,10 @@ A skill with [`user-invocable: false`](/docs/en/skills#control-who-invokes-a-ski
 
 Send a command by including it in your prompt string, the same way you send regular text. Dispatch doesn't depend on the `skills` option. Sending `/<name>` runs a user-invocable skill even when your `skills` list omits it. Commands that act on conversation history, such as `/compact`, need prior messages to work with.
 
+A `/<name>` that matches neither a command in the session nor a built-in Claude Code command doesn't fail the query. Claude Code sends the prompt to Claude as an ordinary message, with a note that the command didn't run, so the query spends a model turn and returns Claude's reply. Before v2.1.274, a `/<name>` that matched nothing returned `Unknown command: /<name>` as the result without a model turn.
+
+A `/<name>` that matches a built-in Claude Code command that isn't available in the session, such as `/theme`, returns `/theme isn't available in this environment.` as the result without a model turn.
+
 <Note>
   A command can hit the `maxTurns` / `max_turns` limit like any other prompt, ending the query with an error result instead of `success`. For the error-result contract, see [Handle the result](/docs/en/agent-sdk/agent-loop#handle-the-result). If your command might hit the limit, wrap the loop in a `try`/`catch` in TypeScript or `try`/`except` in Python, as shown in [Single Message Input](/docs/en/agent-sdk/streaming-vs-single-mode#single-message-input), or set `maxTurns` high enough for the work to complete.
 </Note>
diff --git a/content/en/docs/claude-code/agent-sdk/slash-commands.md b/content/en/docs/claude-code/agent-sdk/slash-commands.md
index b9c9884049..acc6c2346e 100644
--- a/content/en/docs/claude-code/agent-sdk/slash-commands.md
+++ b/content/en/docs/claude-code/agent-sdk/slash-commands.md
@@ -165,6 +165,10 @@ A skill with [`user-invocable: false`](/docs/en/skills#control-who-invokes-a-ski
 
 Send a command by including it in your prompt string, the same way you send regular text. Dispatch doesn't depend on the `skills` option. Sending `/<name>` runs a user-invocable skill even when your `skills` list omits it. Commands that act on conversation history, such as `/compact`, need prior messages to work with.
 
+A `/<name>` that matches neither a command in the session nor a built-in Claude Code command doesn't fail the query. Claude Code sends the prompt to Claude as an ordinary message, with a note that the command didn't run, so the query spends a model turn and returns Claude's reply. Before v2.1.274, a `/<name>` that matched nothing returned `Unknown command: /<name>` as the result without a model turn.
+
+A `/<name>` that matches a built-in Claude Code command that isn't available in the session, such as `/theme`, returns `/theme isn't available in this environment.` as the result without a model turn.
+
 <Note>
   A command can hit the `maxTurns` / `max_turns` limit like any other prompt, ending the query with an error result instead of `success`. For the error-result contract, see [Handle the result](/docs/en/agent-sdk/agent-loop#handle-the-result). If your command might hit the limit, wrap the loop in a `try`/`catch` in TypeScript or `try`/`except` in Python, as shown in [Single Message Input](/docs/en/agent-sdk/streaming-vs-single-mode#single-message-input), or set `maxTurns` high enough for the work to complete.
 </Note>
diff --git a/content/en/docs/claude-code/agent-sdk/typescript.md b/content/en/docs/claude-code/agent-sdk/typescript.md
index 133186772b..ebb82d872a 100644
--- a/content/en/docs/claude-code/agent-sdk/typescript.md
+++ b/content/en/docs/claude-code/agent-sdk/typescript.md
@@ -988,6 +988,7 @@ type CanUseTool = (
     signal: AbortSignal;
     suggestions?: PermissionUpdate[];
     blockedPath?: string;
+    mcpServer?: { name: string; source: string };
     decisionReason?: string;
     toolUseID: string;
     agentID?: string;
@@ -1001,6 +1002,7 @@ type CanUseTool = (
 | `signal`         | `AbortSignal`                               | Signaled if the operation should be aborted                                                                                                                                                                                                                                                                  |
 | `suggestions`    | [`PermissionUpdate`](#permissionupdate)`[]` | Suggested permission updates so the user is not prompted again for this tool. Bash prompts include a suggestion with the `localSettings` [destination](#permissionupdatedestination), so returning it in `updatedPermissions` writes the rule to `.claude/settings.local.json` and persists across sessions. |
 | `blockedPath`    | `string`                                    | The file path that triggered the permission request, if applicable                                                                                                                                                                                                                                           |
+| `mcpServer`      | `{ name: string; source: string }`          | For an `mcp__*` tool, the MCP server that serves it and where that server's definition came from, with the fields of [`McpServerProvenance`](#mcpserverprovenance). Absent for other tools. Requires Agent SDK v0.3.274 or later                                                                             |
 | `decisionReason` | `string`                                    | Explains why this permission request was triggered                                                                                                                                                                                                                                                           |
 | `toolUseID`      | `string`                                    | Unique identifier for this specific tool call within the assistant message                                                                                                                                                                                                                                   |
 | `agentID`        | `string`                                    | If running within a sub-agent, the sub-agent's ID                                                                                                                                                                                                                                                            |
@@ -1327,6 +1329,7 @@ type SDKResultMessage =
       permission_denials: SDKPermissionDenial[];
       queued_turn_count?: number;
       errors: string[];
+      startup_failure_reason?: SDKStartupFailureReason;
       user_message_uuid?: string;
       user_message_uuids?: string[];
       terminal_reason?: TerminalReason;
@@ -1350,6 +1353,7 @@ Several fields on the result carry diagnostic detail beyond `subtype`:
 * `modelUsage`: per-model totals for every model call made through the query pipeline during this `query()` call, including the main loop, subagents, and internal calls such as compaction and Workflow agents. Helper calls outside that pipeline, such as the permission classifier and token-counting requests, are excluded. In streaming-input sessions the totals are cumulative across turns, so read the latest result rather than summing across results. See [Track costs in streaming input mode](/docs/en/agent-sdk/cost-tracking#track-costs-in-streaming-input-mode) for resets and [Recover totals after a session crash](/docs/en/agent-sdk/cost-tracking#recover-totals-after-a-session-crash) for zeroed results.
 * `total_cost_usd`: cumulative estimated cost in USD for this `query()` call, covering the same calls as `modelUsage` and reset at the same points. It is an estimate, not a billing statement. See [Track cost and usage](/docs/en/agent-sdk/cost-tracking) for accuracy caveats.
 * `queued_turn_count`: the number of messages you sent with `origin: { kind: "human" }` that are still waiting when Claude Code produced the result. See [`queued_turn_count`](#queued_turn_count) for what `0` and an absent field tell you.
+* `startup_failure_reason`: why Claude Code refused to start, on the `error_during_execution` result it writes before exiting on a known startup failure. See [`startup_failure_reason`](#startup_failure_reason) for the values and which failures carry it. Requires Agent SDK v0.3.274 or later.
 * `terminal_reason`: why the loop ended. One of `"completed"`, `"max_turns"`, `"tool_deferred"`, `"aborted_streaming"`, `"aborted_tools"`, `"hook_stopped"`, `"stop_hook_prevented"`, `"background_requested"`, `"blocking_limit"`, `"rapid_refill_breaker"`, `"prompt_too_long"`, `"image_error"`, `"model_error"`, `"api_error"`, `"malformed_tool_use_exhausted"`, `"budget_exhausted"`, `"structured_output_retry_exhausted"`, `"tool_deferred_unavailable"`, or `"turn_setup_failed"`.
 * `fast_mode_state`: one of `"on"`, `"off"`, or `"cooldown"`.
 * `fast_mode_disabled_reason`: why [fast mode](/docs/en/fast-mode) isn't available right now. Absent when nothing blocks fast mode, though a request may still run at standard speed. During the cooldown after a fast mode rate limit, Claude Code reports `fast_mode_state: "cooldown"` with no reason code and re-enables fast mode when the cooldown expires. Requires Claude Code v2.1.219 or later.
@@ -1419,6 +1423,56 @@ What `0` and an absent field tell you:
 * **`0`**: Claude Code doesn't count messages you sent without that `origin`, and doesn't count task notifications, so a turn can still follow.
 * **Absent**: the final result that Claude Code emits after a crash or fatal startup error omits the field, and [may carry zeroed totals](/docs/en/agent-sdk/cost-tracking#recover-totals-after-a-session-crash).
 
+#### `startup_failure_reason`
+
+Why Claude Code refused to start, so your application can offer the fix instead of a retry. Claude Code sets it on the `error_during_execution` result it writes before exiting on a known startup failure. That result carries zeroed totals, and its `errors` array carries the same text as stderr. The field is absent on every other result. Requires Agent SDK v0.3.274 or later.
+
+Set `CLAUDE_CODE_STARTUP_FAILURE_RESULTS` to `1` in [`env`](#options) to receive this result for every `SDKStartupFailureReason` value. Without that variable, Claude Code writes the result only for these failures, and the rest end with stderr output, a non-zero exit, and no result message:
+
+* A resume that Claude Code stops because it [can't return the session to its worktree](/docs/en/worktrees#the-session-resumes-outside-its-worktree), with `worktree_unverified` or `worktree_resume_refused`. That section says which error carries which value.
+* A refused [`continue`](#options) of a conversation that a background session holds, with `session_held_by_background`. For a refused [`resume`](#options) of such a conversation, Claude Code writes the result only when the variable is set.
+
+```typescript theme={null}
+type SDKStartupFailureReason =
+  | "org_pin_api_key_conflict"
+  | "org_verify_failed"
+  | "org_pin_mismatch"
+  | "managed_settings_invalid"
+  | "remote_settings_required_unavailable"
+  | "gateway_signin_required"
+  | "gateway_access_denied"
+  | "proxy_invalid"
+  | "temp_dir_unusable"
+  | "cwd_unavailable"
+  | "shell_tool_missing"
+  | "session_held_by_background"
+  | "worktree_resume_refused"
+  | "worktree_unverified"
+  | "cli_version_too_old"
+  | "bypass_root";
+```
+
+Each value names one refusal:
+
+| Value                                  | What stopped the session                                                                                                                                                                                 |
+| :------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `org_pin_api_key_conflict`             | Managed settings [require a first-party or Cloud gateway sign-in](/docs/en/authentication#restrict-login-to-your-organization), and an Anthropic API key, auth token, or `apiKeyHelper` is configured instead |
+| `org_verify_failed`                    | The sign-in's organization couldn't be verified against the pin, for example because of a network failure or a revoked token                                                                             |
+| `org_pin_mismatch`                     | The sign-in belongs to an organization the pin doesn't allow                                                                                                                                             |
+| `managed_settings_invalid`             | Managed policy settings couldn't be read, or the pin names no organization                                                                                                                               |
+| `remote_settings_required_unavailable` | Managed settings that the organization requires couldn't be loaded                                                                                                                                       |
+| `gateway_signin_required`              | The [Cloud gateway](/docs/en/claude-apps-gateway) ended this sign-in                                                                                                                                          |
+| `gateway_access_denied`                | The managed settings request to the Cloud gateway came back with a 403, which the gateway's [troubleshooting table](/docs/en/claude-apps-gateway-deploy#troubleshooting) covers                               |
+| `proxy_invalid`                        | A proxy setting isn't a complete URL                                                                                                                                                                     |
+| `temp_dir_unusable`                    | The per-user temporary directory is unsafe or couldn't be created                                                                                                                                        |
+| `cwd_unavailable`                      | The working directory was deleted, moved, or can't be read                                                                                                                                               |
+| `shell_tool_missing`                   | On Windows, no shell tool is available: Git Bash is missing, and PowerShell is missing or turned off with `CLAUDE_CODE_USE_POWERSHELL_TOOL`                                                              |
+| `session_held_by_background`           | The conversation to resume or continue is running as a [background session](/docs/en/agent-view)                                                                                                              |
+| `worktree_resume_refused`              | The session's worktree failed its safety checks, or the resume was launched from inside it. `errors` says whether running the same resume again continues without the worktree                           |
+| `worktree_unverified`                  | The session's worktree couldn't be verified right now, and retrying may succeed                                                                                                                          |
+| `cli_version_too_old`                  | This Claude Code version is below the minimum Anthropic requires                                                                                                                                         |
+| `bypass_root`                          | Bypass permissions mode was requested while running as root                                                                                                                                              |
+
 ### `SDKSystemMessage`
 
 System initialization message.
@@ -1438,6 +1492,7 @@ type SDKSystemMessage = {
   mcp_servers: {
     name: string;
     status: string;
+    source?: string;
   }[];
   model: string;
   permissionMode: PermissionMode;
@@ -1457,6 +1512,7 @@ type SDKSystemMessage = {
 
 `terminal_slash_commands` names the entries in `slash_commands` whose interface is bound to the local terminal, such as `exit`. You can send them like any other entry in `slash_commands`; the field exists so a remote or mobile client can hide them from its command menus. The field is present only when non-empty, and requires Agent SDK v0.3.229 or later.
 
+* `source` on each `mcp_servers` entry: where the server's definition came from, with the same values as [`McpServerStatus`](#mcpserverstatus)'s `source`. Requires Agent SDK v0.3.274 or later.
 * `effort`: the [effort level](/docs/en/model-config#adjust-effort-level) Claude Code sends on the session's next request, or `null` when it sends none. Claude Code sets the field only on the init message it sends to [Remote Control](/docs/en/remote-control) clients, and omits it from the init message your application reads. Requires Agent SDK v0.3.234 or later.
 
 The `capabilities` array names the protocol behaviors this CLI implements, so you can feature-detect instead of comparing `claude_code_version` strings. It is an open set: ignore values you don't recognize, and check for the specific capability whose behavior you rely on. The field requires Claude Code v2.1.205 or later and is absent on earlier CLIs.
@@ -1879,9 +1935,12 @@ type PreToolUseHookInput = BaseHookInput & {
   tool_name: string;
   tool_input: unknown;
   tool_use_id: string;
+  mcp_server?: McpServerProvenance;
 };
 ```
 
+`mcp_server` is present when the tool comes from an MCP server; see [`McpServerProvenance`](#mcpserverprovenance). The `PostToolUse`, `PostToolUseFailure`, `PermissionRequest`, and `PermissionDenied` inputs carry the same field. The field requires Agent SDK v0.3.274 or later.
+
 #### `PostToolUseHookInput`
 
 ```typescript theme={null}
@@ -1892,6 +1951,7 @@ type PostToolUseHookInput = BaseHookInput & {
   tool_response: unknown;
   tool_use_id: string;
   duration_ms?: number;
+  mcp_server?: McpServerProvenance;
 };
 ```
 
@@ -1906,6 +1966,7 @@ type PostToolUseFailureHookInput = BaseHookInput & {
   error: string;
   is_interrupt?: boolean;
   duration_ms?: number;
+  mcp_server?: McpServerProvenance;
 };
 ```
 
@@ -1936,6 +1997,7 @@ type PermissionDeniedHookInput = BaseHookInput & {
   tool_input: unknown;
   tool_use_id: string;
   reason: string;
+  mcp_server?: McpServerProvenance;
 };
 ```
 
@@ -2127,6 +2189,7 @@ type PermissionRequestHookInput = BaseHookInput & {
   tool_name: string;
   tool_input: unknown;
   permission_suggestions?: PermissionUpdate[];
+  mcp_server?: McpServerProvenance;
 };
 ```
 
@@ -4424,6 +4487,32 @@ type AgentInfo = {
 | `description` | `string`              | Description of when to use this agent                                                                                                                                                               |
 | `model`       | `string \| undefined` | Model this agent uses: an alias or model ID, or `'inherit'` for the parent's model. When it's `undefined`, Claude Code picks the model in the [subagent model order](/docs/en/sub-agents#choose-a-model) |
 
+### `McpServerProvenance`
+
+The MCP server that serves an `mcp__*` tool, and where that server's definition came from. The [`PreToolUse`](#pretoolusehookinput), `PostToolUse`, `PostToolUseFailure`, `PermissionRequest`, and `PermissionDenied` hook inputs carry it as `mcp_server`, and the [`CanUseTool`](#canusetool) options carry it as `mcpServer`. Both omit it for tools that don't come from an MCP server.
+
+```typescript theme={null}
+type McpServerProvenance = {
+  name: string;
+  source: string;
+};
+```
+
+| Field    | Type     | Description                                                                                                 |
+| :------- | :------- | :---------------------------------------------------------------------------------------------------------- |
+| `name`   | `string` | The name the server is registered under, the same value [`mcpServerStatus()`](#query-object) reports for it |
+| `source` | `string` | Where the server's definition came from: `sdk`, `plugin`, or a configuration scope                          |
+
+`source` takes one of the following values. The set is open, so treat a value you don't recognize as a configured source, never as `sdk`:
+
+* **`sdk`**: an in-process server your application registered. Only the SDK host application can register one, so a configured server never reports `sdk`, whatever its name.
+* **`plugin`**: a server a [plugin](/docs/en/agent-sdk/plugins) provides. Its `name` is the scoped `plugin:<plugin-name>:<server-name>` form described under [plugin-provided MCP servers](/docs/en/mcp#plugin-provided-mcp-servers).
+* **A configuration scope**: `user`, `project`, `local`, `dynamic`, `managed`, `enterprise`, `claudeai`, or `agent`. A `.mcp.json` server reports `project`, and [MCP installation scopes](/docs/en/mcp#mcp-installation-scopes) defines `local`, `project`, and `user`. Servers your application passes in the [`mcpServers` option](#options), other than in-process SDK servers, report `dynamic`.
+
+Base trust decisions on `source`, not on `name` or the `mcp__<server>__` tool-name prefix. For any source other than `sdk`, `name` is untrusted text: escape it before display.
+
+`McpServerProvenance` and the fields that carry it require Agent SDK v0.3.274 or later.
+
 ### `McpServerStatus`
 
 Status of a connected MCP server.
@@ -4439,6 +4528,7 @@ type McpServerStatus = {
   error?: string;
   config?: McpServerStatusConfig;
   scope?: string;
+  source?: string;
   tools?: {
     name: string;
     description?: string;
@@ -4451,6 +4541,8 @@ type McpServerStatus = {
 };
 ```
 
+`source` says where the server's definition came from, with the same values and trust rule as [`McpServerProvenance`](#mcpserverprovenance)'s `source`. The field requires Agent SDK v0.3.274 or later and is absent on earlier versions.
+
 ### `McpServerStatusConfig`
 
 The configuration of an MCP server as reported by `mcpServerStatus()`. This is the union of all MCP server transport types.
diff --git a/content/en/docs/claude-code/agent-teams.md b/content/en/docs/claude-code/agent-teams.md
index 473b70ef16..fcbc3257a3 100644
--- a/content/en/docs/claude-code/agent-teams.md
+++ b/content/en/docs/claude-code/agent-teams.md
@@ -278,6 +278,10 @@ Claude Code reads the subagent definition you named and applies these parts of i
 * **`skills`**: Claude Code doesn't apply the definition's `skills` to a teammate in either display mode. The teammate loads skills from your project and user settings.
 * **`mcpServers`**: for a split-pane teammate, Claude Code applies the definition's `mcpServers` under the [rules for that field](/docs/en/sub-agents#scope-mcp-servers-to-a-subagent), which cover a session started with `--agent` as well. An in-process teammate ignores the field and loads MCP servers from your project and user settings.
 
+When Claude messages an in-process teammate that is no longer running, Claude Code brings it back in the same session, restores any conversation saved for it, and gives it the message as its next prompt. After you resume a session, teammates aren't brought back this way, per [the resume limitation](#limitations).
+
+For a teammate it brings back, Claude Code re-applies a definition that came from a project's `.claude/agents/` directory or an `--add-dir` directory only if you've [trusted the folder the agent file is in](/docs/en/permissions#what-runs-before-you-trust-a-folder). Trusting a parent folder doesn't count. Until then, the teammate comes back with none of the definition's tools or instructions, keeping only the tools Claude Code adds to every in-process teammate. See [the teammate's agent definition was not restored](/docs/en/errors#teammate-agent-definition-not-restored) for the notice text.
+
 ### Permissions
 
 Teammates start with the lead's permission mode, except [`dontAsk` mode](/docs/en/permission-modes#allow-only-pre-approved-tools-with-dontask-mode), which they don't inherit. If the lead runs with `--dangerously-skip-permissions`, all teammates do too. After spawning, you can change an individual teammate's permission mode, but you can't set per-teammate permission modes at spawn time.
diff --git a/content/en/docs/claude-code/amazon-bedrock.md b/content/en/docs/claude-code/amazon-bedrock.md
index 4c1ca1f387..87f55062ee 100644
--- a/content/en/docs/claude-code/amazon-bedrock.md
+++ b/content/en/docs/claude-code/amazon-bedrock.md
@@ -219,7 +219,7 @@ Before running the `awsAuthRefresh` command, Claude Code makes an STS `GetCaller
 }
 ```
 
-As of Claude Code v2.1.181, the flat output from `aws configure export-credentials --format process` is also accepted, with the same keys at the top level instead of nested under `Credentials`.
+The flat output from `aws configure export-credentials --format process` is also accepted, with the same keys at the top level instead of nested under `Credentials`.
 
 `Expiration` is optional. When the command returns a valid ISO 8601 `Expiration`, Claude Code caches the credentials until five minutes before that time. Without it, credentials are cached for one hour.
 
diff --git a/content/en/docs/claude-code/changelog.md b/content/en/docs/claude-code/changelog.md
index 1ba58c5d41..bcd481d262 100644
--- a/content/en/docs/claude-code/changelog.md
+++ b/content/en/docs/claude-code/changelog.md
@@ -10,6 +10,109 @@ This page is generated from the [CHANGELOG.md on GitHub](https://github.com/anth
 
 Run `claude --version` to check your installed version.
 
+<Update label="2.1.276" description="September 18, 2026">
+  * Fixed every request failing with `400 … Input tag 'advisor_20260301'` when `ANTHROPIC_BASE_URL` points at a proxy or gateway (2.1.275 regression)
+</Update>
+
+<Update label="2.1.275" description="September 17, 2026">
+  * Added the signed-in account to Claude apps gateway sign-in: when the gateway names it, you confirm it before the credential is saved, and `/status` shows it
+  * Added a send-now key (ctrl+enter, or ctrl+x ctrl+s) that interrupts the current turn and sends all queued messages at once; sent and queued messages show in gray until the model receives them
+  * Added a startup warning when a configured `otelHeadersHelper` fails, so sessions that silently export no telemetry are noticed
+  * Added syncing of the skills and plugins enabled on your claude.ai account to terminal sessions signed in with it; opt out with `syncClaudeAiSkills: false` or `syncClaudeAiPlugins: false`
+  * Added `/plugin install <plugin> --marketplace <source>`, which offers to add the marketplace before installing the plugin
+  * Fixed a restored memory file's age note changing between requests after a compaction or resume, which caused prompt cache misses
+  * Fixed `--forward-subagent-text` stream-json and SDK output dropping the messages of subagents spawned by a `context: fork` skill, and of forked skills invoked by a subagent or another forked skill
+  * Fixed @-mention file suggestions being buried below MCP resources when using a custom `fileSuggestion` command or typing `@.`/`@./`
+  * Fixed fullscreen mode placing background-task completion notices beneath a long turn's collapsed tool row instead of where they arrived; each notice now closes the open row
+  * Fixed `claude plugin marketplace update` deleting a GitHub marketplace's local copy when the fetch failed and the marketplace was named after its repository
+  * Fixed plugin and marketplace messages, logs and `claude plugin marketplace list` showing a password or token stored in a git, ssh or marketplace URL
+  * Fixed a resumed cloud session leaving an unanswered question open in the transcript after a queued message superseded it
+  * Fixed vim mode placing the cursor one character right after a dot-repeated "!" or a fast-typed "i!" switched a non-empty prompt into shell mode
+  * Fixed fullscreen mode freezing or blanking for several seconds when scrolling up past a large file diff
+  * Fixed a stray `</ccmemory>`-style closing tag occasionally appearing in responses
+  * Fixed plugin messages, logs and the VS Code plugin dialog showing the wrong server for some git addresses
+  * Fixed a terminal `API Error: 400` on every turn for users behind a network gateway that rewrites API error responses when a beta request header is rejected
+  * Fixed sandboxed Bash commands on Linux reporting exit code 0 for failed commands when the shell is zsh
+  * Fixed the Read tool hanging instead of reporting an error when part of a large file could not be decoded under memory pressure
+  * Fixed `--resume`, the resume picker preview, resumed background agents and the transcript view failing on a session whose saved history contains a malformed task-reminder or @-file attachment entry
+  * Fixed a crash when resuming a conversation whose transcript contains a malformed message entry, and a fullscreen crash when such a conversation received new messages while scrolled up
+  * Fixed sessions failing to resume or start when their saved transcript contains a malformed message content block
+  * Fixed Grep, Glob and @-file suggestions hanging or running out of memory on searches over the 20MB output cap, and system ripgrep reporting "no matches" instead of an error after a flood of warnings
+  * Fixed `/rewind` in a forked or background session restoring a zero-filled or truncated file when the session's file-history backups could not be fully copied
+  * Fixed fullscreen sessions sometimes exiting with "Claude Code exited after an unrecoverable interface error" when typing fast or holding a key with the slash-command dropdown open
+  * Fixed background sessions crashing and restarting their worker when a command fed through stdin ran on a machine that had run out of file descriptors
+  * Fixed a crash at launch when `~/.claude.json` holds a malformed `mcpNeedsAuthNoticed` value
+  * Fixed `--resume` and `--continue` dropping a conversation's earlier thinking when a built-in tool it started with has since been switched off by a server-side flag
+  * Fixed text selected with the mouse in the fullscreen `claude --resume` session picker never reaching the clipboard
+  * Fixed plugin reload previews replacing a running session's extracted plugin files when the plugin was loaded from a `--plugin-dir` or `--plugin-url` archive
+  * Fixed self-hosted runners with `--drain-wait-sec` losing the final result of a turn that finished during a SIGTERM drain; the runner now waits briefly for the turn to be reported
+  * Fixed `SubagentStop` hooks with a specific `matcher` firing for every stopping subagent whose agent type was empty
+  * Fixed sandboxed Bash commands being unable to write to project directories named `hooks/` or `config/`
+  * Fixed Artifact updates failing with "File not found" after a session resumes on another machine or its scratchpad is cleared: the page's last published version is restored
+  * Fixed `/update-config` writing `Write(path)` permission rules, which file permission checks don't match, instead of `Edit(path)` rules
+  * Fixed four dead documentation URLs (Pricing, Computer Use, Skills, CLI) in the bundled claude-api skill's live-sources table
+  * Improved prompt caching for a `--system-prompt` that contains a `__SYSTEM_PROMPT_DYNAMIC_BOUNDARY__` line: the text above it is now cached globally, as the SDK's array form already is
+  * Improved the `/desktop` error when Claude Desktop does not open: it now says why and what to do next
+  * Improved the Artifact tool's publish and read results: they now say who can open the page and what the owner's Share menu offers
+  * Improved artifact publish results: they name the tab icon sent, warn when the page contains a NUL byte, and retry a flaky fetch of the newer page to merge after a stale publish
+  * Improved pasted and attached images: they are now saved where Claude can open them as files without a permission prompt, including in Desktop and VS Code
+  * Improved the Artifact tool's guidance so Claude updates a shared artifact in place when you were given edit access to it, instead of publishing a separate copy
+  * Improved plan-usage reads: editor windows and non-interactive sessions on one machine now share a read made in the last minute instead of each calling the usage endpoint
+  * Improved the `ListPlugins` tool description so Claude knows it lists plugins enabled on your claude.ai account, not plugins installed locally with `/plugin`
+  * Improved responsiveness when the terminal is slow or paused: output no longer falls further behind while the terminal catches up
+  * Improved Write and Edit results for files in the synced account-skills folder: they now say the change is not saved to your account and how to save it
+  * Updated `/logout` for Claude apps gateway sign-ins to also end the session on gateways that advertise token revocation
+  * Changed hosted sessions to keep an unanswered permission prompt up after a container restart, instead of asking again
+  * Changed the Artifact tool to ask for a one-word tab icon on a first publish instead of an emoji favicon
+  * Changed Claude in Chrome in auto mode to skip the extension's per-site check for classifier-approved calls, as bypass mode does, fixing `browser_batch` "Permission denied" after a redirect
+  * Changed plugins installed from an npm source to be fetched with `npm pack --ignore-scripts` and integrity-verified, so a package's install scripts no longer run
+  * Changed scheduled and Run now routine runs to save data to, and republish the page of, an artifact you can edit without asking; public artifacts, first publishes and deletes still ask
+  * Removed the startup notice that told you a one-off scheduled routine had run since your last session
+  * \[VSCode] Added viewing, editing and deleting a saved memory inside the Memory dialog
+  * \[VSCode] Added sending an attached image without typing any text
+  * \[VSCode] Added a Retry link to the MCP servers dialog when the server list fails to load
+  * \[VSCode] Added accept and reject buttons under each change in the proposed-change diff tab, so an edit can be reviewed change by change
+  * \[VSCode] Fixed the transcript creeping toward the bottom in small steps while a permission card waits and content keeps arriving
+  * \[VSCode] Fixed rewound and forked conversations not keeping the permission mode you had picked for the original conversation
+  * \[VSCode] Fixed an empty `CLAUDE_CONFIG_DIR` entry in the `environmentVariables` setting making Claude Code keep its files in the workspace
+  * \[VSCode] Fixed plugin install links opening the Manage plugins dialog for plugin names and marketplace addresses that can't be used in a link
+  * \[VSCode] Fixed Remote Control staying shown as connected after a turn-off that Claude Code reported as failed; it now shows as off
+  * \[VSCode] Fixed the scroll to the bottom on send stopping short of the reply when the reply starts arriving during the scroll
+  * \[VSCode] Fixed the agent map showing agents a crash left unfinished as stopped instead of failed once the session is reopened
+  * \[VSCode] Fixed the "Continuing the step" notice not appearing, and the continue limit resetting, after a reload that follows a crash with background tasks still running
+  * \[VSCode] Fixed the session list showing when a session was last reopened, such as after a window reload, instead of when its last message was sent
+  * \[VSCode] Fixed "Fork conversation from here" failing on the message right after one sent while Claude was working
+  * \[VSCode] Fixed the prompt cache clock showing too few minutes after reopening a session with a message sent while Claude was working
+  * \[VSCode] Fixed a background agent that finished while Claude was running a tool losing its completion notice, and its result on the agent map, after a window reload
+  * \[VSCode] Fixed a rare case where text selected in a git-ignored file could be sent to Claude after the extension was unresponsive for several seconds
+  * \[VSCode] Fixed renaming a running session reverting to the generated name (regression in 2.1.269)
+  * \[VSCode] Fixed some claude.ai/code sessions opening in VS Code as an empty conversation with no messages
+  * \[VSCode] Fixed slash commands typed while Claude is responding being sent to the model as text instead of running once the response finishes
+  * \[VSCode] Fixed unreadable code in the plan preview and the Hooks and Permission rules dialogs with the High Contrast Light theme
+  * \[VSCode] Fixed `/remote-control` being ignored while Remote Control is still connecting: running it again now turns Remote Control off immediately
+  * \[VSCode] Fixed the conversation pulling you back to the bottom while a reply streams after you scroll up, and added a `claudeCode.scrollToBottomOnSend` setting to turn off the jump on send
+  * \[VSCode] Fixed the Manage plugins dialog showing a password or token that was typed into a marketplace URL
+  * \[VSCode] Improved the agent map: the pill counts running agents and turns red after a failure, the main agent stays in view while the map scrolls, and agents sort by state then end time
+  * \[VSCode] Changed New session in a Claude editor tab to open in the sidebar when Preferred Location is set to Sidebar, instead of always opening another tab
+  * \[VSCode] Changed a message sent while Claude is working to wait at the bottom of the conversation until Claude starts on it
+  * \[Claude Code on the web] Added a "New routine" button to the page shown when a routine link no longer resolves, next to the link back to your routines list
+  * \[Claude Code on the web] Fixed routine "paused" and "on hold" notifications being cut off mid-sentence; the paused-subscription notice now says to turn the routine back on yourself
+  * \[Claude Code on the web] Fixed cloud environments with a very long allowed-domains list saving fine and then failing every session start; saving now fails up front and says how much to trim
+  * \[Claude Code on the web] Fixed Claude's guidance when a cloud session on a personal account is denied GitHub access: it now links to claude.ai/connect-github instead of an admin settings page
+  * \[Claude Code on the web] Improved what Claude tells you when asked to edit, delete or run a routine it didn't create: it now links to the routine's page so you can do it yourself
+  * \[Claude Tag] Added attach conditions for access bundles in Claude Tag settings: an Owner can let a bundle also apply in channels with guests or Slack Connect channels, not just member-only
+  * \[Claude Tag] Added Amazon CloudWatch, CloudWatch Logs, Amazon SNS, Google Cloud Monitoring and Cloud Logging presets to an access bundle's Credentials tab in Claude Tag admin settings
+  * \[Claude Tag] Added Datadog presets for the US3, AP1, AP2 and US1-FED sites; new Datadog connections are now limited to Datadog's read and query API routes
+  * \[Claude Tag] Fixed S3 uploads from recent AWS CLI and SDK versions failing with a 502 error when sent through an AWS connection
+  * \[Claude Tag] Fixed Claude treating a channel as inactive, and skipping untagged messages there, while it was still posting in that channel from a routine or a thread
+  * \[Claude Tag] Fixed a thread's "Claude \[task]" display name reverting to plain "Claude" after the session behind that thread was refreshed or restarted
+  * \[Claude Tag] Fixed the model you switched to in a Slack thread silently reverting to the channel's default after that thread's session was restarted or refreshed
+  * \[Claude Tag] Fixed Claude sometimes replying twice when another app or bot @mentioned it in a top-level channel message
+  * \[Claude Tag] Improved Claude's notices in Enterprise Grid channels shared across workspaces: they now say when no workspace is set up yet, or why only organization defaults apply
+  * \[Code Review] Fixed reviews occasionally dropping part of their analysis when one of the reviewing agents returned its findings in an unexpected format
+  * \[Code Review] Fixed pull requests with more than 100 Claude reviews getting a full re-review on every clean merge from the base branch instead of the lighter merge-focused review
+</Update>
+
 <Update label="2.1.274" description="September 17, 2026">
   * Added a visible warning when memory usage is critical, with steps to free memory or restart safely
   * Added `CLAUDE_CODE_MCP_STARTUP_WAIT_MS` to bound how long the first non-interactive turn waits for connecting MCP servers (`0` = don't wait)
diff --git a/content/en/docs/claude-code/channels-reference.md b/content/en/docs/claude-code/channels-reference.md
index 97dff1e0b6..89f54642d0 100644
--- a/content/en/docs/claude-code/channels-reference.md
+++ b/content/en/docs/claude-code/channels-reference.md
@@ -487,7 +487,7 @@ Clients on Claude Code v2.1.234 or later also mask credentials in `description`
 
 Masking doesn't change who receives the fields. Whatever stays unmasked goes only to servers you opted in with `--channels` or the development flag. Treat both fields as untrusted unless you control the client fleet.
 
-The verdict your server sends back is `notifications/claude/channel/permission` with two fields: `request_id` echoing the ID above, and `behavior` set to `'allow'` or `'deny'`. Allow lets the tool call proceed; deny rejects it, the same as answering No in the local dialog. Neither verdict affects future calls.
+The verdict your server sends back is `notifications/claude/channel/permission` with two fields: `request_id` echoing the ID above, and `behavior` set to `'allow'` or `'deny'`. Allow lets the tool call proceed; deny rejects it. Neither verdict affects future calls.
 
 ### Add relay to a chat bridge
 
diff --git a/content/en/docs/claude-code/claude-apps-gateway-deploy.md b/content/en/docs/claude-code/claude-apps-gateway-deploy.md
index 75aede4cf7..0989063cb7 100644
--- a/content/en/docs/claude-code/claude-apps-gateway-deploy.md
+++ b/content/en/docs/claude-code/claude-apps-gateway-deploy.md
@@ -251,6 +251,7 @@ The gateway's stderr includes the audit event stream, the audit log records deve
 | A developer's requests fail with `Not signed in to the Cloud gateway — run /login.`                                                                                         | The machine's managed settings set `forceLoginMethod: "gateway"` or `forceLoginGatewayUrl`, and the session has no gateway sign-in. A leftover claude.ai login doesn't satisfy the requirement.                                                                                                                                                                                                                 | Have the developer run `/login` and complete the gateway sign-in. See also [Administrator policy requires a Cloud gateway sign-in](/docs/en/errors#administrator-policy-requires-a-cloud-gateway-sign-in).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | Claude Desktop reports that its bootstrap configuration couldn't be fetched                                                                                                 | `/user/bootstrap` returned 404: the policy matching the user doesn't carry a `desktop` key, or no policy matched. The gateway's audit log records each rejection as `desktop_bootstrap.denied` with the reason.                                                                                                                                                                                                 | Add a `desktop` block to the policy that matches the user, or to the `match: {}` base layer; an empty `desktop: {}` suffices. See [Claude Desktop overlay](/docs/en/claude-apps-gateway-config#claude-desktop-overlay).                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | Startup shows `Gateway login is configured in managed settings, but this Claude Code build does not include Cloud gateway support.`                                         | The installed Claude Code build predates gateway support                                                                                                                                                                                                                                                                                                                                                        | Have the developer update Claude Code to a release that includes Cloud gateway support                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
+| Startup exits with `Administrator policy requires a Cloud gateway sign-in on this machine`                                                                                  | The developer's environment sets `ANTHROPIC_API_KEY` or `ANTHROPIC_AUTH_TOKEN`, their settings configure an [`apiKeyHelper`](/docs/en/settings-reference#apikeyhelper), or an API key from an earlier Claude Console login is still saved                                                                                                                                                                            | Have the developer clear each that applies: unset the variable, remove the `apiKeyHelper` entry, or run `claude auth logout` to remove the saved key. Then have them start `claude` and sign in with `/login`. See also [Administrator policy requires a Cloud gateway sign-in](/docs/en/errors#administrator-policy-requires-a-cloud-gateway-sign-in).                                                                                                                                                                                                                                                                                                                                                                               |
 | Startup or `/login` reports `Claude Code may not be enabled for your organization` after a 403 on the managed settings load                                                 | The gateway, or something in front of it, answered the `/managed/settings` request with 403. The gateway's own settings route never answers 403. The status comes from the [`access_control`](/docs/en/claude-apps-gateway-config#http-tuning) IP checks or from a proxy or WAF in front of the gateway. The audit log records an IP-check denial as `access.denied` with the reason. The developer stays signed in. | Check the audit log for `access.denied` at the time of the failure and fix the `access_control` lists or the front end, then have the developer start `claude` again                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | CLI `/login`: `Gateway hosts must be on your organization's private network; <host> resolves to the public (or unrecognized) address <ip>`                                  | The gateway hostname resolves to at least one public IP address. Claude Code checks each resolved address and requires every one to be private. A common cause is a dual-stack name where one family resolves to a public address, including AWS internal dual-stack load balancers, which return public-range AAAA addresses.                                                                                  | Have the gateway name resolve only to private addresses on developer machines. For a dual-stack name, drop the public-range record or serve a separate internal-only DNS name. See the [private-network prerequisite](/docs/en/claude-apps-gateway#prerequisites). If the address is public space your organization owns and uses internally, [declare that block](/docs/en/claude-apps-gateway#allow-a-gateway-on-public-address-space-you-own) instead.                                                                                                                                                                                                                                                                                  |
 | CLI `/login`: `Gateway login would go through proxy <proxy>, which is not on a private network`                                                                             | An `HTTPS_PROXY` or `HTTP_PROXY` applies to the gateway host and the proxy's hostname resolves to a public address. A proxy whose host resolves only to private addresses is allowed and doesn't trigger this error                                                                                                                                                                                             | Add the gateway host to `NO_PROXY` on the developer's machine so the connection is direct, or use a proxy whose hostname resolves to private addresses. The message names the exact `NO_PROXY` entry to add                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
diff --git a/content/en/docs/claude-code/claude-apps-gateway.md b/content/en/docs/claude-code/claude-apps-gateway.md
index 74b3a9cfb5..352f2d6525 100644
--- a/content/en/docs/claude-code/claude-apps-gateway.md
+++ b/content/en/docs/claude-code/claude-apps-gateway.md
@@ -402,16 +402,24 @@ An OS policy, such as an HKLM registry policy or a managed-preferences plist, ou
 
 #### Lock behavior across sources
 
-Setting one lock doesn't restrict the others; each key is documented in the [settings reference](/docs/en/settings-reference#all-settings). From an admin source below the winner, the two sandbox locks still apply, and `allowManagedPermissionRulesOnly` still blocks parent-supplied allow rules and `additionalDirectories`. The hooks and MCP server locks, and `allowManagedPermissionRulesOnly`'s effect on the developer's own rules, need the winning source by default; under the `managedSourcesBehavior` merge opt-in in [how Claude Code combines managed sources](/docs/en/managed-settings#how-claude-code-combines-managed-sources), Claude Code applies the strictest value any source sets for every lock. On [`policyHelper`](/docs/en/settings-reference#policyhelper) fleets, the locks are read from the helper's output alone.
+Setting one lock doesn't restrict the others; each key is documented in the [settings reference](/docs/en/settings-reference#all-settings).
 
-Each lock makes Claude Code ignore the developer's own entries for that setting, so include your organization's allowlists next to the locks. Locking network domains with an empty managed domain list blocks all sandboxed outbound traffic, and locking MCP servers with no managed or parent-supplied `allowedMcpServers` loads every server that `deniedMcpServers` doesn't block. `allowRead` entries only re-allow paths inside `denyRead` regions, so pair them with a managed `denyRead`.
+From an admin source below the winner, the two sandbox locks still apply, and `allowManagedPermissionRulesOnly` still blocks parent-supplied allow rules and `additionalDirectories`. On Claude Code v2.1.273 or later, the MCP server lock also applies from a source below the winner, and while it is on, the managed `allowedMcpServers` list comes from the highest-priority admin source that sets one.
+
+The hooks lock and `allowManagedPermissionRulesOnly`'s effect on the developer's own rules need the winning source by default; under the `managedSourcesBehavior` merge opt-in in [how Claude Code combines managed sources](/docs/en/managed-settings#how-claude-code-combines-managed-sources), Claude Code applies the strictest value any source sets for every lock. On [`policyHelper`](/docs/en/settings-reference#policyhelper) fleets, Claude Code reads the locks from the helper's output alone.
+
+Each lock makes Claude Code ignore the developer's own entries for that setting, so include your organization's allowlists next to the locks:
+
+* **Network domains**: locking with an empty managed domain list blocks all sandboxed outbound traffic.
+* **MCP servers**: locking with no `allowedMcpServers` in any admin source or in the parent-supplied settings loads every server that `deniedMcpServers` doesn't block.
+* **Read paths**: `allowRead` entries only re-allow paths inside `denyRead` regions, so pair them with a managed `denyRead`.
 
 #### Settings the locks don't cover
 
-Four parent-supplied settings pass the filter even with all five locks set. Under the default first-wins setting, the admin value that blocks the parent's is the one in the highest-priority admin source. Under the `managedSourcesBehavior` merge opt-in, [how Claude Code combines managed sources](/docs/en/managed-settings#how-claude-code-combines-managed-sources) says which source's value applies instead.
+Four parent-supplied settings pass the filter even with all five locks set. Under the default first-wins setting, the admin value that blocks the parent's is the one in the highest-priority admin source, except for `allowedMcpServers` while the [MCP server lock](#lock-behavior-across-sources) is on. Under the `managedSourcesBehavior` merge opt-in, [how Claude Code combines managed sources](/docs/en/managed-settings#how-claude-code-combines-managed-sources) says which source's value applies instead.
 
 * **`forceLoginOrgUUID`**: Claude Code honors a parent-supplied value when the highest-priority admin source doesn't set an org UUID. Gateway sign-in doesn't check this key, so it matters only for fleets that also use first-party Anthropic logins. An org UUID in the highest-priority admin source blocks the parent's value and is the one Claude Code enforces, so set `forceLoginOrgUUID` there.
-* **`allowedMcpServers`**: Claude Code honors a parent-supplied allowlist when the highest-priority admin source doesn't set one, and `allowManagedMcpServersOnly` doesn't block it, because the lock enforces whichever list wins as the managed value, including a parent-supplied list when the highest-priority admin source doesn't set one. A list in the highest-priority admin source blocks the parent's and is the list Claude Code enforces, so set `allowedMcpServers` there, next to the lock. Before v2.1.223, a value for either key in any admin source blocked the parent's.
+* **`allowedMcpServers`**: Claude Code honors a parent-supplied allowlist when no admin list is in force. `allowManagedMcpServersOnly` doesn't block it, because the lock enforces whichever list wins as the managed value, including a parent-supplied one when no admin source supplies a list. A list in the highest-priority admin source blocks the parent's and is the list Claude Code enforces, so set `allowedMcpServers` there, next to the lock. Before v2.1.223, a value for either key in any admin source blocked the parent's.
 * **`availableModels`**: Claude Code honors a parent-supplied model list when the winning managed source doesn't set one. If your fleet restricts models, set `availableModels` in the winning source.
 * **`strictPluginOnlyCustomization`**: this key passes the filter regardless of any lock, and it makes Claude Code ignore the developer's own customization, including protective hooks. No lock blocks it.
 
diff --git a/content/en/docs/claude-code/claude-code-on-the-web.md b/content/en/docs/claude-code/claude-code-on-the-web.md
index ec6bfcfdb3..f48205c63c 100644
--- a/content/en/docs/claude-code/claude-code-on-the-web.md
+++ b/content/en/docs/claude-code/claude-code-on-the-web.md
@@ -212,6 +212,12 @@ Teleport requires claude.ai subscription authentication. If you're authenticated
 
 Sessions appear in the sidebar at claude.ai/code. From there you can review changes, share with teammates, archive finished work, or delete sessions permanently.
 
+### Take back a queued message
+
+If you send a message while Claude is working, the message queues until Claude reads it. To take a queued message back, click the ✕ on it. The text returns to the message box so you can edit it or send something else.
+
+If Claude has already read the message, it stays in the conversation.
+
 ### Manage context
 
 Cloud sessions support [built-in commands](/docs/en/commands) that produce text output. Commands that only run in the terminal interface, such as `/plugin` or `/resume`, aren't available. Commands that open a picker or panel in the terminal behave differently in cloud sessions:
diff --git a/content/en/docs/claude-code/claude-directory.md b/content/en/docs/claude-code/claude-directory.md
index deb03fba95..3d79b273a3 100644
--- a/content/en/docs/claude-code/claude-directory.md
+++ b/content/en/docs/claude-code/claude-directory.md
@@ -640,7 +640,7 @@ type: reference
           color: '#5AA7A7',
           oneLiner: 'Custom instruction sets that adjust how Claude works',
           when: 'Files read at startup; the style you select with outputStyle applies to every response',
-          description: [<>Each markdown file defines an output style: a set of instructions for Claude that, by default, also replaces the built-in software-engineering task instructions. Use this to adapt Claude Code for uses beyond coding, or to add teaching or review modes.</>, <>Select a built-in or custom style with <C>/config</C> or the <C>outputStyle</C> key in settings. Styles here are available in every project; project-level styles with the same name take precedence.</>],
+          description: [<>Each markdown file defines an output style: a set of instructions for Claude that, by default, also replaces the built-in software-engineering task instructions. Use this to adapt Claude Code for uses beyond coding, or to add teaching or review modes.</>, <>Select a built-in or custom style with <C>/output-style</C>, <C>/config</C>, or the <C>outputStyle</C> key in settings. Styles here are available in every project; project-level styles with the same name take precedence.</>],
           tips: ['Built-in styles Default, Proactive, Concise, Explanatory, and Learning are included with Claude Code; custom styles go here', <>Set <C>keep-coding-instructions: true</C> in frontmatter to keep the default task instructions alongside your additions</>, 'Switching styles mid-session applies from your next message; in the terminal, a style file you create or edit mid-session is picked up after a restart'],
           docsLink: '/en/output-styles',
           children: [{
@@ -1537,6 +1537,7 @@ Claude Code deletes the files in the paths below once they're older than [`clean
 | `feedback-bundles/`                                                                                                             | Redacted transcript archives written by `/feedback` on third-party providers or when no Anthropic credentials are configured, for sending to your Anthropic account team                                                                                                                             |
 | `feedback/drafts/`                                                                                                              | Queued [Claude-drafted feedback](/docs/en/tools-reference#sendfeedback-tool-behavior) awaiting your review in `/feedback`. Swept after `cleanupPeriodDays` or 30 days, whichever is shorter. When the queue is at its 10-draft limit, Claude Code deletes the oldest draft to make room.                  |
 | `usage-data/`                                                                                                                   | `report.html` and timestamped report copies written by [`/insights`](/docs/en/costs#analyze-your-usage-patterns), plus cached per-session analysis data used to build them                                                                                                                                |
+| `skills/.trash/`, `plugins/.trash/`                                                                                             | [Skills](/docs/en/skills#how-synced-skills-behave) and [plugins](/docs/en/plugins-reference#synced-plugins) synced from claude.ai that Claude Code removed. Moved here instead of deleted so you can recover the files                                                                                         |
 | `todos/`, `statsig/`, `logs/`                                                                                                   | Legacy directories from older versions. No longer written. The sweep removes their contents and then the empty directory.                                                                                                                                                                            |
 
 Session files in `sessions/`, auto memory, and Claude Desktop and Cowork transcripts each follow their own retention rule:
@@ -1637,23 +1638,24 @@ The command leaves `shell-snapshots/` and `backups/` alone because those are not
 
 You can also delete any of the application-data paths above by hand, apart from the [state files to keep](#state-files-to-keep). New sessions are unaffected. The table below shows what you lose for past sessions.
 
-| Delete                                                                                                                                         | You lose                                                                                                          |
-| ---------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |
-| `~/.claude/projects/`                                                                                                                          | Resume, continue, and rewind for past sessions, and auto memory for every project                                 |
-| `~/.claude/history.jsonl`                                                                                                                      | Up-arrow prompt recall, `Ctrl+R` history search, and `!` shell-command completion                                 |
-| `~/.claude/paste-cache/`                                                                                                                       | Pasted text in recalled prompts; see [paste large content](/docs/en/terminal-config#paste-large-content)               |
-| `~/.claude/uploads/`                                                                                                                           | Attachments that past [Remote Control](/docs/en/remote-control) sessions refer to by path                              |
-| `~/.claude/file-history/`                                                                                                                      | Checkpoint restore for past sessions                                                                              |
-| `~/.claude/stats-cache.json`                                                                                                                   | Historical totals shown by `/usage`                                                                               |
-| `~/.claude/usage-data/`                                                                                                                        | Past [`/insights`](/docs/en/costs#analyze-your-usage-patterns) reports and the cached analysis data used to build them |
-| `~/.claude/feedback-bundles/`                                                                                                                  | Feedback and bug-report archives you haven't yet sent to your Anthropic account team                              |
-| `~/.claude/feedback/drafts/`                                                                                                                   | [Claude-drafted feedback](/docs/en/tools-reference#sendfeedback-tool-behavior) you haven't sent                        |
-| `~/.claude/remote-settings.json`                                                                                                               | Nothing. Re-fetched on next launch.                                                                               |
-| `~/.claude/cache/changelog.md`                                                                                                                 | Nothing. Refreshed in the background.                                                                             |
-| `~/.claude/policy-limits.json`                                                                                                                 | Nothing. Refreshed automatically.                                                                                 |
-| `~/.claude/tasks/`                                                                                                                             | Task lists that a resumed session would pick up                                                                   |
-| `~/.claude/debug/`, `~/.claude/plans/`, `~/.claude/image-cache/`, `~/.claude/session-env/`, `~/.claude/shell-snapshots/`, `~/.claude/backups/` | Nothing user-facing                                                                                               |
-| `~/.claude/todos/`, `~/.claude/statsig/`, `~/.claude/logs/`                                                                                    | Nothing. Legacy directories not written by current versions.                                                      |
+| Delete                                                                                                                                         | You lose                                                                                                                                                       |
+| ---------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `~/.claude/projects/`                                                                                                                          | Resume, continue, and rewind for past sessions, and auto memory for every project                                                                              |
+| `~/.claude/history.jsonl`                                                                                                                      | Up-arrow prompt recall, `Ctrl+R` history search, and `!` shell-command completion                                                                              |
+| `~/.claude/paste-cache/`                                                                                                                       | Pasted text in recalled prompts; see [paste large content](/docs/en/terminal-config#paste-large-content)                                                            |
+| `~/.claude/uploads/`                                                                                                                           | Attachments that past [Remote Control](/docs/en/remote-control) sessions refer to by path                                                                           |
+| `~/.claude/file-history/`                                                                                                                      | Checkpoint restore for past sessions                                                                                                                           |
+| `~/.claude/stats-cache.json`                                                                                                                   | Historical totals shown by `/usage`                                                                                                                            |
+| `~/.claude/usage-data/`                                                                                                                        | Past [`/insights`](/docs/en/costs#analyze-your-usage-patterns) reports and the cached analysis data used to build them                                              |
+| `~/.claude/feedback-bundles/`                                                                                                                  | Feedback and bug-report archives you haven't yet sent to your Anthropic account team                                                                           |
+| `~/.claude/feedback/drafts/`                                                                                                                   | [Claude-drafted feedback](/docs/en/tools-reference#sendfeedback-tool-behavior) you haven't sent                                                                     |
+| `~/.claude/remote-settings.json`                                                                                                               | Nothing. Re-fetched on next launch.                                                                                                                            |
+| `~/.claude/cache/changelog.md`                                                                                                                 | Nothing. Refreshed in the background.                                                                                                                          |
+| `~/.claude/policy-limits.json`                                                                                                                 | Nothing. Refreshed automatically.                                                                                                                              |
+| `~/.claude/tasks/`                                                                                                                             | Task lists that a resumed session would pick up                                                                                                                |
+| `~/.claude/skills/.trash/`, `~/.claude/plugins/.trash/`                                                                                        | The chance to recover [synced skills](/docs/en/skills#how-synced-skills-behave) and [synced plugins](/docs/en/plugins-reference#synced-plugins) that Claude Code removed |
+| `~/.claude/debug/`, `~/.claude/plans/`, `~/.claude/image-cache/`, `~/.claude/session-env/`, `~/.claude/shell-snapshots/`, `~/.claude/backups/` | Nothing user-facing                                                                                                                                            |
+| `~/.claude/todos/`, `~/.claude/statsig/`, `~/.claude/logs/`                                                                                    | Nothing. Legacy directories not written by current versions.                                                                                                   |
 
 Don't delete `~/.claude.json`, `~/.claude/settings.json`, or `~/.claude/plugins/`: those hold your auth, preferences, and installed plugins.
 
diff --git a/content/en/docs/claude-code/claude-projects.md b/content/en/docs/claude-code/claude-projects.md
index 317a9876c0..1039335952 100644
--- a/content/en/docs/claude-code/claude-projects.md
+++ b/content/en/docs/claude-code/claude-projects.md
@@ -10,7 +10,7 @@
   Projects are in public beta on Pro and Max plans and rolling out gradually, starting with accounts that have used [cloud sessions](/docs/en/claude-code-on-the-web) and don't have existing projects in claude.ai chat or Cowork. They aren't available on Team or Enterprise plans yet. If **Projects** doesn't appear in the sidebar at [claude.ai/code](https://claude.ai/code) or in the Code tab of the [desktop app](/docs/en/desktop), the rollout hasn't reached your account, and you can [join the waitlist](https://claude.com/form/projects). [Run agents in parallel](/docs/en/agents) lists what you can use in the meantime.
 </Note>
 
-A project is one ongoing conversation where Claude coordinates a stream of related work for you. You tell it what needs doing and it starts a thread for each task. Each thread is a [cloud session](/docs/en/claude-code-on-the-web): Claude Code running in the cloud rather than on your machine. Threads run in parallel and keep going after you close the laptop.
+A project is one ongoing conversation where Claude coordinates a stream of related work for you. You tell it what needs doing and it starts a thread for each task. Each thread is a [cloud session](/docs/en/claude-code-on-the-web): Claude Code running in the cloud rather than on your machine. Threads run in parallel and keep going after you close the laptop, and you can check on them and steer them from your phone.
 
 Without a project, running several sessions means doing the coordinating yourself: you decide what each one works on, repeat the same background at the start of each, and check back to see which finished or needs an answer. With a project, you instead:
 
@@ -67,7 +67,7 @@ Here is how those parts connect, from you through the conversation to the thread
 
 ## Create a project
 
-You create and use projects at [claude.ai/code](https://claude.ai/code) or in the Code tab of the desktop app. There are two ways to start one:
+You create and use projects at [claude.ai/code](https://claude.ai/code), in the Code tab of the desktop app, or in the Claude mobile app for [iOS](https://apps.apple.com/us/app/claude-by-anthropic/id6473753684) and [Android](https://play.google.com/store/apps/details?id=com.anthropic.claude). In the browser and the desktop app there are two ways to start a project:
 
 * **From scratch**, when you know the stream of work you want Claude to run: open the **New project** dialog and name it. [Start a new project from scratch](#start-a-new-project-from-scratch) walks through the dialog.
 * **From a cloud session that's already doing the work**: choose **Continue as a project** from that session's menu, and Claude proposes the project's setup from what the session was doing. See [Start from an existing cloud session](#start-from-an-existing-cloud-session).
@@ -175,7 +175,11 @@ When a thread changes code, this is what it does unless you tell it otherwise:
 * **Pull request**: opens one when you ask, and can open one on its own for a bug fix or another concrete change.
 * **After it opens**: watches the pull request with [auto-fix](/docs/en/claude-code-on-the-web#auto-fix-pull-requests) turned on, whether or not auto-fix is on for your other cloud sessions. It pushes fixes when CI fails, addresses review comments, and replies in the thread when checks pass and the pull request is ready for you.
 
-The thread's card in the conversation shows a button for the pull request's next step when there is one, such as **Resolve conflicts**, **Fix CI**, **Address comments**, or **Merge it**. Clicking it sends that instruction to the thread as a message from you, so you can prompt the thread yourself instead of waiting for it to react to the pull request. **Review PR** opens the pull request on GitHub.
+When a thread has pushed a branch or opened a pull request, its card in the conversation can show a button for the next step:
+
+* **Resolve conflicts**, **Fix CI**, **Address comments**, and **Merge it** send that instruction to the thread as a message from you, so you can prompt the thread yourself instead of waiting for it to react to the pull request.
+* **Review PR** opens the pull request on GitHub.
+* **Create PR** appears when an idle thread has pushed a branch but hasn't opened a pull request. Clicking it creates the pull request from that branch directly rather than sending the thread an instruction to open one.
 
 To change when threads open pull requests, for example only when you ask, or which branch they start from, say so in the task or in [project instructions](#write-project-instructions).
 
@@ -313,7 +317,7 @@ Threads are cloud sessions, so they don't have the skills, MCP servers, plugins,
 * MCP servers: threads get their MCP tools from the connectors on your claude.ai account, which are MCP servers you connect once at [claude.ai/customize/connectors](https://claude.ai/customize/connectors) or through the **Manage connectors** link in **Project settings > Environment**. Every thread can use all of them with no per-project setup. The project conversation itself has no connectors, so send work that needs one as a task for a thread. In a project with one repository, threads also load MCP servers from that repository's [`.mcp.json`](/docs/en/cloud-environments#what-carries-over-from-your-setup). [How connectors reach Claude Code](/docs/en/mcp#how-connectors-reach-claude-code) lists the rules for cloud sessions and the settings that turn connectors off.
 * Command-line tools and packages: install them in the environment's [setup script](/docs/en/cloud-environments#setup-scripts).
 
-To see which connectors a running thread has at claude.ai/code, open the thread and select **Connectors** from the **+** menu beside its message box. Turning a connector off there removes it from that thread, and it stays off for threads started later until you turn it back on. A thread picks up a connector you add or reconnect after the next message you send it.
+To see which connectors a running thread has at claude.ai/code, open the thread and select **Connectors** from the **+** menu beside its message box. Turning a connector off there removes it from that thread and saves that as your account default, so new threads and claude.ai chats start without it until you turn it back on. A thread picks up a connector you add or reconnect after the next message you send it.
 
 ## Project settings reference
 
@@ -386,7 +390,7 @@ Several Claude Code features let more than one session work at the same time, so
 
 ## Limitations
 
-* Projects are available at claude.ai/code and in the desktop app, not in the terminal CLI or through Amazon Bedrock, Google Cloud's Agent Platform, or Microsoft Foundry. The CLI's [`claude project`](/docs/en/cli-reference) command, which manages local Claude Code state for a directory, is unrelated.
+* Projects are available at claude.ai/code, in the desktop app, and in the Claude mobile app, not in the terminal CLI or through Amazon Bedrock, Google Cloud's Agent Platform, or Microsoft Foundry. The CLI's [`claude project`](/docs/en/cli-reference) command, which manages local Claude Code state for a directory, is unrelated.
 * Project threads are [cloud sessions](/docs/en/claude-code-on-the-web) with Anthropic as the model provider. [Security](/docs/en/security) and [Data usage](/docs/en/data-usage) cover how cloud sessions are isolated and what's retained.
 * A local session can't be part of a project.
 * A thread's sandbox pauses between turns and resumes when the thread continues. If the sandbox can't be resumed, the thread continues from a fresh clone, so uncommitted changes can be lost. On long tasks, ask Claude to commit and push work in progress.
@@ -455,7 +459,7 @@ These messages name their own cause. The table gives the next step for each.
 | "The project's environment was removed"                                                        | Choose a different environment in **Project settings > Environment**; the change applies to new threads                                                                                                                   |
 | "Setup script failed"                                                                          | Click **Edit setup script** on the error, fix the script in the environment, then send another message. [Setup script failed](/docs/en/web-quickstart#setup-script-failed) lists common causes                                 |
 | "Claude ran out of context on this turn"                                                       | The thread filled its context window. If the message says the thread continues in a fresh session, it carries on by itself; otherwise ask Claude in the project conversation to start a new thread for the remaining work |
-| "Reached the turn limit"                                                                       | The thread hit the cap on steps for one message. Send another message with a smaller or more specific request, or ask Claude to split the task across threads                                                             |
+| "Reached the turn limit"                                                                       | The thread reached the cap on agentic turns that [`CLAUDE_CODE_MAX_TURNS`](/docs/en/env-vars) sets. Send another message to continue, or raise or remove that variable where it's set                                          |
 
 ## Related resources
 
diff --git a/content/en/docs/claude-code/cloud-environments.md b/content/en/docs/claude-code/cloud-environments.md
index 211e8dac69..a82f9f5da5 100644
--- a/content/en/docs/claude-code/cloud-environments.md
+++ b/content/en/docs/claude-code/cloud-environments.md
@@ -175,7 +175,7 @@ Each environment sets one network access level, which controls the outbound conn
 To change an environment's network access, [open it for editing](#configure-your-environment) and use the **Network access** selector in the dialog. The cloud icon that opens the selector appears on the app surfaces listed under [The Default environment](#the-default-environment) and in the [routine editor](/docs/en/routines#environments-and-network-access); personal environments don't have a separate page in your claude.ai account settings.
 
 <Note>
-  MCP connectors you enable on a session or routine work without adding their hosts to **Allowed domains**, because connector traffic travels through Anthropic's servers rather than the session's network. You configure connectors per session or per routine; remove any you don't need to limit which tools Claude can reach. This relies on the same Anthropic-bound channel noted under [Security and isolation](/docs/en/claude-code-on-the-web#security-and-isolation).
+  MCP connectors you enable on a session or routine work without adding their hosts to **Allowed domains**, because connector traffic travels through Anthropic's servers rather than the session's network. This relies on the same Anthropic-bound channel noted under [Security and isolation](/docs/en/claude-code-on-the-web#security-and-isolation). Turn off any connector you don't need to limit which tools Claude can reach.
 </Note>
 
 ### Access levels
@@ -213,7 +213,7 @@ If your organization uses [artifacts](/docs/en/artifacts#availability), you don'
 * **Sessions in this environment open another organization's public artifacts**: Claude Code fetches those from the host directly, so add it to this list.
 * **You're configuring the local CLI or a self-hosted runner**: keep the host in that allowlist. See [network access requirements](/docs/en/network-config#network-access-requirements) and the self-hosted [network requirements](/docs/en/self-hosted-environments-deploy#network-requirements).
 
-Each environment has its own allowed-domains list; there's no organization-level allowlist that admins can push to every member's environments. [Server-managed settings](/docs/en/server-managed-settings) still apply inside cloud sessions, but none of them adds domains to the environment's network allowlist.
+Each environment has its own allowed-domains list; there's no organization-level allowlist that admins can push to every member's environments. [Server-managed settings](/docs/en/server-managed-settings) still apply inside cloud sessions, but none of them adds domains to the environment's network allowlist. To give a team one standard list, an Owner can create an [organization-shared environment](#organization-shared-environments) with **Custom** network access and that list.
 
 ### GitHub proxy
 
diff --git a/content/en/docs/claude-code/commands.md b/content/en/docs/claude-code/commands.md
index 06954c5e3d..9a45eb29fc 100644
--- a/content/en/docs/claude-code/commands.md
+++ b/content/en/docs/claude-code/commands.md
@@ -68,7 +68,7 @@ In the table below, `<arg>` indicates a required argument and `[arg]` indicates
 | `/code-review [low\|medium\|high\|xhigh\|max\|ultra] [--fix] [--comment] [pr#\|branch\|path]`                | **[Skill](/docs/en/skills#bundled-skills).** Review the current diff, or a PR number, branch, or path you pass, for correctness bugs and cleanup opportunities. Pass `--fix` to apply findings, `--comment` to post them on the GitHub PR or GitLab merge request, or `ultra` to run a deep [cloud review](/docs/en/ultrareview). Posting to a GitLab merge request requires Claude Code v2.1.257 or later. With `ultra` on a `github.com` PR target, pass `--post` to preselect [posting the finished findings to the PR](/docs/en/ultrareview#post-findings-to-the-pull-request) in the launch dialog; `--post` requires Claude Code v2.1.227 or later. See [Review a diff locally](/docs/en/code-review#review-a-diff-locally) for the effort levels, targeting, and how it relates to `/simplify`. Alias: `/review`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | `/color [color\|default]`                                                                                    | Set the prompt bar color for the current session. Available colors: `red`, `blue`, `green`, `yellow`, `purple`, `orange`, `pink`, `cyan`. Use `default` to reset, or run with no argument to pick a random color. When [Remote Control](/docs/en/remote-control) is connected, the color syncs to claude.ai/code. Also available in non-interactive mode (`-p`); requires Claude Code v2.1.205 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `/compact [instructions]`                                                                                    | Free up context by summarizing the conversation so far. Optionally pass focus instructions for the summary. See [how compaction handles rules, skills, and memory files](/docs/en/context-window#what-survives-compaction)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
-| `/config [key=value ...]`                                                                                    | Open the [Settings](/docs/en/settings) interface to adjust theme, model, [output style](/docs/en/output-styles), and other preferences. From v2.1.181, pass one or more `key=value` pairs to set a setting directly without opening the interface, for example `/config thinking=false`. From v2.1.182, named shorthand keys are also accepted, such as `/config theme=dark` or `/config model=sonnet`. The `key=value` form also works in non-interactive mode (`-p`) and from the Claude mobile app via [Remote Control](/docs/en/remote-control). The `key=value` form can't turn on a setting that needs your confirmation in the panel, such as [`autoContinueAtUsageLimit`](/docs/en/interactive-mode#turn-automatic-continue-off), though it can turn one off. Run `/config --help` to list the keys it accepts. Alias: `/settings`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| `/config [key=value ...]`                                                                                    | Open the [Settings](/docs/en/settings) interface to adjust theme, model, [output style](/docs/en/output-styles), and other preferences. Pass one or more `key=value` pairs to set a setting directly without opening the interface, for example `/config thinking=false`. From v2.1.182, named shorthand keys are also accepted, such as `/config theme=dark` or `/config model=sonnet`. The `key=value` form also works in non-interactive mode (`-p`) and from the Claude mobile app via [Remote Control](/docs/en/remote-control). The `key=value` form can't turn on a setting that needs your confirmation in the panel, such as [`autoContinueAtUsageLimit`](/docs/en/interactive-mode#turn-automatic-continue-off), though it can turn one off. Run `/config --help` to list the keys it accepts. Alias: `/settings`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `/context [all]`                                                                                             | Visualize current context usage as a colored grid. Shows optimization suggestions for context-heavy tools, memory bloat, and capacity warnings. When the conversation exceeds the context window, the output includes a [warning](/docs/en/errors#context-exceeds-the-token-limit) showing how far over the limit you are and which command frees space. In [fullscreen mode](/docs/en/fullscreen), `/context` collapses the per-item breakdown to keep the grid visible. Pass `all` to expand it                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `/copy [N]`                                                                                                  | Copy the last assistant response to clipboard. Pass a number `N` to copy the Nth-latest response: `/copy 2` copies the second-to-last. When code blocks are present, shows an interactive picker to select individual blocks or the full response. Press `w` in the picker to write the selection to a file instead of the clipboard, which is useful over SSH                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | `/cost`                                                                                                      | Alias for `/usage`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
@@ -108,6 +108,7 @@ In the table below, `<arg>` indicates a required argument and `[arg]` indicates
 | `/memory`                                                                                                    | Edit `CLAUDE.md` files, enable or disable [auto memory](/docs/en/memory#auto-memory), and view auto memory entries                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | `/mobile`                                                                                                    | Show QR code to download the Claude mobile app. Aliases: `/ios`, `/android`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | `/model [model]`                                                                                             | Switch the AI model and save it as your default for new sessions. For models that support it, use left/right arrows to [adjust effort level](/docs/en/model-config#adjust-effort-level). With no argument, opens a picker; press `s` on a row to switch for the current session only. See [when Claude Code asks you to confirm the switch](/docs/en/prompt-caching#switching-models). Once you confirm the switch, if Claude Code asks, Claude Code applies the change without waiting for the current response to finish. Before v2.1.242, Claude Code decided from a feature flag it fetched from Anthropic whether to run the command mid-turn or queue it until the turn finished, and always queued it in a session that doesn't [fetch feature flags](/docs/en/env-vars#features-that-need-feature-flag-fetching), such as on a [third-party provider](/docs/en/third-party-integrations). Also available in non-interactive mode (`-p`) with a model argument instead of the picker, where it applies to the current session only and isn't saved as your default; requires Claude Code v2.1.205 or later                                                                                                                                                                                                                                                                                                         |
+| `/output-style [style]`                                                                                      | List [output styles](/docs/en/output-styles) or switch to one, for example `/output-style concise`. See [Change your output style](/docs/en/output-styles#change-your-output-style). Requires Claude Code v2.1.269 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `/passes`                                                                                                    | Share a free week of Claude Code with friends. Only visible if your account is eligible                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `/permissions`                                                                                               | Manage allow, ask, and deny rules for tool permissions. Opens an interactive dialog where you can view rules by scope, add or remove rules, manage working directories, and review [recent auto mode denials](/docs/en/auto-mode-config#review-denials). You can also view and edit [auto mode classifier rules](/docs/en/auto-mode-config#edit-rules-from-permissions) from the dialog's **Auto mode** tab. When you run it while Claude is responding, Claude Code opens the dialog immediately and applies your changes starting with Claude's next tool call in the same turn. Before v2.1.234, Claude Code queued the command until the turn finished. Alias: `/allowed-tools`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | `/plan [description]`                                                                                        | Enter plan mode directly from the prompt. Pass an optional description to enter plan mode and immediately start with that task, for example `/plan fix the auth bug`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
diff --git a/content/en/docs/claude-code/discover-plugins.md b/content/en/docs/claude-code/discover-plugins.md
index fdff0febf8..33c4e790e4 100644
--- a/content/en/docs/claude-code/discover-plugins.md
+++ b/content/en/docs/claude-code/discover-plugins.md
@@ -217,6 +217,7 @@ Use the `/plugin marketplace add` command to add marketplaces from different sou
 * **Git URLs**: any git repository URL, including GitLab, Bitbucket, and self-hosted servers
 * **Local paths**: directories or direct paths to `marketplace.json` files
 * **Remote URLs**: direct URLs to hosted `marketplace.json` files
+* **claude.ai**: marketplaces hosted on claude.ai for your account, such as your organization's plugin library, which you [add by name from the **Marketplaces** tab or your shell](#add-from-claude-ai) rather than by source
 
 ### Add from GitHub
 
@@ -286,9 +287,27 @@ Add a remote `marketplace.json` file via URL:
   URL-based marketplaces have some limitations compared to Git-based marketplaces. If plugin installs from a URL-based marketplace fail, see [Troubleshooting](/docs/en/plugin-marketplaces#plugins-with-relative-paths-fail-in-url-based-marketplaces).
 </Note>
 
+### Add from claude.ai
+
+In terminal sessions where [plugins sync from your claude.ai account](/docs/en/plugins-reference#synced-plugins), claude.ai can also list marketplaces for you, such as your organization's plugin library and your own claude.ai uploads. `claude plugin marketplace list` prints them in a `From claude.ai:` section, and the `/plugin` **Marketplaces** tab lists them. Select one there to add it. Adding a marketplace from claude.ai requires Claude Code v2.1.273 or later.
+
+To add one from your shell, run `claude plugin marketplace add` with the `--claudeai` flag and the name shown in the list:
+
+```bash theme={null}
+claude plugin marketplace add --claudeai claudeai-organization-library
+```
+
+Claude Code registers the marketplace under a local name that starts with `claudeai-`, derived from the name that claude.ai lists it under: a marketplace listed as "Organization library" registers as `claudeai-organization-library`. Install its plugins by that name, for example with `claude plugin install <plugin>@claudeai-organization-library`.
+
+If you sign out or sign in with a different account, the marketplace stays configured but shows no plugins, and the plugins you already installed from it keep loading.
+
+The `From claude.ai:` section can also list git-based marketplaces shared through claude.ai. You add those with the ordinary `marketplace add` command, using the source that the list prints.
+
 ## Install plugins
 
-Once you've added marketplaces, you can install a plugin by name:
+Once you've added marketplaces, you can install a plugin by name. For a marketplace you haven't added yet, you can instead [add it and install in one command](#add-a-marketplace-and-install-in-one-command).
+
+To install by name:
 
 ```shell theme={null}
 /plugin install plugin-name@marketplace-name
@@ -330,6 +349,18 @@ The `claude plugin install` shell command doesn't run in a session, so Claude Co
   Make sure you trust a plugin before installing it. Anthropic doesn't control what MCP servers, files, or other software are included in plugins and can't verify that they work as intended. Check each plugin's homepage for more information.
 </Warning>
 
+### Add a marketplace and install in one command
+
+To install a plugin from a marketplace you haven't added yet, name the marketplace source with `--marketplace`. Requires Claude Code v2.1.275 or later.
+
+```shell theme={null}
+/plugin install quality-review-plugin --marketplace your-org/plugins
+```
+
+The source takes [the same forms as `/plugin marketplace add`](#add-marketplaces), such as GitHub `owner/repo`, a git URL, or a local path, except that it can't contain spaces. Give the plugin name bare, without an `@marketplace` suffix.
+
+If you haven't added that marketplace yet, Claude Code shows the source it resolved and asks you to confirm before adding it. Declining cancels the install and adds nothing. Once the marketplace is added, the plugin's details open and you choose an [installation scope](/docs/en/settings#where-settings-live).
+
 ## Manage installed plugins
 
 Run `/plugin` and go to the **Installed** tab to view, enable, disable, or uninstall your plugins. The list is grouped by scope and sorted so you see problems first: plugins with load errors or unresolved dependencies appear at the top, followed by your favorites, with disabled plugins folded behind a collapsed header at the bottom.
@@ -482,7 +513,7 @@ Toggle auto-update for individual marketplaces through the UI:
 3. Choose a marketplace from the list
 4. Select **Enable auto-update** or **Disable auto-update**
 
-`claude-plugins-official` and most other official Anthropic marketplaces have auto-update enabled by default. Third-party and local development marketplaces have auto-update disabled by default.
+`claude-plugins-official`, most other official Anthropic marketplaces, and [marketplaces added from claude.ai](#add-from-claude-ai) have auto-update enabled by default. Other third-party marketplaces and local development marketplaces have auto-update disabled by default.
 
 Administrators can also set `"autoUpdate": true` on each [`extraKnownMarketplaces`](/docs/en/settings-reference#extraknownmarketplaces) entry in managed settings to enable auto-update for an organization marketplace without requiring each user to toggle it.
 
diff --git a/content/en/docs/claude-code/env-vars.md b/content/en/docs/claude-code/env-vars.md
index faa439a718..adb1dad4d5 100644
--- a/content/en/docs/claude-code/env-vars.md
+++ b/content/en/docs/claude-code/env-vars.md
@@ -213,8 +213,10 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `CLAUDE_CODE_AUTO_BACKGROUND_WORKER_CHECKIN_SECONDS`    | When `CLAUDE_AUTO_BACKGROUND_TASKS` is enabled, seconds between reminders to Claude to check on [background subagents](/docs/en/sub-agents#run-subagents-in-foreground-or-background) that are still running. Accepts a plain integer from `1` to `86400` only; any other value or spelling reads as unset. When unset, there are no check-in reminders. Requires Claude Code v2.1.248 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `CLAUDE_CODE_AUTO_COMPACT_WINDOW`                       | Set the [auto-compact window](/docs/en/model-config#set-the-auto-compact-window) in tokens, from `100000` to `1000000`. Accepts a plain integer such as `500000` only: a value like `500k` reads as `500` and clamps to the 100K minimum. The effective window is also capped at the model's context window. Takes precedence over the `/autocompact` command, the `--autocompact` flag, and the `autoCompactWindow` setting. The status line's `used_percentage` always measures against the model's full context window, so once this variable is set, that percentage no longer indicates when compaction will run                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | `CLAUDE_CODE_AUTO_CONNECT_IDE`                          | Override automatic [IDE connection](/docs/en/vs-code). By default, Claude Code connects automatically when launched inside a supported IDE's integrated terminal. Set to `false` to prevent this. Set to `true` to force a connection attempt when auto-detection fails, such as when tmux obscures the parent terminal. Takes precedence over the [`autoConnectIde`](/docs/en/settings-reference#autoconnectide) global config setting                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
+| `CLAUDE_CODE_AUTO_MODE_SERVER`                          | On Amazon Bedrock, Google Cloud's Agent Platform, and Microsoft Foundry, set to `1` to have the platform's server-side classifier review [auto mode](/docs/en/permission-modes#eliminate-prompts-with-auto-mode) actions; where the platform doesn't run the classifier, Claude Code falls back to its own classifier requests. When unset or `0`, the classifier runs through requests that Claude Code itself sends. Has no effect on other providers, including the Anthropic API. Requires Claude Code v2.1.271 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `CLAUDE_CODE_AWS_CHAIN_RESOLVE_TIMEOUT_MS`              | Time in milliseconds Claude Code waits for the AWS default credential provider chain to produce credentials before the request fails with [`AWS default-chain credential resolve timed out`](/docs/en/errors#aws-default-chain-credential-resolve-timed-out) (default: `60000`). Raise it when a step in your chain legitimately needs longer, such as a browser-based SSO sign-in with MFA through a wrapper like `aws-vault`. Applies wherever Claude Code signs with the default chain: [Amazon Bedrock](/docs/en/amazon-bedrock#credential-caching-and-resolution-timeout), [Claude Platform on AWS](/docs/en/claude-platform-on-aws), and the [Mantle endpoint](/docs/en/amazon-bedrock#use-the-mantle-endpoint). Requires Claude Code v2.1.207 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | `CLAUDE_CODE_BASH_EDIT_DIFF`                            | Set to `0` to turn off the [diff of the files a Bash command changed](/docs/en/hooks#bash), or `1` to record it in every permission mode. Takes precedence over the [`bashEditDiffEnabled`](/docs/en/settings-reference#basheditdiffenabled) setting. Requires Claude Code v2.1.269 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
+| `CLAUDE_CODE_BG_TASKS_REPORT_RUNNING`                   | Set to `0` to make a non-interactive session report an idle status to its host at every turn end, even while background work is still running. By default, the session keeps reporting a running status past turn end while background work such as a background agent or a [workflow](/docs/en/workflows) run is still live. This keeps a host that watches the status, such as a remote session list, from announcing that Claude is waiting for your input mid-work. Background shell commands, such as a dev server, don't hold the running status. The running-status default and the `0` opt-out require Claude Code v2.1.269 or later; on earlier versions, set `1` to hold the running status                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | `CLAUDE_CODE_BRIDGE_SESSION_ID`                         | Set automatically in Bash tool and [hook command](/docs/en/hooks) subprocesses while the session has an active [Remote Control](/docs/en/remote-control) connection, and removed when the connection ends. The value is the session's ID in `session_` form, the same identifier that appears in the session's `claude.ai/code` URL, so a script can link back to the session that ran it. Requires Claude Code v2.1.199 or later. In [cloud sessions](/docs/en/claude-code-on-the-web), read `CLAUDE_CODE_REMOTE_SESSION_ID` instead                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `CLAUDE_CODE_BS_AS_CTRL_BACKSPACE`                      | Set to `0` to make Claude Code read the `0x08` byte, also written `^H`, as plain Backspace, or `1` to read it as Ctrl+Backspace. Either value replaces the platform default. By default, Claude Code reads it as Ctrl+Backspace on Windows, except when `TERM_PROGRAM` is `mintty` or `TERM` is `cygwin`, and as plain Backspace on macOS and Linux. Set `0` in a Windows terminal where [Backspace deletes a whole word](/docs/en/terminal-config#fix-backspace-deleting-a-whole-word-on-windows)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | `CLAUDE_CODE_CERT_STORE`                                | Comma-separated list of CA certificate sources for TLS connections. `bundled` is the Mozilla CA set shipped with Claude Code. `system` is the operating system trust store, read only on runtimes with `tls.getCACertificates`: the native binary, or Node 22.15 or later for npm installs. See [CA certificate store](/docs/en/network-config#ca-certificate-store). Default is `bundled,system`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
@@ -263,9 +265,9 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `CLAUDE_CODE_DISABLE_THINKING`                          | Set to `1` to omit the `thinking` parameter from API requests entirely. This is a compatibility option for proxies and gateways that reject the parameter. On models that think by default, omitting the parameter means the model may still think. To explicitly disable [extended thinking](https://platform.claude.com/docs/en/build-with-claude/extended-thinking) on the Anthropic API, use `MAX_THINKING_TOKENS=0` instead. Neither variable turns thinking off on Fable models, which can't have thinking turned off. On [third-party providers](/docs/en/third-party-integrations), `MAX_THINKING_TOKENS=0` likewise omits the parameter, so the two variables behave the same there                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `CLAUDE_CODE_DISABLE_UNKNOWN_MODEL_WINDOW_ENFORCEMENT`  | Set to `1` to skip proactive [auto-compaction](/docs/en/costs#reduce-token-usage) when Claude Code doesn't recognize the model ID, such as an [LLM gateway](/docs/en/llm-gateway) alias. Without this variable, Claude Code compacts at the context window it assumes for the ID. `CLAUDE_CODE_MAX_CONTEXT_TOKENS` can correct the assumed window instead; see [Correct the window for a gateway or custom model ID](/docs/en/model-config#correct-the-window-for-a-gateway-or-custom-model-id) for when each variable applies. Requires Claude Code v2.1.223 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `CLAUDE_CODE_DISABLE_VIRTUAL_SCROLL`                    | Set to `1` to disable virtual scrolling in [fullscreen rendering](/docs/en/fullscreen) and render every message in the transcript. Use this if scrolling in fullscreen mode shows blank regions where messages should appear                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
+| `CLAUDE_CODE_DISABLE_WINDOWS_SHELL_LAUNCHER`            | Set to `1` to start [PowerShell tool](/docs/en/tools-reference#powershell-tool) commands on Windows directly instead of through the `cmd.exe` launcher. By default, the launcher lets a PowerShell command [running in the background](/docs/en/tools-reference#background-commands) [carry over to the session's next process](/docs/en/agent-view#the-supervisor-process), such as when you [background the session](/docs/en/agent-view#from-inside-a-session). If you set the variable, a backgrounded PowerShell command stops when the session's process exits. Bash commands aren't affected. Requires Claude Code v2.1.269 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `CLAUDE_CODE_DISABLE_WORKFLOWS`                         | Set to `1` to disable [workflows](/docs/en/workflows#turn-workflows-off). Equivalent to the [`disableWorkflows`](/docs/en/settings-reference#disableworkflows) setting                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `CLAUDE_CODE_EFFORT_LEVEL`                              | Set the effort level for supported models. Values: `low`, `medium`, `high`, `xhigh`, `max`, or `auto` to use the model default. Available levels depend on the model. Takes precedence over `--effort`, `/effort`, and the `modelSettings` and `effortLevel` settings. A [`maxEffortLevel`](/docs/en/settings-reference#maxeffortlevel) cap still applies. See [Adjust effort level](/docs/en/model-config#adjust-effort-level)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
-| `CLAUDE_CODE_ENABLE_APPEND_SUBAGENT_PROMPT`             | Set to `1` to enable appending extra text to the end of the system prompt of every [subagent](/docs/en/sub-agents) other than a [forked subagent](/docs/en/sub-agents#fork-the-current-conversation). The [`--append-subagent-system-prompt`](/docs/en/cli-reference#cli-flags) and [`--append-subagent-system-prompt-file`](/docs/en/cli-reference#cli-flags) flags supply the appended text and set this variable automatically, so you don't need to set it yourself. Requires Claude Code v2.1.205 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | `CLAUDE_CODE_ENABLE_AUTO_MODE`                          | Accepted for compatibility with older releases and has no effect. Auto mode is available by default on every provider, including Amazon Bedrock, Google Cloud's Agent Platform, Microsoft Foundry, and signed-in [Claude apps gateway](/docs/en/claude-apps-gateway) sessions. In v2.1.158 through v2.1.206, setting this to `1` was required to make [auto mode](/docs/en/permission-modes#eliminate-prompts-with-auto-mode) available on those providers                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | `CLAUDE_CODE_ENABLE_AWAY_SUMMARY`                       | Override [session recap](/docs/en/interactive-mode#session-recap) availability. Set to `0` to force recaps off regardless of the `/config` toggle. Set to `1` to force recaps on when [`awaySummaryEnabled`](/docs/en/settings-reference#awaysummaryenabled) is `false`. Takes precedence over the setting and `/config` toggle                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
 | `CLAUDE_CODE_ENABLE_BACKGROUND_PLUGIN_REFRESH`          | Set to `1` to refresh plugin state at turn boundaries in [non-interactive mode](/docs/en/headless) after a background install completes. Off by default because the refresh changes the system prompt mid-session, which invalidates [prompt caching](/docs/en/prompt-caching) for that turn                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
@@ -286,6 +288,7 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `CLAUDE_CODE_FORCE_SYNC_OUTPUT`                         | Set to `1` to force-enable DEC private mode 2026 [synchronized output](https://gist.github.com/christianparpart/d8a62cc1ab659194337d73e399004036) when your terminal supports it but is not auto-detected. Useful for emulators such as Emacs `eat` that implement BSU/ESU but do not reply to the capability probe. Has no effect under tmux. Unlike `CLAUDE_CODE_NO_FLICKER`, which switches to [fullscreen rendering](/docs/en/fullscreen), this doesn't change the renderer                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `CLAUDE_CODE_FORK_SUBAGENT`                             | Controls [fork mode](/docs/en/sub-agents#turn-fork-mode-on-or-off), which lets Claude spawn [forked subagents](/docs/en/sub-agents#fork-the-current-conversation) itself and is on by default in interactive sessions only. Set to `1` to turn it on in `claude -p` and the Agent SDK as well, or `0` to turn it off in every kind of session. You can run `/subtask` whether or not fork mode is on. The interactive default requires Claude Code v2.1.232 or later; on earlier versions, set the variable to `1` to turn fork mode on                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
 | `CLAUDE_CODE_FORWARD_SUBAGENT_TEXT`                     | Set to `1` to emit [subagent](/docs/en/sub-agents) text and thinking blocks in `claude -p --output-format stream-json` output, the same behavior as the [`--forward-subagent-text`](/docs/en/cli-reference#cli-flags) flag. Use the variable when a harness invokes `claude` and can't pass the flag itself. Unlike the flag, which exits with an error outside non-interactive mode with stream-json output, the variable is ignored there so that nested invocations keep working when it's set process-wide. Requires Claude Code v2.1.211 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
+| `CLAUDE_CODE_GATEWAY_MODEL_DISCOVERY_TIMEOUT_MS`        | Timeout in milliseconds for the [gateway model discovery](/docs/en/llm-gateway-protocol#model-discovery) request that `CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY` turns on (default: `3000`). Raise it when your gateway needs longer than three seconds to answer `/v1/models` at startup. Takes plain digits only; `0`, negative values, and other spellings keep the default. Requires Claude Code v2.1.269 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | `CLAUDE_CODE_GIT_BASH_PATH`                             | Windows only: path to the Git Bash executable (`bash.exe`). Use when Git Bash is installed but not in your PATH. If the path doesn't exist or the file isn't named `bash.exe`, `sh.exe`, `bash`, or `sh`, Claude Code ignores the variable and auto-detects Git Bash as if it were unset, logging a warning visible with `--debug`. Before v2.1.219, Claude Code exited at startup when the path didn't exist, and used any existing file as the shell without checking that it was bash or sh. See [Windows setup](/docs/en/setup#set-up-on-windows)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | `CLAUDE_CODE_GLOB_HIDDEN`                               | Set to `false` to exclude dotfiles from results when Claude invokes the [Glob tool](/docs/en/tools-reference#glob-tool-behavior). Included by default. Does not affect `@` file autocomplete, `ls`, Grep, or Read                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `CLAUDE_CODE_GLOB_NO_IGNORE`                            | Set to `false` to make the [Glob tool](/docs/en/tools-reference#glob-tool-behavior) respect `.gitignore` patterns. By default, Glob returns all matching files including gitignored ones. Does not affect `@` file autocomplete, which has its own [`respectGitignore` setting](/docs/en/settings-reference#respectgitignore)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
@@ -306,6 +309,7 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `CLAUDE_CODE_MAX_WEB_SEARCHES_PER_SESSION`              | Cap on the total number of [WebSearch](/docs/en/tools-reference#websearch-tool-behavior) calls one session can make (default: 200). When Claude reaches the cap, further WebSearch calls return a notice telling it to continue with the information it already gathered. Accepts a positive whole number with no upper bound. Anything else is ignored and the default applies, so the cap can be raised but not turned off. Requires Claude Code v2.1.212 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | `CLAUDE_CODE_MCP_ALLOWLIST_ENV`                         | Set to `1` to spawn stdio MCP servers with only a safe baseline environment plus the server's configured `env`, instead of inheriting your shell environment                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `CLAUDE_CODE_MCP_AUTO_BACKGROUND_MS`                    | Elapsed time in milliseconds before a still-running MCP tool call [moves to a background task](/docs/en/mcp#automatic-backgrounding-of-long-tool-calls) (default: 120000, or 2 minutes). Set to `0` to turn automatic backgrounding off. Requires Claude Code v2.1.212 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
+| `CLAUDE_CODE_MCP_STARTUP_WAIT_MS`                       | How long in milliseconds the first turn of a [non-interactive](/docs/en/headless) session waits for MCP servers that are still connecting, in place of the default [first-turn wait](/docs/en/agent-sdk/mcp#connection-timing). When set, the wait covers every pending server. Set to `0` to skip the wait. A [`--permission-prompt-tool`](/docs/en/cli-reference#cli-flags) server keeps its own `MCP_TIMEOUT` wait regardless of the value. Requires Claude Code v2.1.274 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `CLAUDE_CODE_MCP_TOOL_IDLE_TIMEOUT`                     | Idle timeout in milliseconds for MCP tool calls. When a stdio, HTTP, SSE, WebSocket, or [claude.ai connector](/docs/en/mcp#use-mcp-servers-from-claude-ai) MCP server sends no response and no progress notification for this long, the tool call aborts with an error instead of waiting for the overall `MCP_TOOL_TIMEOUT`. Overrides the per-transport defaults of 300000 (5 minutes) for network servers and 1800000 (30 minutes) for stdio servers. Set to `0` to disable the idle check. Values below 1000 are raised to one second, and the value is capped at the effective `MCP_TOOL_TIMEOUT`. A per-server `timeout` in `.mcp.json` of at least 1000 raises that server's idle window to at least the `timeout` value. Doesn't apply to IDE servers or SDK in-process servers. Requires Claude Code v2.1.187 or later. Before v2.1.203, stdio servers were exempt from the idle timeout                                                                                                                                                                                                                                                                                                                                                                                                               |
 | `CLAUDE_CODE_MESSAGING_SOCKET`                          | Set by Claude Code, not by you: in sessions that bind an [inbox socket](/docs/en/cross-session-messaging#the-sessions-inbox-socket), Claude Code exports that socket's path to hooks and Bash commands when it binds the socket. In a session that starts with messaging on, Claude Code binds the socket before any hook runs. Other sessions on the machine deliver messages to this path. Each session exports its own socket rather than one inherited from a parent, and messages arriving on it go through the session's [inbound controls](/docs/en/cross-session-messaging#control-inbound-messages). Settings `env` blocks can't set it. Requires Claude Code v2.1.224 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | `CLAUDE_CODE_MESSAGING_TOKEN`                           | Set by Claude Code, not by you: in sessions that bind an [inbox socket](/docs/en/cross-session-messaging#the-sessions-inbox-socket), Claude Code exports this per-session token to hooks and Bash commands alongside `CLAUDE_CODE_MESSAGING_SOCKET`. A script posting to the socket can send `{"type":"auth","token":"<token>"}` as its first line to prove it belongs to the session. On native Windows, Claude Code requires this line and closes any connection that doesn't open with a valid one. The [own-child rules](/docs/en/cross-session-messaging#the-sessions-inbox-socket) say when Claude Code consults the token. Each session exports its own token, never one inherited from a parent session. Settings `env` blocks can't set it. Requires Claude Code v2.1.228 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
@@ -341,7 +345,7 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `CLAUDE_CODE_REMOTE_SESSION_ID`                         | Set automatically in [cloud sessions](/docs/en/claude-code-on-the-web) to the current session's ID. Read this to construct a link back to the session transcript. See [Link output back to the session](/docs/en/cloud-environments#link-output-back-to-the-session)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `CLAUDE_CODE_RESTRICTED`                                | Set to `1` to start the session in restricted mode, the same as passing [`--restricted`](/docs/en/cli-reference#cli-flags). Claude Code ignores this variable in a settings file's `env` block. Requires Claude Code v2.1.248 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
 | `CLAUDE_CODE_RESUME_INTERRUPTED_TURN`                   | Set to `1` to automatically resume if the previous session ended mid-turn. Used in SDK mode so the model continues without requiring the SDK to re-send the prompt. To turn this off, unset the variable or set it to `0`. Before v2.1.221, Claude Code ignored `0` and other falsy values, so setting `0` still triggered the resume in non-interactive mode and unsetting the variable was the only way to turn it off                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
-| `CLAUDE_CODE_RESUME_INTERRUPTED_TURN_MAX_AGE_MS`        | Maximum age in milliseconds of the last transcript message for a session that ended mid-turn to continue automatically on resume. When the last message is older than this bound, Claude Code skips both the `CLAUDE_CODE_RESUME_INTERRUPTED_TURN` automatic resume and the injected `CLAUDE_CODE_RESUME_PROMPT` continuation message, and the session starts idle so you continue explicitly. Unset or `0` means no bound; a negative or non-numeric value applies a one-hour bound. Spawn scripts for long-running agents can set this so a restart against an old transcript doesn't re-run a stale prompt. Claude Code sets a one-hour bound itself when it restarts a crashed [agent view](/docs/en/agent-view) session that inherited its conversation from an interactive session. Requires Claude Code v2.1.211 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| `CLAUDE_CODE_RESUME_INTERRUPTED_TURN_MAX_AGE_MS`        | Maximum age in milliseconds of the last transcript message for a session that ended mid-turn to continue automatically on resume. When the last message is older than this bound, Claude Code skips both the `CLAUDE_CODE_RESUME_INTERRUPTED_TURN` automatic resume and the injected `CLAUDE_CODE_RESUME_PROMPT` continuation message, and the session starts idle so you continue explicitly. Unset or `0` means no bound, except that a turn whose last request failed with an API error resumes only while that error is less than six hours old. A positive value bounds every turn, including those; a negative or non-numeric value applies a one-hour bound. Spawn scripts for long-running agents can set this so a restart against an old transcript doesn't re-run a stale prompt. Claude Code sets a one-hour bound itself when it restarts a crashed [agent view](/docs/en/agent-view) session that inherited its conversation from an interactive session. Requires Claude Code v2.1.211 or later                                                                                                                                                                                                                                                                                                  |
 | `CLAUDE_CODE_RESUME_PROMPT`                             | Override the continuation message injected when resuming a session that ended mid-turn. Defaults to `Continue from where you left off.`. Spawn scripts for long-running agents can set this to a more directive boot message. An empty string uses the default                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | `CLAUDE_CODE_RETRY_WATCHDOG`                            | Set to `1` for unattended sessions such as eval harnesses, CI jobs, or remote workers. Retries `429` and `529` capacity errors indefinitely instead of failing after `CLAUDE_CODE_MAX_RETRIES` attempts. Claude Code fails at once when a standard-speed request gets a `429` that reports a spend limit or exhausted usage credits, even one from a [gateway spend cap](/docs/en/errors#spend-limit-reached) that resets on a schedule. Before v2.1.239, the watchdog retried these indefinitely. For fast mode requests, see [Handle rate limits](/docs/en/fast-mode#handle-rate-limits). The watchdog backs off up to 5 minutes between attempts, or until the limit resets when the response carries a rate-limit reset time, so a session that hits a usage limit waits out the remaining window. On v2.1.199 or later it also raises the default retry count for other transient errors, such as server errors, timeouts, and dropped connections, to 300, roughly three hours of backoff, and removes the cap of 15 on `CLAUDE_CODE_MAX_RETRIES` if you set that variable explicitly. Requires Claude Code v2.1.186 or later                                                                                                                                                                                  |
 | `CLAUDE_CODE_SAFE_MODE`                                 | Set to `1` to start in safe mode: CLAUDE.md, skills, plugins, hooks, MCP servers, custom commands and agents, output styles, workflows, custom themes, custom keybindings, status line and file-suggestion commands, LSP servers, and auto memory do not load, for troubleshooting a broken configuration. Managed settings policy still applies, including policy-configured hooks, status line, and file-suggestion commands; managed plugins, managed skills, managed CLAUDE.md, and policy-configured MCP servers do not. Equivalent to passing [`--safe-mode`](/docs/en/cli-reference#cli-flags). Directly spawned child processes inherit the variable                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
@@ -363,6 +367,7 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `CLAUDE_CODE_SKIP_MANTLE_AUTH`                          | Skip AWS authentication for Amazon Bedrock Mantle (for example, when using an LLM gateway)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `CLAUDE_CODE_SKIP_PROMPT_HISTORY`                       | Set to `1` to skip writing prompt history and session transcripts to disk. Sessions started with this variable set do not appear in `--resume`, `--continue`, or up-arrow history. Useful for ephemeral scripted sessions                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | `CLAUDE_CODE_SKIP_VERTEX_AUTH`                          | Skip Google authentication for Google Cloud's Agent Platform (for example, when using an LLM gateway)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
+| `CLAUDE_CODE_STARTUP_FAILURE_RESULTS`                   | Set to `1` to have a session started with `--output-format stream-json` write a [result message naming why Claude Code refused to start](/docs/en/agent-sdk/typescript#startup_failure_reason) for startup failures that otherwise end with stderr alone. Requires Claude Code v2.1.274 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | `CLAUDE_CODE_STOP_HOOK_BLOCK_CAP`                       | Maximum number of consecutive times a [Stop](/docs/en/hooks#stop) or [SubagentStop](/docs/en/hooks#subagentstop) hook may block the turn from ending before Claude Code overrides it and ends the turn anyway (default: 8). Set to `0` to disable the cap. Raise this if your hook legitimately needs more iterations to resolve                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `CLAUDE_CODE_SUBAGENT_MODEL`                            | The default model for [subagents](/docs/en/sub-agents#choose-a-model), [agent team](/docs/en/agent-teams#specify-teammates-and-models) teammates, and [workflow](/docs/en/workflows) agents that aren't assigned a model another way. Accepts an alias such as `haiku` or a full model name. Two sources take precedence over it: a model Claude passes when it spawns the agent, and a `model` field in the agent's definition, including `inherit`. To change that, set [`CLAUDE_CODE_SUBAGENT_MODEL_FORCE`](/docs/en/sub-agents#run-every-subagent-on-one-model). See [Choose a model](/docs/en/sub-agents#choose-a-model) for the full order. Setting it to `inherit` is the same as leaving it unset. Before v2.1.251, this variable overrode both the per-invocation model and the definition's `model` field                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `CLAUDE_CODE_SUBAGENT_MODEL_FORCE`                      | Set to `1` to force one model onto subagents, teammates, and workflow agents. [Run every subagent on one model](/docs/en/sub-agents#run-every-subagent-on-one-model) says which model that is. Requires Claude Code v2.1.257 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
@@ -390,6 +395,7 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `CLAUDE_CODE_USE_VERTEX`                                | Use [Google Cloud's Agent Platform](/docs/en/google-vertex-ai)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | `CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS`                     | Set to the number of milliseconds [WebFetch](/docs/en/tools-reference#webfetch-tool-behavior) keeps each fetched URL's response cached. The default is `900000`, which is 15 minutes. Takes plain digits only; `0`, a decimal, or any other spelling keeps the default. Claude Code reads the value once per launch, so a change in a settings `env` block applies when you next launch `claude`. Requires Claude Code v2.1.233 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
 | `CLAUDE_CODE_WEBFETCH_DEADLINE_MS`                      | Upper bound in milliseconds on how long [WebFetch](/docs/en/tools-reference#webfetch-tool-behavior) waits for a page to download, including any redirects it follows. A download that hasn't completed by then fails with a deadline error. The default is `300000`, which is five minutes. Set to `0` to remove the limit. Takes plain digits only; a decimal or any other spelling keeps the default. Requires Claude Code v2.1.268 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| `CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS`            | How many agents a single [workflow](/docs/en/workflows) run executes at once, from `1` to `256`. By default, a run executes up to 16 agents at once, fewer when Claude Code has fewer CPUs available; queued `agent()` calls wait for a free slot. Each running agent's transcript stays in Claude Code's memory, so higher values raise memory use. Takes plain digits only; out-of-range values and other spellings keep the default. Requires Claude Code v2.1.269 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
 | `CLAUDE_CODE_WORKFLOW_PREFIX_STAGGER_MS`                | Upper bound in milliseconds on how long a [workflow](/docs/en/workflows) agent waits for a same-prefix sibling's first response to begin before sending its own first request. When a fan-out starts several agents that share a [prompt-cache prefix](/docs/en/workflows#prompt-caching-in-a-fan-out), Claude Code holds all but the first agent for up to this long so the rest read the cached prefix instead of each processing it uncached. Default `5000`. Set to `0` to disable the wait. When `DISABLE_PROMPT_CACHING` is set, agents never wait. Requires Claude Code v2.1.229 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
 | `CLAUDE_CONFIG_DIR`                                     | Override the configuration directory (default: `~/.claude`). All settings, session history, and plugins are stored under this path. For credentials, see [where Claude Code stores credentials](/docs/en/authentication#credential-management). Useful for running multiple accounts side by side: for example, `alias claude-work='CLAUDE_CONFIG_DIR=~/.claude-work claude'`. Set it in your shell, user settings, or managed settings. Ignored in [project and local settings](/docs/en/settings-reference#variables-claude-code-ignores-in-env)                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | `CLAUDE_DISABLE_ADOPT`                                  | Set to `1` to stop in-flight background work instead of carrying it over when you background a session by pressing `←` or with [`/background`](/docs/en/agent-view#from-inside-a-session). Claude Code asks you to confirm before backgrounding, then stops the tasks that would otherwise carry over. Requires Claude Code v2.1.195 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   |
@@ -444,7 +450,7 @@ Numeric variables such as timeouts, token budgets, and retry counts accept scien
 | `MAX_STRUCTURED_OUTPUT_RETRIES`                         | Number of attempts Claude Code allows when the model's response fails validation against the [`--json-schema`](/docs/en/cli-reference#cli-flags) in non-interactive mode with the `-p` flag; after that many failed attempts with no valid output, the run fails. The same cap applies when a [workflow](/docs/en/workflows) subagent's structured output fails validation. Defaults to 5, a first attempt plus four retries                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
 | `MAX_THINKING_TOKENS`                                   | Fixed token budget for [extended thinking](https://platform.claude.com/docs/en/build-with-claude/extended-thinking). Claude Code caps it at one token below the request's max output tokens and never below 1,024. See `CLAUDE_CODE_MAX_OUTPUT_TOKENS` for how that limit is set. When unset and thinking is enabled, models with [adaptive reasoning](/docs/en/model-config#adjust-effort-level) choose their own thinking depth, and other models use the cap. Set to `0` to disable thinking on the Anthropic API, except on Fable models, which can't have thinking turned off. On [third-party providers](/docs/en/third-party-integrations), `0` omits the `thinking` parameter instead. With thinking turned off on the Anthropic API, Claude Code sends effort `high` instead of a higher level to models it knows [don't accept that combination](/docs/en/errors#effort-isnt-available-with-thinking-turned-off), such as Opus 5. Claude Code ignores nonzero values on adaptive reasoning models, except on the models where `CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING` turns adaptive reasoning off                                                                                                                                                                                                              |
 | `MCP_CLIENT_SECRET`                                     | OAuth client secret for MCP servers that require [pre-configured credentials](/docs/en/mcp#use-pre-configured-oauth-credentials). Avoids the interactive prompt when adding a server with `--client-secret`                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
-| `MCP_CONNECTION_NONBLOCKING`                            | Controls whether startup waits for MCP servers to connect before the first query. MCP startup is non-blocking by default: servers connect in the background and their tools become available as they finish. Set to `0` to make Claude Code wait for servers to connect before the first query. Servers configured with [`alwaysLoad: true`](/docs/en/mcp#exempt-a-server-from-deferral) still make startup wait regardless, except when served from the [discovery cache](/docs/en/mcp#server-status-detail), since their tools must be present when the first prompt is built. In non-interactive mode (`-p`), Claude Code also waits for still-pending servers before the first turn regardless of this variable, with a longer deadline when you pass [`--mcp-config`](/docs/en/cli-reference#cli-flags) explicitly; see that flag's entry for the cached-server exception                                                                                                                                                                                                                                                                                                                                                                                                                                            |
+| `MCP_CONNECTION_NONBLOCKING`                            | Controls whether startup waits for MCP servers to connect before the first query. MCP startup is non-blocking by default: servers connect in the background and their tools become available as they finish. Set to `0` to make Claude Code wait for servers to connect before the first query. Servers configured with [`alwaysLoad: true`](/docs/en/mcp#exempt-a-server-from-deferral) still make startup wait regardless, except when served from the [discovery cache](/docs/en/mcp#server-status-detail), since their tools must be present when the first prompt is built. In non-interactive mode (`-p`) without `--input-format stream-json`, Claude Code also waits for still-pending servers before the first turn regardless of this variable. When you pass [`--mcp-config`](/docs/en/cli-reference#cli-flags) explicitly, the wait has a longer deadline; see that flag's entry for the cached-server exception                                                                                                                                                                                                                                                                                                                                                                                              |
 | `MCP_CONNECT_TIMEOUT_MS`                                | How long blocking MCP startup waits, in milliseconds, for the connection batch before snapshotting the tool list (default: 5000). Applies when `MCP_CONNECTION_NONBLOCKING=0` or for servers marked [`alwaysLoad: true`](/docs/en/mcp#exempt-a-server-from-deferral). Servers still pending at the deadline keep connecting in the background. Distinct from `MCP_TIMEOUT`, which bounds an individual server's connect attempt                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
 | `MCP_DISCOVERY_CACHE`                                   | Turns the [MCP discovery cache](/docs/en/mcp#server-status-detail) on or off. With the cache on, a remote HTTP or SSE server you've used before can show the [`cached` status](/docs/en/mcp#server-status-detail), and Claude Code connects it on its first tool call instead of at startup. The cache is off by default unless a gradual rollout has enabled it for your account. Set to `1` to turn it on, or `0` to keep it off even when the rollout has enabled it. Before v2.1.238, the cache was on by default. The `cached` status requires Claude Code v2.1.221 or later                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
 | `MCP_DISCOVERY_CACHE_MAX_STALE_S`                       | Maximum age, in seconds, of a [discovery-cache](/docs/en/mcp#server-status-detail) entry (default: 14400, or 4 hours). At a start where the entry is older than that, Claude Code discards it and connects the server at startup, as it does with the cache off. Claude Code caps the value at 7 days. Before v2.1.238, the default was 86400, or 24 hours, and Claude Code didn't cap the value                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
diff --git a/content/en/docs/claude-code/errors.md b/content/en/docs/claude-code/errors.md
index 0f67a5d4ba..510a2082aa 100644
--- a/content/en/docs/claude-code/errors.md
+++ b/content/en/docs/claude-code/errors.md
@@ -68,6 +68,7 @@ Match the message you see to a section below.
 | `OAuth token revoked` / `OAuth token has expired`                                                                                                                                                                                                                    | [Authentication](#oauth-token-revoked-or-expired)                                                                             |
 | `API Error: 401 Invalid authentication credentials`                                                                                                                                                                                                                  | [Authentication](#api-error-401-invalid-authentication-credentials)                                                           |
 | `Login expired · Please run /login`                                                                                                                                                                                                                                  | [Authentication](#login-expired)                                                                                              |
+| `Claude login not accepted · Run /login, then try again`                                                                                                                                                                                                             | [Authentication](#claude-login-not-accepted)                                                                                  |
 | `Not signed in to the Cloud gateway — run /login.`                                                                                                                                                                                                                   | [Authentication](#administrator-policy-requires-a-cloud-gateway-sign-in)                                                      |
 | `Administrator policy requires a Cloud gateway sign-in on this machine`                                                                                                                                                                                              | [Authentication](#administrator-policy-requires-a-cloud-gateway-sign-in)                                                      |
 | `Failed to authenticate: OAuth session expired and could not be refreshed`                                                                                                                                                                                           | [Authentication](#login-expired)                                                                                              |
@@ -77,18 +78,26 @@ Match the message you see to a section below.
 | `Anthropic profile login expired · Run /login to use your claude.ai account instead, or re-authenticate the profile`                                                                                                                                                 | [Authentication](#anthropic-profile-login-expired)                                                                            |
 | `does not meet scope requirement user:profile`                                                                                                                                                                                                                       | [Authentication](#oauth-scope-requirement)                                                                                    |
 | `claude.ai rejected the session token` / `session token rejected`                                                                                                                                                                                                    | [Authentication](#claude-ai-rejected-the-session-token)                                                                       |
+| `MCP server "<name>" needs you to sign in again (run /mcp to re-authenticate)`                                                                                                                                                                                       | [Authentication](#mcp-server-needs-you-to-sign-in-again)                                                                      |
+| `rejected the credential from its headersHelper` / `rejected the Authorization header in its config`                                                                                                                                                                 | [Authentication](#mcp-server-needs-you-to-sign-in-again)                                                                      |
+| `MCP server "<name>" needs additional permissions (scope: "<scope>") — run /mcp to re-authenticate`                                                                                                                                                                  | [Authentication](#mcp-server-needs-you-to-sign-in-again)                                                                      |
+| `MCP server "<name>" requires re-authorization (token expired)`                                                                                                                                                                                                      | [Authentication](#mcp-server-needs-you-to-sign-in-again)                                                                      |
 | `Issuer mismatch in authorization response (RFC 9207)`                                                                                                                                                                                                               | [Authentication](#issuer-mismatch-in-authorization-response)                                                                  |
 | `Cloud gateway session expired — run /login to reconnect.`                                                                                                                                                                                                           | [Authentication](#cloud-gateway-session-expired)                                                                              |
 | `Cloud gateway <url> no longer accepts this session`                                                                                                                                                                                                                 | [Authentication](#cloud-gateway-session-expired)                                                                              |
 | `AWS credentials expired or invalid`                                                                                                                                                                                                                                 | [Authentication](#aws-credentials-expired-or-invalid)                                                                         |
 | `AWS authentication failed`                                                                                                                                                                                                                                          | [Authentication](#aws-authentication-failed)                                                                                  |
+| `Google Cloud credentials expired or invalid`                                                                                                                                                                                                                        | [Authentication](#google-cloud-credentials-expired-or-invalid)                                                                |
+| `Google Cloud authentication failed`                                                                                                                                                                                                                                 | [Authentication](#google-cloud-authentication-failed)                                                                         |
+| `Microsoft Foundry authentication failed`                                                                                                                                                                                                                            | [Authentication](#microsoft-foundry-authentication-failed)                                                                    |
+| `Gateway refused the request`                                                                                                                                                                                                                                        | [Authentication](#gateway-refused-the-request)                                                                                |
 | `Could not load AWS credentials` / `Could not load Google Cloud credentials`                                                                                                                                                                                         | [Authentication](#could-not-load-aws-or-google-cloud-credentials)                                                             |
 | `AWS default-chain credential resolve timed out`                                                                                                                                                                                                                     | [Authentication](#aws-default-chain-credential-resolve-timed-out)                                                             |
 | `Timed out after 60s waiting for AWS`                                                                                                                                                                                                                                | [Authentication](#bedrock-setup-verification-timed-out-waiting-for-aws)                                                       |
 | `A request to AWS timed out. Check your network and proxy settings, then try again.`                                                                                                                                                                                 | [Authentication](#bedrock-setup-verification-timed-out-waiting-for-aws)                                                       |
 | `Could not load the default credentials` on Google Cloud's Agent Platform                                                                                                                                                                                            | [Authentication](#could-not-load-aws-or-google-cloud-credentials)                                                             |
 | `Unable to connect to API`                                                                                                                                                                                                                                           | [Network](#unable-to-connect-to-api)                                                                                          |
-| `Connection refused —` / `Can't reach the API server —` / `No internet route —` / `Couldn't connect through your proxy` / `Connection dropped`, each ending with an error code in parentheses                                                                        | [Network](#unable-to-connect-to-api)                                                                                          |
+| `Connection refused —` / `Can't reach the API server —` / `No internet route —` / `Couldn't connect through your proxy` / `Connection dropped`, each with an error code in parentheses                                                                               | [Network](#unable-to-connect-to-api)                                                                                          |
 | `Unable to connect to Anthropic services` during setup                                                                                                                                                                                                               | [Network](#unable-to-connect-to-anthropic-services)                                                                           |
 | `Socket is closed`                                                                                                                                                                                                                                                   | [Network](#socket-is-closed)                                                                                                  |
 | `Waiting for API response · will retry in`                                                                                                                                                                                                                           | [Automatic retries](#automatic-retries), or [Network](#unable-to-connect-to-api) if it persists                               |
@@ -183,6 +192,7 @@ Match the message you see to a section below.
 | `Your connected GitHub account can't see <owner>/<repo>`                                                                                                                                                                                                             | [Command-line errors](#your-connected-github-account-cant-see-the-repository)                                                 |
 | `The GitHub App preflight failed transiently (network or service hiccup) — retry in a moment to start from GitHub instead`                                                                                                                                           | [Command-line errors](#the-github-app-preflight-failed-transiently)                                                           |
 | `GitHub isn't connected to your Claude account, so this repository can't be cloned in the cloud`                                                                                                                                                                     | [Command-line errors](#github-isnt-connected-to-your-claude-account)                                                          |
+| `Single sign-on authorization needed`                                                                                                                                                                                                                                | [Command-line errors](#single-sign-on-authorization-needed)                                                                   |
 | `Failed to resume the conversation`                                                                                                                                                                                                                                  | [Command-line errors](#failed-to-resume-the-conversation)                                                                     |
 | `No conversation found with session ID: <session-id>`                                                                                                                                                                                                                | [Command-line errors](#no-conversation-found-with-the-session-id)                                                             |
 | `Cannot switch renderers in this session`                                                                                                                                                                                                                            | [Command-line errors](#cannot-switch-renderers-in-this-session)                                                               |
@@ -190,6 +200,8 @@ Match the message you see to a section below.
 | `Couldn't read your Zed keymap` / `Couldn't back up your Zed keymap` / `Couldn't update your Zed keymap`                                                                                                                                                             | [Command-line errors](#terminal-setup-left-your-zed-keymap-unchanged)                                                         |
 | `Your Zed keymap isn't a readable list of keybindings`                                                                                                                                                                                                               | [Command-line errors](#terminal-setup-left-your-zed-keymap-unchanged)                                                         |
 | `Skill usage reports are not available on this connection.`                                                                                                                                                                                                          | [Command-line errors](#skill-usage-reports-are-not-available-on-this-connection)                                              |
+| `Custom output styles can't be selected over Remote Control or from a relayed message`                                                                                                                                                                               | [Command-line errors](#custom-output-styles-cant-be-selected-over-remote-control)                                             |
+| `Output styles are saved to local settings (.claude/settings.local.json), which this session doesn't load`                                                                                                                                                           | [Command-line errors](#output-styles-are-saved-to-local-settings-which-this-session-doesnt-load)                              |
 | `` `plugin eval` is currently in early access `` / `` `plugin eval` is currently unavailable ``                                                                                                                                                                      | [Plugin errors](#plugin-eval-is-currently-in-early-access)                                                                    |
 | `Marketplace "<name>" is registered from an untrusted source`                                                                                                                                                                                                        | [Plugin errors](#marketplace-is-registered-from-an-untrusted-source)                                                          |
 | `references ${user_config.*} in a shell-form command`                                                                                                                                                                                                                | [Plugin errors](#plugin-command-references-user-config)                                                                       |
@@ -216,7 +228,7 @@ Match the message you see to a section below.
 | `Refusing to send: connected endpoint is not the expected process` / `Refusing to send: connected endpoint identity could not be read`                                                                                                                               | [Tool errors](#refusing-to-send-a-cross-session-message)                                                                      |
 | `Refusing to send: connected endpoint is not owned by this user` / `Refusing to send: connected endpoint owner could not be read`                                                                                                                                    | [Tool errors](#refusing-to-send-a-cross-session-message)                                                                      |
 | `Refusing to send: connected endpoint is a different process with the expected pid`                                                                                                                                                                                  | [Tool errors](#refusing-to-send-a-cross-session-message)                                                                      |
-| `Refusing to read <path>: its symlink resolution changed after permission was checked` / `Refusing to search <path>: its symlink resolution changed after permission was checked`                                                                                    | [Tool errors](#refusing-after-a-symlink-changed)                                                                              |
+| `Refusing to read <path>: its symlink resolution changed after permission was checked (<reason>)` / `Refusing to search <path>: its symlink resolution changed after permission was checked`                                                                         | [Tool errors](#refusing-after-a-symlink-changed)                                                                              |
 | `Refusing to write <path>: its parent-directory symlink resolution changed after permission was checked` / `Refusing to write <path>: it is a symbolic link. Write to the link's target path instead`                                                                | [Tool errors](#refusing-after-a-symlink-changed)                                                                              |
 | `Refusing to search <path>: a path one of its Read deny rules is written through changed while the search was being prepared` / `Refusing to search <path>: it could not be opened`                                                                                  | [Tool errors](#refusing-after-a-symlink-changed)                                                                              |
 | `its permission check expired before it ran (too many concurrent file operations)` / `ripgrep was found only by name on PATH`                                                                                                                                        | [Tool errors](#refusing-after-a-symlink-changed)                                                                              |
@@ -249,6 +261,7 @@ Match the message you see to a section below.
 | `Couldn't start a background session (working directory no longer exists or is not accessible: ...)`                                                                                                                                                                 | [Background session errors](#working-directory-no-longer-exists-when-starting-a-background-session)                           |
 | `Claude Code is being updated by npm on this machine (still not runnable after 2 min, ...)`                                                                                                                                                                          | [Background session errors](#eacces-when-starting-a-background-session)                                                       |
 | `Claude Code process exited with code N`                                                                                                                                                                                                                             | [Wrapper and IDE errors](#claude-code-process-exited-with-code-n)                                                             |
+| `The connection to Claude Code ended before this message completed`                                                                                                                                                                                                  | [Wrapper and IDE errors](#the-connection-to-claude-code-ended-before-this-message-completed)                                  |
 | `Could not locate the Claude CLI on PATH`                                                                                                                                                                                                                            | [Wrapper and IDE errors](#could-not-locate-the-claude-cli-on-path)                                                            |
 | `Restored the code, but skipped N files`                                                                                                                                                                                                                             | [Rewind warnings and errors](#restored-the-code-but-skipped-files)                                                            |
 | `No files were restored: N files failed (backup missing, or the file could not be updated)`                                                                                                                                                                          | [Rewind warnings and errors](#no-files-were-restored)                                                                         |
@@ -1073,6 +1086,20 @@ You can check for this state before a request fails: [`/status`](/docs/en/comman
 * In non-interactive mode, run `claude` in the same environment, complete `/login`, then rerun your command. For automation that can't sign in interactively, authenticate with `ANTHROPIC_API_KEY` or [generate a long-lived token with `claude setup-token`](/docs/en/authentication#generate-a-long-lived-token).
 * If signing in keeps failing, see [Login and authentication](/docs/en/troubleshoot-install#login-and-authentication)
 
+### Claude login not accepted
+
+You tried to start a [cloud session](/docs/en/claude-code-on-the-web), and the server refused to create it with a 401: it didn't accept the Claude login this machine sent, usually because the login expired or was revoked.
+
+The first part of the line is the server's own reason when it gives one. Otherwise the line reads:
+
+```text theme={null}
+Claude login not accepted · Run /login, then try again
+```
+
+**What to do:**
+
+* Run `/login`, complete the sign-in, then start the session again
+
 <h3 id="administrator-policy-requires-a-cloud-gateway-sign-in">
   Administrator policy requires a Cloud gateway sign-in
 </h3>
@@ -1169,6 +1196,48 @@ claude.ai rejected the session token. Run /login, then reconnect.
 
 Before v2.1.222, Claude Code marked the connector as needing authentication instead, which pointed you at the connector's authorization flow even though completing it didn't resolve the state.
 
+### MCP server needs you to sign in again
+
+A remote [MCP server](/docs/en/mcp) rejected the credential on a tool call mid-session, usually because a sign-in or token expired or because the token lacks a permission the tool needs. The tool call fails, and `/mcp` marks the server as [needing authentication](/docs/en/mcp#authenticate-with-remote-mcp-servers).
+
+For a server you sign in to from Claude Code, including a claude.ai connector, the sign-in expired or was revoked:
+
+```text theme={null}
+MCP server "<name>" needs you to sign in again (run /mcp to re-authenticate)
+```
+
+Run `/mcp`, select the server, and sign in again from its menu.
+
+For a server configured with a [`headersHelper`](/docs/en/mcp#use-dynamic-headers-for-custom-authentication) script, Claude Code has already re-run the helper and retried the call once before showing this:
+
+```text theme={null}
+MCP server "<name>" rejected the credential from its headersHelper (check the helper and run /mcp to reconnect, or to authenticate if the server also uses OAuth)
+```
+
+Check that the helper returns a credential the server accepts, then reconnect from `/mcp`, which runs the helper again.
+
+For a server with a static `Authorization` header in its configuration:
+
+```text theme={null}
+MCP server "<name>" rejected the Authorization header in its config (update it, then run /mcp to reconnect)
+```
+
+Update the header value where the server is configured, then reconnect from `/mcp`.
+
+Before v2.1.273, the expired sign-in, `headersHelper`, and `Authorization` header cases all showed `MCP server "<name>" requires re-authorization (token expired)`.
+
+A server can also refuse a tool call with HTTP 403 `insufficient_scope` to ask you to authorize a scope, sometimes one your token already lists. The message names that scope:
+
+```text theme={null}
+MCP server "<name>" needs additional permissions (scope: "<scope>") — run /mcp to re-authenticate
+```
+
+Run `/mcp`, select the server, and authenticate again from its menu.
+
+When the server's configuration sets neither [`oauth.scopes`](/docs/en/mcp#restrict-oauth-scopes) nor [`authServerMetadataUrl`](/docs/en/mcp#override-oauth-metadata-discovery), Claude Code requests the scope the server named. With either setting, Claude Code requests that setting's scopes instead. If you pinned `oauth.scopes`, add the missing scope to that list before you authenticate again.
+
+Before v2.1.274, this case showed the `needs you to sign in again` message, and before v2.1.273 it showed `requires re-authorization (token expired)` like the other cases.
+
 ### Issuer mismatch in authorization response
 
 During an [MCP OAuth sign-in](/docs/en/mcp#authenticate-with-remote-mcp-servers), the authorization server redirected back to Claude Code with an `iss` parameter that doesn't name the issuer that Claude Code expected from the server's OAuth metadata. A wrong issuer at this step is how an authorization server mix-up attack looks, so Claude Code fails the sign-in instead of exchanging the authorization code. Claude Code shows the error in the `/mcp` server menu after the browser sign-in:
@@ -1189,27 +1258,28 @@ Before v2.1.232, Claude Code used the v2 runtime only in a gradual rollout or wh
 
 ### AWS credentials expired or invalid
 
-This message requires Claude Code v2.1.198 or later and only appears when [`awsAuthRefresh`](/docs/en/amazon-bedrock#advanced-credential-configuration) is set in your settings file. Your AWS session token expired or was rejected, and the automatic refresh Claude Code already ran didn't produce a credential the API accepts. It appears on a 401 from [Claude Platform on AWS](/docs/en/claude-platform-on-aws) or the [Mantle endpoint](/docs/en/amazon-bedrock#use-the-mantle-endpoint), which is how those providers report an expired security token.
+Your AWS session token expired or was rejected. This message appears on a 401 from [Claude Platform on AWS](/docs/en/claude-platform-on-aws) or the [Mantle endpoint](/docs/en/amazon-bedrock#use-the-mantle-endpoint), which is how those providers report an expired security token.
 
-The action hint in the middle names the `awsAuthRefresh` command from your settings, so it varies. The stable part is the leading `AWS credentials expired or invalid`:
+The action hint in the middle varies with your setup. The stable part is the leading `AWS credentials expired or invalid`:
 
 ```text theme={null}
 AWS credentials expired or invalid · run /login and select "Claude Platform on AWS · refresh credentials", or run `aws sso login --profile myprofile` in another terminal · API Error: 401 ...
 ```
 
-Without `awsAuthRefresh` configured, the same 401 shows the generic `Please run /login` message instead, which can't refresh AWS credentials.
+Before v2.1.273, this message appeared only when `awsAuthRefresh` was configured.
 
 **What to do:**
 
-* Run the `awsAuthRefresh` command named in the message, such as `aws sso login --profile myprofile`, in another terminal and complete the browser sign-in, then retry
-* In an interactive session, run `/login`, choose **3rd-party platform**, then select **Claude Platform on AWS · refresh credentials** under **Using 3rd-party platforms** to run the same command without restarting Claude Code. See [Configure AWS credentials](/docs/en/claude-platform-on-aws#1-configure-aws-credentials)
+* If the hint says credentials are managed by this environment, the app that launched Claude Code owns the credential and the other steps here don't apply: retry, or contact your administrator
+* If [`awsAuthRefresh`](/docs/en/amazon-bedrock#advanced-credential-configuration) is set, run the command named in the message, such as `aws sso login --profile myprofile`, in another terminal and complete the browser sign-in, then retry. Otherwise refresh the AWS credential you use yourself: your SSO sign-in, access keys, API key, or proxy token
+* With `awsAuthRefresh` set in an interactive session, you can instead run `/login`, choose **3rd-party platform**, then select **Claude Platform on AWS · refresh credentials** under **Using 3rd-party platforms** to run the same command without restarting Claude Code. See [Configure AWS credentials](/docs/en/claude-platform-on-aws#1-configure-aws-credentials)
 * If the error repeats after the refresh command succeeds, confirm the identity is valid outside Claude Code with `aws sts get-caller-identity` in the same shell and profile
 
 ### AWS authentication failed
 
-This message requires Claude Code v2.1.198 or later and only appears when [`awsAuthRefresh`](/docs/en/amazon-bedrock#advanced-credential-configuration) is set in your settings file. Your AWS provider returned a 403, or [Amazon Bedrock](/docs/en/amazon-bedrock) returned a 401.
+Your AWS provider returned a 403, or [Amazon Bedrock](/docs/en/amazon-bedrock) returned a 401.
 
-Claude Code can't tell which cause you hit. Amazon Bedrock reports an expired security token as a 403, but a 403 is also how it reports an authorization denial, such as an `AccessDeniedException` from a missing IAM permission or a model that isn't enabled for your account.
+Amazon Bedrock reports an expired security token as a 403, but a 403 is also how it reports an authorization denial, such as an `AccessDeniedException` from a missing IAM permission. Claude Code can't tell those two causes apart.
 
 A 401 from Amazon Bedrock also lands here rather than under [AWS credentials expired or invalid](#aws-credentials-expired-or-invalid), because Amazon Bedrock doesn't report an expired token as a 401. A 401 from that endpoint typically comes from something else in the request path, such as a corporate proxy.
 
@@ -1219,14 +1289,73 @@ A credential refresh fixes an expired token and can't fix the other causes, so t
 AWS authentication failed · run /login and select "Claude Platform on AWS · refresh credentials", or run `aws sso login --profile myprofile` in another terminal · if credentials are current, check AWS permissions and model access · API Error: 403 ...
 ```
 
-The action hint in the middle names the `awsAuthRefresh` command from your settings, so it varies. The stable part is the leading `AWS authentication failed`.
+The action hint in the middle varies with your setup. The stable part is the leading `AWS authentication failed`.
+
+When the 403 is Amazon Bedrock's answer that you don't have access to the model with the specified model ID, the hint instead tells you to enable the model for your account and region in the Amazon Bedrock console.
+
+Before v2.1.273, this message appeared only when `awsAuthRefresh` was configured.
 
 **What to do:**
 
-* Run the `awsAuthRefresh` command named in the message, or `aws sso login`, in case an expired credential is the cause
+* If the hint says credentials are managed by this environment, the app that launched Claude Code owns the credential and the other steps here don't apply: retry, or contact your administrator
+* Refresh your AWS credentials in case an expired credential is the cause: run the [`awsAuthRefresh`](/docs/en/amazon-bedrock#advanced-credential-configuration) command named in the message when one is set, or refresh your SSO sign-in, access keys, API key, or proxy token yourself
 * If your credentials are current, confirm the IAM permissions in [IAM configuration](/docs/en/amazon-bedrock#iam-configuration) are attached to the identity you're using and that the selected model is enabled for your account and region
 * Run `aws sts get-caller-identity` to confirm which identity your requests use; a stale `AWS_PROFILE` or default profile is a common cause of a permission mismatch
 
+### Google Cloud credentials expired or invalid
+
+Your Google Cloud credentials for [Google Cloud's Agent Platform](/docs/en/google-vertex-ai) expired or were rejected: the request returned a 401, which is how Agent Platform reports credential expiry.
+
+The action hint in the middle varies with your setup. The stable part is the leading `Google Cloud credentials expired or invalid`:
+
+```text theme={null}
+Google Cloud credentials expired or invalid · refresh your Google Cloud credentials (application default sign-in, or the key file in GOOGLE_APPLICATION_CREDENTIALS) and retry · API Error: 401 ...
+```
+
+**What to do:**
+
+* If the hint says credentials are managed by this environment, the app that launched Claude Code owns the credential and the other steps here don't apply: retry, or contact your administrator
+* If you authenticate with application default credentials, run the [`gcpAuthRefresh`](/docs/en/google-vertex-ai#advanced-credential-configuration) command named in the message, or `gcloud auth application-default login`, and complete the sign-in, then retry
+* If you route through an [LLM gateway](/docs/en/llm-gateway) with `CLAUDE_CODE_SKIP_VERTEX_AUTH` set, refresh the gateway token in `ANTHROPIC_AUTH_TOKEN` or `ANTHROPIC_CUSTOM_HEADERS`, then retry
+* If you authenticate with a service account key file, confirm `GOOGLE_APPLICATION_CREDENTIALS` points at a valid key. See [Configure GCP credentials](/docs/en/google-vertex-ai#3-configure-gcp-credentials)
+* If the error repeats after a refresh, confirm the identity works outside Claude Code with `gcloud auth application-default print-access-token` in the same shell
+
+Before v2.1.273, a 401 from Agent Platform showed the generic `Please run /login` or `Failed to authenticate` message instead, which can't refresh Google Cloud credentials.
+
+### Google Cloud authentication failed
+
+[Google Cloud's Agent Platform](/docs/en/google-vertex-ai) returned a 403, which it uses for authorization denials rather than expired credentials. Usually the identity you authenticate with is missing an IAM permission, or the model isn't enabled for your project.
+
+The action hint in the middle varies with your setup. The stable part is the leading `Google Cloud authentication failed`:
+
+```text theme={null}
+Google Cloud authentication failed · refresh your Google Cloud credentials (application default sign-in, or the key file in GOOGLE_APPLICATION_CREDENTIALS) and retry · if credentials are current, check GCP IAM permissions and Vertex AI model access · API Error: 403 ...
+```
+
+**What to do:**
+
+* If the hint says credentials are managed by this environment, the app that launched Claude Code owns the credential and the other steps here don't apply: retry, or contact your administrator
+* Confirm the roles in [IAM configuration](/docs/en/google-vertex-ai#iam-configuration) are granted to the identity you authenticate with
+* Confirm the model is enabled for your project. See [Request model access](/docs/en/google-vertex-ai#2-request-model-access)
+
+Before v2.1.273, a 403 from Agent Platform showed the generic `Please run /login` or `Failed to authenticate` message instead, which can't refresh Google Cloud credentials.
+
+### Microsoft Foundry authentication failed
+
+[Microsoft Foundry](/docs/en/microsoft-foundry) returned a 401 or 403: the Azure credential on the request was rejected, or the identity behind it doesn't have access to the Foundry resource. `/login` can't mint Azure credentials. The action hint in the middle varies with your setup. The stable part is the leading `Microsoft Foundry authentication failed`:
+
+```text theme={null}
+Microsoft Foundry authentication failed · refresh your Foundry credential (ANTHROPIC_FOUNDRY_AUTH_TOKEN, ANTHROPIC_FOUNDRY_API_KEY, Azure sign-in for Entra, or your proxy token) and retry · if credentials are current, check access to the Foundry resource · API Error: 401 ...
+```
+
+**What to do:**
+
+* If the hint says credentials are managed by this environment, the app that launched Claude Code owns the credential and the other steps here don't apply: retry, or contact your administrator
+* Refresh the credential you configured in [Configure Azure credentials](/docs/en/microsoft-foundry#2-configure-azure-credentials): rotate `ANTHROPIC_FOUNDRY_API_KEY`, mint a fresh `ANTHROPIC_FOUNDRY_AUTH_TOKEN`, or run `az login` so the default Microsoft Entra credential chain can sign in again
+* If the credential is current, confirm the identity has access to the Foundry resource. See [Azure RBAC configuration](/docs/en/microsoft-foundry#azure-rbac-configuration)
+
+Before v2.1.273, a 401 or 403 from Microsoft Foundry showed the generic `Please run /login` or `Failed to authenticate` message instead, which can't refresh Azure credentials.
+
 ### Could not load AWS or Google Cloud credentials
 
 Claude Code couldn't obtain usable credentials from the AWS credential provider chain or from your Google application default credentials on the machine it runs on, so no request reached your cloud provider. Claude Code clears its cached credentials and retries twice before showing this message. The detail after the `·` names the specific cause, such as an expired SSO session, missing application default credentials reported as `Could not load the default credentials`, or a revoked sign-in reported as `invalid_grant`:
@@ -1309,6 +1438,21 @@ Cloud gateway <url> no longer accepts this session. Start `claude` and sign in a
 * Run `/login` in the session and complete the browser sign-in
 * For a non-interactive launch, start `claude` in the same environment, run `/login`, then rerun your command
 
+### Gateway refused the request
+
+You're signed in through a [Claude apps gateway](/docs/en/claude-apps-gateway), and a request returned a 403: the gateway, or the upstream behind it, refused it. Signing in again doesn't change a refusal, so the message points at your gateway administrator:
+
+```text theme={null}
+Gateway refused the request · signing in again won't change this — check with your gateway administrator · API Error: 403 ...
+```
+
+**What to do:**
+
+* Ask your gateway administrator to look up the request. The `API Error:` tail carries the refusal the gateway returned
+* For administrators: an [access control rule](/docs/en/claude-apps-gateway-config#http-tuning) on the gateway returns a 403 that the [audit log](/docs/en/claude-apps-gateway-deploy#logs) records with its reason, and an upstream's authorization denial passes through per [Upstream error messages](/docs/en/claude-apps-gateway-config#upstream-error-messages)
+
+Before v2.1.273, a 403 on a gateway session showed the generic `Please run /login` or `Failed to authenticate` message instead, and signing in again didn't clear the refusal.
+
 ## Network and connection errors
 
 Most of these errors mean a network request from Claude Code failed to reach its destination, or something between Claude Code and the API altered the response on its way back; where an entry also has a local cause, such as a failed archive write, its body says so. They usually originate in your local network, proxy, or firewall, or in the cloud environment's network policy.
@@ -1322,7 +1466,7 @@ Unable to connect to API. Check your internet connection
 Connection refused — a firewall or proxy may be blocking it (ConnectionRefused)
 Can't reach the API server — check your internet or DNS (ENOTFOUND)
 No internet route — check your connection or VPN (EHOSTUNREACH)
-Couldn't connect through your proxy (ERR_PROXY_TUNNEL)
+Couldn't connect through your proxy (ERR_PROXY_TUNNEL) — the proxy refused the tunnel: check its credentials and that it allows this host
 Connection dropped (ECONNRESET)
 fetch failed
 Request timed out. Check your internet connection and proxy settings
@@ -1442,13 +1586,15 @@ Before v2.1.208, the same misconfiguration surfaced as `API Error: Truncated eve
 A proxy or security appliance on your network is intercepting TLS traffic with its own certificate, and Claude Code does not trust it.
 
 ```text theme={null}
-Unable to connect to API: SSL certificate verification failed. Check your proxy or corporate SSL certificates
-Unable to connect to API: Self-signed certificate detected. Check your proxy or corporate SSL certificates
+Unable to connect to API: SSL certificate verification failed (UNABLE_TO_GET_ISSUER_CERT_LOCALLY). The certificate comes from an authority Claude Code doesn't trust, usually a TLS-inspecting corporate proxy or a gateway signed by a private CA: set NODE_EXTRA_CA_CERTS to that CA bundle, or add it to the system certificate store · see https://code.claude.com/docs/en/network-config
+Unable to connect to API: Self-signed certificate detected (SELF_SIGNED_CERT_IN_CHAIN). The certificate comes from an authority Claude Code doesn't trust, usually a TLS-inspecting corporate proxy or a gateway signed by a private CA: set NODE_EXTRA_CA_CERTS to that CA bundle, or add it to the system certificate store · see https://code.claude.com/docs/en/network-config
 ```
 
+Before v2.1.273, both messages ended at `Check your proxy or corporate SSL certificates`, without the OpenSSL code or the `NODE_EXTRA_CA_CERTS` hint.
+
 As of v2.1.199, a certificate validation failure isn't retried, so this error appears on the first attempt instead of after the full [retry budget](#automatic-retries). Earlier versions spent a few minutes retrying before showing it. Transient TLS conditions, such as a handshake timeout, still retry.
 
-During `/login` and the startup connectivity check, the same failure is reported with the OpenSSL code and the fix inline:
+During `/login` and the startup connectivity check, the same failure produces a different message:
 
 ```text theme={null}
 SSL certificate error (UNABLE_TO_GET_ISSUER_CERT_LOCALLY). If you are behind a corporate proxy or TLS-intercepting firewall, set NODE_EXTRA_CA_CERTS to your CA bundle path, or ask IT to allowlist *.anthropic.com. Run `claude doctor` for details.
@@ -1620,6 +1766,13 @@ Prompt is too long · automatic compaction failed: <the underlying error>
 
 Resolve the named error first; `/compact` fails on the same error until you do. Before v2.1.229, a failed automatic compaction surfaced `Prompt is too long` without the cause.
 
+When automatic compaction runs on this error, it normally summarizes your oldest exchanges and keeps the newest. As a last resort, Claude Code summarizes differently:
+
+* When it can't summarize any whole exchange, Claude Code keeps your newest prompt word for word and summarizes everything before it.
+* In that case, when the conversation doesn't end with your prompt, Claude Code summarizes the whole conversation instead.
+
+Claude Code skips this recovery when the content it would carry forward holds no model reply and less than about 1,000 tokens of your own text, such as a short retry sent after an oversized paste. Run `/clear` to start fresh. Before v2.1.269, compaction failed whenever it couldn't summarize a whole exchange, so a session in that state hit this error again on every turn.
+
 A single-exchange conversation has no earlier turns to summarize. When automatic compaction would have run on one, Claude Code skips the attempt and explains what fills the request instead. When the API doesn't report token counts in its error, the message reads:
 
 ```text theme={null}
@@ -1642,7 +1795,7 @@ Before v2.1.162, Claude Code attempted the compaction anyway and surfaced the ba
 
 **What to do:**
 
-* In a multi-turn conversation, run `/compact` to summarize earlier turns and free space, or `/clear` to start fresh. A single-exchange conversation can't be compacted, so shrink the request instead
+* Run `/compact` to summarize earlier turns and free space, or `/clear` to start fresh. If `/compact` answers `Not enough messages to compact.`, the conversation is a single exchange with nothing earlier to summarize, so the space is taken by that one prompt and what Claude Code sends with every request: run `/clear` and resend with less pasted text or smaller attachments, or reduce the tool definitions and memory files using the steps below
 * Run `/context` to see a breakdown of what is consuming the window: system prompt, tools, memory files, and messages
 * Disable MCP servers you are not using with `/mcp disable <name>` to remove their tool definitions from context
 * Trim large `CLAUDE.md` memory files, or move instructions into [path-scoped rules](/docs/en/memory#path-specific-rules) that load only when relevant
@@ -2543,7 +2696,7 @@ Input this long without a newline usually means the producer isn't a stream-json
 
 ### Unknown command
 
-You submitted a `/` name that doesn't match any command in this session, so Claude Code reports the name instead of running anything:
+In an interactive terminal session, you submitted a `/` name that doesn't match any command in this session, so Claude Code reports the name instead of running anything:
 
 ```text theme={null}
 Unknown command: /hepl. Did you mean /help?
@@ -2555,6 +2708,16 @@ Claude Code suggests the closest command name or alias that the menu lists in th
 * A command that exists but isn't available in this session because a requirement isn't met, such as your platform, plan, or authentication method. The troubleshooting entries for [`/web-setup`](/docs/en/web-quickstart#web-setup-shows-no-commands-match-or-unknown-command) and [`/schedule`](/docs/en/routines#schedule-returns-unknown-command) walk through two common cases. Some commands answer with their own message when your organization's policy disables them, such as [`Cloud sessions are disabled by your organization's policy`](#cloud-sessions-are-disabled-by-your-organizations-policy)
 * A command from a [plugin](/docs/en/plugins) or [MCP server](/docs/en/mcp#use-mcp-prompts-as-commands) that isn't installed or connected in this session
 
+Claude Code answers an unmatched `/` name this way only in an interactive terminal session. In every other session, it sends the prompt to Claude as a normal message instead, with a note that the command didn't run and a list of commands Claude can run in the session. Those sessions include:
+
+* `-p` runs
+* [Agent SDK](/docs/en/agent-sdk/overview) applications
+* The Code tab of the [Desktop app](/docs/en/desktop)
+* The chat panel of the [VS Code extension](/docs/en/vs-code)
+* [Cloud sessions](/docs/en/claude-code-on-the-web) and [routines](/docs/en/routines)
+
+For a built-in command that can't run in one of those sessions, Claude Code still answers that the command isn't available instead of sending it to Claude. Before v2.1.274, only cloud sessions and routines sent an unmatched name to Claude. Before v2.1.273, they answered `Unknown command` too.
+
 Claude Code doesn't treat every prompt that starts with `/` as a command. It sends the prompt to Claude as a normal message when the first word after the `/` starts with punctuation, such as the `/--` that opens a Lean doc comment, or is a path such as `/var/log/syslog`.
 
 Before v2.1.236, if you pressed `Enter` while the command menu listed a near match for the name you typed, Claude Code ran that match, so a typo such as `/hepl` ran `/help` instead of producing this message.
@@ -2686,6 +2849,25 @@ When you create a routine with [`/schedule`](/docs/en/routines), the same messag
 
 Before v2.1.268, Claude Code reported this as a temporary failure of the Claude GitHub App check and suggested retrying or installing the app; neither connects a GitHub account.
 
+<h3 id="single-sign-on-authorization-needed">
+  Single sign-on authorization needed
+</h3>
+
+You ran [`/install-github-app`](/docs/en/github-actions#quick-setup) and chose a repository whose organization enforces SAML single sign-on. Before setup, Claude Code checks your access to the repository with the GitHub CLI, and GitHub refused that check because your `gh` token isn't authorized for the organization yet. The wizard shows the warning with the steps to authorize:
+
+```text theme={null}
+Single sign-on authorization needed
+<owner>/<repo> belongs to an organization that enforces SAML single sign-on, and your GitHub CLI token isn't authorized for it yet.
+```
+
+**What to do:**
+
+* Re-authorize your GitHub CLI login with the `repo` and `workflow` scopes by running `gh auth refresh -h github.com -s repo,workflow`, and authorize the organization when GitHub prompts for single sign-on
+* If you authenticate with a personal access token in `GH_TOKEN`, open [github.com/settings/tokens](https://github.com/settings/tokens), select **Configure SSO** on the token, and authorize the organization
+* Run `/install-github-app` again
+
+Before v2.1.273, Claude Code showed the `Admin permissions required` warning for this condition instead.
+
 ### Failed to resume the conversation
 
 Claude Code couldn't read or process the saved transcript for the session you selected from the [`claude --resume` picker](/docs/en/sessions#use-the-session-picker), so it ends the process rather than continue in a partially loaded state. The message includes the command to retry:
@@ -2788,6 +2970,36 @@ Skill usage reports are not available on this connection.
 
 * Run `/skill-doctor` in the terminal on the machine where the session is running, or run `claude -p "/skill-doctor"` there
 
+<h3 id="custom-output-styles-cant-be-selected-over-remote-control">
+  Custom output styles can't be selected over Remote Control
+</h3>
+
+You ran [`/output-style`](/docs/en/output-styles#change-your-output-style) from the mobile app or web via [Remote Control](/docs/en/remote-control), or the command arrived in a message relayed into the session. Because such a turn may not come from the account owner, Claude Code lists and selects only [built-in styles](/docs/en/output-styles#built-in-output-styles) on it, and adds this notice whenever the command lists the styles or doesn't recognize the name you gave. A [custom style](/docs/en/output-styles#create-a-custom-output-style) name gets the same reply as a name that doesn't exist:
+
+```text theme={null}
+Custom output styles can't be selected over Remote Control or from a relayed message. Select one in the session itself, or pick a built-in style here.
+```
+
+**What to do:**
+
+* Pick a built-in style, for example `/output-style concise`
+* To use a custom style, set [`outputStyle`](/docs/en/settings-reference#outputstyle) in the project's `.claude/settings.local.json`, or run `/output-style <style>` at the session's own terminal if it has one
+
+<h3 id="output-styles-are-saved-to-local-settings-which-this-session-doesnt-load">
+  Output styles are saved to local settings which this session doesn't load
+</h3>
+
+You tried to switch [output styles](/docs/en/output-styles) with `/output-style <style>` or `/config outputStyle=<style>` in a session whose setting sources exclude `local`. Examples are an [Agent SDK](/docs/en/agent-sdk/typescript) session whose [`settingSources`](/docs/en/agent-sdk/typescript#options) leaves out `"local"` and a CLI session started with a [`--setting-sources`](/docs/en/cli-reference#cli-flags) value that leaves out `local`. Both commands save the style to `.claude/settings.local.json`, a file such a session never reads back, so Claude Code refuses instead of writing a setting that would have no effect:
+
+```text theme={null}
+Output styles are saved to local settings (.claude/settings.local.json), which this session doesn't load, so the style can't be changed here.
+```
+
+**What to do:**
+
+* Add `local` to the session's setting sources and switch again
+* Set the [`outputStyle`](/docs/en/settings-reference#outputstyle) key in a settings file the session does load, such as `.claude/settings.json` in the project or `~/.claude/settings.json`. In the TypeScript SDK, set `outputStyle` inside the inline `settings` object instead; see [Activate an output style](/docs/en/agent-sdk/modifying-system-prompts#activate-an-output-style)
+
 ## Plugin errors
 
 These errors come from [plugin](/docs/en/plugins) and [marketplace](/docs/en/plugin-marketplaces) configuration. For plugin problems that don't produce one of the messages on this page, such as a marketplace URL that doesn't load or a plugin that installs but doesn't appear, see [Plugin troubleshooting](/docs/en/discover-plugins#troubleshooting).
@@ -3192,13 +3404,13 @@ Before v2.1.248, Claude Code didn't check the endpoint's owning user or process
 
 Claude Code checks a file path's [permission rules](/docs/en/permissions#read-and-edit), then confirms that resolution again when the tool opens the file or starts the search. When it can't confirm that the path still leads to the location the check approved, Claude Code refuses the operation instead of following it. The refusal appears in the tool result:
 
-```text theme={null}
-Refusing to read /path/to/file: its symlink resolution changed after permission was checked. If a link in the working directory is being rewritten concurrently, stop that and retry.
+```text wrap theme={null}
+Refusing to read /path/to/file: its symlink resolution changed after permission was checked (a link on the way now leads somewhere the check did not see). If a link in the working directory is being rewritten concurrently, stop that and retry.
 ```
 
 The text after the path names the reason:
 
-* `its symlink resolution changed after permission was checked`: a symlink along the path, or at a Grep or Glob search root, was replaced between the permission check and the operation
+* `its symlink resolution changed after permission was checked`: a symlink along the path, or at a Grep or Glob search root, was replaced between the permission check and the operation. In a read refusal, the parenthesized phrase names which comparison failed.
 * `its parent-directory symlink resolution changed after permission was checked`: a directory the write path passes through no longer resolves to the approved location
 * `it is a symbolic link. Write to the link's target path instead`: a symbolic link sits at the approved write location itself
 * `a path one of its Read deny rules is written through changed while the search was being prepared. Retry.`: a `Read` deny rule for the search names a path that passes through a symlink, and that link changed while Claude Code was preparing the search
@@ -3211,6 +3423,7 @@ The text after the path names the reason:
 * Usually nothing: the refusal reaches Claude as the tool result, and the refused operation doesn't run
 * If a symlink refusal repeats on one path, find what keeps rewriting a link there, such as a build tool or file watcher, or ask Claude to use the file's resolved path instead of the linked one
 * If this refusal appears for every file while Claude Code runs on Windows inside an AppContainer or restricted-token sandbox, upgrade to v2.1.265 or later
+* If a read refusal appears on macOS for a file that nothing is rewriting, such as a screenshot dragged into the prompt, upgrade to v2.1.273 or later
 * For the ripgrep refusal, install ripgrep with your package manager so `rg` resolves to an absolute path on `PATH`, or keep searches under the working directory
 
 Before v2.1.251, Claude Code re-checked a path's resolution only for file writes, so a link replaced after the permission check could redirect a read or search to a different location without a message. Of these refusals, only the parent-directory write refusal appears on earlier versions.
@@ -3634,6 +3847,10 @@ The underlying `claude` process exited with a non-zero code. The exit code alone
 Error: Claude Code process exited with code 1
 ```
 
+On Windows, the native build can exit with code `4294967295` right after a turn completes. When that exit lands at a turn boundary, with no message waiting and no background task running, the [VS Code extension](/docs/en/vs-code) closes the session quietly instead of showing this error. Your next message resumes the conversation.
+
+Before v2.1.273, the extension showed the error for that exit at every turn boundary, even though nothing was lost.
+
 **What to do:**
 
 * In VS Code, follow the **View output logs** link shown with the error to see the underlying failure
@@ -3657,6 +3874,21 @@ Failed to run Claude Code: Error: Could not locate the Claude CLI on PATH. Launc
 * Set the PATH entry as a user or system environment variable, not in your PowerShell profile. The extension doesn't run your profile, so a PATH edit that lives only there never reaches it.
 * Restart VS Code after changing PATH. The extension checks the PATH that VS Code captured at startup, so a PATH change takes effect only after a restart.
 
+<h3 id="the-connection-to-claude-code-ended-before-this-message-completed">
+  The connection to Claude Code ended before this message completed
+</h3>
+
+The [VS Code extension](/docs/en/vs-code) sent your message to the `claude` process, and the connection ended without an error before the process acknowledged or finished it. The extension can't tell whether the message was processed, so it asks you to send it again:
+
+```text theme={null}
+The connection to Claude Code ended before this message completed — it may not have been processed, so please send it again.
+```
+
+**What to do:**
+
+* Send the message again. The next message starts a fresh `claude` process that resumes the conversation.
+* If it repeats, run `claude` in a terminal in the same project. A failure that keeps ending the process usually reproduces there with its real error message.
+
 ## Rewind warnings and errors
 
 These messages come from a [`/rewind`](/docs/en/checkpointing) code restore. `Restored the code, but skipped N files` is a warning that Claude Code skipped some paths. `No files were restored` is an error that means it restored nothing.
diff --git a/content/en/docs/claude-code/headless.md b/content/en/docs/claude-code/headless.md
index b8e4d149f6..3212ef1106 100644
--- a/content/en/docs/claude-code/headless.md
+++ b/content/en/docs/claude-code/headless.md
@@ -309,7 +309,13 @@ claude -p "Look at my staged changes and create an appropriate commit" \
 The `--allowedTools` flag uses [permission rule syntax](/docs/en/settings-reference#permission-rule-syntax). The trailing ` *` enables prefix matching, so `Bash(git diff *)` allows any command starting with `git diff`. The space before `*` is important: without it, `Bash(git diff*)` would also match `git diff-index`.
 
 <Note>
-  User-invoked [skills](/docs/en/skills) and custom commands work in `-p` mode: include `/skill-name` in the prompt string and Claude Code expands it before running. Built-in commands that only run in the terminal interface, such as `/login`, aren't available in `-p` mode. `/model`, `/effort`, `/fast`, `/color`, and `/rename` accept the value as an argument, for example `/model sonnet`, and `/mcp` with no argument prints a text summary of server status; these forms require Claude Code v2.1.205 or later and follow each command's [availability notes](/docs/en/commands#all-commands). To change a setting from a `-p` invocation, pass `key=value` to `/config`, for example `/config thinking=false`.
+  Command support differs in `-p` mode:
+
+  * User-invoked [skills](/docs/en/skills) and custom commands work. Include `/skill-name` in the prompt string and Claude Code expands it before running.
+  * Built-in commands that only run in the terminal interface, such as `/login`, aren't available.
+  * `/model`, `/effort`, `/fast`, `/color`, and `/rename` accept the value as an argument, for example `/model sonnet`, and `/mcp` with no argument prints a text summary of server status. These forms require Claude Code v2.1.205 or later and follow each command's [availability notes](/docs/en/commands#all-commands).
+  * To change a setting, pass `key=value` to `/config`, for example `/config thinking=false`. Requires Claude Code v2.1.181 or later.
+  * `/output-style <style>` switches [output styles](/docs/en/output-styles) and `/output-style` alone lists them. Requires Claude Code v2.1.269 or later.
 </Note>
 
 ### Customize the system prompt
diff --git a/content/en/docs/claude-code/hooks.md b/content/en/docs/claude-code/hooks.md
index 510b77015d..9e05fdb60a 100644
--- a/content/en/docs/claude-code/hooks.md
+++ b/content/en/docs/claude-code/hooks.md
@@ -1596,6 +1596,8 @@ An [Agent SDK callback hook](/docs/en/agent-sdk/hooks) on `PreToolUse` that exce
 
 In addition to the [common input fields](#common-input-fields), PreToolUse hooks receive `tool_name`, `tool_input`, and `tool_use_id`.
 
+For an [MCP tool](#match-mcp-tools), the input also carries `mcp_server`, an object with the server's `name` and a `source` that says where the server's definition came from. The `source` values include `plugin`, `sdk`, and configuration scopes such as `user` and `project`. [`McpServerProvenance`](/docs/en/agent-sdk/typescript#mcpserverprovenance) in the Agent SDK reference lists them all and says how to treat one you don't recognize. Base trust decisions on `source` rather than on `name` or the `mcp__<server>__` tool-name prefix. The `mcp_server` field requires Claude Code v2.1.274 or later.
+
 For the file tools `Write`, `Edit`, and `Read`, `tool_input.file_path` is always absolute:
 
 * Claude Code expands `~` and relative paths before hooks run, so a hook that matches on paths can't be bypassed via `~` or a relative spelling of the same path
@@ -1893,7 +1895,7 @@ Matches on tool name, same values as PreToolUse.
 
 #### PermissionRequest input
 
-PermissionRequest hooks receive `tool_name` and `tool_input` fields like PreToolUse hooks, but without `tool_use_id`. An optional `permission_suggestions` array contains the [permission updates](#permission-update-entries) Claude Code suggests for this request, such as adding an allow rule or changing the permission mode.
+PermissionRequest hooks receive `tool_name` and `tool_input` fields like PreToolUse hooks, but without `tool_use_id`. For an MCP tool, they also receive the [`mcp_server`](#pretooluse-input) object. An optional `permission_suggestions` array contains the [permission updates](#permission-update-entries) Claude Code suggests for this request, such as adding an allow rule or changing the permission mode.
 
 The `permission_suggestions` array isn't an exact list of the options you see, because each permission dialog builds its own options. Some dialogs, such as the one for file edits, don't read the array at all and derive their options from the request itself. A dialog that does read it can still withhold an option whose suggestion stays in the array, for example when [`allowManagedPermissionRulesOnly`](/docs/en/settings-reference#allowmanagedpermissionrulesonly) hides rule-saving options. It can also offer options that have no suggestion entry, such as [**Yes, and switch to auto mode**](/docs/en/permission-modes#switch-permission-modes), which changes the permission mode directly rather than through a permission update.
 
@@ -1993,7 +1995,7 @@ Match more broadly when the tool name isn't the right filter:
 
 #### PostToolUse input
 
-`PostToolUse` hooks fire after a tool has already executed successfully. The input includes both `tool_input`, the arguments sent to the tool, and `tool_response`, the result it returned. The exact schema for both depends on the tool. File-tool `tool_input` paths arrive in the same format as for [PreToolUse](#pretooluse-input): always absolute, with the platform's native separators, so backslashes on Windows.
+`PostToolUse` hooks fire after a tool has already executed successfully. The input includes both `tool_input`, the arguments sent to the tool, and `tool_response`, the result it returned. The exact schema for both depends on the tool. File-tool `tool_input` paths arrive in the same format as for [PreToolUse](#pretooluse-input): always absolute, with the platform's native separators, so backslashes on Windows. For an MCP tool, the input also carries the [`mcp_server`](#pretooluse-input) object.
 
 ```json theme={null}
 {
@@ -2099,7 +2101,7 @@ Matches on tool name, same values as PreToolUse.
 
 #### PostToolUseFailure input
 
-PostToolUseFailure hooks receive the same `tool_name` and `tool_input` fields as PostToolUse, along with error information as top-level fields. For example, a failed `npm test` command might deliver:
+PostToolUseFailure hooks receive the same `tool_name` and `tool_input` fields as PostToolUse, along with error information as top-level fields. For an MCP tool, they also receive the [`mcp_server`](#pretooluse-input) object. For example, a failed `npm test` command might deliver:
 
 ```json theme={null}
 {
@@ -2214,7 +2216,7 @@ Matches on tool name, same values as PreToolUse.
 
 #### PermissionDenied input
 
-In addition to the [common input fields](#common-input-fields), PermissionDenied hooks receive `tool_name`, `tool_input`, `tool_use_id`, and `reason`.
+In addition to the [common input fields](#common-input-fields), PermissionDenied hooks receive `tool_name`, `tool_input`, `tool_use_id`, and `reason`. For an MCP tool, they also receive the [`mcp_server`](#pretooluse-input) object.
 
 ```json theme={null}
 {
diff --git a/content/en/docs/claude-code/interactive-mode.md b/content/en/docs/claude-code/interactive-mode.md
index eab5c10a20..d8bee0717f 100644
--- a/content/en/docs/claude-code/interactive-mode.md
+++ b/content/en/docs/claude-code/interactive-mode.md
@@ -575,7 +575,7 @@ Claude answers a side question from what's already in the conversation: your mes
 In the [VS Code extension](/docs/en/vs-code#use-the-prompt-box)'s chat panel, `/btw` opens a panel rather than the overlay this section describes, and you ask follow-up questions right in the panel. The panel's thread survives window reloads, on the retention schedule that page describes. You need the extension at v2.1.227 or later. Earlier extension versions don't offer `/btw`.
 
 * **Available while Claude is working**: you can run `/btw` even while Claude is processing a response. The side question runs independently and doesn't interrupt the main turn. It sees everything in the conversation so far, except the reply Claude is still writing.
-* **No tool access**: side questions answer only from what is already in context. Claude can't read files, run commands, or search when answering a side question.
+* **No tool access**: side questions answer only from what is already in context. Claude can't read files, run commands, or search when answering a side question. If Claude writes out tool calls as text anyway, the answer ends with a note that nothing was executed.
 * **Single response**: there are no follow-up turns in the overlay. To continue the thread, ask another `/btw` question. To continue with full tool access in a local session, press `f` to fork this question and answer into a [background subagent](/docs/en/sub-agents#fork-the-current-conversation).
 * **Low cost**: while the conversation's [prompt cache](/docs/en/prompt-caching) is warm, a side question costs little beyond the answer itself.
 
diff --git a/content/en/docs/claude-code/llm-gateway-protocol.md b/content/en/docs/claude-code/llm-gateway-protocol.md
index 3becec802a..6e04ea120e 100644
--- a/content/en/docs/claude-code/llm-gateway-protocol.md
+++ b/content/en/docs/claude-code/llm-gateway-protocol.md
@@ -183,7 +183,9 @@ Discovery still runs when [nonessential traffic is turned off](/docs/en/llm-gate
 
 ### Request and response
 
-The request is `GET /v1/models?limit=1000` with a 3-second timeout, and any redirect is treated as failure so the credential can't leak to a redirect target. A gateway that responds slowly or redirects `/v1/models`, even `http` to `https`, fails discovery silently; serve the endpoint directly at the configured base URL.
+The request is `GET /v1/models?limit=1000` with a timeout of 3 seconds by default, and any redirect is treated as failure so the credential can't leak to a redirect target. A gateway that responds slower than the timeout, or one that redirects `/v1/models`, even `http` to `https`, fails discovery silently; serve the endpoint directly at the configured base URL.
+
+To give a slow gateway longer, set [`CLAUDE_CODE_GATEWAY_MODEL_DISCOVERY_TIMEOUT_MS`](/docs/en/env-vars#variables). The variable requires Claude Code v2.1.269 or later.
 
 Claude Code sends the discovery request with both credential headers below and omits a header whose value doesn't resolve. Sending both headers requires Claude Code v2.1.248 or later. Earlier versions send only `Authorization` when `ANTHROPIC_AUTH_TOKEN` is set and only `x-api-key` otherwise.
 
diff --git a/content/en/docs/claude-code/managed-mcp.md b/content/en/docs/claude-code/managed-mcp.md
index 27224ae7a3..d00c4a077f 100644
--- a/content/en/docs/claude-code/managed-mcp.md
+++ b/content/en/docs/claude-code/managed-mcp.md
@@ -99,12 +99,12 @@ Any user on the machine can read this file, so don't store API keys or other cre
 
 ### Servers passed with `--mcp-config` or `--strict-mcp-config`
 
-When a session receives servers through `--mcp-config` while `managed-mcp.json` is deployed, what the user sees differs between a workstation and a cloud session:
+When a session receives servers through `--mcp-config` while a `managed-mcp.json` that Claude Code can read and parse is deployed, what the user sees differs between a workstation and a cloud session:
 
 * On a workstation, Claude Code exits at startup with `You cannot dynamically configure MCP servers when an enterprise MCP config is present`.
 * In [cloud sessions](/docs/en/claude-code-on-the-web) on a host where the file is deployed, such as a [self-hosted runner](/docs/en/self-hosted-environments-configuration#mcp-servers), Claude Code starts with the managed servers only and skips the claude.ai connectors and other servers the cloud host delivers through `--mcp-config`. Nothing in the session tells the user which servers were left out. Claude Code names them in a warning on its stderr, which a self-hosted runner records at the `debug` log level.
 
-If a user passes `--strict-mcp-config`, Claude Code exits at startup on a workstation and in a cloud session alike, because that flag asks to replace the managed set.
+The `--strict-mcp-config` flag asks to replace the managed set. If a user passes it while such a file is deployed, Claude Code exits at startup on a workstation and in a cloud session alike.
 
 ### How allowlists and denylists apply to the managed set
 
@@ -243,7 +243,13 @@ Servers your organization delivers through `managedMcpServers` load without an a
 
 To deploy servers to users, use [`managed-mcp.json`](#exclusive-control-with-managed-mcp-json) or [`managedMcpServers`](#provide-servers-through-managed-settings). Both lists also filter servers passed with the [`--mcp-config` CLI flag](/docs/en/cli-reference#cli-flags), other than in-process `type: "sdk"` entries; `--strict-mcp-config` limits which configuration files load and doesn't bypass either list.
 
-To make the allowlist authoritative, set `allowedMcpServers` and `allowManagedMcpServersOnly: true` together in a [managed settings source](/docs/en/admin-setup#decide-how-settings-reach-devices), such as server-managed settings or a deployed `managed-settings.json` file. [Restrict the allowlist to managed settings only](#restrict-the-allowlist-to-managed-settings-only) shows the configuration. Without `allowManagedMcpServersOnly`, allowlists from every settings scope merge, including a user's own `~/.claude/settings.json`, so a user can broaden what your allowlist permits. Denylists merge from every scope regardless.
+To make the allowlist authoritative, set `allowedMcpServers` and `allowManagedMcpServersOnly: true` together in a [managed settings source](/docs/en/admin-setup#decide-how-settings-reach-devices), such as server-managed settings or a deployed `managed-settings.json` file.
+
+The lock applies from every admin-controlled managed source, so a lockdown in a deployed file still applies when server-managed settings that don't mention MCP are also in use. While the lock is on, the managed allowlist comes from the highest-ranked admin source that sets one. Reading the lock and the allowlist across sources requires Claude Code v2.1.273 or later.
+
+[Restrict the allowlist to managed settings only](#restrict-the-allowlist-to-managed-settings-only) shows the configuration.
+
+Without `allowManagedMcpServersOnly`, allowlists from every settings scope merge, including a user's own `~/.claude/settings.json`, so a user can broaden what your allowlist permits. Denylists merge from every scope regardless.
 
 <Note>
   `allowManagedMcpServersOnly` is separate from `allowManagedPermissionRulesOnly`, which locks down [permission rules](/docs/en/permissions#managed-settings) only. Setting that flag does not enforce the MCP allowlist.
@@ -274,7 +280,7 @@ See [Invalid entries in managed settings](/docs/en/managed-settings#invalid-entr
 
 The `serverName` validation differs between the two lists:
 
-* In `deniedMcpServers`, `serverName` accepts any non-empty string, so you can block [claude.ai connectors](/docs/en/mcp#use-mcp-servers-from-claude-ai) by their display name. For example, `{ "serverName": "claude.ai Slack" }` blocks the Slack connector. Prefer a `serverUrl` entry when you need the deny to be robust to renames, or when a connector name collides and gains a ` (N)` suffix.
+* In `deniedMcpServers`, `serverName` accepts any non-empty string without leading or trailing whitespace, so you can block [claude.ai connectors](/docs/en/mcp#use-mcp-servers-from-claude-ai) by their display name. For example, `{ "serverName": "claude.ai Slack" }` blocks the Slack connector. Prefer a `serverUrl` entry when you need the deny to be robust to renames, or when a connector name collides and gains a ` (N)` suffix.
 * In `allowedMcpServers`, `serverName` is limited to letters, numbers, hyphens, and underscores. Use `serverUrl` to allowlist a claude.ai connector Claude Code fetches itself; for connectors a cloud host delivers to self-hosted sessions, use the entries listed under [Connector traffic leaves your network](/docs/en/self-hosted-environments-deploy#connector-traffic-leaves-your-network) instead.
 
 To turn off all the claude.ai connectors Claude Code fetches itself, see [`disableClaudeAiConnectors`](/docs/en/mcp#disable-claude-ai-connectors).
@@ -283,7 +289,7 @@ To turn off all the claude.ai connectors Claude Code fetches itself, see [`disab
 
 Before loading a server, including one from `managed-mcp.json`, Claude Code runs the three checks below in order. It runs them again when a user reconnects a server or turns a disabled one back on in `/mcp`. In-process `type: "sdk"` servers, which the [app that started the session registers](/docs/en/mcp#how-connectors-reach-claude-code), skip all three.
 
-1. **Merge the lists.** Allowlist and denylist entries from every settings scope combine into one allowlist and one denylist, with the managed scope's lists coming from the [managed source or sources Claude Code applies](/docs/en/managed-settings#how-claude-code-combines-managed-sources). When `allowManagedMcpServersOnly` is `true`, only the managed allowlist is kept; the denylist always merges from every scope.
+1. **Merge the lists.** Allowlist and denylist entries from every settings scope combine into one allowlist and one denylist. When `allowManagedMcpServersOnly` is `true`, only the managed allowlist is kept; the denylist always merges from every scope. When more than one managed source is present, [Keys read from every admin source](/docs/en/managed-settings#keys-read-from-every-admin-source) says which of them supply the managed scope's lists.
 2. **Check the denylist.** A server that matches any denylist entry, by URL, command, or name, is blocked. Nothing overrides a denylist match.
 3. **Check the allowlist.** If `allowedMcpServers` isn't set anywhere, every server that passed the denylist loads. If it is set, what the server must match depends on its type, shown in the table below.
 
@@ -480,14 +486,14 @@ When [OpenTelemetry export](/docs/en/monitoring-usage) is configured, Claude Cod
 
 Every file and setting this page covers, what it controls, and how to deliver it:
 
-| Surface                      | What it controls                                                                                                                                                                                                                                       | Where it lives                                                                                                                                                                                                                                                                                                                                          | How to deliver                                                                                                                                                                    |
-| :--------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `managed-mcp.json`           | Fixed server set, exclusive control                                                                                                                                                                                                                    | System path: `/Library/Application Support/ClaudeCode/`, `/etc/claude-code/`, or `C:\Program Files\ClaudeCode\`                                                                                                                                                                                                                                         | MDM, GPO, fleet management, or any process with administrator privileges. Cannot be set through server-managed settings                                                           |
-| `managedMcpServers`          | Remote servers provided to every user alongside their own                                                                                                                                                                                              | Managed settings sources only; the setting has no effect elsewhere                                                                                                                                                                                                                                                                                      | A [managed settings source](/docs/en/admin-setup#decide-how-settings-reach-devices): server-managed settings, a gateway policy, `managed-settings.json`, MDM profile, or HKLM registry |
-| `allowedMcpServers`          | Allowlist of permitted servers                                                                                                                                                                                                                         | Any [settings scope](/docs/en/settings#where-settings-live); Claude Code merges the lists from every scope unless `allowManagedMcpServersOnly` is set, and takes the managed scope's list from the one [managed source it selects](/docs/en/managed-settings#precedence-within-the-managed-tier) or [composes](/docs/en/managed-settings#compose-every-managed-source) | For enforcement, a [managed settings source](/docs/en/admin-setup#decide-how-settings-reach-devices): server-managed settings, `managed-settings.json`, MDM profile, or registry       |
-| `deniedMcpServers`           | Denylist of blocked servers                                                                                                                                                                                                                            | Any settings scope; Claude Code merges the lists from every scope, and across managed sources as [how Claude Code combines managed sources](/docs/en/managed-settings#how-claude-code-combines-managed-sources) describes                                                                                                                                    | Same as `allowedMcpServers`                                                                                                                                                       |
-| `allowManagedMcpServersOnly` | Locks the allowlist to managed sources only                                                                                                                                                                                                            | Managed settings sources only; the setting has no effect elsewhere                                                                                                                                                                                                                                                                                      | Same as `allowedMcpServers`                                                                                                                                                       |
-| `allowAllClaudeAiMcps`       | Loads the claude.ai connectors Claude Code fetches itself alongside `managed-mcp.json`. [A `managed-mcp.json` on the host that runs a cloud session still suppresses that session's connectors](#allow-claude-ai-connectors-alongside-the-managed-set) | Managed settings sources only; the setting has no effect elsewhere                                                                                                                                                                                                                                                                                      | Same as `allowedMcpServers`                                                                                                                                                       |
+| Surface                      | What it controls                                                                                                                                                                                                                                       | Where it lives                                                                                                                                                                                                  | How to deliver                                                                                                                                                                    |
+| :--------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `managed-mcp.json`           | Fixed server set, exclusive control                                                                                                                                                                                                                    | System path: `/Library/Application Support/ClaudeCode/`, `/etc/claude-code/`, or `C:\Program Files\ClaudeCode\`                                                                                                 | MDM, GPO, fleet management, or any process with administrator privileges. Cannot be set through server-managed settings                                                           |
+| `managedMcpServers`          | Remote servers provided to every user alongside their own                                                                                                                                                                                              | Managed settings sources only; the setting has no effect elsewhere                                                                                                                                              | A [managed settings source](/docs/en/admin-setup#decide-how-settings-reach-devices): server-managed settings, a gateway policy, `managed-settings.json`, MDM profile, or HKLM registry |
+| `allowedMcpServers`          | Allowlist of permitted servers                                                                                                                                                                                                                         | Any [settings scope](/docs/en/settings#where-settings-live); [How a server is evaluated](#how-a-server-is-evaluated) says how lists from several scopes and managed sources combine                                  | For enforcement, a [managed settings source](/docs/en/admin-setup#decide-how-settings-reach-devices): server-managed settings, `managed-settings.json`, MDM profile, or registry       |
+| `deniedMcpServers`           | Denylist of blocked servers                                                                                                                                                                                                                            | Any settings scope; [How a server is evaluated](#how-a-server-is-evaluated) says how lists from several scopes and managed sources combine                                                                      | Same as `allowedMcpServers`                                                                                                                                                       |
+| `allowManagedMcpServersOnly` | Locks the allowlist to managed sources only                                                                                                                                                                                                            | Managed settings sources only; [Keys read from every admin source](/docs/en/managed-settings#keys-read-from-every-admin-source) says which managed sources can turn it on. The setting has no effect in other scopes | Same as `allowedMcpServers`                                                                                                                                                       |
+| `allowAllClaudeAiMcps`       | Loads the claude.ai connectors Claude Code fetches itself alongside `managed-mcp.json`. [A `managed-mcp.json` on the host that runs a cloud session still suppresses that session's connectors](#allow-claude-ai-connectors-alongside-the-managed-set) | Managed settings sources only; the setting has no effect elsewhere                                                                                                                                              | Same as `allowedMcpServers`                                                                                                                                                       |
 
 ## Related resources
 
diff --git a/content/en/docs/claude-code/managed-settings.md b/content/en/docs/claude-code/managed-settings.md
index b182d4ec58..96232c44ae 100644
--- a/content/en/docs/claude-code/managed-settings.md
+++ b/content/en/docs/claude-code/managed-settings.md
@@ -162,6 +162,12 @@ The cross-source keys include:
 
 * `sandbox.network.allowManagedDomainsOnly` and `sandbox.filesystem.allowManagedReadPathsOnly`: a `true` in any admin source turns the lock on. While a lock is on, Claude Code unions the allowlist it locks, `sandbox.network.allowedDomains` together with `WebFetch(domain:...)` allow rules, or `sandbox.filesystem.allowRead`, across every admin source. Without the lock, Claude Code treats the allowlist like any other key, so under `"first-wins"` an unselected admin source's allowlist is ignored
 * `allowAllClaudeAiMcps`
+* `allowManagedMcpServersOnly`: a `true` in any admin source turns the MCP allowlist lock on. While the lock is on, the managed `allowedMcpServers` list comes from the highest-ranked admin source that sets one. A server-managed list replaces a lower source's list rather than combining with it.
+
+  If no admin source sets a list, every server that passes the denylist loads, unless [parent settings](#let-an-embedding-host-add-policy) supply a list.
+
+  Without the lock, Claude Code reads `allowedMcpServers` from the managed source it applies, so under `"first-wins"` an unselected admin source's list is ignored. Requires Claude Code v2.1.273 or later
+* `deniedMcpServers` and [`disableClaudeAiConnectors`](/docs/en/settings-reference#disableclaudeaiconnectors): an entry or a `true` in any admin source applies. Requires Claude Code v2.1.273 or later
 * The sandbox binary paths `sandbox.bwrapPath` and `sandbox.socatPath`
 * The sandbox `ripgrep` binary, [`sandbox.ripgrep`](/docs/en/settings-reference#sandbox-ripgrep)
 * `sandbox.filesystem.disabled` and `sandbox.network.strictAllowlist`
@@ -174,6 +180,8 @@ The cross-source keys include:
 
 The [gateway login keys](#choose-a-delivery-mechanism) follow a separate rule. Claude Code never reads them from server-managed settings, so while server-managed settings are the selected source, the highest-ranked admin source on the machine that carries a policy key still supplies them. A value in an admin source ranked below that one, or in the HKCU registry, is ignored.
 
+When an admin source sets `allowManagedMcpServersOnly` or an `allowedMcpServers` list and that value isn't the one in force, `/status` and `claude doctor` name that source and key.
+
 ### Compose every managed source
 
 To have Claude Code apply every admin source your organization delivers, set [`managedSourcesBehavior`](/docs/en/settings-reference#managedsourcesbehavior) to `"merge"` in the highest-ranked source you deploy. Claude Code reads the key only from the highest-ranked source that carries either the key or a policy key, so a lower source can't opt itself into merging with the source above it, and a machine that never receives server-managed settings needs the key in its MDM profile too. The user-writable HKCU registry never merges with another source. Requires Claude Code v2.1.242 or later.
@@ -224,8 +232,10 @@ A [`policyHelper`](/docs/en/settings-reference#policyhelper) can turn parent mer
 Claude Code also applies these checks to parent-supplied values on their own:
 
 * When any admin source sets `allowManagedPermissionRulesOnly`, Claude Code drops [parent-supplied](/docs/en/claude-apps-gateway#restrict-parent-settings) permission allow rules and `additionalDirectories` as it reads them, even when a higher-priority source leaves the key unset. The key's effect on your own permission rules comes from the managed settings Claude Code applies, or from parent settings you've chosen to merge
-* Claude Code enforces the `forceLoginOrgUUID` or `allowedMcpServers` value in the managed settings it applies and blocks a parent-supplied one. A value in a lower admin source that Claude Code doesn't apply neither applies nor blocks the parent's. The [`managedSourcesBehavior`](/docs/en/settings-reference#managedsourcesbehavior) entry says which source supplies each key under `"merge"`. Before v2.1.223, a value in any admin source blocked the parent's
-* An `availableModels` value follows the same rule as `allowedMcpServers`
+* Claude Code enforces the `forceLoginOrgUUID` or `allowedMcpServers` value in the managed settings it applies and blocks a parent-supplied one. Outside the MCP allowlist lock, a value in a lower admin source that Claude Code doesn't apply neither applies nor blocks the parent's.
+
+  On Claude Code v2.1.273 or later, while `allowManagedMcpServersOnly` is on, the `allowedMcpServers` list from the highest-ranked admin source that sets one applies and blocks the parent's, as a [cross-source key](#keys-read-from-every-admin-source). The parent's list applies only when no admin source sets one. The [`managedSourcesBehavior`](/docs/en/settings-reference#managedsourcesbehavior) entry says which source supplies each key under `"merge"`. Before v2.1.223, a value in any admin source blocked the parent's
+* For `availableModels`, Claude Code enforces the value in the managed settings it applies and blocks a parent-supplied list
 
 #### Keep Cowork folder access when only managed rules apply
 
@@ -356,7 +366,7 @@ The table covers the permission, plugin, and delivery controls. For any key not
 | [`allowAllClaudeAiMcps`](/docs/en/settings-reference#allowallclaudeaimcps)                                                 | Load the claude.ai connectors Claude Code fetches itself alongside a deployed `managed-mcp.json` instead of suppressing them                                                                                                                                                                                                                                                                                                                                                   |
 | [`allowedChannelPlugins`](/docs/en/settings-reference#allowedchannelplugins)                                               | Allowlist of channel plugins that may push messages. Replaces the default Anthropic allowlist when set. Requires `channelsEnabled: true`. See [Restrict which channel plugins can run](/docs/en/channels#restrict-which-channel-plugins-can-run)                                                                                                                                                                                                                                    |
 | [`allowManagedHooksOnly`](/docs/en/settings-reference#allowmanagedhooksonly)                                               | When `true`, restricts which hooks run; see [what runs under `allowManagedHooksOnly`](/docs/en/settings-reference#what-runs-under-allowmanagedhooksonly) for the full effect list                                                                                                                                                                                                                                                                                                   |
-| [`allowManagedMcpServersOnly`](/docs/en/settings-reference#allowmanagedmcpserversonly)                                     | When `true`, only `allowedMcpServers` from managed settings are respected. `deniedMcpServers` still merges from all sources. See [Managed MCP configuration](/docs/en/managed-mcp)                                                                                                                                                                                                                                                                                                  |
+| [`allowManagedMcpServersOnly`](/docs/en/settings-reference#allowmanagedmcpserversonly)                                     | When `true`, only `allowedMcpServers` from managed settings are respected. `deniedMcpServers` still merges from all sources. See [Keys read from every admin source](#keys-read-from-every-admin-source) for which managed sources can set it, and [Managed MCP configuration](/docs/en/managed-mcp)                                                                                                                                                                                |
 | [`allowManagedPermissionRulesOnly`](/docs/en/settings-reference#allowmanagedpermissionrulesonly)                           | Makes managed settings the only settings source of permission rules. The entry lists every source it ignores                                                                                                                                                                                                                                                                                                                                                                   |
 | [`blockedMarketplaces`](/docs/en/settings-reference#blockedmarketplaces)                                                   | Blocklist of marketplace sources. Blocked sources are checked before downloading, so they never touch the filesystem. See [managed marketplace restrictions](/docs/en/plugin-marketplaces#managed-marketplace-restrictions)                                                                                                                                                                                                                                                         |
 | [`channelsEnabled`](/docs/en/settings-reference#channelsenabled)                                                           | Allow [channels](/docs/en/channels) for the organization. See [enterprise controls](/docs/en/channels#enterprise-controls) for the default on each plan                                                                                                                                                                                                                                                                                                                                  |
diff --git a/content/en/docs/claude-code/mcp.md b/content/en/docs/claude-code/mcp.md
index d1bcc9966f..d237bd18b9 100644
--- a/content/en/docs/claude-code/mcp.md
+++ b/content/en/docs/claude-code/mcp.md
@@ -364,7 +364,7 @@ Claude Code reconnects a remote server that drops mid-session and retries an HTT
 
 Claude Code reconnects a dropped remote server with exponential backoff: up to five attempts, starting at a one-second delay and doubling it each time. What you see depends on how you're running Claude Code:
 
-* **In an interactive session**: `/mcp` shows the server as pending while Claude Code reconnects. After five failed attempts, Claude Code marks the server as failed, or as needing authentication when the server needs authorizing again. You can retry manually from `/mcp`.
+* **In an interactive session**: `/mcp` shows the server as pending while Claude Code reconnects. After five failed attempts, Claude Code marks the server as failed, or as needing authentication when the server needs authorizing again. When it marks the server as failed, you see an `MCP server "<name>" disconnected · open /mcp to reconnect` notification. You can retry manually from `/mcp`.
 * **In [`claude -p`](/docs/en/headless) runs and [Agent SDK](/docs/en/agent-sdk/overview) sessions**: Claude Code reconnects on the same schedule, with no `/mcp` panel to show the attempts.
 
 #### Failed first connections
@@ -931,7 +931,9 @@ As of v2.1.196, when `oauth.scopes` isn't set, Claude Code requests the scope pr
 
 If the authorization server advertises `offline_access` in `scopes_supported`, Claude Code appends it to the pinned scopes so the access token can be refreshed without a new browser sign-in.
 
-If the server later returns a 403 `insufficient_scope` for a tool call, Claude Code re-authenticates with the same pinned scopes. Widen `oauth.scopes` when a tool you need requires a scope outside the pinned set.
+If the server later returns a 403 `insufficient_scope` for a tool call, the call fails with a [`needs additional permissions`](/docs/en/errors#mcp-server-needs-you-to-sign-in-again) message that names the scope the server asks for. The server shows as needing authentication in `/mcp`.
+
+If that scope isn't in your pinned `oauth.scopes`, add it, then run `/mcp` and authenticate the server again. Claude Code requests the pinned scopes rather than the scope the server named, so if you authenticate again without adding it, the token you get still lacks it.
 
 ### Use dynamic headers for custom authentication
 
diff --git a/content/en/docs/claude-code/memory.md b/content/en/docs/claude-code/memory.md
index 7bb4147f85..f08a210adb 100644
--- a/content/en/docs/claude-code/memory.md
+++ b/content/en/docs/claude-code/memory.md
@@ -380,7 +380,9 @@ To store auto memory in a different location, set `autoMemoryDirectory` in your
 }
 ```
 
-The value must be an absolute path or start with `~/`. When you set it in a project's `.claude/settings.json` or `.claude/settings.local.json`, Claude Code honors it under the same [workspace trust rule as hooks in settings files](/docs/en/permissions#what-runs-before-you-trust-a-folder).
+The value must be an absolute path or start with `~/`.
+
+When you set it in a project's `.claude/settings.json` or `.claude/settings.local.json`, Claude Code honors it under the same [workspace trust rule as hooks in settings files](/docs/en/permissions#what-runs-before-you-trust-a-folder). While [`permissions.blockReadsOutsideWorkingDirectories`](/docs/en/settings-reference#permissions-blockreadsoutsideworkingdirectories) is on, Claude Code loads no auto memory from a directory that a [repository-supplied settings file](/docs/en/permissions#when-your-local-settings-file-needs-trust) chooses and saves none to it, wherever that directory sits.
 
 The directory contains a `MEMORY.md` index and one topic file per memory:
 
diff --git a/content/en/docs/claude-code/mobile.md b/content/en/docs/claude-code/mobile.md
index 1410e33641..c0775a4ac2 100644
--- a/content/en/docs/claude-code/mobile.md
+++ b/content/en/docs/claude-code/mobile.md
@@ -6,7 +6,7 @@
 
 > Start, monitor, and steer Claude Code tasks from your phone with the Claude app for iOS and Android.
 
-The Claude app for [iOS](https://apps.apple.com/us/app/claude-by-anthropic/id6473753684) and [Android](https://play.google.com/store/apps/details?id=com.anthropic.claude) is a client for Claude Code sessions rather than a place where code runs. From your phone you reach [cloud sessions](#start-and-monitor-cloud-sessions) in the cloud, a session running on your own machine through [Remote Control](#continue-a-local-session-with-remote-control), or the Desktop app through [Dispatch](/docs/en/desktop#sessions-from-dispatch).
+The Claude app for [iOS](https://apps.apple.com/us/app/claude-by-anthropic/id6473753684) and [Android](https://play.google.com/store/apps/details?id=com.anthropic.claude) is a client for Claude Code sessions rather than a place where code runs. From your phone you reach [cloud sessions](#start-and-monitor-cloud-sessions) and [projects](/docs/en/claude-projects) in the cloud, a session running on your own machine through [Remote Control](#continue-a-local-session-with-remote-control), or the Desktop app through [Dispatch](/docs/en/desktop#sessions-from-dispatch).
 
 <Note>
   Claude Code doesn't have a separate mobile app: cloud sessions and Remote Control both live in the **Code** tab in the Claude app, and Dispatch is a task you message in the app.
@@ -34,15 +34,16 @@ The Claude app for [iOS](https://apps.apple.com/us/app/claude-by-anthropic/id647
 
 ## Work from your phone
 
-From the app you can start cloud sessions, drive a Claude Code session running on your computer, or message Dispatch a task. The app is the same for all three; they differ in where the work happens.
+From the app you can start cloud sessions, open a project, drive a Claude Code session running on your computer, or message Dispatch a task. The app is the same for each; they differ in where the work happens.
 
-| Feature                                        | What you connect to                                             | When to use                                                                                                                                            |
-| :--------------------------------------------- | :-------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------- |
-| [Cloud sessions](/docs/en/claude-code-on-the-web)   | A session on cloud infrastructure, Anthropic-managed by default | Your repository is on GitHub and the task should keep running after you put your phone away. See the [cloud quickstart](/docs/en/web-quickstart) to set up. |
-| [Remote Control](/docs/en/remote-control)           | A Claude Code session running on your computer                  | The work needs your local filesystem, tools, or MCP servers.                                                                                           |
-| [Dispatch](/docs/en/desktop#sessions-from-dispatch) | The Desktop app on your computer                                | You want to message a task and let Dispatch decide how to run it. Requires a Pro or Max plan.                                                          |
+| Feature                                        | What you connect to                                                        | When to use                                                                                                                                            |
+| :--------------------------------------------- | :------------------------------------------------------------------------- | :----------------------------------------------------------------------------------------------------------------------------------------------------- |
+| [Cloud sessions](/docs/en/claude-code-on-the-web)   | A session on cloud infrastructure, Anthropic-managed by default            | Your repository is on GitHub and the task should keep running after you put your phone away. See the [cloud quickstart](/docs/en/web-quickstart) to set up. |
+| [Projects](/docs/en/claude-projects)                | A conversation where Claude coordinates parallel cloud sessions as threads | You have a stream of related work rather than one task and want to see which threads finished or need you.                                             |
+| [Remote Control](/docs/en/remote-control)           | A Claude Code session running on your computer                             | The work needs your local filesystem, tools, or MCP servers.                                                                                           |
+| [Dispatch](/docs/en/desktop#sessions-from-dispatch) | The Desktop app on your computer                                           | You want to message a task and let Dispatch decide how to run it. Requires a Pro or Max plan.                                                          |
 
-If your computer will be off, use cloud sessions, which run in the cloud and continue with your laptop closed. Remote Control and Dispatch drive your own machine, so it needs to stay on with Claude Code or the Desktop app running. If your machine sleeps during a Remote Control session, Claude Code reconnects when the machine comes back online.
+If your computer will be off, use cloud sessions or a project, which run in the cloud and continue with your laptop closed. Remote Control and Dispatch drive your own machine, so it needs to stay on with Claude Code or the Desktop app running. If your machine sleeps during a Remote Control session, Claude Code reconnects when the machine comes back online.
 
 For a fuller comparison, see [work when you are away from your terminal](/docs/en/platforms#work-when-you-are-away-from-your-terminal).
 
diff --git a/content/en/docs/claude-code/output-styles.md b/content/en/docs/claude-code/output-styles.md
index 31349c1abc..34e4694eac 100644
--- a/content/en/docs/claude-code/output-styles.md
+++ b/content/en/docs/claude-code/output-styles.md
@@ -30,12 +30,13 @@ There are four additional built-in output styles:
 
 Pick a style in one of these ways:
 
+* **`/output-style` command**: run `/output-style <style>` to switch, for example `/output-style concise`. With no argument, the command lists the styles you can pick and marks the current one. Claude Code saves your selection to `.claude/settings.local.json` at the [local project level](/docs/en/settings).
+
+  The command also works in [non-interactive mode](/docs/en/headless) and Agent SDK sessions, and from the mobile app or web via [Remote Control](/docs/en/remote-control#limitations), where you can list and select only [built-in styles](#built-in-output-styles). Requires Claude Code v2.1.269 or later.
 * **Terminal**: run `/config` and select **Output style** to pick a style from a menu. Claude Code saves your selection to `.claude/settings.local.json` at the [local project level](/docs/en/settings).
 * **VS Code extension**: open the [command menu](/docs/en/vs-code#use-the-prompt-box) with `/` and select **Output styles** to pick a style, including your custom styles. Claude Code saves your selection to `.claude/settings.local.json`, the same file the terminal menu writes. Requires Claude Code v2.1.257 or later.
 * **Desktop app**: set the `outputStyle` field in a settings file, for example `.claude/settings.local.json`, the file the terminal menu writes. When you run `/config` there, Claude Code [opens **Settings > Claude Code**](/docs/en/desktop#what’s-not-available-in-desktop) rather than a menu.
 
-<Note>The standalone `/output-style` command was deprecated in v2.1.73 and removed in v2.1.91. Use `/config` or edit the `outputStyle` setting directly.</Note>
-
 To set a style without the menu, edit the `outputStyle` field directly in a settings file:
 
 ```json theme={null}
@@ -84,7 +85,7 @@ In the VS Code extension, you can also create the file from the [**Output styles
   </Step>
 
   <Step title="Switch to your style">
-    Run `/config` in the terminal and select your style under **Output style**. Claude uses the new style starting with your next message. In the terminal, Claude Code reads style files when it starts, so if you create or edit one during a running session, restart Claude Code to pick up the change.
+    Run `/output-style <style>` in the terminal, or run `/config` and select your style under **Output style**. Claude uses the new style starting with your next message. In the terminal, Claude Code reads style files when it starts, so if you create or edit one during a running session, restart Claude Code to pick up the change.
   </Step>
 </Steps>
 
diff --git a/content/en/docs/claude-code/permission-modes.md b/content/en/docs/claude-code/permission-modes.md
index 68182274f0..ea6b06618c 100644
--- a/content/en/docs/claude-code/permission-modes.md
+++ b/content/en/docs/claude-code/permission-modes.md
@@ -630,7 +630,7 @@ Claude Code treats an `rm` or `rmdir` target as a critical path when it is any o
 
 Claude Code also treats a glob or trailing slash directly under a shell variable, such as `rm -rf "$DIR"/*`, as a critical-path removal, because the command becomes a removal from the filesystem root when the variable is empty.
 
-Hiding the removal inside command substitution with `$(...)` or backticks, or process substitution with `<(...)`, doesn't skip the check. Claude Code finds a critical-path removal whether it sits inside the substitution, as in `echo "$(rm -rf ~)"`, or elsewhere in the same command.
+Hiding the removal inside a subshell with `(...)`, a brace group with `{ ...; }`, command substitution with `$(...)` or backticks, or process substitution with `<(...)`, doesn't skip the check. Claude Code finds a critical-path removal whether it sits inside the nested form, as in `(rm -rf ~)` or `echo "$(rm -rf ~)"`, or elsewhere in the same command.
 
 ### Remove-Item in PowerShell
 
diff --git a/content/en/docs/claude-code/plugin-dependencies.md b/content/en/docs/claude-code/plugin-dependencies.md
index 7b1e90ab99..a3f15e636c 100644
--- a/content/en/docs/claude-code/plugin-dependencies.md
+++ b/content/en/docs/claude-code/plugin-dependencies.md
@@ -69,7 +69,7 @@ For example, a platform team can publish role-specific bundles in an internal ma
 
 Installing `backend-standard` resolves and installs all four dependencies.
 
-To add a tool to the standard set later, publish a new `backend-standard` version with the extra dependency. Auto-update is off by default for non-Anthropic marketplaces, so engineers pick up the new version in one of two ways:
+To add a tool to the standard set later, publish a new `backend-standard` version with the extra dependency. Unless the marketplace [auto-updates](/docs/en/discover-plugins#configure-auto-updates), engineers pick up the new version in one of two ways:
 
 * Enable auto-update for the marketplace in `/plugin`. The next auto-update moves the bundle to the new version and installs any dependencies it adds.
 * Run `claude plugin update backend-standard`, then `/reload-plugins` to install the newly added dependencies.
diff --git a/content/en/docs/claude-code/plugin-marketplaces.md b/content/en/docs/claude-code/plugin-marketplaces.md
index c381787e22..33f60d99d0 100644
--- a/content/en/docs/claude-code/plugin-marketplaces.md
+++ b/content/en/docs/claude-code/plugin-marketplaces.md
@@ -166,6 +166,8 @@ Each plugin entry needs at minimum a `name` and a `source` that tells Claude Cod
   **Reserved names**: the following marketplace names are reserved for official Anthropic use and can't be used by third-party marketplaces: `claude-code-marketplace`, `claude-code-plugins`, `claude-plugins-official`, `claude-plugins-community`, `claude-community`, `anthropic-marketplace`, `anthropic-plugins`, `agent-skills`, `anthropic-agent-skills`, `knowledge-work-plugins`, `life-sciences`, `claude-for-legal`, `claude-for-financial-services`, `financial-services-plugins`, `first-party-plugins`, `claude-tag-plugins`, `healthcare`. Names that impersonate official marketplaces, such as `official-claude-plugins` or `anthropic-plugins-v2`, are also blocked. Reserving these names prevents a third-party marketplace from presenting itself as an Anthropic-published source.
 
   Claude Code re-checks reserved names every time it loads a marketplace, not only when you add one. A marketplace that was registered under one of these names before the name became reserved stops loading and reports that it is [registered from an untrusted source](/docs/en/errors#marketplace-is-registered-from-an-untrusted-source). Remove that marketplace and re-add it from the official Anthropic source. A third-party marketplace affected by a newly reserved name loads again as soon as you re-add it under a different name. Before v2.1.205, `first-party-plugins` and `healthcare` weren't reserved, and a marketplace already registered under a reserved name kept loading. Before v2.1.265, `claude-tag-plugins` wasn't reserved.
+
+  You also can't name a marketplace `npm`, `pip`, `uv`, `cargo`, `github`, or `gh`, in any casing. This check requires Claude Code v2.1.275 or later.
 </Note>
 
 ### Owner fields
@@ -260,7 +262,7 @@ Claude Code copies each installed plugin into the local versioned plugin cache a
 | `github`      | object                          | `repo`, `ref?`, `sha?`             |                                                                                                                                                                                                                                                     |
 | `url`         | object                          | `url`, `ref?`, `sha?`              | Git URL source                                                                                                                                                                                                                                      |
 | `git-subdir`  | object                          | `url`, `path`, `ref?`, `sha?`      | Subdirectory within a git repo. Clones sparsely to minimize bandwidth for monorepos                                                                                                                                                                 |
-| `npm`         | object                          | `package`, `version?`, `registry?` | Installed via `npm install`                                                                                                                                                                                                                         |
+| `npm`         | object                          | `package`, `version?`, `registry?` | npm package, fetched with your npm client and unpacked without running install scripts                                                                                                                                                              |
 | `archive`     | object                          | `url`, `sha256?`                   | Zip archive downloaded over HTTPS. Works without git or npm on the user's machine. Requires Claude Code v2.1.224 or later                                                                                                                           |
 | `command`     | object                          | `command`, `timeout?`, `mode?`     | Plugin directory produced by running a local command, re-run once per session to pick up changes. Requires Claude Code v2.1.229 or later                                                                                                            |
 
@@ -405,7 +407,11 @@ The `url` field also accepts a GitHub shorthand (`owner/repo`) or SSH URLs (`git
 
 ### npm packages
 
-Plugins distributed as npm packages are installed using `npm install`. This works with any package on the public npm registry or a private registry your team hosts.
+An npm source can name any package on the public npm registry or on a private registry your team hosts. Claude Code resolves the package with your npm client, downloads the tarball, and unpacks it into the plugin cache.
+
+The package's install scripts, such as `preinstall` or `postinstall`, never run, and its dependencies aren't installed during the fetch.
+
+If the package ships a supported lockfile beside its `package.json`, Claude Code installs those [Node.js package dependencies](/docs/en/plugins-reference#node-js-package-dependencies) in a separate step, also with scripts disabled. Otherwise, publish the plugin with everything it needs already built. An MCP server that needs other packages can launch through `npx`, which installs them at first run.
 
 ```json theme={null}
 {
@@ -1064,6 +1070,8 @@ The allowlist uses exact matching for most source types, apart from owner-wildca
 
 The allowlist's exact matching treats URLs that differ only by a trailing slash, a `.git` suffix, or the `ssh://` and `https://` scheme as different values. If your organization's marketplace can be cloned by more than one URL form, prefer a `hostPattern` entry over a literal URL so the `https://`, `ssh://`, and `user@host:path` forms all match.
 
+A [marketplace hosted on claude.ai](/docs/en/discover-plugins#add-from-claude-ai) is matched by host: a `hostPattern` entry that matches `claude.ai` governs it, in `strictKnownMarketplaces` and in `blockedMarketplaces`. On the allowlist, such an entry doesn't admit a member's personal claude.ai uploads. Requires Claude Code v2.1.273 or later.
+
 Because `strictKnownMarketplaces` is set in [managed settings](/docs/en/managed-settings), individual users and project configurations can't override these restrictions.
 
 For complete configuration details including all supported source types and comparison with `extraKnownMarketplaces`, see the [strictKnownMarketplaces reference](/docs/en/settings-reference#strictknownmarketplaces).
@@ -1247,10 +1255,11 @@ A URL must include its scheme. As of Claude Code v2.1.196, a host typed without
 
 **Options:**
 
-| Option                | Description                                                                                                                                         | Default |
-| :-------------------- | :-------------------------------------------------------------------------------------------------------------------------------------------------- | :------ |
-| `--scope <scope>`     | Where to declare the marketplace: `user`, `project`, or `local`. See [Plugin installation scopes](/docs/en/plugins-reference#plugin-installation-scopes) | `user`  |
-| `--sparse <paths...>` | Limit checkout to specific directories via git sparse-checkout. Useful for monorepos                                                                |         |
+| Option                | Description                                                                                                                                                               | Default |
+| :-------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | :------ |
+| `--scope <scope>`     | Where to declare the marketplace: `user`, `project`, or `local`. See [Plugin installation scopes](/docs/en/plugins-reference#plugin-installation-scopes)                       | `user`  |
+| `--sparse <paths...>` | Limit checkout to specific directories via git sparse-checkout. Useful for monorepos                                                                                      |         |
+| `--claudeai`          | Read the argument as the name of a [marketplace hosted on claude.ai](/docs/en/discover-plugins#add-from-claude-ai) instead of a source. Requires Claude Code v2.1.273 or later |         |
 
 Add a marketplace from GitHub using `owner/repo` shorthand:
 
@@ -1294,6 +1303,14 @@ For a monorepo, limit the checkout to the directories that contain plugin conten
 claude plugin marketplace add acme-corp/monorepo --sparse .claude-plugin plugins
 ```
 
+Add a [marketplace hosted on claude.ai](/docs/en/discover-plugins#add-from-claude-ai) by the name printed in the `From claude.ai:` section of `claude plugin marketplace list`:
+
+```bash theme={null}
+claude plugin marketplace add --claudeai claudeai-organization-library
+```
+
+With `--claudeai`, the command refuses `--scope` and `--sparse`. The marketplace is hosted for your account, not declared in a settings file, so you can't share it through a project's `.claude/settings.json`.
+
 ### Plugin marketplace list
 
 List all configured marketplaces.
@@ -1310,6 +1327,10 @@ claude plugin marketplace list [options]
 
 With `--json`, each entry includes `name`, `source`, an `installLocation` field with the local cache path where the marketplace is stored, and source-specific fields: `repo` for GitHub sources, `url` for git and URL sources, and `path` for local sources. GitHub and git sources also include a `ref` field when the marketplace was added with a pinned branch or tag.
 
+An added [claude.ai marketplace](/docs/en/discover-plugins#add-from-claude-ai) has no local clone, so its entry carries its claude.ai identifiers, `marketplaceId` and `organizationUuid`, in place of `installLocation`.
+
+In terminal sessions where [plugins sync from your claude.ai account](/docs/en/plugins-reference#synced-plugins), the text listing ends with a `From claude.ai:` section naming what claude.ai lists for your account beyond the marketplaces you've added. To add one of them, see [Add from claude.ai](/docs/en/discover-plugins#add-from-claude-ai). The `--json` output covers configured marketplaces only and leaves that section out. Requires Claude Code v2.1.273 or later.
+
 ### Plugin marketplace remove
 
 Remove a configured marketplace. The alias `rm` is also accepted.
diff --git a/content/en/docs/claude-code/plugin-relevance.md b/content/en/docs/claude-code/plugin-relevance.md
index 4da4641015..fefef1a65c 100644
--- a/content/en/docs/claude-code/plugin-relevance.md
+++ b/content/en/docs/claude-code/plugin-relevance.md
@@ -76,7 +76,9 @@ A plugin with a `relevance` block but no matching signal behaves like any other
 | `filesRead`    | array of strings | Glob patterns matched against the paths of files Claude has read this session, for example `["**/*.tf"]`. Forward-slash normalized and case-insensitive. Maximum 10 patterns of 256 characters each.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | `manifestDeps` | array of objects | Dependencies declared in package manifests Claude has read this session. Each entry is `{ "file": "...", "pattern": "..." }`, where `file` is a regular expression matched against the manifest file's path as recorded in session state, typically an absolute path, and `pattern` is a regular expression matched against that file's contents. Anchor `file` at the end, for example `[/\\\\]package\\.json$` in JSON-escaped form, because a start-anchored pattern never matches an absolute path. Paths are not separator-normalized for this signal, so Windows paths use backslashes. Manifest files larger than 512 KB are skipped. Both values are JavaScript `RegExp` source strings of at most 256 characters. `file` matches case-insensitively. `pattern` is case-sensitive. Maximum 10 entries. |
 
-The `cli`, `hosts`, `filesRead`, and `manifestDeps` signals need session history, so they can only match on the spinner tip and the Discover tab. The `filesRead` and `manifestDeps` signals test the session's recorded file state, which also includes files Claude has written or edited and auto-loaded `CLAUDE.md` memory files.
+The `cli`, `hosts`, `filesRead`, and `manifestDeps` signals need session history, so they can only match on the spinner tip and the Discover tab.
+
+The `filesRead` and `manifestDeps` signals test the session's recorded file state, which also includes files Claude has written or edited and auto-loaded `CLAUDE.md` memory files. For these two signals, Claude Code skips paths under its own [configuration directory](/docs/en/claude-directory) and its temporary directories.
 
 The following example uses `manifestDeps` to suggest a Stripe plugin once Claude has read a `package.json` that depends on `stripe`. The `file` pattern uses `[/\\\\]` so it matches both forward-slash and backslash path separators, and `\\.` so the dot is literal. In JSON, each backslash in the regular expression is written twice.
 
diff --git a/content/en/docs/claude-code/plugins-reference.md b/content/en/docs/claude-code/plugins-reference.md
index e913122b7b..68fa4545c3 100644
--- a/content/en/docs/claude-code/plugins-reference.md
+++ b/content/en/docs/claude-code/plugins-reference.md
@@ -93,6 +93,8 @@ Plugins can provide event handlers that respond to Claude Code events automatica
 
 **Format**: JSON configuration with event matchers and actions
 
+`hooks/hooks.json` can carry a top-level `$schema` key that names a JSON Schema URL for editor autocomplete and validation. Claude Code ignores the key at load time.
+
 **Hook configuration**:
 
 ```json theme={null}
@@ -833,7 +835,9 @@ Claude Code runs the install inside the copied version directory each time it cr
 | `bun.lock` or `bun.lockb`                    | `bun install --frozen-lockfile --ignore-scripts` |
 | `npm-shrinkwrap.json` or `package-lock.json` | `npm ci --ignore-scripts`                        |
 
-If a plugin contains more than one of these lockfiles, Claude Code uses the first match, checking in order: `bun.lock`, `bun.lockb`, `npm-shrinkwrap.json`, `package-lock.json`. Claude Code skips `yarn.lock` and `pnpm-lock.yaml` because Yarn and pnpm support resolution-time configuration hooks that bypass `--ignore-scripts`.
+If a plugin contains more than one of these lockfiles, Claude Code uses the first match, checking in order: `bun.lock`, `bun.lockb`, `npm-shrinkwrap.json`, `package-lock.json`.
+
+Claude Code skips `yarn.lock` and `pnpm-lock.yaml` because Yarn and pnpm support resolution-time configuration hooks that bypass `--ignore-scripts`. When a `bunfig.toml` sits beside the matched bun lockfile, Claude Code skips the install entirely, because the file can configure a security scanner that Bun loads and runs during the install. The filename match ignores letter case. Remove the `bunfig.toml`, or ship an npm lockfile in place of the bun lockfile.
 
 Ship an npm lockfile for the widest reach. Claude Code runs the matched lockfile's package manager from the user's PATH and doesn't fall back to the other lockfile if it's missing. For a plugin distributed through an npm source, use `npm-shrinkwrap.json`; npm excludes `package-lock.json` from published packages.
 
@@ -843,9 +847,9 @@ Claude Code constrains this dependency install so that no code from the plugin o
 * **No lifecycle scripts:** `--ignore-scripts` keeps `preinstall`, `install`, and `postinstall` scripts from running, so dependencies that build native modules in those scripts download but don't compile during this install.
 * **60-second timeout:** Claude Code stops an install that runs longer and treats it as failed.
 
-Fetching an npm-source plugin itself runs `npm install` with lifecycle scripts enabled, before this dependency install runs.
+Claude Code fetches an npm-source plugin before this dependency install, and none of the package's own install scripts run during the fetch. See [npm packages](/docs/en/plugin-marketplaces#npm-packages).
 
-A failed or skipped install never blocks the plugin. When the install fails, or Claude Code skips a yarn or pnpm lockfile, it records the reason as a warning in [debug output](#debugging-commands). A plugin with a `package.json` and no lockfile is skipped without a log entry. A timed-out install can leave a partial `node_modules` tree in the cached copy.
+A failed or skipped install never blocks the plugin. When the install fails, or Claude Code skips a yarn or pnpm lockfile or a bun lockfile with a `bunfig.toml` beside it, it records the reason as a warning in [debug output](#debugging-commands). A plugin with a `package.json` and no lockfile is skipped without a log entry. A timed-out install can leave a partial `node_modules` tree in the cached copy.
 
 You can't turn the automatic install off; no setting or environment variable disables it. In restricted networks, see the [network access requirements](/docs/en/network-config#network-access-requirements) for the hosts to allow.
 
@@ -1462,7 +1466,7 @@ For every source type except `command`, Claude Code resolves the version from th
 2. The `version` field in the plugin's marketplace entry in `marketplace.json`
 3. The git commit SHA of the plugin's source, for `github`, `url`, `git-subdir`, and relative-path sources in a git-hosted marketplace
 4. The SHA-256 digest, for [`archive` sources](/docs/en/plugin-marketplaces#zip-archives): the `sha256` pin in the marketplace entry, or the digest of the downloaded file when you set no pin. Claude Code shortens it to the first 12 characters
-5. `unknown`, for `npm` sources or local directories not inside a git repository
+5. `unknown`, for `npm` sources, or for local directories when neither the plugin directory nor its marketplace is a git repository. Claude Code doesn't take the version from a repository that encloses the install path, such as a git-managed `~/.claude`
 
 For a [`command` source](/docs/en/plugin-marketplaces#command-sources), Claude Code always derives the version from what the command produced: a 12-character content hash on its own, or appended to the `plugin.json` version as `<version>-<hash>` when one is set. Claude Code ignores the marketplace entry's `version` field for command sources. A command whose hashed output changes therefore produces a new version, even when the authored version string stays the same. In [link mode](/docs/en/plugin-marketplaces#copy-mode-and-link-mode), the hash covers the printed directory's real path and its top-level entries rather than the file contents.
 
diff --git a/content/en/docs/claude-code/prompt-caching.md b/content/en/docs/claude-code/prompt-caching.md
index b22a35111f..1632335f64 100644
--- a/content/en/docs/claude-code/prompt-caching.md
+++ b/content/en/docs/claude-code/prompt-caching.md
@@ -220,7 +220,7 @@ Switching between [permission modes](/docs/en/permission-modes), such as from Ma
 
 ### Changing output style
 
-When you switch [output styles](/docs/en/output-styles) mid-session with `/config` or the `outputStyle` setting, Claude uses the new style starting with your next message. Claude Code delivers the new style's instructions as a message in the conversation, so that request still reads the system prompt and the earlier conversation from the cache.
+When you switch [output styles](/docs/en/output-styles) mid-session with [`/output-style`](/docs/en/output-styles#change-your-output-style), `/config`, or the `outputStyle` setting, Claude uses the new style starting with your next message. Claude Code delivers the new style's instructions as a message in the conversation, so that request still reads the system prompt and the earlier conversation from the cache.
 
 Before v2.1.251, a mid-session style switch kept the cache but didn't apply until you ran `/clear` or started a new session.
 
diff --git a/content/en/docs/claude-code/remote-control.md b/content/en/docs/claude-code/remote-control.md
index e2383cc4d2..0e2c78e946 100644
--- a/content/en/docs/claude-code/remote-control.md
+++ b/content/en/docs/claude-code/remote-control.md
@@ -338,10 +338,11 @@ Claude Code skips mobile push notifications while you are typing in or focused o
   * Text-output commands: `/compact`, `/clear`, `/context`, `/usage`, `/exit`, `/usage-credits`, `/recap`, and `/reload-plugins`. `/usage-credits` prints the billing URL instead of opening a browser. `/reload-plugins` works only when the session runs in an interactive terminal; a session without one declines it.
   * `/model`, `/effort`, `/fast`, `/color`, and `/rename`: pass the value as an argument, for example `/model sonnet` or `/effort high`. From mobile and web, `/model` and `/effort` take the argument in place of the terminal picker or slider.
   * `/mcp`: from the mobile app, returns a text summary of server status instead of opening the picker. On the web, `/mcp` on its own opens a directory of [claude.ai connectors](/docs/en/mcp#use-mcp-servers-from-claude-ai) instead of returning the summary. The `reconnect`, `enable`, and `disable` [subcommands](/docs/en/commands#all-commands) work from both. Unlike the local CLI, `/mcp reconnect` without a server name reconnects every server that has failed or needs authentication.
-  * `/config`, from v2.1.181: from the mobile app, pass `key=value` to set a setting, or run it with no argument to list the keys you can set. On the web, `/config` opens the Claude Code section of your settings instead, and ignores text after the command.
+  * `/config`: from the mobile app, pass `key=value` to set a setting, or run it with no argument to list the keys you can set. On the web, `/config` opens the Claude Code section of your settings instead, and ignores text after the command.
   * On Team and Enterprise, `/usage-credits` from mobile or web doesn't send a [usage-credits request to your admin](/docs/en/costs#add-usage-credits-to-your-subscription). Sending requires a confirmation that appears only in the interactive CLI, so the command tells you to run it there instead. Before v2.1.211, the text form sent the request without confirmation.
   * `/autocompact`, from v2.1.221: pass the window size as an argument, for example `/autocompact 500k`. With no argument, it prints the current window size as text instead of opening the dialog the command shows in a terminal session.
   * `/advisor`, from v2.1.260: pass the model as an argument, for example `/advisor opus`, or pass `off` to turn the advisor off. Both forms apply to the current session only and leave your saved default unchanged. With no argument, it prints the current advisor as text instead of opening the picker.
+  * `/output-style`, from v2.1.269: pass the style name as an argument, for example `/output-style concise`, or run it with no argument to list the styles. From mobile and web, you can list and select only [built-in styles](/docs/en/output-styles#built-in-output-styles). To use a [custom style](/docs/en/output-styles#create-a-custom-output-style), select it in the session itself.
 
 ## Troubleshooting
 
diff --git a/content/en/docs/claude-code/routines.md b/content/en/docs/claude-code/routines.md
index 4d805fe036..0d1b7fa9e2 100644
--- a/content/en/docs/claude-code/routines.md
+++ b/content/en/docs/claude-code/routines.md
@@ -158,7 +158,7 @@ API triggers are added to an existing routine from the web. The CLI cannot curre
 
 <Steps>
   <Step title="Open the routine for editing">
-    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine you want to trigger via API, then click the pencil icon to open **Edit routine**.
+    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine you want to trigger via API, then open the menu next to the routine's name and select **Edit**.
   </Step>
 
   <Step title="Add an API trigger">
@@ -232,7 +232,7 @@ The Claude GitHub App must be installed on the repository you want to subscribe
 
 <Steps>
   <Step title="Open the routine for editing">
-    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine, then click the pencil icon to open **Edit routine**.
+    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine, then open the menu next to the routine's name and select **Edit**.
   </Step>
 
   <Step title="Add a GitHub event trigger">
@@ -299,9 +299,9 @@ Click any run to open it as a full session. From there you can see what Claude d
 From the routine detail page you can:
 
 * Click **Run now** to start a run immediately without waiting for the next scheduled time. You can optionally supply run-specific text, which reaches the routine the same way as the API trigger's `text` field.
-* Use the toggle in the **Repeats** section to pause or resume the schedule. Paused routines keep their configuration but don't run until you re-enable them.
-* Click the pencil icon to open **Edit routine** and change the name, prompt, repositories, environment, connectors, or any of the routine's triggers. The **Select a trigger** section is where you add or remove schedules, API tokens, and GitHub event triggers.
-* Click the delete icon to remove the routine. Past sessions created by the routine remain in your session list.
+* Use the on/off switch at the top of the page to pause or resume the schedule. Paused routines keep their configuration but don't run until you re-enable them.
+* Open the menu next to the routine's name and select **Edit** to change the name, prompt, repositories, environment, connectors, or any of the routine's triggers. The **Select a trigger** section is where you add or remove schedules, API tokens, and GitHub event triggers.
+* Open the same menu and select **Delete** to delete the routine.
 
 ### Manage routines from the CLI
 
@@ -341,7 +341,7 @@ To allow additional domains:
 
 <Steps>
   <Step title="Open the routine for editing">
-    On the routine's detail page, click the pencil icon to open **Edit routine**.
+    On the routine's detail page, open the menu next to the routine's name and select **Edit**.
   </Step>
 
   <Step title="Open the environment selector">
diff --git a/content/en/docs/claude-code/sandboxing.md b/content/en/docs/claude-code/sandboxing.md
index ad3c8104fc..4e09d8ec4a 100644
--- a/content/en/docs/claude-code/sandboxing.md
+++ b/content/en/docs/claude-code/sandboxing.md
@@ -504,7 +504,7 @@ Inside the directories that sandboxed commands can write to, the sandbox still d
 
 * **In your working directory and the directories above it**: the `.claude` settings files, the `.claude/skills`, `.claude/agents`, `.claude/commands`, and `.claude/hooks` directories, `.mcp.json`, and the files Claude Code runs on its own, such as `.claude/workflows` and `.claude/scheduled_tasks.json`
 * **In your working directory only**: shell startup files such as `.bashrc` and `.zshrc`, `.gitconfig`, the `.vscode` and `.idea` directories, and `hooks` and `config` inside `.git`
-* **Files that would turn your working directory into a bare git repository**: `HEAD`, `objects`, and `refs` at the top level, plus `config` and `hooks` there when they already exist, even when the `config` directory belongs to your project rather than to git. On Linux and WSL2, the sandbox deletes a top-level `HEAD` file or `objects` or `refs` directory that appears while a sandboxed command is running
+* **Files that would turn your working directory into a bare git repository**: `HEAD`, `objects`, and `refs` at the top level, plus `config` and `hooks` there when a `HEAD` sits beside them. A file named `config` is denied even with no `HEAD`. On Linux and WSL2, the sandbox deletes a top-level `HEAD` file or `objects` or `refs` directory that appears while a sandboxed command is running
 * **In `~/.claude`, or the directory `CLAUDE_CONFIG_DIR` points to**: most of its contents, plus `~/.claude.json` and the `.credentials.json` credential store
 
 If a symlink appears at a protected settings file's path during the session, the sandbox also denies writes to the file it points to, starting with the next command.
diff --git a/content/en/docs/claude-code/scheduled-tasks.md b/content/en/docs/claude-code/scheduled-tasks.md
index 23ccdbb88a..5507cda88e 100644
--- a/content/en/docs/claude-code/scheduled-tasks.md
+++ b/content/en/docs/claude-code/scheduled-tasks.md
@@ -208,7 +208,7 @@ Session-scoped scheduling has inherent constraints:
 * Tasks only fire while Claude Code is running and idle. Closing the terminal or letting the session exit stops them firing. [Backgrounding the session](/docs/en/agent-view#from-inside-a-session) carries `/loop` tasks over to a background session, which keeps running without a terminal.
 * No catch-up for missed fires. If a task's scheduled time passes while Claude is busy on a long-running request, it fires once when Claude becomes idle, not once per missed interval.
 * Starting a fresh conversation clears all session-scoped tasks. When you resume a session with `claude --resume` or `claude --continue`, Claude Code restores the tasks scheduled with `CronCreate`, except recurring tasks that have [expired](#seven-day-expiry) and one-shot tasks whose scheduled time has passed. A [self-paced `/loop`](#let-claude-choose-the-interval) isn't restored, so run `/loop` again to restart it. Background Bash and monitor tasks are never restored on resume.
-* With [feature-flag fetching off](/docs/en/env-vars#features-that-need-feature-flag-fetching), Claude Code stores a task you asked to keep across sessions in the project's `.claude` directory. When that directory or the task file in it is a symlink, Claude Code returns an error instead of scheduling the task.
+* With [feature-flag fetching off](/docs/en/env-vars#features-that-need-feature-flag-fetching), Claude Code stores a task you asked to keep across sessions in the project's `.claude/scheduled_tasks.json` file. When the `.claude` directory or that file is a symlink, Claude Code returns an error instead of scheduling the task. A saved task runs only in the project folder where you created it. If you copy the file into another folder, such as a new worktree, sessions there list the copied tasks but don't run them, so create the task again in that folder.
 
 For cron-driven automation that needs to run unattended:
 
diff --git a/content/en/docs/claude-code/server-managed-settings.md b/content/en/docs/claude-code/server-managed-settings.md
index 192688f572..644dbff2aa 100644
--- a/content/en/docs/claude-code/server-managed-settings.md
+++ b/content/en/docs/claude-code/server-managed-settings.md
@@ -145,7 +145,9 @@ If you clear your server-managed configuration in the admin console with the int
 
 Three kinds of keys are exceptions to the no-merge rule:
 
-* **Cross-source lock keys**: a small set of keys, such as the sandbox allowlist locks, [listed on the managed settings page](/docs/en/managed-settings#precedence-within-the-managed-tier). Claude Code honors them when any admin-controlled managed source sets them; the user-writable HKCU registry tier is excluded. When a [`policyHelper`](/docs/en/settings-reference#policyhelper) supplies managed settings, its output is the only source these checks read, apart from [`forceRemoteSettingsRefresh`](/docs/en/settings-reference#forceremotesettingsrefresh), which Claude Code reads from the admin sources directly at startup.
+* **Cross-source lock keys**: a small set of keys, such as the sandbox allowlist locks, [listed on the managed settings page](/docs/en/managed-settings#precedence-within-the-managed-tier). Claude Code honors them when any admin-controlled managed source sets them; the user-writable HKCU registry tier is excluded.
+
+  When a [`policyHelper`](/docs/en/settings-reference#policyhelper) supplies managed settings, its output is the only source these checks read, apart from [`forceRemoteSettingsRefresh`](/docs/en/settings-reference#forceremotesettingsrefresh), which Claude Code reads from the admin sources directly at startup.
 * **The `env` block**: apart from the telemetry unit and routing variables paired with a credential key, both covered below, it merges per key across the admin-controlled sources. For each environment variable, the highest-priority source defining it wins, and lower admin sources fill in variables the higher sources leave unset. An endpoint-managed `env` entry therefore applies whenever the server-managed configuration leaves that variable unset, or while a cached server value for it is [withheld pending server confirmation](#fetch-and-caching-behavior). Requires Claude Code v2.1.223 or later. Before v2.1.223, Claude Code applies the selected source's whole `env` block only.
   * **Telemetry unit**: the `OTEL_EXPORTER_OTLP_*` exporter keys, the `OTEL_LOG_*` content-capture toggles, `OTEL_LOGS_EXPORTER`, and the beta tracing variables `ENABLE_BETA_TRACING_DETAILED` and `BETA_TRACING_ENDPOINT` follow the highest source that sets any of them as a unit. A source that delivers the `otelHeadersHelper` credential key claims the unit too, but lands these variables only when it is the selected source: a source that isn't selected but delivers the key contributes none of them and still blocks lower sources from filling them in. Either way, an exporter endpoint from one source can never pair with credentials from another.
   * **Credential-paired routing**: a source that pairs routing variables with a selected-source-only credential key, such as `apiKeyHelper` or `otelHeadersHelper`, contributes those routing variables only when it wins the slot.
diff --git a/content/en/docs/claude-code/settings-reference.md b/content/en/docs/claude-code/settings-reference.md
index a2d5ae8470..c5c3699413 100644
--- a/content/en/docs/claude-code/settings-reference.md
+++ b/content/en/docs/claude-code/settings-reference.md
@@ -1557,7 +1557,7 @@ Claude Code also writes `true` here when you choose to block such reads on [auto
 }
 ```
 
-If only a repository's checked-in settings file adds a directory, the block still applies to reads there. Files Claude Code itself needs stay readable, such as your skills, plugins, rules, agents, commands, and the `CLAUDE.md` memory file under `~/.claude/`.
+If only a repository's checked-in settings file adds a directory, the block still applies to reads there. When [`autoMemoryDirectory`](#automemorydirectory) comes from the project's `.claude/settings.json`, or from a `.claude/settings.local.json` [treated as repository-supplied](/docs/en/permissions#when-your-local-settings-file-needs-trust), Claude Code loads no [auto memory](/docs/en/memory#storage-location) from that directory and saves none to it. Files Claude Code itself needs stay readable, such as your skills, plugins, rules, agents, commands, and the `CLAUDE.md` memory file under `~/.claude/`.
 
 When the [sandbox](/docs/en/sandboxing) is on, the block also denies sandboxed commands read access to home directories and mounted-volume roots outside the working directories. A retry that needs approval to [run outside the sandbox](/docs/en/sandboxing#the-unsandboxed-retry-escape-hatch) prompts you even in `bypassPermissions` mode. Files a tool reads from your home directory, such as `~/.gitconfig`, are denied with the rest; re-open a specific path with [`sandbox.filesystem.allowRead`](#sandbox-filesystem-allowread) when a tool needs it.
 
@@ -2933,7 +2933,7 @@ Appears in `/config` as **Auto-scroll** when fullscreen rendering is on, which w
 
 ### `axScreenReader`
 
-Render screen-reader friendly output: flat text without decorative borders or animations. Screen-reader mode uses the classic renderer, so the `tui` setting has no effect while it is active; attached [background sessions](/docs/en/agent-view) still render fullscreen. Requires Claude Code v2.1.181 or later.
+Render screen-reader friendly output: flat text without decorative borders or animations. Screen-reader mode uses the classic renderer, so the `tui` setting has no effect while it is active; attached [background sessions](/docs/en/agent-view) still render fullscreen.
 
 * **Scope**: [`Any file`](#scopes)
 * **Type**: Boolean
@@ -2948,8 +2948,6 @@ Render screen-reader friendly output: flat text without decorative borders or an
 }
 ```
 
-Requires Claude Code v2.1.181 or later.
-
 ### `bashEditDiffEnabled`
 
 Choose whether Claude Code records the files a Bash command changes in a Git repository. When it records them, you see their diff in the terminal after the command, and your [PostToolUse Bash hooks](/docs/en/hooks#bash) receive the changed-file list.
@@ -4682,7 +4680,7 @@ Users can still add MCP servers of their own; only servers that match the manage
 Block specific MCP servers. Claude Code refuses to load a matching server wherever it's defined, including plugin servers, servers passed with `--mcp-config`, servers from `managed-mcp.json`, servers from [`managedMcpServers`](#managedmcpservers), and the claude.ai connectors [it fetches itself](/docs/en/mcp#how-connectors-reach-claude-code). In-process `type: "sdk"` servers are exempt; the app that started the session registers them.
 
 * **Scope**: [`Any file`](#scopes). Entries from every file merge into one denylist, and [`allowManagedMcpServersOnly`](#allowmanagedmcpserversonly) doesn't change that. Deploy it in managed settings to enforce it.
-* **Type**: array of objects, each with exactly one key: `serverName`, any non-empty string, so a claude.ai connector's display name such as `"claude.ai Slack"` works; `serverCommand`, an array of the command and its arguments matched exactly; or `serverUrl`, a URL pattern with `*` wildcards
+* **Type**: array of objects, each with exactly one key: `serverName`, a string, so a claude.ai connector's display name such as `"claude.ai Slack"` works; `serverCommand`, an array of the command and its arguments matched exactly; or `serverUrl`, a URL pattern with `*` wildcards
 * **Default**: unset, so no server is blocked; an empty array also blocks nothing
 
 ```json settings.json theme={null}
diff --git a/content/en/docs/claude-code/skills.md b/content/en/docs/claude-code/skills.md
index d761212e4f..20b70856f0 100644
--- a/content/en/docs/claude-code/skills.md
+++ b/content/en/docs/claude-code/skills.md
@@ -213,6 +213,8 @@ Some of Anthropic's skills, such as `pdf` and `xlsx`, always sync. For the rest,
 
 To stop syncing on a machine, set [`syncClaudeAiSkills`](/docs/en/settings-reference#syncclaudeaiskills) to `false` in your user settings. Claude Code stops downloading, and the next time it starts it moves the skills it already synced to `~/.claude/skills/.trash/` and no longer loads them. Your organization can turn syncing off for everyone by turning off Skills on claude.ai. To stop syncing while leaving Skills on, it can set the same key in [managed settings](/docs/en/managed-settings).
 
+If your organization turns Skills off on claude.ai, Claude Code removes the downloaded skills and they stop loading. The removed skills move to `~/.claude/skills/.trash/`, where you can recover the files until the [retention sweep](/docs/en/claude-directory#cleaned-up-automatically) deletes them. Once your organization turns Skills back on, Claude Code downloads the skills you enabled at the next sync.
+
 #### When a synced skill name matches another command
 
 You can invoke a synced skill by its full name, `/anthropic-skills:<name>`, or by its short name, `/<name>`. When another command uses that short name, `/<name>` runs the other command, and the synced skill runs only as `/anthropic-skills:<name>`. With a local `deploy` skill and a synced `deploy`, `/deploy` runs the local skill and `/anthropic-skills:deploy` runs the synced one. Before v2.1.269, a synced skill had only its short name.
diff --git a/content/en/docs/claude-code/slash-commands.md b/content/en/docs/claude-code/slash-commands.md
index d761212e4f..20b70856f0 100644
--- a/content/en/docs/claude-code/slash-commands.md
+++ b/content/en/docs/claude-code/slash-commands.md
@@ -213,6 +213,8 @@ Some of Anthropic's skills, such as `pdf` and `xlsx`, always sync. For the rest,
 
 To stop syncing on a machine, set [`syncClaudeAiSkills`](/docs/en/settings-reference#syncclaudeaiskills) to `false` in your user settings. Claude Code stops downloading, and the next time it starts it moves the skills it already synced to `~/.claude/skills/.trash/` and no longer loads them. Your organization can turn syncing off for everyone by turning off Skills on claude.ai. To stop syncing while leaving Skills on, it can set the same key in [managed settings](/docs/en/managed-settings).
 
+If your organization turns Skills off on claude.ai, Claude Code removes the downloaded skills and they stop loading. The removed skills move to `~/.claude/skills/.trash/`, where you can recover the files until the [retention sweep](/docs/en/claude-directory#cleaned-up-automatically) deletes them. Once your organization turns Skills back on, Claude Code downloads the skills you enabled at the next sync.
+
 #### When a synced skill name matches another command
 
 You can invoke a synced skill by its full name, `/anthropic-skills:<name>`, or by its short name, `/<name>`. When another command uses that short name, `/<name>` runs the other command, and the synced skill runs only as `/anthropic-skills:<name>`. With a local `deploy` skill and a synced `deploy`, `/deploy` runs the local skill and `/anthropic-skills:deploy` runs the synced one. Before v2.1.269, a synced skill had only its short name.
diff --git a/content/en/docs/claude-code/tools-reference.md b/content/en/docs/claude-code/tools-reference.md
index 8a59d9202a..fd8df5370e 100644
--- a/content/en/docs/claude-code/tools-reference.md
+++ b/content/en/docs/claude-code/tools-reference.md
@@ -548,6 +548,7 @@ This makes WebFetch lossy by design. The extraction prompt determines what reach
 
 A few behaviors shape the response Claude receives:
 
+* WebFetch refuses `localhost` and any other hostname without a dot, such as a bare intranet name, before making a request. The [error it returns](/docs/en/errors#webfetch-cannot-fetch-localhost) tells Claude to reach local servers with `curl` through Bash instead.
 * HTTP URLs are automatically upgraded to HTTPS.
 * Large pages are truncated to a fixed character limit before processing.
 * WebFetch caches each response for 15 minutes by default, so repeated fetches of the same URL return quickly. On Claude Code v2.1.233 or later, set [`CLAUDE_CODE_WEBFETCH_CACHE_TTL_MS`](/docs/en/env-vars#variables) to change how long WebFetch keeps each response.
diff --git a/content/en/docs/claude-code/ultrareview.md b/content/en/docs/claude-code/ultrareview.md
index 20c4d2d561..a1841e908c 100644
--- a/content/en/docs/claude-code/ultrareview.md
+++ b/content/en/docs/claude-code/ultrareview.md
@@ -71,11 +71,15 @@ Claude Code never posts unless you choose to on that run, and `--no-post` is the
 * **Interactive**: in the launch dialog, select **Run and post the findings to the PR as me**. If you add `--post` to the command, as in `/code-review ultra 1234 --post`, Claude Code preselects that choice and still asks before launching.
 * **Non-interactive**: run the [`claude ultrareview` subcommand](#run-ultrareview-non-interactively) with `--post`. You consent to the post by running the subcommand with the flag, so Claude Code posts without asking. In a `claude -p '/code-review ultra'` run, Claude Code exits before the findings arrive, so it posts nothing; use the subcommand instead.
 
-Claude Code doesn't post from your machine. It sends the findings to a [cloud session](/docs/en/claude-code-on-the-web), which posts the comment through the GitHub account you've connected to Claude. Posting requires the same claude.ai sign-in as the review itself. Because posting runs through a cloud session, it isn't available on third-party providers or when you set [`CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC`](/docs/en/env-vars).
+Claude Code doesn't post from your machine. It sends the review's session ID to the Anthropic API, which posts the review's stored findings as the comment through the GitHub account you've connected to Claude. Posting requires the same claude.ai sign-in as the review itself, and it isn't available on third-party providers or when you set [`CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC`](/docs/en/env-vars).
 
 In an interactive session, Claude Code starts the post when the findings arrive, so keep the session open until the review finishes. Claude Code keeps the posting choice only in that session. If the session ends before the review finishes, Claude Code posts nothing, even if you resume the conversation later.
 
-When the post can't start while your session is open, Claude tells you that nothing went to the PR and why, and the findings stay in your terminal so you can post them by hand.
+When the post finishes, Claude tells you the outcome:
+
+* **Posted**: Claude gives you a link to the comment.
+* **Already posted**: an earlier post of the same review already put the comment on the PR, so Claude links you to the pull request instead of posting again.
+* **Failed**: Claude tells you why, and the findings stay in your terminal so you can post them by hand.
 
 ### Pass a request in plain words
 
@@ -167,7 +171,10 @@ The subcommand exits with one of three codes:
 
 If you interrupt the subcommand, the remote review keeps running; follow the session URL printed to stderr to watch it in the browser.
 
-With `--post`, the subcommand starts the post right after it prints the findings. If the run fails, times out, or you interrupt it, the subcommand posts nothing. If the review completes but the post can't start, Claude Code prints the reason to stderr, and the findings stay on stdout so you can post them by hand.
+With `--post`, the subcommand starts the post right after printing the findings, and prints the link to stderr.
+
+* If the run fails, times out, or you interrupt it, the subcommand posts nothing.
+* If the review completes but the comment isn't posted, Claude Code prints the reason to stderr, and the findings stay on stdout so you can post them by hand.
 
 For automatic reviews on GitHub pull requests, [Code Review](/docs/en/code-review) integrates with your repository directly and posts findings as inline PR comments without a CLI step.
 
diff --git a/content/en/docs/claude-code/vs-code.md b/content/en/docs/claude-code/vs-code.md
index cd2090044b..0efcb8a540 100644
--- a/content/en/docs/claude-code/vs-code.md
+++ b/content/en/docs/claude-code/vs-code.md
@@ -117,6 +117,8 @@ The prompt box supports several features:
 
     Claude's latest to-do list stays visible, and so does the text a pending question from Claude is asking about; this requires Claude Code v2.1.225 or later. While Claude runs [subagents](/docs/en/sub-agents), live progress rows with their latest activity appear under the tool-call group that started them. This requires Claude Code v2.1.269 or later.
   * To report a bug, click **Report a problem** at the bottom of the menu, or type `/bug` or `/feedback` with an optional description that prefills the report. When you submit the report and you're signed in to Anthropic on a first-party connection, Claude Code sends it to Anthropic. On a third-party provider, or without Anthropic credentials, the dialog still opens, but submitting shows an error and sends nothing: unlike the CLI's `/bug`, the extension doesn't write a local archive. Requires Claude Code v2.1.229 or later.
+
+    If your organization's policy turns product feedback off, **Report a problem** doesn't appear in the menu, and `/bug` and `/feedback` show a `Feedback is turned off by your organization's policy or this environment's settings.` notice instead of opening the report.
 * **Side questions**: type `/btw` followed by a question to ask about your session [without adding to the conversation](/docs/en/interactive-mode#side-questions-with-%2Fbtw). The answer opens in a panel beside the chat, where you can ask follow-up questions. The thread survives window reloads. Claude Code keeps the newest 20 exchanges and expires stored threads on the [`cleanupPeriodDays`](/docs/en/settings-reference#cleanupperioddays) schedule, as long as Claude Code can [safely determine the retention period](/docs/en/claude-directory#cleaned-up-automatically). To clear a thread, click the trash icon in the panel. Requires Claude Code v2.1.227 or later.
 * **Context indicator**: the prompt box shows how much of Claude's context window you're using. Claude automatically compacts when needed, or you can run `/compact` manually.
 * **Prompt cache clock**: a clock icon next to the context indicator estimates how much time the conversation's [prompt cache](/docs/en/prompt-caching) has left before it expires. It counts down from the cache's five-minute or one-hour [lifetime](/docs/en/prompt-caching#cache-lifetime), and each response that uses the cache restarts the countdown. Apart from compaction, the [actions that invalidate the cache](/docs/en/prompt-caching#actions-that-invalidate-the-cache) don't reset the clock, so it can still show minutes left after you switch models.
diff --git a/content/en/docs/claude-code/web-quickstart.md b/content/en/docs/claude-code/web-quickstart.md
index e3a473e23f..22f88d5391 100644
--- a/content/en/docs/claude-code/web-quickstart.md
+++ b/content/en/docs/claude-code/web-quickstart.md
@@ -61,7 +61,7 @@ Connecting GitHub is a one-time step. If you already use the GitHub CLI, you can
 
 <Steps>
   <Step title="Visit claude.ai/code">
-    Go to [claude.ai/code](https://claude.ai/code) and sign in with your claude.ai account. On macOS or Windows, the first screen offers the Claude Code desktop app and other ways to install Claude Code. To stay in the browser, click **Continue on web** at the bottom of the page.
+    Go to [claude.ai/code](https://claude.ai/code) and sign in with your claude.ai account.
   </Step>
 
   <Step title="Sign in with GitHub">
diff --git a/content/en/docs/claude-code/web-scheduled-tasks.md b/content/en/docs/claude-code/web-scheduled-tasks.md
index 4d805fe036..0d1b7fa9e2 100644
--- a/content/en/docs/claude-code/web-scheduled-tasks.md
+++ b/content/en/docs/claude-code/web-scheduled-tasks.md
@@ -158,7 +158,7 @@ API triggers are added to an existing routine from the web. The CLI cannot curre
 
 <Steps>
   <Step title="Open the routine for editing">
-    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine you want to trigger via API, then click the pencil icon to open **Edit routine**.
+    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine you want to trigger via API, then open the menu next to the routine's name and select **Edit**.
   </Step>
 
   <Step title="Add an API trigger">
@@ -232,7 +232,7 @@ The Claude GitHub App must be installed on the repository you want to subscribe
 
 <Steps>
   <Step title="Open the routine for editing">
-    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine, then click the pencil icon to open **Edit routine**.
+    Go to [claude.ai/code/routines](https://claude.ai/code/routines), click the routine, then open the menu next to the routine's name and select **Edit**.
   </Step>
 
   <Step title="Add a GitHub event trigger">
@@ -299,9 +299,9 @@ Click any run to open it as a full session. From there you can see what Claude d
 From the routine detail page you can:
 
 * Click **Run now** to start a run immediately without waiting for the next scheduled time. You can optionally supply run-specific text, which reaches the routine the same way as the API trigger's `text` field.
-* Use the toggle in the **Repeats** section to pause or resume the schedule. Paused routines keep their configuration but don't run until you re-enable them.
-* Click the pencil icon to open **Edit routine** and change the name, prompt, repositories, environment, connectors, or any of the routine's triggers. The **Select a trigger** section is where you add or remove schedules, API tokens, and GitHub event triggers.
-* Click the delete icon to remove the routine. Past sessions created by the routine remain in your session list.
+* Use the on/off switch at the top of the page to pause or resume the schedule. Paused routines keep their configuration but don't run until you re-enable them.
+* Open the menu next to the routine's name and select **Edit** to change the name, prompt, repositories, environment, connectors, or any of the routine's triggers. The **Select a trigger** section is where you add or remove schedules, API tokens, and GitHub event triggers.
+* Open the same menu and select **Delete** to delete the routine.
 
 ### Manage routines from the CLI
 
@@ -341,7 +341,7 @@ To allow additional domains:
 
 <Steps>
   <Step title="Open the routine for editing">
-    On the routine's detail page, click the pencil icon to open **Edit routine**.
+    On the routine's detail page, open the menu next to the routine's name and select **Edit**.
   </Step>
 
   <Step title="Open the environment selector">
diff --git a/content/en/docs/claude-code/workflows.md b/content/en/docs/claude-code/workflows.md
index e2fee307d1..ba83343772 100644
--- a/content/en/docs/claude-code/workflows.md
+++ b/content/en/docs/claude-code/workflows.md
@@ -349,15 +349,15 @@ When a fan-out starts several matching agents at once, Claude Code holds all but
 
 The runtime applies the following constraints:
 
-| Constraint                                                                                                            | Why                                                                                                                                                                                    |
-| :-------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| No mid-run user input                                                                                                 | A run pauses on its own only for agent permission prompts and a [usage-limit wait](#when-a-run-hits-your-usage-limit). For sign-off between stages, run each stage as its own workflow |
-| No direct filesystem or shell access from the workflow itself                                                         | Agents read, write, and run commands. The script coordinates the agents                                                                                                                |
-| No module loading: a script that contains `import()` fails before the run starts                                      | The script body is plain JavaScript. Put work that needs a library in an agent's task                                                                                                  |
-| Up to 16 concurrent agents, fewer when Claude Code has fewer CPUs available, including inside a CPU-limited container | Bounds local resource use                                                                                                                                                              |
-| In a fan-out, agents that share the first agent's prompt-cache prefix start up to 5 seconds after it by default       | All but the first read the [prefix the first agent cached](#prompt-caching-in-a-fan-out) instead of each processing it uncached                                                        |
-| Up to 4,096 items in a single `parallel()` or `pipeline()` call: the runtime rejects a longer list with an error      | A silent cap would drop part of the workload without telling the script                                                                                                                |
-| 1,000 agents total per run                                                                                            | Prevents runaway loops                                                                                                                                                                 |
+| Constraint                                                                                                                                                                                                                                                                                               | Why                                                                                                                                                                                    |
+| :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| No mid-run user input                                                                                                                                                                                                                                                                                    | A run pauses on its own only for agent permission prompts and a [usage-limit wait](#when-a-run-hits-your-usage-limit). For sign-off between stages, run each stage as its own workflow |
+| No direct filesystem or shell access from the workflow itself                                                                                                                                                                                                                                            | Agents read, write, and run commands. The script coordinates the agents                                                                                                                |
+| No module loading: a script that contains `import()` fails before the run starts                                                                                                                                                                                                                         | The script body is plain JavaScript. Put work that needs a library in an agent's task                                                                                                  |
+| Up to 16 concurrent agents by default, fewer when Claude Code has fewer CPUs available, including inside a CPU-limited container. To change the limit, set [`CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS`](/docs/en/env-vars#variables) to a value from 1 to 256, which requires Claude Code v2.1.269 or later | Bounds local resource use                                                                                                                                                              |
+| In a fan-out, agents that share the first agent's prompt-cache prefix start up to 5 seconds after it by default                                                                                                                                                                                          | All but the first read the [prefix the first agent cached](#prompt-caching-in-a-fan-out) instead of each processing it uncached                                                        |
+| Up to 4,096 items in a single `parallel()` or `pipeline()` call: the runtime rejects a longer list with an error                                                                                                                                                                                         | A silent cap would drop part of the workload without telling the script                                                                                                                |
+| 1,000 agents total per run                                                                                                                                                                                                                                                                               | Prevents runaway loops                                                                                                                                                                 |
 
 ## Manage runs
 
diff --git a/content/en/docs/claude-code/worktrees.md b/content/en/docs/claude-code/worktrees.md
index fa227bba2a..6380315fca 100644
--- a/content/en/docs/claude-code/worktrees.md
+++ b/content/en/docs/claude-code/worktrees.md
@@ -363,6 +363,8 @@ The messages take different shapes from the interactive messages in the table:
 
 The refusal ending embedded in each error is shared with the interactive notices, so it still matches its entry under [Claude Code refuses to use a worktree](#claude-code-refuses-to-use-a-worktree).
 
+In the stream-json result, [`startup_failure_reason`](/docs/en/agent-sdk/typescript#startup_failure_reason) is `worktree_unverified` for the `could not verify worktree` error and `worktree_resume_refused` for the `cannot resume into worktree` and `The worktree binding is kept` errors. An application can branch on it instead of matching the error text. Before v2.1.274, the result carried no `startup_failure_reason` field.
+
 ## See also
 
 Worktrees handle file isolation. The related pages below cover delegating work into those isolated checkouts, passing findings between them, and switching between the sessions you create:
diff --git a/content/en/get-started.md b/content/en/get-started.md
index c7897d0142..c0c554329a 100644
--- a/content/en/get-started.md
+++ b/content/en/get-started.md
@@ -436,7 +436,7 @@ description: Make your first API call to Claude and build a simple web search as
             }
 
             dependencies {
-                implementation("com.anthropic:anthropic-java:2.60.0")
+                implementation("com.anthropic:anthropic-java:2.63.0")
             }
 
             application {
@@ -462,7 +462,7 @@ description: Make your first API call to Claude and build a simple web search as
                 <dependency>
                   <groupId>com.anthropic</groupId>
                   <artifactId>anthropic-java</artifactId>
-                  <version>2.60.0</version>
+                  <version>2.63.0</version>
                 </dependency>
               </dependencies>
             </project>
diff --git a/content/en/manage-claude/compliance-faq.md b/content/en/manage-claude/compliance-faq.md
index 21fee5314b..e5d6ab9fbb 100644
--- a/content/en/manage-claude/compliance-faq.md
+++ b/content/en/manage-claude/compliance-faq.md
@@ -72,7 +72,7 @@ description: Answers to common questions about Compliance API access, scopes, re
   <Accordion title="Do Cowork, Claude Code, Claude Science, and Claude for Microsoft 365 sessions appear in the Compliance API?">
     Yes. Cowork sessions in Claude Desktop that run on users' machines, Claude Code sessions (in the terminal, in Claude Desktop, or in an IDE extension), sessions in the Claude Science desktop app, Claude for Microsoft 365 sessions (in Excel, PowerPoint, Word, and Outlook), and chats in the Claude in Chrome browser extension are captured while users are signed in with their Claude Enterprise account and are available through the [local session endpoints](https://platform.claude.com/docs/en/manage-claude/compliance-sessions#retrieve-local-sessions). Cowork sessions started on claude.ai web or mobile, which run in the cloud in Anthropic-managed environments, are available through the [remote session endpoints](https://platform.claude.com/docs/en/manage-claude/compliance-sessions#retrieve-remote-sessions). Each family has a list endpoint that returns session metadata and a messages endpoint that returns the session transcript (user prompts, assistant responses, and tool calls and results). The local family adds a third endpoint that retrieves one session's metadata. All of these endpoints use your existing Compliance Access Key with `read:compliance_user_data`; no new key or scope is needed.
 
-    Local sessions are captured as their requests reach the Claude API, so nothing is installed on the device, and on-device activity that never reaches the API is not captured. Claude Code sessions authenticated with a Claude Console API key, Claude Code sessions run through a third-party cloud platform (Amazon Bedrock, Google Cloud, or Microsoft Foundry), and Claude Code on the web are not captured. Claude Code on the web also runs in the cloud in Anthropic-managed environments, but it is not a remote session; the remote session endpoints return Cowork sessions only. Organizations with [HIPAA readiness](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#hipaa-readiness) enabled get no local session data, and sessions for which [zero data retention (ZDR)](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#zero-data-retention-zdr-scope) is in effect are excluded.
+    Local sessions are captured as their requests reach the Claude API, so nothing is installed on the device, and on-device activity that never reaches the API is not captured. Claude Code sessions authenticated with a Claude Console API key, Claude Code sessions run through a third-party cloud platform (Amazon Bedrock, Google Cloud, or Microsoft Foundry), and [Claude Code cloud sessions](https://code.claude.com/docs/en/claude-code-on-the-web), which run on cloud infrastructure instead of the user's machine, are not captured. These cloud sessions are not remote sessions, even though both run in the cloud; the remote session endpoints return Cowork sessions only. Organizations with [HIPAA readiness](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#hipaa-readiness) enabled get no local session data, and sessions for which [zero data retention (ZDR)](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#zero-data-retention-zdr-scope) is in effect are excluded.
 
     The local and remote session endpoints are stable for Cowork and Claude Code sessions; coverage of Claude Science, Claude for Microsoft 365, and Claude in Chrome sessions is in beta.
   </Accordion>
@@ -109,7 +109,7 @@ description: Answers to common questions about Compliance API access, scopes, re
   <Accordion title="What does the Compliance API not capture?">
     The Compliance API has known coverage boundaries: the Activity Feed records resource events but not prompt or response text, Claude Console and Claude API workloads authenticated with an API key expose no message content at all, and content removed by your retention policy, deleted by a user in claude.ai, or hard-deleted through the Compliance API is not recoverable. For the full coverage boundaries and delivery contract, see [Delivery guarantees and completeness](https://platform.claude.com/docs/en/manage-claude/compliance-integration-patterns#delivery-guarantees-and-completeness).
 
-    Session transcripts have boundaries of their own. Local sessions are captured only as their requests reach the Claude API, so on-device activity that never reaches the API is not captured. Claude Code sessions authenticated with a Claude Console API key, Claude Code sessions run through a third-party cloud platform (Amazon Bedrock, Google Cloud, or Microsoft Foundry), and Claude Code on the web are not captured either; organizations with HIPAA readiness enabled get no local session data; and sessions for which zero data retention is in effect are excluded. No session transcript, local or remote, includes thinking blocks or tool definitions. Organizations that use [customer-managed encryption keys](https://platform.claude.com/docs/en/manage-claude/cmek) receive local session transcripts as usual. While the key cannot be used, the messages endpoint returns [503 Service Unavailable](https://platform.claude.com/docs/en/manage-claude/compliance-errors#local-sessions-temporarily-unavailable) instead of transcript content, and session metadata is still listed.
+    Session transcripts have boundaries of their own. Local sessions are captured only as their requests reach the Claude API, so on-device activity that never reaches the API is not captured. Claude Code sessions authenticated with a Claude Console API key, Claude Code sessions run through a third-party cloud platform (Amazon Bedrock, Google Cloud, or Microsoft Foundry), and [Claude Code cloud sessions](https://code.claude.com/docs/en/claude-code-on-the-web), which run on cloud infrastructure instead of the user's machine, are not captured either; organizations with HIPAA readiness enabled get no local session data; and sessions for which zero data retention is in effect are excluded. No session transcript, local or remote, includes thinking blocks or tool definitions. Organizations that use [customer-managed encryption keys](https://platform.claude.com/docs/en/manage-claude/cmek) receive local session transcripts as usual. While the key cannot be used, the messages endpoint returns [503 Service Unavailable](https://platform.claude.com/docs/en/manage-claude/compliance-errors#local-sessions-temporarily-unavailable) instead of transcript content, and session metadata is still listed.
   </Accordion>
 </AccordionGroup>
 
diff --git a/content/en/manage-claude/compliance-integration-patterns.md b/content/en/manage-claude/compliance-integration-patterns.md
index 56a0a41007..0c7706be0b 100644
--- a/content/en/manage-claude/compliance-integration-patterns.md
+++ b/content/en/manage-claude/compliance-integration-patterns.md
@@ -147,7 +147,7 @@ The content endpoints (chats, files, projects, project attachments, and local an
 
 * Prompt text or model responses from Claude Console, or from Claude API workloads authenticated with an API key.
 * On-device activity in local sessions that is never sent to Anthropic, such as local files that Claude did not read.
-* Claude Code usage authenticated with a Claude Console API key, run through a third-party cloud platform (Amazon Bedrock, Google Cloud, or Microsoft Foundry), or run in Claude Code on the web.
+* Claude Code usage authenticated with a Claude Console API key, run through a third-party cloud platform (Amazon Bedrock, Google Cloud, or Microsoft Foundry), or run in a [Claude Code cloud session](https://code.claude.com/docs/en/claude-code-on-the-web), which runs on cloud infrastructure instead of the user's machine.
 * Local sessions from organizations with [HIPAA readiness](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#hipaa-readiness) enabled, and local sessions for which [zero data retention](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#zero-data-retention-zdr-scope) is in effect.
 * Thinking blocks, and images or other binary content, inside session transcripts (transcripts carry user prompts, assistant responses, and tool activity only; local session transcripts show a placeholder `text` block where binary content was omitted).
 * The original file for a chat attachment that claude.ai stored as extracted text, such as some Word, PowerPoint, and PDF uploads (the file content endpoint returns the extracted text; see [Retrieve files and artifacts](https://platform.claude.com/docs/en/manage-claude/compliance-content-data#retrieve-files-and-artifacts)).
diff --git a/content/en/manage-claude/compliance-sessions.md b/content/en/manage-claude/compliance-sessions.md
index 3a9590a1e1..6ac8ba5fd1 100644
--- a/content/en/manage-claude/compliance-sessions.md
+++ b/content/en/manage-claude/compliance-sessions.md
@@ -32,7 +32,7 @@ The following table maps each product, and where it runs, to the endpoint family
 Capture of local sessions is tied to the Compliance API being enabled for your organization and applies while users are signed in with their Claude Enterprise account. The session endpoints do not return the following:
 
 * Claude Code sessions authenticated with a Claude Console API key, or run through a third-party cloud platform such as Amazon Bedrock, Google Cloud, or Microsoft Foundry.
-* Claude Code on the web. It also runs in the cloud in Anthropic-managed environments, but it is not a remote session; the remote session endpoints return Cowork sessions only.
+* [Claude Code cloud sessions](https://code.claude.com/docs/en/claude-code-on-the-web), which run on cloud infrastructure instead of the user's machine. These cloud sessions are not remote sessions, even though both run in the cloud; the remote session endpoints return Cowork sessions only.
 * Local sessions in organizations with [HIPAA readiness](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#hipaa-readiness) enabled. No local session data is captured, so the local session endpoints return no sessions for those organizations.
 * Local sessions for which [zero data retention (ZDR)](https://platform.claude.com/docs/en/manage-claude/api-and-data-retention#zero-data-retention-zdr-scope) is in effect. These sessions are excluded from list results, and the retrieve and messages endpoints return 404 for them.
 
diff --git a/content/en/managed-agents/events-and-streaming.md b/content/en/managed-agents/events-and-streaming.md
index cea4b63091..02398f2a78 100644
--- a/content/en/managed-agents/events-and-streaming.md
+++ b/content/en/managed-agents/events-and-streaming.md
@@ -461,18 +461,20 @@ Every persisted event includes a `processed_at` timestamp set when the event fin
         ]
       });
 
-      for await (const event of stream) {
-        if (event.type === "agent.message") {
-          for (const block of event.content) {
-            if (block.type === "text") {
-              process.stdout.write(block.text);
+      events: for await (const event of stream) {
+        switch (event.type) {
+          case "agent.message":
+            for (const block of event.content) {
+              if (block.type === "text") {
+                process.stdout.write(block.text);
+              }
             }
-          }
-        } else if (event.type === "session.status_idle") {
-          break;
-        } else if (event.type === "session.error") {
-          console.log(`\n[Error: ${event.error?.message ?? "unknown"}]`);
-          break;
+            break;
+          case "session.status_idle":
+            break events;
+          case "session.error":
+            console.log(`\n[Error: ${event.error?.message ?? "unknown"}]`);
+            break events;
         }
       }
       ```
@@ -578,19 +580,22 @@ Every persisted event includes a `processed_at` timestamp set when the event fin
           );
 
           Iterable<BetaManagedAgentsStreamSessionEvents> events = stream.stream()::iterator;
+          events:
           for (var event : events) {
-              if (event.isAgentMessage()) {
-                  event.asAgentMessage().content().forEach(block -> block.text().ifPresent(textBlock -> IO.print(textBlock.text())));
-              } else if (event.isSessionStatusIdle()) {
-                  break;
-              } else if (event.isSessionError()) {
-                  // The `message` field spans all error variants; read it from the raw JSON.
-                  var errorMessage =
-                      event.asSessionError().error()._json().orElse(null) instanceof JsonObject json
-                          ? json.values().get("message").asStringOrThrow()
-                          : "unknown";
-                  IO.println("\n[Error: " + errorMessage + "]");
-                  break;
+              switch (event.type().value()) {
+                  case AGENT_MESSAGE -> event.asAgentMessage().content().forEach(block -> block.text().ifPresent(textBlock -> IO.print(textBlock.text())));
+                  case SESSION_STATUS_IDLE -> {
+                      break events;
+                  }
+                  case SESSION_ERROR -> {
+                      // The `message` field spans all error variants; read it from the raw JSON.
+                      var errorMessage =
+                          event.asSessionError().error()._json().orElse(null) instanceof JsonObject json
+                              ? json.values().get("message").asStringOrThrow()
+                              : "unknown";
+                      IO.println("\n[Error: " + errorMessage + "]");
+                      break events;
+                  }
               }
           }
       }
@@ -610,12 +615,12 @@ Every persisted event includes a `processed_at` timestamp set when the event fin
       );
 
       foreach ($stream as $event) {
-          match ($event->type) {
-              'agent.message' => array_walk(
+          match (true) {
+              $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsAgentMessageEvent => array_walk(
                   $event->content,
-                  static fn ($block) => $block->type === 'text' ? print($block->text) : null,
+                  static fn ($block) => $block instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsTextBlock ? print($block->text) : null,
               ),
-              'session.error' => printf("\n[Error: %s]", $event->error?->message ?? 'unknown'),
+              $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionErrorEvent => printf("\n[Error: %s]", $event->error?->message ?? 'unknown'),
               default => null,
           };
           if ($event->type === 'session.status_idle' || $event->type === 'session.error') {
@@ -638,12 +643,12 @@ Every persisted event includes a `processed_at` timestamp set when the event fin
       )
 
       stream.each do |event|
-        case event.type
-        in :"agent.message"
+        case event
+        when Anthropic::Beta::Sessions::BetaManagedAgentsAgentMessageEvent
           event.content.each { print it.text }
-        in :"session.status_idle"
+        when Anthropic::Beta::Sessions::BetaManagedAgentsSessionStatusIdleEvent
           break
-        in :"session.error"
+        when Anthropic::Beta::Sessions::BetaManagedAgentsSessionErrorEvent
           puts "\n[Error: #{event.error&.message || "unknown"}]"
           break
         else
@@ -741,19 +746,21 @@ Every persisted event includes a `processed_at` timestamp set when the event fin
       }
 
       // Tail live events, skipping anything already seen
-      for await (const event of stream) {
+      tail: for await (const event of stream) {
         // Preview events (event_start/event_delta) carry no top-level id
         if (event.type === "event_start" || event.type === "event_delta") continue;
         if (seenEventIds.has(event.id)) continue;
         seenEventIds.add(event.id);
-        if (event.type === "agent.message") {
-          for (const block of event.content) {
-            if (block.type === "text") {
-              process.stdout.write(block.text);
+        switch (event.type) {
+          case "agent.message":
+            for (const block of event.content) {
+              if (block.type === "text") {
+                process.stdout.write(block.text);
+              }
             }
-          }
-        } else if (event.type === "session.status_idle") {
-          break;
+            break;
+          case "session.status_idle":
+            break tail;
         }
       }
       ```
@@ -867,10 +874,10 @@ Every persisted event includes a `processed_at` timestamp set when the event fin
               continue;
           }
           $seenEventIds[$event->id] = true;
-          match ($event->type) {
-              'agent.message' => array_walk(
+          match (true) {
+              $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsAgentMessageEvent => array_walk(
                   $event->content,
-                  static fn ($block) => $block->type === 'text' ? print($block->text) : null,
+                  static fn ($block) => $block instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsTextBlock ? print($block->text) : null,
               ),
               default => null,
           };
@@ -891,10 +898,10 @@ Every persisted event includes a `processed_at` timestamp set when the event fin
       # Tail live events, skipping anything already seen — Set#add? returns nil for duplicates
       stream.each do |event|
         next unless seen_event_ids.add?(event.id)
-        case event.type
-        in :"agent.message"
+        case event
+        when Anthropic::Beta::Sessions::BetaManagedAgentsAgentMessageEvent
           event.content.each { print it.text }
-        in :"session.status_idle"
+        when Anthropic::Beta::Sessions::BetaManagedAgentsSessionStatusIdleEvent
           break
         else
           # ignore other event types
@@ -1274,39 +1281,47 @@ Guarantees the pattern relies on:
     ]
   });
 
-  for await (const event of stream) {
-    if (event.type === "event_start") {
-      // 1. Note the announced id and open the snapshot. Deltas and the
-      //    buffered event carry the same id.
-      const preview = accumulateManagedAgentsEvent(undefined, event);
-      if (preview) previews.set(event.event.id, preview);
-      console.log(`event_start             ${event.event.type} ${event.event.id}`);
-    } else if (event.type === "event_delta") {
-      // 2. Fold the fragment into the snapshot and render it
-      const preview = accumulateManagedAgentsEvent(previews.get(event.event_id), event);
-      if (preview) {
-        previews.set(event.event_id, preview);
-        const text = preview.content
+  deltas: for await (const event of stream) {
+    switch (event.type) {
+      case "event_start": {
+        // 1. Note the announced id and open the snapshot. Deltas and the
+        //    buffered event carry the same id.
+        const preview = accumulateManagedAgentsEvent(undefined, event);
+        if (preview) previews.set(event.event.id, preview);
+        console.log(`event_start             ${event.event.type} ${event.event.id}`);
+        break;
+      }
+      case "event_delta": {
+        // 2. Fold the fragment into the snapshot and render it
+        const preview = accumulateManagedAgentsEvent(previews.get(event.event_id), event);
+        if (preview) {
+          previews.set(event.event_id, preview);
+          const text = preview.content
+            .map((block) => (block.type === "text" ? block.text : ""))
+            .join("");
+          console.log(`event_delta             preview: ${JSON.stringify(text)}`);
+        }
+        break;
+      }
+      case "agent.message": {
+        // 3. The buffered event is the record: it replaces and closes the preview
+        const message = accumulateManagedAgentsEvent(previews.get(event.id), event);
+        previews.delete(event.id);
+        const text = message.content
           .map((block) => (block.type === "text" ? block.text : ""))
           .join("");
-        console.log(`event_delta             preview: ${JSON.stringify(text)}`);
+        console.log(`agent.message           ${event.id} ${JSON.stringify(text)}`);
+        break;
       }
-    } else if (event.type === "agent.message") {
-      // 3. The buffered event is the record: it replaces and closes the preview
-      const message = accumulateManagedAgentsEvent(previews.get(event.id), event);
-      previews.delete(event.id);
-      const text = message.content
-        .map((block) => (block.type === "text" ? block.text : ""))
-        .join("");
-      console.log(`agent.message           ${event.id} ${JSON.stringify(text)}`);
-    } else if (event.type === "span.model_request_end") {
-      // 4. No more deltas are coming. Close any preview that was never reconciled.
-      for (const eventId of previews.keys()) {
-        console.log(`span.model_request_end  closing preview for ${eventId}`);
-      }
-      previews.clear();
-    } else if (event.type === "session.status_idle") {
-      break;
+      case "span.model_request_end":
+        // 4. No more deltas are coming. Close any preview that was never reconciled.
+        for (const eventId of previews.keys()) {
+          console.log(`span.model_request_end  closing preview for ${eventId}`);
+        }
+        previews.clear();
+        break;
+      case "session.status_idle":
+        break deltas;
     }
   }
   stream.controller.abort();
@@ -1468,34 +1483,43 @@ Guarantees the pattern relies on:
       );
 
       Iterable<BetaManagedAgentsStreamSessionEvents> events = stream.stream()::iterator;
+      deltas:
       for (var event : events) {
-          if (event.isEventStart() && event.asEventStart().event().isAgentMessage()) {
-              var preview = event.asEventStart().event().asAgentMessage();
-              IO.println("event_start             " + preview.type().asString() + " " + preview.id());
-          } else if (event.isEventDelta()) {
-              var eventDelta = event.asEventDelta();
-              var fragment = eventDelta.delta();
-              var buffer = previews
-                  .computeIfAbsent(eventDelta.eventId(), _ -> new HashMap<>())
-                  .computeIfAbsent(fragment.index().orElse(0L), _ -> new StringBuilder());
-              buffer.append(fragment.content().text());
-              IO.println("event_delta             preview: " + buffer);
-          } else if (event.isAgentMessage()) {
-              // The buffered event is the record: drop its preview, render its content
-              var message = event.asAgentMessage();
-              previews.remove(message.id());
-              var text = message.content().stream()
-                  .flatMap(block -> block.text().stream())
-                  .map(textBlock -> textBlock.text())
-                  .collect(Collectors.joining());
-              IO.println("agent.message           " + message.id() + " " + text);
-          } else if (event.isSpanModelRequestEnd()) {
-              // No more deltas are coming. Close any preview whose buffered event never arrived.
-              previews.keySet().forEach(eventId ->
-                  IO.println("span.model_request_end  closing preview for " + eventId));
-              previews.clear();
-          } else if (event.isSessionStatusIdle()) {
-              break;
+          switch (event.type().value()) {
+              case EVENT_START -> {
+                  if (event.asEventStart().event().isAgentMessage()) {
+                      var preview = event.asEventStart().event().asAgentMessage();
+                      IO.println("event_start             " + preview.type().asString() + " " + preview.id());
+                  }
+              }
+              case EVENT_DELTA -> {
+                  var eventDelta = event.asEventDelta();
+                  var fragment = eventDelta.delta();
+                  var buffer = previews
+                      .computeIfAbsent(eventDelta.eventId(), _ -> new HashMap<>())
+                      .computeIfAbsent(fragment.index().orElse(0L), _ -> new StringBuilder());
+                  buffer.append(fragment.content().text());
+                  IO.println("event_delta             preview: " + buffer);
+              }
+              case AGENT_MESSAGE -> {
+                  // The buffered event is the record: drop its preview, render its content
+                  var message = event.asAgentMessage();
+                  previews.remove(message.id());
+                  var text = message.content().stream()
+                      .flatMap(block -> block.text().stream())
+                      .map(textBlock -> textBlock.text())
+                      .collect(Collectors.joining());
+                  IO.println("agent.message           " + message.id() + " " + text);
+              }
+              case SPAN_MODEL_REQUEST_END -> {
+                  // No more deltas are coming. Close any preview whose buffered event never arrived.
+                  previews.keySet().forEach(eventId ->
+                      IO.println("span.model_request_end  closing preview for " + eventId));
+                  previews.clear();
+              }
+              case SESSION_STATUS_IDLE -> {
+                  break deltas;
+              }
           }
       }
   }
@@ -1528,23 +1552,23 @@ Guarantees the pattern relies on:
   end
 
   stream.each do |event|
-    case event.type
-    in :event_start
+    case event
+    when Anthropic::Beta::BetaManagedAgentsStartEvent
       puts "event_start             #{event.event.type} #{event.event.id}"
-    in :event_delta
+    when Anthropic::Beta::BetaManagedAgentsDeltaEvent
       delta = event.delta
       fragment = delta.content.text
       buffers[event.event_id][delta.index || 0] << fragment
       puts "event_delta             preview: #{buffers[event.event_id][delta.index || 0].inspect}"
-    in :"agent.message"
+    when Anthropic::Beta::Sessions::BetaManagedAgentsAgentMessageEvent
       # Replace: drop the accumulated preview and render the complete event.
       buffers.delete(event.id)
       puts "agent.message           #{event.id} #{event.content.map(&:text).join.inspect}"
-    in :"span.model_request_end"
+    when Anthropic::Beta::Sessions::BetaManagedAgentsSpanModelRequestEndEvent
       # No more deltas are coming. Close any preview that was never reconciled.
       buffers.each_key { |event_id| puts "span.model_request_end  closing preview for #{event_id}" }
       buffers.clear
-    in :"session.status_idle"
+    when Anthropic::Beta::Sessions::BetaManagedAgentsSessionStatusIdleEvent
       break
     else
       # ignore other event types
@@ -1694,18 +1718,22 @@ The preview events themselves don't change. `event_start` and `event_delta` have
     event_deltas: ["agent.message"],
   });
 
-  for await (const event of stream) {
-    if (event.type === "event_delta") {
-      process.stdout.write(event.delta.content.text);
-    } else if (event.type === "agent.message") {
-      // The buffered event is the authoritative record; render its content.
-      process.stdout.write("\n");
-      const text = event.content
-        .map((block) => (block.type === "text" ? block.text : ""))
-        .join("");
-      console.log(text);
-    } else if (event.type === "session.thread_status_idle") {
-      break;
+  threadDeltas: for await (const event of stream) {
+    switch (event.type) {
+      case "event_delta":
+        process.stdout.write(event.delta.content.text);
+        break;
+      case "agent.message": {
+        // The buffered event is the authoritative record; render its content.
+        process.stdout.write("\n");
+        const text = event.content
+          .map((block) => (block.type === "text" ? block.text : ""))
+          .join("");
+        console.log(text);
+        break;
+      }
+      case "session.thread_status_idle":
+        break threadDeltas;
     }
   }
   stream.controller.abort();
@@ -1810,16 +1838,19 @@ The preview events themselves don't change. `event_start` and `event_delta` have
               .build()
   )) {
       Iterable<BetaManagedAgentsStreamSessionThreadEvents> events = stream.stream()::iterator;
+      threadDeltas:
       for (var event : events) {
-          if (event.isEventDelta()) {
-              IO.print(event.asEventDelta().delta().content().text());
-          } else if (event.isAgentMessage()) {
-              // The buffered event is the authoritative record; render its content.
-              IO.println();
-              event.asAgentMessage().content().forEach(block -> block.text().ifPresent(textBlock -> IO.print(textBlock.text())));
-              IO.println();
-          } else if (event.isSessionThreadStatusIdle()) {
-              break;
+          switch (event.type().value()) {
+              case EVENT_DELTA -> IO.print(event.asEventDelta().delta().content().text());
+              case AGENT_MESSAGE -> {
+                  // The buffered event is the authoritative record; render its content.
+                  IO.println();
+                  event.asAgentMessage().content().forEach(block -> block.text().ifPresent(textBlock -> IO.print(textBlock.text())));
+                  IO.println();
+              }
+              case SESSION_THREAD_STATUS_IDLE -> {
+                  break threadDeltas;
+              }
           }
       }
   }
@@ -1843,15 +1874,15 @@ The preview events themselves don't change. `event_start` and `event_delta` have
   )
 
   stream.each do |event|
-    case event.type
-    in :event_delta
+    case event
+    when Anthropic::Beta::BetaManagedAgentsDeltaEvent
       print event.delta.content.text
-    in :"agent.message"
+    when Anthropic::Beta::Sessions::BetaManagedAgentsAgentMessageEvent
       # The buffered event is the authoritative record; render its content.
       puts
       event.content.each { print it.text }
       puts
-    in :"session.thread_status_idle"
+    when Anthropic::Beta::Sessions::BetaManagedAgentsSessionThreadStatusIdleEvent
       break
     else
       # ignore other event types
@@ -2106,27 +2137,29 @@ When the agent invokes a [custom tool](https://platform.claude.com/docs/en/manag
   $stream = $client->beta->sessions->events->streamStream($session->id);
 
   foreach ($stream as $event) {
-      if ($event->type === 'session.status_idle' && $event->stopReason) {
-          if ($event->stopReason->type === 'requires_action') {
-              foreach ($event->stopReason->eventIDs as $eventId) {
-                  // Look up the custom tool use event and execute it
-                  $toolEvent = $eventsById[$eventId];
-                  $result = callTool($toolEvent->name, $toolEvent->input);
-
-                  // Send the result back
-                  $client->beta->sessions->events->send(
-                      $session->id,
-                      events: [
-                          [
-                              'type' => 'user.custom_tool_result',
-                              'custom_tool_use_id' => $eventId,
-                              'content' => [['type' => 'text', 'text' => $result]],
+      if ($event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionStatusIdleEvent && $event->stopReason) {
+          switch (true) {
+              case $event->stopReason instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionRequiresAction:
+                  foreach ($event->stopReason->eventIDs as $eventId) {
+                      // Look up the custom tool use event and execute it
+                      $toolEvent = $eventsById[$eventId];
+                      $result = callTool($toolEvent->name, $toolEvent->input);
+
+                      // Send the result back
+                      $client->beta->sessions->events->send(
+                          $session->id,
+                          events: [
+                              [
+                                  'type' => 'user.custom_tool_result',
+                                  'custom_tool_use_id' => $eventId,
+                                  'content' => [['type' => 'text', 'text' => $result]],
+                              ],
                           ],
-                      ],
-                  );
-              }
-          } elseif ($event->stopReason->type === 'end_turn') {
-              break;
+                      );
+                  }
+                  break;
+              case $event->stopReason instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionEndTurn:
+                  break 2;
           }
       }
   }
@@ -2135,26 +2168,29 @@ When the agent invokes a [custom tool](https://platform.claude.com/docs/en/manag
   ```ruby Ruby
   client.beta.sessions.events.stream_events(session.id).each do |event|
     case event
-    in {type: :"session.status_idle", stop_reason: {type: :requires_action, event_ids:}}
-      event_ids.each do |event_id|
-        # Look up the custom tool use event and execute it
-        tool_event = events_by_id[event_id]
-        result = call_tool.call(tool_event.name, tool_event.input)
-        # Send the result back
-        client.beta.sessions.events.send_(
-          session.id,
-          events: [
-            {
-              type: "user.custom_tool_result",
-              custom_tool_use_id: event_id,
-              content: [{type: "text", text: result}]
-            }
-          ]
-        )
+    when Anthropic::Beta::Sessions::BetaManagedAgentsSessionStatusIdleEvent
+      stop_reason = event.stop_reason
+      case stop_reason
+      when Anthropic::Beta::Sessions::BetaManagedAgentsSessionRequiresAction
+        stop_reason.event_ids.each do |event_id|
+          # Look up the custom tool use event and execute it
+          tool_event = events_by_id[event_id]
+          result = call_tool.call(tool_event.name, tool_event.input)
+          # Send the result back
+          client.beta.sessions.events.send_(
+            session.id,
+            events: [
+              {
+                type: "user.custom_tool_result",
+                custom_tool_use_id: event_id,
+                content: [{type: "text", text: result}]
+              }
+            ]
+          )
+        end
+      when Anthropic::Beta::Sessions::BetaManagedAgentsSessionEndTurn
+        break
       end
-    in {type: :"session.status_idle", stop_reason: {type: :end_turn}}
-      break
-    else
     end
   end
   ```
@@ -2365,23 +2401,25 @@ Each `agent.tool_use` and `agent.mcp_tool_use` event carries `evaluated_permissi
   $stream = $client->beta->sessions->events->streamStream($session->id);
 
   foreach ($stream as $event) {
-      if ($event->type === 'session.status_idle' && $event->stopReason) {
-          if ($event->stopReason->type === 'requires_action') {
-              foreach ($event->stopReason->eventIDs as $eventId) {
-                  // Approve the pending tool call
-                  $client->beta->sessions->events->send(
-                      $session->id,
-                      events: [
-                          [
-                              'type' => 'user.tool_confirmation',
-                              'tool_use_id' => $eventId,
-                              'result' => 'allow',
+      if ($event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionStatusIdleEvent && $event->stopReason) {
+          switch (true) {
+              case $event->stopReason instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionRequiresAction:
+                  foreach ($event->stopReason->eventIDs as $eventId) {
+                      // Approve the pending tool call
+                      $client->beta->sessions->events->send(
+                          $session->id,
+                          events: [
+                              [
+                                  'type' => 'user.tool_confirmation',
+                                  'tool_use_id' => $eventId,
+                                  'result' => 'allow',
+                              ],
                           ],
-                      ],
-                  );
-              }
-          } elseif ($event->stopReason->type === 'end_turn') {
-              break;
+                      );
+                  }
+                  break;
+              case $event->stopReason instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionEndTurn:
+                  break 2;
           }
       }
   }
@@ -2390,19 +2428,22 @@ Each `agent.tool_use` and `agent.mcp_tool_use` event carries `evaluated_permissi
   ```ruby Ruby
   client.beta.sessions.events.stream_events(session.id).each do |event|
     case event
-    in {type: :"session.status_idle", stop_reason: {type: :requires_action, event_ids:}}
-      event_ids.each do |event_id|
-        # Approve the pending tool call
-        client.beta.sessions.events.send_(
-          session.id,
-          events: [
-            {type: "user.tool_confirmation", tool_use_id: event_id, result: "allow"}
-          ]
-        )
+    when Anthropic::Beta::Sessions::BetaManagedAgentsSessionStatusIdleEvent
+      stop_reason = event.stop_reason
+      case stop_reason
+      when Anthropic::Beta::Sessions::BetaManagedAgentsSessionRequiresAction
+        stop_reason.event_ids.each do |event_id|
+          # Approve the pending tool call
+          client.beta.sessions.events.send_(
+            session.id,
+            events: [
+              {type: "user.tool_confirmation", tool_use_id: event_id, result: "allow"}
+            ]
+          )
+        end
+      when Anthropic::Beta::Sessions::BetaManagedAgentsSessionEndTurn
+        break
       end
-    in {type: :"session.status_idle", stop_reason: {type: :end_turn}}
-      break
-    else
     end
   end
   ```
diff --git a/content/en/managed-agents/files.md b/content/en/managed-agents/files.md
index e0fcdfc357..a4120d1477 100644
--- a/content/en/managed-agents/files.md
+++ b/content/en/managed-agents/files.md
@@ -532,12 +532,15 @@ List all resources on a session with `resources.list`. To remove a file, call `r
   ```java Java
   var listed = client.beta().sessions().resources().list(session.id());
   for (var entry : listed.data()) {
-      if (entry.isFile()) {
-          var fileResource = entry.asFile();
-          IO.println(fileResource.id() + " " + fileResource.type());
-      } else if (entry.isGitHubRepository()) {
-          var repoResource = entry.asGitHubRepository();
-          IO.println(repoResource.id() + " " + repoResource.type());
+      switch (entry.type().value()) {
+          case FILE -> {
+              var fileResource = entry.asFile();
+              IO.println(fileResource.id() + " " + fileResource.type());
+          }
+          case GITHUB_REPOSITORY -> {
+              var repoResource = entry.asGitHubRepository();
+              IO.println(repoResource.id() + " " + repoResource.type());
+          }
       }
   }
 
diff --git a/content/en/managed-agents/migration.md b/content/en/managed-agents/migration.md
index 1b8f5daf61..0f4cc1909f 100644
--- a/content/en/managed-agents/migration.md
+++ b/content/en/managed-agents/migration.md
@@ -739,28 +739,28 @@ If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-s
           ],
       )
       for event in stream:
-          if event.type == "agent.message":
-              print(
-                  "".join(block.text for block in event.content if block.type == "text")
-              )
-          elif event.type == "agent.custom_tool_use":
-              result = get_weather(**event.input)
-              client.beta.sessions.events.send(
-                  session.id,
-                  events=[
-                      {
-                          "type": "user.custom_tool_result",
-                          "custom_tool_use_id": event.id,
-                          "content": [{"type": "text", "text": result}],
-                      }
-                  ],
-              )
-          elif (
-              event.type == "session.status_idle"
-              and event.stop_reason
-              and event.stop_reason.type == "end_turn"
-          ):
-              break
+          match event.type:
+              case "agent.message":
+                  print(
+                      "".join(
+                          block.text for block in event.content if block.type == "text"
+                      )
+                  )
+              case "agent.custom_tool_use":
+                  result = get_weather(**event.input)
+                  client.beta.sessions.events.send(
+                      session.id,
+                      events=[
+                          {
+                              "type": "user.custom_tool_result",
+                              "custom_tool_use_id": event.id,
+                              "content": [{"type": "text", "text": result}],
+                          }
+                      ],
+                  )
+              case "session.status_idle":
+                  if event.stop_reason and event.stop_reason.type == "end_turn":
+                      break
   ```
 
   ```typescript TypeScript
@@ -810,26 +810,33 @@ If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-s
     ]
   });
 
-  for await (const event of stream) {
-    if (event.type === "agent.message") {
-      for (const block of event.content) {
-        if (block.type === "text") {
-          console.log(block.text);
+  loop: for await (const event of stream) {
+    switch (event.type) {
+      case "agent.message":
+        for (const block of event.content) {
+          if (block.type === "text") {
+            console.log(block.text);
+          }
         }
+        break;
+      case "agent.custom_tool_use": {
+        const result = getWeather(event.input);
+        await client.beta.sessions.events.send(session.id, {
+          events: [
+            {
+              type: "user.custom_tool_result",
+              custom_tool_use_id: event.id,
+              content: [{ type: "text", text: result }]
+            }
+          ]
+        });
+        break;
       }
-    } else if (event.type === "agent.custom_tool_use") {
-      const result = getWeather(event.input);
-      await client.beta.sessions.events.send(session.id, {
-        events: [
-          {
-            type: "user.custom_tool_result",
-            custom_tool_use_id: event.id,
-            content: [{ type: "text", text: result }]
-          }
-        ]
-      });
-    } else if (event.type === "session.status_idle" && event.stop_reason?.type === "end_turn") {
-      break;
+      case "session.status_idle":
+        if (event.stop_reason?.type === "end_turn") {
+          break loop;
+        }
+        break;
     }
   }
   ```
@@ -1126,27 +1133,33 @@ If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-s
                   .build())
               .build());
 
+      loop:
       for (var event : (Iterable<BetaManagedAgentsStreamSessionEvents>) stream.stream()::iterator) {
-          if (event.isAgentMessage()) {
-              for (var block : event.asAgentMessage().content()) {
-                  block.text().ifPresent(textBlock -> IO.println(textBlock.text()));
+          switch (event.type().value()) {
+              case AGENT_MESSAGE -> {
+                  for (var block : event.asAgentMessage().content()) {
+                      block.text().ifPresent(textBlock -> IO.println(textBlock.text()));
+                  }
+              }
+              case AGENT_CUSTOM_TOOL_USE -> {
+                  var toolUse = event.asAgentCustomToolUse();
+                  var city = toolUse.input()._additionalProperties().get("city").asStringOrThrow();
+                  var result = getWeather.apply(city);
+                  client.beta().sessions().events().send(
+                      session.id(),
+                      EventSendParams.builder()
+                          .addEvent(BetaManagedAgentsUserCustomToolResultEventParams.builder()
+                              .type(BetaManagedAgentsUserCustomToolResultEventParams.Type.USER_CUSTOM_TOOL_RESULT)
+                              .customToolUseId(toolUse.id())
+                              .addTextContent(result)
+                              .build())
+                          .build());
+              }
+              case SESSION_STATUS_IDLE -> {
+                  if (event.asSessionStatusIdle().stopReason().isEndTurn()) {
+                      break loop;
+                  }
               }
-          } else if (event.isAgentCustomToolUse()) {
-              var toolUse = event.asAgentCustomToolUse();
-              var city = toolUse.input()._additionalProperties().get("city").asStringOrThrow();
-              var result = getWeather.apply(city);
-              client.beta().sessions().events().send(
-                  session.id(),
-                  EventSendParams.builder()
-                      .addEvent(BetaManagedAgentsUserCustomToolResultEventParams.builder()
-                          .type(BetaManagedAgentsUserCustomToolResultEventParams.Type.USER_CUSTOM_TOOL_RESULT)
-                          .customToolUseId(toolUse.id())
-                          .addTextContent(result)
-                          .build())
-                      .build());
-          } else if (event.isSessionStatusIdle()
-              && event.asSessionStatusIdle().stopReason().isEndTurn()) {
-              break;
           }
       }
   }
@@ -1157,6 +1170,11 @@ If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-s
   use Anthropic\Beta\Agents\BetaManagedAgentsCustomToolInputSchema;
   use Anthropic\Beta\Agents\BetaManagedAgentsCustomToolParams;
   use Anthropic\Beta\Sessions\BetaManagedAgentsAgentParams;
+  use Anthropic\Beta\Sessions\Events\ManagedAgentsAgentCustomToolUseEvent;
+  use Anthropic\Beta\Sessions\Events\ManagedAgentsAgentMessageEvent;
+  use Anthropic\Beta\Sessions\Events\ManagedAgentsSessionEndTurn;
+  use Anthropic\Beta\Sessions\Events\ManagedAgentsSessionStatusIdleEvent;
+  use Anthropic\Beta\Sessions\Events\ManagedAgentsTextBlock;
 
   $client = new Client();
 
@@ -1208,26 +1226,32 @@ If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-s
   );
 
   foreach ($stream as $event) {
-      if ($event->type === 'agent.message') {
-          foreach ($event->content as $block) {
-              if ($block->type === 'text') {
-                  echo $block->text . "\n";
+      switch (true) {
+          case $event instanceof ManagedAgentsAgentMessageEvent:
+              foreach ($event->content as $block) {
+                  if ($block instanceof ManagedAgentsTextBlock) {
+                      echo $block->text . "\n";
+                  }
               }
-          }
-      } elseif ($event->type === 'agent.custom_tool_use') {
-          $result = getWeather($event->input['city']);
-          $client->beta->sessions->events->send(
-              $session->id,
-              events: [
-                  [
-                      'type' => 'user.custom_tool_result',
-                      'custom_tool_use_id' => $event->id,
-                      'content' => [['type' => 'text', 'text' => $result]],
+              break;
+          case $event instanceof ManagedAgentsAgentCustomToolUseEvent:
+              $result = getWeather($event->input['city']);
+              $client->beta->sessions->events->send(
+                  $session->id,
+                  events: [
+                      [
+                          'type' => 'user.custom_tool_result',
+                          'custom_tool_use_id' => $event->id,
+                          'content' => [['type' => 'text', 'text' => $result]],
+                      ],
                   ],
-              ],
-          );
-      } elseif ($event->type === 'session.status_idle' && $event->stopReason?->type === 'end_turn') {
-          break;
+              );
+              break;
+          case $event instanceof ManagedAgentsSessionStatusIdleEvent:
+              if ($event->stopReason instanceof ManagedAgentsSessionEndTurn) {
+                  break 2;
+              }
+              break;
       }
   }
   $stream->close();
@@ -1276,12 +1300,12 @@ If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-s
   )
 
   stream.each do |event|
-    case event.type
-    when :"agent.message"
+    case event
+    when Anthropic::Beta::Sessions::BetaManagedAgentsAgentMessageEvent
       event.content.each do |block|
-        puts block.text if block.type == :text
+        puts block.text if block.is_a?(Anthropic::Beta::Sessions::BetaManagedAgentsTextBlock)
       end
-    when :"agent.custom_tool_use"
+    when Anthropic::Beta::Sessions::BetaManagedAgentsAgentCustomToolUseEvent
       result = get_weather(event.input[:city])
       client.beta.sessions.events.send_(
         session.id,
@@ -1293,8 +1317,8 @@ If you built with the [Claude Agent SDK](https://code.claude.com/docs/en/agent-s
           }
         ]
       )
-    when :"session.status_idle"
-      break if event.stop_reason&.type == :end_turn
+    when Anthropic::Beta::Sessions::BetaManagedAgentsSessionStatusIdleEvent
+      break if event.stop_reason.is_a?(Anthropic::Beta::Sessions::BetaManagedAgentsSessionEndTurn)
     end
   end
   ```
diff --git a/content/en/managed-agents/multiagent-orchestration.md b/content/en/managed-agents/multiagent-orchestration.md
index aee9421519..d740929b11 100644
--- a/content/en/managed-agents/multiagent-orchestration.md
+++ b/content/en/managed-agents/multiagent-orchestration.md
@@ -1213,15 +1213,17 @@ Each session thread has its own event stream at `/v1/sessions/{session_id}/threa
         session_id: session.id,
       });
 
-      for await (const event of stream) {
-        if (event.type === "agent.message") {
-          for (const block of event.content) {
-            if (block.type === "text") {
-              process.stdout.write(block.text);
+      loop: for await (const event of stream) {
+        switch (event.type) {
+          case "agent.message":
+            for (const block of event.content) {
+              if (block.type === "text") {
+                process.stdout.write(block.text);
+              }
             }
-          }
-        } else if (event.type === "session.thread_status_idle") {
-          break;
+            break;
+          case "session.thread_status_idle":
+            break loop;
         }
       }
       ```
@@ -1276,13 +1278,17 @@ Each session thread has its own event stream at `/v1/sessions/{session_id}/threa
           thread.id(),
           EventStreamParams.builder().sessionId(session.id()).build()
       )) {
+          loop:
           for (var event : (Iterable<BetaManagedAgentsStreamSessionThreadEvents>) streamResponse.stream()::iterator) {
-              if (event.isAgentMessage()) {
-                  for (var block : event.asAgentMessage().content()) {
-                      block.text().ifPresent(textBlock -> IO.print(textBlock.text()));
+              switch (event.type().value()) {
+                  case AGENT_MESSAGE -> {
+                      for (var block : event.asAgentMessage().content()) {
+                          block.text().ifPresent(textBlock -> IO.print(textBlock.text()));
+                      }
+                  }
+                  case SESSION_THREAD_STATUS_IDLE -> {
+                      break loop;
                   }
-              } else if (event.isSessionThreadStatusIdle()) {
-                  break;
               }
           }
       }
@@ -1295,26 +1301,28 @@ Each session thread has its own event stream at `/v1/sessions/{session_id}/threa
       );
 
       foreach ($stream as $event) {
-          if ($event->type === 'agent.message') {
-              foreach ($event->content as $block) {
-                  if ($block->type === 'text') {
-                      echo $block->text;
+          switch (true) {
+              case $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsAgentMessageEvent:
+                  foreach ($event->content as $block) {
+                      if ($block instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsTextBlock) {
+                          echo $block->text;
+                      }
                   }
-              }
-          } elseif ($event->type === 'session.thread_status_idle') {
-              break;
+                  break;
+              case $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionThreadStatusIdleEvent:
+                  break 2;
           }
       }
       ```
 
       ```ruby Ruby
       client.beta.sessions.threads.events.stream_events(thread.id, session_id: session.id).each do |event|
-        case event.type
-        when :"agent.message"
+        case event
+        when Anthropic::Beta::Sessions::BetaManagedAgentsAgentMessageEvent
           event.content.each do |block|
-            print block.text if block.type == :text
+            print block.text if block.is_a?(Anthropic::Beta::Sessions::BetaManagedAgentsTextBlock)
           end
-        when :"session.thread_status_idle"
+        when Anthropic::Beta::Sessions::BetaManagedAgentsSessionThreadStatusIdleEvent
           break
         end
       end
diff --git a/content/en/managed-agents/quickstart.md b/content/en/managed-agents/quickstart.md
index b93af566fd..bc3d347dc5 100644
--- a/content/en/managed-agents/quickstart.md
+++ b/content/en/managed-agents/quickstart.md
@@ -92,7 +92,7 @@ ant --version
 
   <Tab title="Java">
     ```groovy Gradle
-    implementation("com.anthropic:anthropic-java:2.60.0")
+    implementation("com.anthropic:anthropic-java:2.63.0")
     ```
   </Tab>
 
@@ -651,18 +651,21 @@ export ANTHROPIC_API_KEY="your-api-key-here"
       });
 
       // Process streaming events
-      for await (const event of stream) {
-        if (event.type === "agent.message") {
-          for (const block of event.content) {
-            if (block.type === "text") {
-              process.stdout.write(block.text);
+      loop: for await (const event of stream) {
+        switch (event.type) {
+          case "agent.message":
+            for (const block of event.content) {
+              if (block.type === "text") {
+                process.stdout.write(block.text);
+              }
             }
-          }
-        } else if (event.type === "agent.tool_use") {
-          console.log(`\n[Using tool: ${event.name}]`);
-        } else if (event.type === "session.status_idle") {
-          console.log("\n\nAgent finished.");
-          break;
+            break;
+          case "agent.tool_use":
+            console.log(`\n[Using tool: ${event.name}]`);
+            break;
+          case "session.status_idle":
+            console.log("\n\nAgent finished.");
+            break loop;
         }
       }
       ```
@@ -770,14 +773,15 @@ export ANTHROPIC_API_KEY="your-api-key-here"
               .build());
 
           // Process streaming events
+          loop:
           for (var event : (Iterable<BetaManagedAgentsStreamSessionEvents>) stream.stream()::iterator) {
-              if (event.isAgentMessage()) {
-                  event.asAgentMessage().content().forEach(block -> block.text().ifPresent(textBlock -> IO.print(textBlock.text())));
-              } else if (event.isAgentToolUse()) {
-                  IO.println("\n[Using tool: " + event.asAgentToolUse().name() + "]");
-              } else if (event.isSessionStatusIdle()) {
-                  IO.println("\n\nAgent finished.");
-                  break;
+              switch (event.type().value()) {
+                  case AGENT_MESSAGE -> event.asAgentMessage().content().forEach(block -> block.text().ifPresent(textBlock -> IO.print(textBlock.text())));
+                  case AGENT_TOOL_USE -> IO.println("\n[Using tool: " + event.asAgentToolUse().name() + "]");
+                  case SESSION_STATUS_IDLE -> {
+                      IO.println("\n\nAgent finished.");
+                      break loop;
+                  }
               }
           }
       }
@@ -801,13 +805,13 @@ export ANTHROPIC_API_KEY="your-api-key-here"
 
       // Process streaming events
       foreach ($stream as $event) {
-          match ($event->type) {
-              'agent.message' => array_walk(
+          match (true) {
+              $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsAgentMessageEvent => array_walk(
                   $event->content,
-                  static fn ($block) => $block->type === 'text' ? print($block->text) : null,
+                  static fn ($block) => $block instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsTextBlock ? print($block->text) : null,
               ),
-              'agent.tool_use' => print("\n[Using tool: {$event->name}]\n"),
-              'session.status_idle' => print("\n\nAgent finished.\n"),
+              $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsAgentToolUseEvent => print("\n[Using tool: {$event->name}]\n"),
+              $event instanceof \Anthropic\Beta\Sessions\Events\ManagedAgentsSessionStatusIdleEvent => print("\n\nAgent finished.\n"),
               default => null,
           };
           if ($event->type === 'session.status_idle') {
@@ -830,12 +834,12 @@ export ANTHROPIC_API_KEY="your-api-key-here"
 
       # Process streaming events
       stream.each do |event|
-        case event.type
-        in :"agent.message"
-          event.content.each { print it.text if it.type == :text }
-        in :"agent.tool_use"
+        case event
+        when Anthropic::Beta::Sessions::BetaManagedAgentsAgentMessageEvent
+          event.content.each { print it.text if it.is_a?(Anthropic::Beta::Sessions::BetaManagedAgentsTextBlock) }
+        when Anthropic::Beta::Sessions::BetaManagedAgentsAgentToolUseEvent
           puts "\n[Using tool: #{event.name}]"
-        in :"session.status_idle"
+        when Anthropic::Beta::Sessions::BetaManagedAgentsSessionStatusIdleEvent
           puts "\n\nAgent finished."
           break
         else
diff --git a/content/en/managed-agents/skills.md b/content/en/managed-agents/skills.md
index f45c4898bd..bcb83f8fc6 100644
--- a/content/en/managed-agents/skills.md
+++ b/content/en/managed-agents/skills.md
@@ -31,9 +31,24 @@ These examples omit the optional `display_name` field, so the skill's display na
     -F "files[]=@example_skill.zip"
   ```
 
-  ```bash CLI
-  ant skills create --file example_skill.zip
-  ```
+  <MultiFileExample language="cli" label="CLI">
+    ```bash CLI
+    ant apply skills/pr-summary
+    ```
+
+    <File filename="skills/pr-summary/SKILL.md">
+      ```markdown
+      ---
+      name: pr-summary
+      description: Summarize a pull request's changes and risks in the team's review format.
+      ---
+
+      # PR summary
+
+      List what changed, why, and anything a reviewer should look at closely, in three short sections.
+      ```
+    </File>
+  </MultiFileExample>
 
   ```python Python
   import anthropic
@@ -177,6 +192,10 @@ These examples omit the optional `display_name` field, so the skill's display na
   puts "Created skill: #{skill.id}"
   puts "Latest version: #{skill.latest_version_id}"
   ```
+
+  <ForLanguage tab="CLI">
+    [`ant apply`](https://platform.claude.com/docs/en/cli-sdks-libraries/cli/apply) uploads the `skills/pr-summary` directory, prints the new skill's ID, and records it in `claude-lock.json`. Commit `claude-lock.json` so the next `ant apply` uploads your edits as a new version instead of creating a second skill.
+  </ForLanguage>
 </CodeGroup>
 
 To list, retrieve, delete, and version custom skills, see [Managing custom skills](https://platform.claude.com/docs/en/build-with-claude/skills-guide#managing-custom-skills). For the full request and response schemas, see the [Create Skill API reference](https://platform.claude.com/docs/en/api/skills/create). Skill bundles upload directly to the Skills API rather than through the [Files API](https://platform.claude.com/docs/en/build-with-claude/files).
diff --git a/content/en/managed-agents/vaults.md b/content/en/managed-agents/vaults.md
index 244f4b18bd..21ad498e77 100644
--- a/content/en/managed-agents/vaults.md
+++ b/content/en/managed-agents/vaults.md
@@ -673,7 +673,7 @@ The actual credential values you supply (`token`, `access_token`, `refresh_token
               injectionLocation: ManagedAgentsInjectionLocationParams::with(header: true),
           ),
       );
-      if ($envVarCredential->auth instanceof ManagedAgentsEnvironmentVariableAuthResponse) {
+      if ($envVarCredential->auth instanceof \Anthropic\Beta\Vaults\Credentials\ManagedAgentsEnvironmentVariableAuthResponse) {
           $injectionLocation = $envVarCredential->auth->injectionLocation;
           echo 'header: ' . json_encode($injectionLocation->header) . "\n"; // header: true
           echo 'body: ' . json_encode($injectionLocation->body) . "\n"; // body: false
diff --git a/content/en/models/opus-5/migration-guide.md b/content/en/models/opus-5/migration-guide.md
index 505663a8a4..4a69be0527 100644
--- a/content/en/models/opus-5/migration-guide.md
+++ b/content/en/models/opus-5/migration-guide.md
@@ -223,7 +223,7 @@ These are not required but will improve your experience:
 * Audit requests that disable thinking: `thinking: {type: "disabled"}` with effort `xhigh` or `max` returns a 400 error, enforced on each request. Re-enable thinking or lower the effort to `high` or below.
 * If you removed sampling parameters during the Opus 4.7 migration, no action is needed. If you re-added them with a 400-retry path, remove that retry path.
 * Re-evaluate your `effort` setting: run a fresh [effort](https://platform.claude.com/docs/en/build-with-claude/effort) sweep on your own evals rather than carrying over a setting tuned for Claude Opus 4.7. Test `low` and `medium` effort as cost and latency controls, and `max` effort where maximum capability matters more than token spend. If you run at `xhigh` or `max` effort, raise `max_tokens` to at least 64k as a starting point.
-* Remove any context-window beta header. The 1M context window is the default on the Claude API, Amazon Bedrock, Google Cloud, and Microsoft Foundry.
+* Remove any context-window beta header. The 1M context window is the default on the Claude API, Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry.
 * If you rebuild conversation history to update instructions, consider switching to a mid-conversation system message to preserve prompt cache hits.
 * Verify your stop-reason handling reads `stop_details` on refusals (available since Claude Opus 4.7; now publicly documented), and consider `fallbacks: "default"` (beta) to re-run refused requests on a recommended fallback model automatically.
 * Review prompts near the caching minimum: prompts of 512 tokens or more can now create cache entries.
diff --git a/content/en/models/opus-5/overview.md b/content/en/models/opus-5/overview.md
index 1fd95ba551..975e8ed83d 100644
--- a/content/en/models/opus-5/overview.md
+++ b/content/en/models/opus-5/overview.md
@@ -47,6 +47,7 @@ Claude Opus 5 is a step-change improvement over Claude Opus 4.8, with the larges
 | [Amazon Bedrock](https://platform.claude.com/docs/en/build-with-claude/claude-in-amazon-bedrock)       | `anthropic.claude-opus-5` |
 | [Google Cloud](https://platform.claude.com/docs/en/build-with-claude/claude-on-vertex-ai)              | `claude-opus-5`           |
 | [Microsoft Foundry](https://platform.claude.com/docs/en/build-with-claude/claude-in-microsoft-foundry) | `claude-opus-5`           |
+| [Claude Platform on AWS](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws) | `claude-opus-5`           |
 
 ### Pricing
 
@@ -76,12 +77,12 @@ Claude Opus 5 is a step-change improvement over Claude Opus 4.8, with the larges
 
 ### Availability
 
-| Feature                                                                       | Value                                                                                                                                                                                                                                                                                                           |
-| :---------------------------------------------------------------------------- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| [Status](https://platform.claude.com/docs/en/about-claude/model-deprecations) | Active (latest)                                                                                                                                                                                                                                                                                                 |
-| Released                                                                      | July 24, 2026                                                                                                                                                                                                                                                                                                   |
-| Retirement                                                                    | Not sooner than July 24, 2027                                                                                                                                                                                                                                                                                   |
-| Platforms                                                                     | Claude API, [Amazon Bedrock](https://platform.claude.com/docs/en/build-with-claude/claude-in-amazon-bedrock), [Google Cloud](https://platform.claude.com/docs/en/build-with-claude/claude-on-vertex-ai), [Microsoft Foundry](https://platform.claude.com/docs/en/build-with-claude/claude-in-microsoft-foundry) |
+| Feature                                                                       | Value                                                                                                                                                                                                                                                                                                                                                                                                                   |
+| :---------------------------------------------------------------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| [Status](https://platform.claude.com/docs/en/about-claude/model-deprecations) | Active (latest)                                                                                                                                                                                                                                                                                                                                                                                                         |
+| Released                                                                      | July 24, 2026                                                                                                                                                                                                                                                                                                                                                                                                           |
+| Retirement                                                                    | Not sooner than July 24, 2027                                                                                                                                                                                                                                                                                                                                                                                           |
+| Platforms                                                                     | Claude API, [Amazon Bedrock](https://platform.claude.com/docs/en/build-with-claude/claude-in-amazon-bedrock), [Google Cloud](https://platform.claude.com/docs/en/build-with-claude/claude-on-vertex-ai), [Microsoft Foundry](https://platform.claude.com/docs/en/build-with-claude/claude-in-microsoft-foundry), [Claude Platform on AWS](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws) |
 
 ## Good to know
 
diff --git a/content/en/models/overview.md b/content/en/models/overview.md
index eb44b1b1a5..ed8dc5e5d4 100644
--- a/content/en/models/overview.md
+++ b/content/en/models/overview.md
@@ -42,7 +42,7 @@ If you're unsure which model to use, start with [Claude Opus 5](https://platform
 | [Amazon Bedrock ID](https://platform.claude.com/docs/en/build-with-claude/claude-in-amazon-bedrock)       | `anthropic.claude-fable-5-1`                                                      | `anthropic.claude-opus-5`                                                   | `anthropic.claude-sonnet-5`                                                     | `anthropic.claude-haiku-4-5`                                                      |
 | [Google Cloud ID](https://platform.claude.com/docs/en/build-with-claude/claude-on-vertex-ai)              | `claude-fable-5-1`                                                                | `claude-opus-5`                                                             | `claude-sonnet-5`                                                               | `claude-haiku-4-5@20251001`                                                       |
 | [Microsoft Foundry ID](https://platform.claude.com/docs/en/build-with-claude/claude-in-microsoft-foundry) | `claude-fable-5-1`                                                                | `claude-opus-5`                                                             | `claude-sonnet-5`                                                               | `claude-haiku-4-5`                                                                |
-| [Claude Platform on AWS ID](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws) | `claude-fable-5-1`                                                                | —                                                                           | `claude-sonnet-5`                                                               | `claude-haiku-4-5`                                                                |
+| [Claude Platform on AWS ID](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws) | `claude-fable-5-1`                                                                | `claude-opus-5`                                                             | `claude-sonnet-5`                                                               | `claude-haiku-4-5`                                                                |
 
 * **Comparative latency:** Relative to the current lineup. Actual latency depends on prompt length, output length, and thinking effort.
 * **Pricing:** Base price per million tokens. Batch API requests are 50% off; prompt cache reads cost 10% of the base input price (2.5% on Claude Fable 5.1 and Claude Mythos 5.1). See Pricing for cache writes, long-context, and per-platform pricing.
diff --git a/content/en/models/sonnet-5/migration-guide.md b/content/en/models/sonnet-5/migration-guide.md
index 493c5d5c8a..f0b412e7a5 100644
--- a/content/en/models/sonnet-5/migration-guide.md
+++ b/content/en/models/sonnet-5/migration-guide.md
@@ -144,10 +144,13 @@ Items 4 and 5 in the following list are breaking changes. `max_tokens` remains a
 
          // The response contains summarized thinking blocks and text blocks
          for (const block of response.content) {
-           if (block.type === "thinking") {
-             console.log(`\nThinking summary: ${block.thinking}`);
-           } else if (block.type === "text") {
-             console.log(`\nResponse: ${block.text}`);
+           switch (block.type) {
+             case "thinking":
+               console.log(`\nThinking summary: ${block.thinking}`);
+               break;
+             case "text":
+               console.log(`\nResponse: ${block.text}`);
+               break;
            }
          }
          ```
@@ -255,6 +258,9 @@ Items 4 and 5 in the following list are breaking changes. `max_tokens` remains a
          ```
 
          ```php PHP
+         use Anthropic\Messages\TextBlock;
+         use Anthropic\Messages\ThinkingBlock;
+
          $client = new Client();
 
          $response = $client->messages->create(
@@ -272,9 +278,9 @@ Items 4 and 5 in the following list are breaking changes. `max_tokens` remains a
 
          // The response contains summarized thinking blocks and text blocks
          foreach ($response->content as $block) {
-             echo match ($block->type) {
-                 'thinking' => "\nThinking summary: {$block->thinking}",
-                 'text' => "\nResponse: {$block->text}",
+             echo match (true) {
+                 $block instanceof ThinkingBlock => "\nThinking summary: {$block->thinking}",
+                 $block instanceof TextBlock => "\nResponse: {$block->text}",
                  default => '',
              };
          }
@@ -299,11 +305,10 @@ Items 4 and 5 in the following list are breaking changes. `max_tokens` remains a
          # The response contains summarized thinking blocks and text blocks
          response.content.each do |block|
            case block
-           in {type: :thinking, thinking:}
-             puts "\nThinking summary: #{thinking}"
-           in {type: :text, text:}
-             puts "\nResponse: #{text}"
-           else
+           when Anthropic::Models::ThinkingBlock
+             puts "\nThinking summary: #{block.thinking}"
+           when Anthropic::Models::TextBlock
+             puts "\nResponse: #{block.text}"
            end
          end
          ```
@@ -391,10 +396,13 @@ Items 4 and 5 in the following list are breaking changes. `max_tokens` remains a
 
          // The response contains summarized thinking blocks and text blocks
          for (const block of response.content) {
-           if (block.type === "thinking") {
-             console.log(`\nThinking summary: ${block.thinking}`);
-           } else if (block.type === "text") {
-             console.log(`\nResponse: ${block.text}`);
+           switch (block.type) {
+             case "thinking":
+               console.log(`\nThinking summary: ${block.thinking}`);
+               break;
+             case "text":
+               console.log(`\nResponse: ${block.text}`);
+               break;
            }
          }
          ```
@@ -503,9 +511,9 @@ Items 4 and 5 in the following list are breaking changes. `max_tokens` remains a
 
          // The response contains summarized thinking blocks and text blocks
          foreach ($response->content as $block) {
-             echo match ($block->type) {
-                 'thinking' => "\nThinking summary: {$block->thinking}",
-                 'text' => "\nResponse: {$block->text}",
+             echo match (true) {
+                 $block instanceof \Anthropic\Messages\ThinkingBlock => "\nThinking summary: {$block->thinking}",
+                 $block instanceof \Anthropic\Messages\TextBlock => "\nResponse: {$block->text}",
                  default => '',
              };
          }
@@ -532,11 +540,10 @@ Items 4 and 5 in the following list are breaking changes. `max_tokens` remains a
          # The response contains summarized thinking blocks and text blocks
          response.content.each do |block|
            case block
-           in {type: :thinking, thinking:}
-             puts "\nThinking summary: #{thinking}"
-           in {type: :text, text:}
-             puts "\nResponse: #{text}"
-           else
+           when Anthropic::Models::ThinkingBlock
+             puts "\nThinking summary: #{block.thinking}"
+           when Anthropic::Models::TextBlock
+             puts "\nResponse: #{block.text}"
            end
          end
          ```
diff --git a/content/en/test-and-evaluate/develop-tests.md b/content/en/test-and-evaluate/develop-tests.md
index c394b699d1..f0bd5b2736 100644
--- a/content/en/test-and-evaluate/develop-tests.md
+++ b/content/en/test-and-evaluate/develop-tests.md
@@ -418,7 +418,7 @@ Most use cases need multidimensional evaluation along several success criteria.
       {
           $text = '';
           foreach ($message->content as $block) {
-              if ($block instanceof TextBlock) {
+              if ($block instanceof \Anthropic\Messages\TextBlock) {
                   $text .= $block->text;
               }
           }
@@ -1074,7 +1074,7 @@ Most use cases need multidimensional evaluation along several success criteria.
       {
           $text = '';
           foreach ($message->content as $block) {
-              if ($block instanceof TextBlock) {
+              if ($block instanceof \Anthropic\Messages\TextBlock) {
                   $text .= $block->text;
               }
           }
@@ -1556,7 +1556,7 @@ Most use cases need multidimensional evaluation along several success criteria.
       {
           $text = '';
           foreach ($message->content as $block) {
-              if ($block instanceof TextBlock) {
+              if ($block instanceof \Anthropic\Messages\TextBlock) {
                   $text .= $block->text;
               }
           }
@@ -2093,7 +2093,7 @@ Most use cases need multidimensional evaluation along several success criteria.
       {
           $text = '';
           foreach ($message->content as $block) {
-              if ($block instanceof TextBlock) {
+              if ($block instanceof \Anthropic\Messages\TextBlock) {
                   $text .= $block->text;
               }
           }
@@ -2726,7 +2726,7 @@ Most use cases need multidimensional evaluation along several success criteria.
       {
           $text = '';
           foreach ($message->content as $block) {
-              if ($block instanceof TextBlock) {
+              if ($block instanceof \Anthropic\Messages\TextBlock) {
                   $text .= $block->text;
               }
           }
@@ -3229,7 +3229,7 @@ When deciding which method to use to grade evals, choose the fastest, most relia
     {
         $text = '';
         foreach ($message->content as $block) {
-            if ($block instanceof TextBlock) {
+            if ($block instanceof \Anthropic\Messages\TextBlock) {
                 $text .= $block->text;
             }
         }
diff --git a/content/support/10310342-how-do-i-log-out-of-all-active-sessions.md b/content/support/10310342-how-do-i-log-out-of-all-active-sessions.md
index b7fc3fba41..cea58f1b1b 100644
--- a/content/support/10310342-how-do-i-log-out-of-all-active-sessions.md
+++ b/content/support/10310342-how-do-i-log-out-of-all-active-sessions.md
@@ -38,7 +38,7 @@ To regain access to your account on any device, you'll need to authenticate agai
 
 If you used your Claude account to authenticate into Claude Code, you can manage your authorization tokens by navigating to **[Settings > Claude Code](https://claude.ai/settings/claude-code)**. To remove a token and log out of Claude Code, click the trash can icon.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1608263923/b4fa7d6f6f08f2adffb4ea63bc58/image+%287%29.png?expires=1789674300&amp;signature=58a11a9a1722d1484094c7cb6d2107108627af47c491a9cf38400c5eb9f59643&amp;req=dSYnHst4nohdWvMW1HO4zVuHihX70WO4AQofdwM8qVdaag2Y6%2B0DUofcl0lU%0AYUd8icZwineuY5ciWa0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1608263923/b4fa7d6f6f08f2adffb4ea63bc58/image+%287%29.png?expires=1789710300&amp;signature=806cc346c5add654bab694c5bd5409dbb33fd8df592f4a7aa59059dca489b6d8&amp;req=dSYnHst4nohdWvMW1HO4zVuHihX612e4AQofdwM8qVcn163rN0x6mYXsmKEI%0Aegjx0r0VQco01jscoEc%3D%0A)
 
 ## Unable to access your account?
 
diff --git a/content/support/10366376-how-can-i-delete-my-claude-console-account.md b/content/support/10366376-how-can-i-delete-my-claude-console-account.md
index 5f9b6dacca..bc8bd0d3b8 100644
--- a/content/support/10366376-how-can-i-delete-my-claude-console-account.md
+++ b/content/support/10366376-how-can-i-delete-my-claude-console-account.md
@@ -36,7 +36,7 @@ If you followed the steps above to delete your Console organization but want to
 
 If you have an outstanding balance, you will see a message during the deletion flow that prompts you to pay the balance first by routing you to [Settings > Billing](https://platform.claude.com/settings/billing).
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1973957766/5c2dd87c0818a0400099a833c9b3/4cc3130a-f696-4967-9fe3-e5623c6f02bd?expires=1789674300&amp;signature=bf5167ca67489b78f615f14dd16f9c8525535b3683bcafd94752f5e49710d495&amp;req=dSkgFcB7moZZX%2FMW1HO4zbYXUB5kW%2BAYFZRyvJPpBZ8exOxs39qr3y6pKeOk%0AAf%2BRvk07p2HR3TxU7gY%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1973957766/5c2dd87c0818a0400099a833c9b3/4cc3130a-f696-4967-9fe3-e5623c6f02bd?expires=1789710300&amp;signature=0b625b2e466181f42647bcebee531a421ce48558defc156942be2d19b58c88b8&amp;req=dSkgFcB7moZZX%2FMW1HO4zbYXUB5lXeQYFZRyvJPpBZ9qTEtGdLWy1KcJ6JOh%0AtvGSm%2F215mR1USNBvBw%3D%0A)
 
 You must pay this outstanding balance before you’re able to move forward with the deletion process.
 
@@ -44,6 +44,6 @@ You must pay this outstanding balance before you’re able to move forward with
 
 There are some scenarios where you will need to contact our team to delete your account. If this is the case, it will be noted when you try to delete your organization:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1973957765/19dda72a40db95d78c00c27a1a1c/6ce89be6-93ce-409c-bbea-d34be09db348?expires=1789674300&amp;signature=f82b23c1838785f4bf7f67aed0a0b8f4ee2ab072231df3550eab362ed84f90b4&amp;req=dSkgFcB7moZZXPMW1HO4zRW12%2BzLf6D6ZxDZGlqR6GjbEGDpjQSFJ6%2BUXIuv%0A%2Bx%2BI%2FEFyh8ZcndUsYxw%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1973957765/19dda72a40db95d78c00c27a1a1c/6ce89be6-93ce-409c-bbea-d34be09db348?expires=1789710300&amp;signature=cce51ddaa350561d631a5a57058e28fbfe098fc369084424f28e53b2d48bdc81&amp;req=dSkgFcB7moZZXPMW1HO4zRW12%2BzKeaT6ZxDZGlqR6Gjiq%2BrC0kHDdOduW%2B%2Fi%0A9Qssf8p9i445fETxP7Q%3D%0A)
 
 If you are seeing this message, this indicates that your Console organization cannot be deleted via the self-service pathway.
\ No newline at end of file
diff --git a/content/support/10504844-manage-user-feedback-settings-on-team-and-enterprise-plans.md b/content/support/10504844-manage-user-feedback-settings-on-team-and-enterprise-plans.md
index 71ba3395d1..cc1bc12856 100644
--- a/content/support/10504844-manage-user-feedback-settings-on-team-and-enterprise-plans.md
+++ b/content/support/10504844-manage-user-feedback-settings-on-team-and-enterprise-plans.md
@@ -6,6 +6,6 @@ As a Primary Owner or Owner of a Team or Enterprise plan, you can manage the abi
 
 2. Use the toggle to change the **Rate chats** setting for your organization:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2058292603/75752add0bed6a9f3ab217f01708/CleanShot%2B2026-02-12%2Bat%2B08_55_14-402x.png?expires=1789674300&amp;signature=45e4491cc72b733c5dda164f860e4a7e45354c09b162fd9065c0c4626efe913f&amp;req=diAiHst3n4dfWvMW1HO4zYGm8i4aF6zP085gFtEpvcQflHyrgYT49X8HXMas%0AVuN%2Fj%2FSf2IuhntwnNqk%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2058292603/75752add0bed6a9f3ab217f01708/CleanShot%2B2026-02-12%2Bat%2B08_55_14-402x.png?expires=1789710300&amp;signature=6d32702532c0a0d1736d55bbb74175526851bf0e6336984a03a9a607a005b7aa&amp;req=diAiHst3n4dfWvMW1HO4zYGm8i4bEajP085gFtEpvcQxkSOW%2FvLMV7%2BjX2go%0AX4dtelbTQgJwuFweVEg%3D%0A)
 
 More information on how Anthropic collects, uses, and stores feedback data can be found in our Privacy Center: **[How long do you store my organization’s data?](https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data)**
\ No newline at end of file
diff --git a/content/support/10504853-manage-user-feedback-settings-on-claude-console.md b/content/support/10504853-manage-user-feedback-settings-on-claude-console.md
index 578b757f6f..a798a9121a 100644
--- a/content/support/10504853-manage-user-feedback-settings-on-claude-console.md
+++ b/content/support/10504853-manage-user-feedback-settings-on-claude-console.md
@@ -8,6 +8,6 @@ To manage feedback for your Console organization:
 
 2. Toggle the feedback switch on or off.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1729186182/ebf4032a12a8c56959ca927726ce/Screenshot+2025-09-16+at+12_32_31%E2%80%AFPM.png?expires=1789674300&amp;signature=5bb9be57f251fe6ad898a39a7c87d14114f8668437e67ed40e176e8c871dd58a&amp;req=dSclH8h2m4BXW%2FMW1HO4zVpN5H4bXmxGJ%2FadMup7FQekYjSXdG3FqWOiQOzc%0A%2BBhdgJ2rUzsYyqXjSWA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1729186182/ebf4032a12a8c56959ca927726ce/Screenshot+2025-09-16+at+12_32_31%E2%80%AFPM.png?expires=1789710300&amp;signature=c506e0749f6d7c64d510d1a9de10d99094bbc3c5f0c19c1dfc37f573fe99c366&amp;req=dSclH8h2m4BXW%2FMW1HO4zVpN5H4aWGhGJ%2FadMup7FQd7ZLdR0Y6hxmaIupL0%0AtyQUSUhvMbn68Acgbks%3D%0A)
 
 More information on how Anthropic collects, uses, and stores feedback data can be found in our Privacy Center: [How long do you store my organization’s data?](https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data)
\ No newline at end of file
diff --git a/content/support/10593882-share-and-unshare-chats.md b/content/support/10593882-share-and-unshare-chats.md
index 5e39924d44..c52656d624 100644
--- a/content/support/10593882-share-and-unshare-chats.md
+++ b/content/support/10593882-share-and-unshare-chats.md
@@ -38,12 +38,12 @@ To unshare a chat:
 
 Users on free, Pro, or Max plans can review a log of shared chats by navigating to **[Settings > Privacy](https://claude.ai/settings/data-privacy-controls)**. Find the **Privacy settings** section and click “Manage” next to **Shared chats:**
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1921669913/7cc7be48cfc7a18f9f469d6cd83c/CleanShot+2026-01-08+at+10_20_43%402x.png?expires=1789674300&amp;signature=38af6310d99e1adac157fe0b6d4711c6f8d8e6392ac2e6d533026ffe8bd5c0ba&amp;req=dSklF894lIheWvMW1HO4zWn5HzobZUFoc9cNIYuX0GFjhFAfgqgthfe03%2FkK%0A%2BFHH5WE1HIUpyDPdT3s%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1921669913/7cc7be48cfc7a18f9f469d6cd83c/CleanShot+2026-01-08+at+10_20_43%402x.png?expires=1789710300&amp;signature=89fadbd00b23da810351c62d061bd04099381f6c5eab752b317fdaefcfe57a68&amp;req=dSklF894lIheWvMW1HO4zWn5HzoaY0Voc9cNIYuX0GEomNBTMGyqhiGJK6uU%0AIm3Krv%2BiLXQhN6A1wbQ%3D%0A)
 
 This will open a **Shared chats** modal listing the title, date shared, and link to each chat, allowing you to easily review and access all your previously-shared content. From here, you also have the option to click “Unshare” next to each listed chat to revoke access to the last snapshot you shared:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1624243810/e6fe1d262597446c7fe21dff9f10/AD_4nXdW-GhByF8uKV7fCq9lTbkVB91FglSL6TSyXAOUk_MLcTV9YsEMBMkm9rgm1oXqv0k3sJh1JhlzZP6tHVkKbDJJ71pDRRtM3aVNG64MDuKDIzgmknh-XDZdNa7biTsTdwGoPr5GRg?expires=1789674300&amp;signature=2ba462c904dcb19df057ea6347a299d8c3f4cce42896643323b06c26f0ab6c7d&amp;req=dSYlEst6noleWfMW1HO4ze44eC5nkxY9guvTv9woD7aBXmiVTuDUYyZ1rmh2%0AmI2I0O24vdf5X8J5mgg%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1624243810/e6fe1d262597446c7fe21dff9f10/AD_4nXdW-GhByF8uKV7fCq9lTbkVB91FglSL6TSyXAOUk_MLcTV9YsEMBMkm9rgm1oXqv0k3sJh1JhlzZP6tHVkKbDJJ71pDRRtM3aVNG64MDuKDIzgmknh-XDZdNa7biTsTdwGoPr5GRg?expires=1789710300&amp;signature=b0db7fa899483c1282e34b391b5d6c68b71d4e64ddc10113eab36d553e8e9a12&amp;req=dSYlEst6noleWfMW1HO4ze44eC5mlRI9guvTv9woD7bhWrJTP%2BTL5Oidi8h6%0AItESgjPBxJSylpGFzmQ%3D%0A)
 
 If you don’t have any shared chat snapshots, the **Shared chats** modal will show “No shared content found”:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1624243808/b025db8e598f0c88fb16d83d48d5/AD_4nXeUwCKnmFzzrjMHhfr5By4zk5pJlkEn3wbJ8-aNfu13Yl99IjBywpqPx9G07QRzpH1EwRY7uG7Q9m9fib98Gql1cIV7XwUCTzEgBNu79Ey8tCOS5CEVmwveIcEOxJ4fonBhe3g9MA?expires=1789674300&amp;signature=d48256c90eeb8f647cc90cfff2f82099d3879e5e4249f13543a723d7810d9141&amp;req=dSYlEst6nolfUfMW1HO4zdaFncxyho2yDeZsm0Gz1HuKFXpR6afEmFlx%2FBwM%0AdMJl3q6ObUl7vSqf%2FY8%3D%0A)
\ No newline at end of file
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1624243808/b025db8e598f0c88fb16d83d48d5/AD_4nXeUwCKnmFzzrjMHhfr5By4zk5pJlkEn3wbJ8-aNfu13Yl99IjBywpqPx9G07QRzpH1EwRY7uG7Q9m9fib98Gql1cIV7XwUCTzEgBNu79Ey8tCOS5CEVmwveIcEOxJ4fonBhe3g9MA?expires=1789710300&amp;signature=8b2b16ecf2084f3ca838c048069afff77e5fef3e3cbcf741397cd3d3cb1b6cd0&amp;req=dSYlEst6nolfUfMW1HO4zdaFncxzgImyDeZsm0Gz1HsFuSLy6UasO2vLtxoB%0Ai%2F6wQfFAxTQtOJbFWFM%3D%0A)
\ No newline at end of file
diff --git a/content/support/10949351-getting-started-with-local-mcp-servers-on-claude-desktop.md b/content/support/10949351-getting-started-with-local-mcp-servers-on-claude-desktop.md
index 002b92cfdd..017574887d 100644
--- a/content/support/10949351-getting-started-with-local-mcp-servers-on-claude-desktop.md
+++ b/content/support/10949351-getting-started-with-local-mcp-servers-on-claude-desktop.md
@@ -48,7 +48,7 @@ for specific instructions.
 
 Custom desktop extensions uploads allow Team and Enterprise plans to leverage organization-specific workflows that aren’t available in the public directory. After creating a custom desktop extension, Owners and Primary Owners can navigate to Settings > Extensions within Claude Desktop and click “Advanced settings” to access the **Extension Developer** section:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1681607607/ba6e379d2769d190f0970a0adaed/AD_4nXd4aZkqjJFpiXMPF28Pih7HmSJ9pPsnoWAfVgiLdFRFiTkO92YtXteIjvDHaPl7T0tjfpRTBOlyrMbQ_aciCNDgfIuEvV3szmKvt72x5O51DMSClXOYWk1JIRIzylwkj3joXqZcLw?expires=1789674300&amp;signature=522af7e971c8e7837f0981637dae80a9b87917d41372d571ade9b014b977ef9f&amp;req=dSYvF89%2BmodfXvMW1HO4zWbPxEl5MDkxHn9K2IaIG2IPJ%2Fu3CviZG9BMS1Hy%0Ad01T8%2BV2JP9uy0W8Ey0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1681607607/ba6e379d2769d190f0970a0adaed/AD_4nXd4aZkqjJFpiXMPF28Pih7HmSJ9pPsnoWAfVgiLdFRFiTkO92YtXteIjvDHaPl7T0tjfpRTBOlyrMbQ_aciCNDgfIuEvV3szmKvt72x5O51DMSClXOYWk1JIRIzylwkj3joXqZcLw?expires=1789710300&amp;signature=3fd100deaa273069454d2511502db3e1ff27e034e0cfee4902624172243b03d9&amp;req=dSYvF89%2BmodfXvMW1HO4zWbPxEl4Nj0xHn9K2IaIG2IALmLsfUa1qggiuwEN%0AFQ%2BnnGzfZBYUCH6K%2Flw%3D%0A)
 
 Click “Install Extension…” and select the .mcpb file. Follow the prompts to install and configure your custom desktop extension. For more in-depth information, please refer to our [desktop extension developer documentation](https://github.com/anthropics/mcpb).
 
diff --git a/content/support/11725453-set-up-the-claude-lti-in-canvas-by-instructure.md b/content/support/11725453-set-up-the-claude-lti-in-canvas-by-instructure.md
index a453d6b67a..7ad0f55e28 100644
--- a/content/support/11725453-set-up-the-claude-lti-in-canvas-by-instructure.md
+++ b/content/support/11725453-set-up-the-claude-lti-in-canvas-by-instructure.md
@@ -44,7 +44,7 @@ This article provides information on how to enable the Claude LTI integration in
 
 5. Click "Install" and refresh the course page.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1611422430/c8e0875feac1f2c7cb033be74fc9/AD_4nXfLU_bui3EXcCjQ0qm70HD97neqjGayKeDer_t76utlci8gZSUjYRhw6ZSOlDdqSEcwXBzd_shAh7pQEJ-8OoE0O21DM5coOgxmO_WD5hlwiuwtS2iYXcTavhIRyQT5zKFWvfn3NA?expires=1789674300&amp;signature=4541032788e663da907ad89498327d7b71617a62b1b920ebbf96e448471d729f&amp;req=dSYmF818n4VcWfMW1HO4zTEDauIYnPeCEv2ojHLMylbEQT%2BeSE8TQXEJDnda%0A%2FAAHtQP7NHgMju8oZHc%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1611422430/c8e0875feac1f2c7cb033be74fc9/AD_4nXfLU_bui3EXcCjQ0qm70HD97neqjGayKeDer_t76utlci8gZSUjYRhw6ZSOlDdqSEcwXBzd_shAh7pQEJ-8OoE0O21DM5coOgxmO_WD5hlwiuwtS2iYXcTavhIRyQT5zKFWvfn3NA?expires=1789710300&amp;signature=3f1194eb1ea786a97818663d226a379c23cb461b3df4a7e0152fe996d77d5dbc&amp;req=dSYmF818n4VcWfMW1HO4zTEDauIZmvOCEv2ojHLMylbem%2BkRrGcx3e9elMWU%0A9VHp2ULhnpLd5QHrXn0%3D%0A)
 
 ## Turn on the Claude LTI Integration in Claude for Education organization settings
 
diff --git a/content/support/11817273-use-claude-s-chat-search-and-memory-to-build-on-previous-context.md b/content/support/11817273-use-claude-s-chat-search-and-memory-to-build-on-previous-context.md
index da4cb219c4..a948e7658e 100644
--- a/content/support/11817273-use-claude-s-chat-search-and-memory-to-build-on-previous-context.md
+++ b/content/support/11817273-use-claude-s-chat-search-and-memory-to-build-on-previous-context.md
@@ -40,7 +40,7 @@ When Claude searches your previous chats, you will see this reflected in your cu
 
 Yes, navigate to **[Settings > Memory](https://claude.ai/new#settings/customize-memory)** and switch the toggle next to "Search and reference chats" off:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2533482439/4dee2d7b267f865205feefc8f4f3/cb60c334-d1e2-4828-a01d-dfb36bbaa7eb?expires=1789674300&amp;signature=37bef9837b021d09d1ee5bbbee8a40fb6f5d0465112ef2bbf05c03d98318652b&amp;req=diUkFc12n4VcUPMW1HO4zY9IRANqUtV0YNcz5nFaZkGBn69FBlkL8HJaH9It%0A9FmsBfaxKkKOimU%2FolY%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2533482439/4dee2d7b267f865205feefc8f4f3/cb60c334-d1e2-4828-a01d-dfb36bbaa7eb?expires=1789710300&amp;signature=4dd9c0e1ebce642bd83b7c4154c165a9da30bbee9815a930e2747db697f66ecf&amp;req=diUkFc12n4VcUPMW1HO4zY9IRANrVNF0YNcz5nFaZkFKqic7HQW9%2FaAtBfUR%0AM09rqoq1hxJLgGN5c%2Bg%3D%0A)
 
 ## Can I exclude a specific past chat from searches?
 
@@ -84,7 +84,7 @@ What Claude remembers from your chats is available when you hand it a task in Co
 
 You can toggle Claude’s memory on by navigating to **[Settings > Memory](https://claude.ai/new#settings/customize-memory)** and turning on **Generate memory from chats**:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2533482441/b5c806a8e3f68bf34c4a70724d38/d30be013-d099-4c93-99d1-23d404792f08?expires=1789674300&amp;signature=a91c543859b5f274aba72e39eeacacd593e1df12e74a42e9599db2d97cb1af74&amp;req=diUkFc12n4VbWPMW1HO4zRlYrpJr5VQvNshWSMEMw9cQwg8qET91DtWhWrSQ%0ANoDw4BebMtMFQG%2FpFIE%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2533482441/b5c806a8e3f68bf34c4a70724d38/d30be013-d099-4c93-99d1-23d404792f08?expires=1789710300&amp;signature=7592bbac6c4203c2cd74556d8e61d3070acd0d7b13a7e17d29b889edcc192c10&amp;req=diUkFc12n4VbWPMW1HO4zRlYrpJq41AvNshWSMEMw9fjm9JEAq04DH8vfmuO%0AISc5GKK2IwBkC4XVrUY%3D%0A)
 
 If you want to disable Claude’s memory, click the toggle and you'll see two options:
 
@@ -240,7 +240,7 @@ When Claude searches your previous chats, you will see this reflected in your cu
 
 Yes, navigate to **[Settings > Capabilities](https://claude.ai/settings/capabilities)** and find the **Preferences** section. Switch the toggle next to “Search and reference chats” off:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1719730889/3fafbf5ecaa0ae31d7d84a66229b/c25536c1-7433-4b94-a5e9-cd5acf97a4fd?expires=1789674300&amp;signature=be944da773ab227dd60afbe5458018c6a53082bd50f6d1122313992fc0e0d1f9&amp;req=dScmH859nYlXUPMW1HO4zRzXH1Y2JDXBJG68qZhl7839iyqTx%2BGHOt4lmhVy%0APzbOjdWNaWT2fOpx360%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1719730889/3fafbf5ecaa0ae31d7d84a66229b/c25536c1-7433-4b94-a5e9-cd5acf97a4fd?expires=1789710300&amp;signature=b48aeb2727b7f27c00179314113bc0399a7c07289f96132608c41e1f4b328075&amp;req=dScmH859nYlXUPMW1HO4zRzXH1Y3IjHBJG68qZhl7813uBL59dP1HpE9DSSr%0AK05R7HGtLCqxSSo4v80%3D%0A)
 
 ### Can I exclude a specific past chat from searches?
 
@@ -248,7 +248,7 @@ Incognito chats are available to all Claude users (free, Pro, Max, Team, and Ent
 
 When starting a new chat with Claude outside of a project, you'll see a ghost icon in the upper right corner of your screen:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1719730893/9549b21954e0070ceb6b85231fd5/88e59234-6fc2-4229-84fe-733b33efff26?expires=1789674300&amp;signature=e93939cc06e6ead16eae9f8f4036180831491f904733498dad1e6c42d7d1b91a&amp;req=dScmH859nYlWWvMW1HO4za54sKpqO4K4XDpzhlKsgjMwcu4aqcddrTZkUBgi%0AXMRvvQER8vft3RZ9cqI%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1719730893/9549b21954e0070ceb6b85231fd5/88e59234-6fc2-4229-84fe-733b33efff26?expires=1789710300&amp;signature=56ba40e4e291972016ad66d802134c6cdbb797296310b1a98f92d6ac7286c800&amp;req=dScmH859nYlWWvMW1HO4za54sKprPYa4XDpzhlKsgjMuOAfnUUbj44WOgk8x%0AoTGU1pnO0szn3KcB9TQ%3D%0A)
 
 Clicking the ghost icon will open an incognito chat, creating a temporary conversation that isn’t saved to your chat history. Claude won’t pull information from incognito chats when searching previous conversations.
 
@@ -280,7 +280,7 @@ Each project has its own separate memory space and dedicated project summary, so
 
 You can toggle Claude’s memory on by navigating to **[Settings > Capabilities](https://claude.ai/settings/capabilities)**:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1719730892/62f9f2b68d675a8e33393f06024f/89198978-192f-4c52-915d-5294b16f3fe1?expires=1789674300&amp;signature=ec47618afb41ce82336d6bba857640c3b743480a759f987c7634f7bdf77def24&amp;req=dScmH859nYlWW%2FMW1HO4zTD5MMjgcOBGBq9N9dRTKYcBgHM9JVkozcnRjU5o%0ARQrM5OXiXdiyy%2F341nk%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1719730892/62f9f2b68d675a8e33393f06024f/89198978-192f-4c52-915d-5294b16f3fe1?expires=1789710300&amp;signature=bc7d9eee9b2de6caabf1eb0db5260c4d89d71475e5590ba563d343956faed866&amp;req=dScmH859nYlWW%2FMW1HO4zTD5MMjhduRGBq9N9dRTKYeCPFi%2B7aXfJIuj0scr%0AiJTgRUa%2FBHvG9%2Fnx%2FzM%3D%0A)
 
 If you want to disable Claude’s memory, click the toggle to see two options:
 
diff --git a/content/support/11818288-why-am-i-being-asked-to-verify-my-payment-method.md b/content/support/11818288-why-am-i-being-asked-to-verify-my-payment-method.md
index dfd3c92eb2..f0f8ebb651 100644
--- a/content/support/11818288-why-am-i-being-asked-to-verify-my-payment-method.md
+++ b/content/support/11818288-why-am-i-being-asked-to-verify-my-payment-method.md
@@ -2,7 +2,7 @@
 
 If you see the following pop-up when you log in to your Claude account, you’ll need to click the “Verify now” button to verify your payment method:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1631413861/42c3b13d7fc44a11a88ec2b9cd03/AD_4nXeMx8QXpeZZCkfAnVSwx8KZ9n4Vr2rvPdQddyE6ZNxch__F6ZqFs1G4ZmU52Wvb7gRlwRqquTLdw8IQv-gICDyP-MXqiQK_Oe7gX3SKsCKKt2IEpMx4qDeMeeZufMaJfv16XgOH5g?expires=1789674300&amp;signature=a60323def47ead71d6c524a4f1243601f4eee4da1db9e1a4d9bae775f3ddea2f&amp;req=dSYkF81%2FnolZWPMW1HO4zf7%2BjE3o74Txn6MrEicvimA%2FDOnhr28qgdblfGNK%0AJSNR9zEGec5Jpk%2B6mDg%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1631413861/42c3b13d7fc44a11a88ec2b9cd03/AD_4nXeMx8QXpeZZCkfAnVSwx8KZ9n4Vr2rvPdQddyE6ZNxch__F6ZqFs1G4ZmU52Wvb7gRlwRqquTLdw8IQv-gICDyP-MXqiQK_Oe7gX3SKsCKKt2IEpMx4qDeMeeZufMaJfv16XgOH5g?expires=1789710300&amp;signature=7447dd43977156543fca69d54b2ae9c059a6a8ec658dc854952898dc0bcb8624&amp;req=dSYkF81%2FnolZWPMW1HO4zf7%2BjE3p6YDxn6MrEicvimAplWnASepiqyXVd1nc%0A79u%2BnUQefmxD%2FTW0wSA%3D%0A)
 
 ## What happens if I click “Remind me later?”
 
diff --git a/content/support/11869629-use-claude-with-android-apps.md b/content/support/11869629-use-claude-with-android-apps.md
index 310306cd25..35610b27d1 100644
--- a/content/support/11869629-use-claude-with-android-apps.md
+++ b/content/support/11869629-use-claude-with-android-apps.md
@@ -222,7 +222,7 @@ Permission requirements vary by feature:
 
 For features requiring permissions (like location or calendar access), Claude will request permission contextually with clear explanations of why the access is needed. You’ll be prompted to approve the action with three options: Allow once, Always allow, or Don't allow.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1707351614/ccb910e4b87b1e96ad9a11bbd835/b57b2130-d8d6-4499-89f6-6c12de236fd4?expires=1789674300&amp;signature=b6464e65b92e422bd86315f80d4418100ced33e9e973646dae671e9118c1813a&amp;req=dScnEcp7nIdeXfMW1HO4zQe5GlaJ3CH3S5x65TIld%2FCZKDbkfbe1AADyM1LC%0AuLDKyTASR6UGrRmCzPY%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1707351614/ccb910e4b87b1e96ad9a11bbd835/b57b2130-d8d6-4499-89f6-6c12de236fd4?expires=1789710300&amp;signature=549f1b937ebf96ff1a9e8b2f5865e8391073bf312bf00ac3d13ccaba9902083a&amp;req=dScnEcp7nIdeXfMW1HO4zQe5GlaI2iX3S5x65TIld%2FAmlzS7xyzbz88B7YQD%0A5Zs5a%2BQSEqSIl79musQ%3D%0A)
 
 These permissions can be managed at any time in your device settings by going to Settings > Apps > Claude > Permissions. Click into each permission listed under **Allowed** and **Not allowed** to make changes. You can toggle between “Allow only while using the app” or “Ask every time” to change Claude’s access, or remove permissions by choosing “Don’t allow.” Claude will only request permissions if needed for specific features, and you can always choose to decline while still using other capabilities.
 
diff --git a/content/support/12005970-manage-usage-credits-for-team-and-seat-based-enterprise-plans.md b/content/support/12005970-manage-usage-credits-for-team-and-seat-based-enterprise-plans.md
index a790cb12bb..d6e85e39ad 100644
--- a/content/support/12005970-manage-usage-credits-for-team-and-seat-based-enterprise-plans.md
+++ b/content/support/12005970-manage-usage-credits-for-team-and-seat-based-enterprise-plans.md
@@ -70,7 +70,7 @@ After navigating to **[Organization settings > Usage](https://claude.ai/admin-se
 
 The **Usage and spend limits** section will show the current limit (if any) or **Unlimited**. Clicking on "Adjust limit" opens a modal where you can either input an amount and click "Set spend limit," or click "Set to unlimited" to remove the organization-wide monthly spend limit.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149347604/936ac4eb025d3ef1f00c3b8a26b0/image.png?expires=1789674300&amp;signature=561ddaae3fa92b6f9387ec4d24b6b5cf7fad859a93c422912690123c7734a5af&amp;req=diEjH8p6modfXfMW1HO4zQHwg6jRkSql6DwhVVpk1mBE0FWGRH2ZnRdis86a%0AQb2yvopa1XhZCoHS0P8%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149347604/936ac4eb025d3ef1f00c3b8a26b0/image.png?expires=1789710300&amp;signature=9caf0c6acf01753ef424063aabeb10c5bb5210cb1bbf22b201445e07b89965b9&amp;req=diEjH8p6modfXfMW1HO4zQHwg6jQly6l6DwhVVpk1mC4krOrXE9vdVArLZxk%0ARo2tcs4mvW4iI1mpyoY%3D%0A)
 
 Changes to your organization’s overall spend limit go into effect immediately.
 
@@ -78,11 +78,11 @@ Changes to your organization’s overall spend limit go into effect immediately.
 
 Owners and Primary Owners on **seat-based Enterprise plans only** can set spend limits that apply to all users within a specific seat tier.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149351600/c5b979c366ac2738f60ea84e85b3/CleanShot+2026-03-10+at+15_37_41%402x.png?expires=1789674300&amp;signature=016e970d82bb5ac11833289ba558099e37a5d401da3a7e1cff202d5b839998cc&amp;req=diEjH8p7nIdfWfMW1HO4zYnqMIySJHSK0wfO62ivdG9ng7JNN%2FvsSukuNDXK%0A3NiHvPSA7ha%2F%2FXOY%2FhM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149351600/c5b979c366ac2738f60ea84e85b3/CleanShot+2026-03-10+at+15_37_41%402x.png?expires=1789710300&amp;signature=4755849c336958864969fa039964b1de217749d7073354742c101a8bb0a58db6&amp;req=diEjH8p7nIdfWfMW1HO4zYnqMIyTInCK0wfO62ivdG9HisG23pk%2FwqDXEEDO%0AgbhfJXp7GOst0FT95fo%3D%0A)
 
 Select the "By group" tab to see **Standard seats** and **Premium seats** groups. Click the "..." icon next to the current limit, then "Edit limit." This opens a modal where you can either select "Set dollar amount" and input an amount, or click "Unlimited" to remove the limit for that seat type. Click "Set limit" to save your changes.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149362056/44993661ca2db771fe924d0346f6/image.png?expires=1789674300&amp;signature=dd63a5d3a39dd6225d6a2b417cfbabe16dadbcc7cf5273d8848c5e7cfaaf130f&amp;req=diEjH8p4n4FaX%2FMW1HO4zRzvvIwNd0lFq7nEDCGq9G6dliW%2F637iUkzS32u0%0A0Hy3QgkJzX3zj8ejz0o%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149362056/44993661ca2db771fe924d0346f6/image.png?expires=1789710300&amp;signature=d3e408266d8236f52c06b093d64790837ae0fe46f642619a17b8635d8bcbd441&amp;req=diEjH8p4n4FaX%2FMW1HO4zRzvvIwMcU1Fq7nEDCGq9G7SFcUECZ2npsJiYDjU%0AMnYfqSzL9T0UZyrA5zA%3D%0A)
 
 ---
 
@@ -90,11 +90,11 @@ Select the "By group" tab to see **Standard seats** and **Premium seats** groups
 
 Owners and Primary Owners can also set individual monthly spend limits for each member by finding **Spend limits by user** and clicking the "..." button next to the user, then "Edit limit."
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149370853/db66f5cd03683b9cc119d0dcd6b8/image.png?expires=1789674300&amp;signature=52ddab29dd5dde20addc32639dffff5c733b9d64e704d4933e2e5259f26cd6a0&amp;req=diEjH8p5nYlaWvMW1HO4zaPdGQ5RUitFe9HwvwG7ubjKqJvMkh3XDfShY2DS%0A1RniziwsJv9Xyr5CMZ8%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149370853/db66f5cd03683b9cc119d0dcd6b8/image.png?expires=1789710300&amp;signature=18fe0cd50c43299b57de54dfda3b2bc38a33dd8d2f918bc6ef3f550442b26b0c&amp;req=diEjH8p5nYlaWvMW1HO4zaPdGQ5QVC9Fe9HwvwG7ubiGvpNrFQ1i2M8l%2BSLC%0A4GHaNmpvlUHnAcsn%2FZQ%3D%0A)
 
 Enter the amount and click "Set limit." Alternatively, selecting "Set to unlimited" will remove that member's monthly spend limit (they will still be subject to any organization or seat-level spend limits).
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149374028/97813fe3b515c2e839d8d92abd79/image.png?expires=1789674300&amp;signature=f5f7f7b334c483cdb0f45552689266f6b420cae9d7c5942ca5a0f141c63a4197&amp;req=diEjH8p5mYFdUfMW1HO4zevsAv6MNO%2BJw6z2wGSwkbsVuabp93nEeAUKw8Jx%0AnGR3iPAHtIYYZvH6n%2FM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2149374028/97813fe3b515c2e839d8d92abd79/image.png?expires=1789710300&amp;signature=19367d3405e90b2acdf17e324231eed466fb6221983f8a4be9b6df1663ec2522&amp;req=diEjH8p5mYFdUfMW1HO4zevsAv6NMuuJw6z2wGSwkbsRSSjjdNRyYPm%2FO2%2By%0Aj7T4pmEy4Rl%2FmmDpr50%3D%0A)
 
 This allows owners fine control over usage credits, so you can set limits for different members based on their roles or individual needs. Once a user reaches their defined spend limit, this will automatically pause their usage credits until the end of the month. They will need to wait for their usage limits to reset before using Claude again.
 
diff --git a/content/support/12012173-get-started-with-claude-in-chrome.md b/content/support/12012173-get-started-with-claude-in-chrome.md
index 3680419c0b..7644bf6779 100644
--- a/content/support/12012173-get-started-with-claude-in-chrome.md
+++ b/content/support/12012173-get-started-with-claude-in-chrome.md
@@ -38,7 +38,7 @@ Follow these steps to connect Claude in Chrome in your desktop app:
 
 4. Toggle the connector on, then download and install the extension if you haven’t already.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2604933811/ae37c41fc808dbdf48d135338334/6cc9ba4b-9d31-43a2-ab80-8048b5f9d791?expires=1789674300&amp;signature=6c14090ad1fde44ed24bdba19a9a4d2758d6e7be70eb67cb1401c29589327bc3&amp;req=diYnEsB9noleWPMW1HO4zUOPbPXAkeaOnt%2F2nPMwUPijgTZ9xiE8ViKoHK%2BM%0AnZK472v067%2Fo1U54Lno%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2604933811/ae37c41fc808dbdf48d135338334/6cc9ba4b-9d31-43a2-ab80-8048b5f9d791?expires=1789710300&amp;signature=ed7960a7199ccaf9a4bc590f276321bba3451e40ea479bf027f672425664e136&amp;req=diYnEsB9noleWPMW1HO4zUOPbPXBl%2BKOnt%2F2nPMwUPjL0xh6wty4hcM9QFvw%0AI32%2F7hQ0YcLBbx1pCYw%3D%0A)
 
 Completing these steps will add Claude in Chrome to the “Connectors” drop-down on your chats with Claude. This is disabled by default, so you’ll need to enable it manually for each conversation.
 
diff --git a/content/support/12083917-change-your-team-plan-from-monthly-to-annual-billing.md b/content/support/12083917-change-your-team-plan-from-monthly-to-annual-billing.md
index de1364dd95..19acf5900d 100644
--- a/content/support/12083917-change-your-team-plan-from-monthly-to-annual-billing.md
+++ b/content/support/12083917-change-your-team-plan-from-monthly-to-annual-billing.md
@@ -8,11 +8,11 @@ Owners and Primary Owners of Team plans with monthly subscriptions can switch fr
 
 3. Or from /upgrade, click the “Switch to Annual plan” button:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1690325734/d47f714680d78408d6022d06b8d1/image.png?expires=1789776000&amp;signature=3a90cfd6d72bb80af6122181efd5047058e58891aab0237a4448723d80dba45a&amp;req=dSYuFsp8mIZcXfMW3Hu4gZzas%2FXtsDhVm2rRiVwqPzZLwumZKOu8n2f1uQ%2Bj%0Ayw%3D%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1690325734/d47f714680d78408d6022d06b8d1/image.png?expires=1789830000&amp;signature=d60f5221ee4f59e6458ad0dcccfe71a0fa70a122fc229a4d103bf599f00b297f&amp;req=dSYuFsp8mIZcXfMW3Hu4gZzas%2FXtsDdRnWrRiVwqPzbRgY89n31eP%2BpILL%2Bh%0AiA%3D%3D%0A)
 
 4. The confirmation screen will display the total cost for your upgrade from monthly to annual billing:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1690326039/3a91cdc5fff57d188a18ecc6273f/image.png?expires=1789776000&amp;signature=95ef8b44487d039a80440f7f8edb7bfe5b3d9c45653a04695fa165f5db33665c&amp;req=dSYuFsp8m4FcUPMW3Hu4gbNj%2Bk78VQrmje5vzcg6znWHz6ty2zgS3HVqOr2s%0ANQ%3D%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1690326039/3a91cdc5fff57d188a18ecc6273f/image.png?expires=1789830000&amp;signature=94bbf3a30480b7d2c99fb059a944167e44f1f53665424bdfc792907e67913179&amp;req=dSYuFsp8m4FcUPMW3Hu4gbNj%2Bk78VQXii%2B5vzcg6znUixze7WkI1mAHKrGsA%0Aqw%3D%3D%0A)
 
 5. Click “Confirm subscription.”
 
diff --git a/content/support/12111783-create-and-edit-files-with-claude.md b/content/support/12111783-create-and-edit-files-with-claude.md
index 3fee2caad0..a7cccc2317 100644
--- a/content/support/12111783-create-and-edit-files-with-claude.md
+++ b/content/support/12111783-create-and-edit-files-with-claude.md
@@ -48,7 +48,7 @@ These capabilities make it easy to produce professional documents by simply chat
 
 To give Claude access to external data sources, toggle **Allow network egress** on:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2054774005/25bcfffba6c249cd128d6c3f6d52/CleanShot+2026-02-11+at+16_34_47%402x.png?expires=1789674300&amp;signature=71e9ac668fd4897c40489887118f1db38e22d0370f835a5999c6c55df94a6d66&amp;req=diAiEs55mYFfXPMW1HO4zYFJywRDC53NPQVowIiib2lbsYMcyGgzD7111pDV%0AuoWCeKsZ6Q4EGRLB1%2Fc%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2054774005/25bcfffba6c249cd128d6c3f6d52/CleanShot+2026-02-11+at+16_34_47%402x.png?expires=1789710300&amp;signature=170c54a4884103835285ec0021139808568c8a4b8ed74e7f47f8b62591a60b8b&amp;req=diAiEs55mYFfXPMW1HO4zYFJywRCDZnNPQVowIiib2mFymZEGpQzOmalNG5N%0AcPkucv89K1TmZknvOnc%3D%0A)
 
 ### Enabling on Claude Mobile
 
@@ -66,11 +66,11 @@ Team and Enterprise organization owners can control network access settings in *
 
 - **Allow network egress to package managers and specific domains:** Claude can access package managers plus additional domains you specify. Add domains individually to whitelist specific resources your organization needs:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1789945362/ad72504d5429960f369b8b91b43c/86f06c0e-6eaa-4574-a4cb-2c38b273613a?expires=1789674300&amp;signature=b7564a90db66bd29d90a68c66669c9114d0e829c71acdbdd91c084acfd550c22&amp;req=dScvH8B6mIJZW%2FMW1HO4zXJcBmRFki1IpMW6Iph6YZcHw49pv%2B8E4re%2FiuUh%0ArIYLKePlE0ezLi%2FvztM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1789945362/ad72504d5429960f369b8b91b43c/86f06c0e-6eaa-4574-a4cb-2c38b273613a?expires=1789710300&amp;signature=21285ac9465dbc111059c9da2dc9460cb19d667c49c7ac88972d9870908fbca7&amp;req=dScvH8B6mIJZW%2FMW1HO4zXJcBmRElClIpMW6Iph6YZec%2FrNPyyRvpDw0QWog%0AB2ghfiMA3iTK8G8xr70%3D%0A)
 
 **All domains:** Claude has full internet access except for domains on Anthropic's legal blocklist. While this provides maximum flexibility for file creation and analysis tasks, it’s also the riskiest option. Please review the **[security considerations below](#h_0ee9d698a1)** before enabling “All domains”:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1789945361/e3188cb8edb9ca7c303615da6378/f1c99a7d-5956-48d5-9ec7-b7ae6c8c3d28?expires=1789674300&amp;signature=b6201bac0cb698ceeadb8ecdaeb15c10840f346b3f014d22ae033a63df1b516e&amp;req=dScvH8B6mIJZWPMW1HO4zdnseB2U6TuhqgKIA6CM1tr5uS0h8yS17AtDw4ZF%0AhEiwX%2BPACvQFqErddsA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1789945361/e3188cb8edb9ca7c303615da6378/f1c99a7d-5956-48d5-9ec7-b7ae6c8c3d28?expires=1789710300&amp;signature=ef8a44eb8ecef563307233d4f3295453153d368b767ff31f226ce6594f9d3372&amp;req=dScvH8B6mIJZWPMW1HO4zdnseB2V7z%2BhqgKIA6CM1toai3oB1zEyUoN%2B2Ufk%0A%2BFD%2FhK184K1%2Bva4OAb0%3D%0A)
 
 ---
 
diff --git a/content/support/12157520-claude-code-usage-analytics.md b/content/support/12157520-claude-code-usage-analytics.md
index 508b38e085..7bb2168962 100644
--- a/content/support/12157520-claude-code-usage-analytics.md
+++ b/content/support/12157520-claude-code-usage-analytics.md
@@ -50,7 +50,7 @@ The **Usage** tab displays the following metrics for your organization. Data on
 
 - **Top commands**: The Claude Code commands used most often across your organization.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1717579277/46c512f4b3ed05c359cecd78ed5c/e0ce2c19-39e2-411f-9a1f-cb1d46439a42?expires=1789674300&amp;signature=af57a82b23140e109183e2e0eca8bb27d765141401c7e103141793f069ef3ee7&amp;req=dScmEcx5lINYXvMW1HO4zfiEP69WiH3NCX9h5MbdDjOGaUtxgl5IFnqO%2B6QA%0AWcDJKTyX2JDvSlztrWo%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1717579277/46c512f4b3ed05c359cecd78ed5c/e0ce2c19-39e2-411f-9a1f-cb1d46439a42?expires=1789710300&amp;signature=afbdbd0d0561682cfddb433f4f65cf368b327e76067678d83a0f74d10497e58d&amp;req=dScmEcx5lINYXvMW1HO4zfiEP69XjnnNCX9h5MbdDjMZCwnZR%2FG9dvH1xoKa%0APptPwSJJWshVtgCmuv0%3D%0A)
 
 ### User-level metrics
 
diff --git a/content/support/12293051-use-claude-in-xcode.md b/content/support/12293051-use-claude-in-xcode.md
index bba53aa517..bc0d81b2fa 100644
--- a/content/support/12293051-use-claude-in-xcode.md
+++ b/content/support/12293051-use-claude-in-xcode.md
@@ -34,7 +34,7 @@ To start using Claude in Xcode:
 
 3. Log in with your Claude account.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1727371585/b18ca03a6357c52d12d10386f28e/dab2dcb2-f670-4173-b77d-38767a34cec1?expires=1789674300&amp;signature=984977463a8029dfdb0a86c4aadfab381146cd74fffc45822a7f8f268e2ef270&amp;req=dSclEcp5nIRXXPMW1HO4zUAXI8UEVazXFalhp3bugHL3g0h0nlxMVgRzs5qf%0A55d4%2Fo%2FAyCplw7OnVCk%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1727371585/b18ca03a6357c52d12d10386f28e/dab2dcb2-f670-4173-b77d-38767a34cec1?expires=1789710300&amp;signature=85b1a708f0478724e000093e5c5fc9b0a07b4eb3d5c5ceb9aaae45973a0b4775&amp;req=dSclEcp5nIRXXPMW1HO4zUAXI8UFU6jXFalhp3bugHIrRkwRYVHRP1CfTjZx%0AXhSP2bWzI9fbTdIHXSI%3D%0A)
 
 ## Usage limits
 
diff --git a/content/support/12429409-manage-usage-credits-for-paid-claude-plans.md b/content/support/12429409-manage-usage-credits-for-paid-claude-plans.md
index 112d7eedb4..55f7d7a871 100644
--- a/content/support/12429409-manage-usage-credits-for-paid-claude-plans.md
+++ b/content/support/12429409-manage-usage-credits-for-paid-claude-plans.md
@@ -46,7 +46,7 @@ To enable usage credits on your paid Claude plan:
 
 8. You can also enable auto-reload to automatically make a purchase when your balance falls below a threshold you set:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1805819785/5e203c38e6ba3f76bfd1dab0d5ce/fe062e7c-18cb-48cc-a7e2-754ac6e6c4be?expires=1789674300&amp;signature=44f7242c6578b7fba2268c3d97ed1fae2001138c81002ac4c6820f0f69eab438&amp;req=dSgnE8F%2FlIZXXPMW1HO4zYj2ARufovQ7opE7m38YdfdsqzY4%2BELmh80JNzEA%0ABkR9VolL4nVQVAYK4hg%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1805819785/5e203c38e6ba3f76bfd1dab0d5ce/fe062e7c-18cb-48cc-a7e2-754ac6e6c4be?expires=1789710300&amp;signature=65252561b29bedec6dda18afc2d1aeaea66962091c29b0ec9efdf19bcc6db0db&amp;req=dSgnE8F%2FlIZXXPMW1HO4zYj2ARuepPA7opE7m38Ydfc7AOiAUWEZij87aHL%2F%0AB%2FwnkfFV4vo7MuZzELo%3D%0A)
 
 **Note:** There is a daily redemption limit of $2000.
 
diff --git a/content/support/12466728-troubleshoot-claude-error-messages.md b/content/support/12466728-troubleshoot-claude-error-messages.md
index 8b0b792a46..918f194ff0 100644
--- a/content/support/12466728-troubleshoot-claude-error-messages.md
+++ b/content/support/12466728-troubleshoot-claude-error-messages.md
@@ -58,4 +58,4 @@ Capacity issues will not appear on our status page because they represent normal
 
 Service incidents are disruptions where Claude is unavailable or significantly degraded for all or most users. These represent actual technical problems with our systems. To check for confirmed incidents, visit status.claude.com, where you'll find real-time updates on scope, impact, and resolution progress for any active incidents.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1753796247/e6a8c6ef8653b229c5758e881242/c2fc6fc0-d163-4119-93e0-394104d86bc9?expires=1789674300&amp;signature=cc544946d67a8db279aa535ca8eda0a44d7c078eff4828457afab0341fa70a2a&amp;req=dSciFc53m4NbXvMW1HO4za4BXqYl1bbH7y68oYp%2BYg%2FTzj5LY6KAUYnMVZ8s%0A0y7vSZJQXOKz9xt5PqU%3D%0A)
\ No newline at end of file
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1753796247/e6a8c6ef8653b229c5758e881242/c2fc6fc0-d163-4119-93e0-394104d86bc9?expires=1789710300&amp;signature=d58fb2e6809ea407ffd973ae10a2f53cfb9f9d92a69195eb2bc067fb087c86aa&amp;req=dSciFc53m4NbXvMW1HO4za4BXqYk07LH7y68oYp%2BYg%2FA1VfRhqyfJvrdG9Ub%0AQgsEzIPYp3J1%2BV5ZdS0%3D%0A)
\ No newline at end of file
diff --git a/content/support/12512180-use-skills-in-claude.md b/content/support/12512180-use-skills-in-claude.md
index d7a9d9e19e..bc5ae400ad 100644
--- a/content/support/12512180-use-skills-in-claude.md
+++ b/content/support/12512180-use-skills-in-claude.md
@@ -166,7 +166,7 @@ To remove a custom skill you've uploaded:
 
 4. To delete the custom skill entirely, click the "..." button next to the toggle, then select "Delete":
 
-  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2105391273/8359cbf8be20dce0f1cd3fd40e6f/CleanShot-2B2026-02-25-2Bat-2B15_50_16.png?expires=1789674300&amp;signature=1e7a00045967d804c28dd9f457f32a9a52c142b3998d49fe91ee616b7bce4ab4&amp;req=diEnE8p3nINYWvMW1HO4zSOgDyIuxeKuH%2BdCnFXB0ugoBLgW6Pde0RMBQSGV%0Aijqv%0A)
+  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2105391273/8359cbf8be20dce0f1cd3fd40e6f/CleanShot-2B2026-02-25-2Bat-2B15_50_16.png?expires=1789710300&amp;signature=7701e0f69397774b88fa7d9824683128924abf7aed73f586d528b97cd92cef20&amp;req=diEnE8p3nINYWvMW1HO4zSOgDyIvw%2BauH%2BdCnFXB0uhXkmuZO44mhCQ6lbkT%0A5lhd%0A)
 
 5. Click "Delete" in the confirmation prompt.
 
diff --git a/content/support/12592343-enabling-and-using-the-desktop-extension-allowlist.md b/content/support/12592343-enabling-and-using-the-desktop-extension-allowlist.md
index 8309c1c60a..6e8090f37a 100644
--- a/content/support/12592343-enabling-and-using-the-desktop-extension-allowlist.md
+++ b/content/support/12592343-enabling-and-using-the-desktop-extension-allowlist.md
@@ -20,11 +20,11 @@ The desktop extension allowlist is disabled by default, so an organization Owner
 
 4. Switch to the "Desktop" tab:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781755172/63c92550571842577ad435860ec5/6f5cc4e1-ff7d-48de-863a-c4e6184d4605?expires=1789674300&amp;signature=f17d14da15ac10f8a855d10238ebfc84a94dc32dcdbc21e4762390f322099001&amp;req=dScvF857mIBYW%2FMW1HO4zQ9pXUMM%2BHTY0ugSQm1MFW8hQAseTQ5FWCDnc%2BZr%0Ao%2BVm%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781755172/63c92550571842577ad435860ec5/6f5cc4e1-ff7d-48de-863a-c4e6184d4605?expires=1789710300&amp;signature=6d1081d600798693fbca06cdb7d454a431b92e410b0cc6a5991999edf48c1664&amp;req=dScvF857mIBYW%2FMW1HO4zQ9pXUMN%2FnDY0ugSQm1MFW8PulKj1J0KFmTBQoSa%0AaSdJ%0A)
 
 5. Toggle **Allowlist** on:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781755578/a6bafff5f084dc86ae463703fd3d/6cf0ee18-4e71-4129-98e8-cc08174e3c3a?expires=1789674300&amp;signature=a77653e6fc35fed8b1117c082d7c05483afe0bc347b01a98f6ced5b05b4ecd2f&amp;req=dScvF857mIRYUfMW1HO4zaj0BHgtTqMHTAorLxpdoc995YJ%2BI830pJjMR3AA%0AN%2BN9%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781755578/a6bafff5f084dc86ae463703fd3d/6cf0ee18-4e71-4129-98e8-cc08174e3c3a?expires=1789710300&amp;signature=3de3c92aa6eb748bc8fc7c9bf2bb7211cc360bee0bb9bd40401fc49c12a9150c&amp;req=dScvF857mIRYUfMW1HO4zaj0BHgsSKcHTAorLxpdoc9dFfO%2BtsgWFwD414zR%0Aecs4%0A)
 
 ## What happens after enabling the allowlist?
 
@@ -42,7 +42,7 @@ Consider completing the allowlist setup during off-hours to minimize disruption
 
 **Important:** The allowlist requires Claude Desktop version 0.13.91 or higher, so users should update the desktop app by clicking “Claude”, then either “Check for updates” or “Restart to update to Claude 0.13.91”:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781756960/ad18af50c83d35f2673656c23e00/a7ee450f-0c7d-42d6-a75f-fb1bc088cb52?expires=1789674300&amp;signature=6097c919db33c3b7e9887668a7f3ec0eace08e847eae7e2bbcb5cd84ffed7115&amp;req=dScvF857m4hZWfMW1HO4zYUJqYqsDTboCEDZ5AdBjIaqmpozuelMHCwvArRO%0Aki0ccT%2BCcrgXuaOH9b4%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781756960/ad18af50c83d35f2673656c23e00/a7ee450f-0c7d-42d6-a75f-fb1bc088cb52?expires=1789710300&amp;signature=bf1af6a71953c97dd4e9d5422c97ef56d3cc344670e9c7ffdbd563805aa064e3&amp;req=dScvF857m4hZWfMW1HO4zYUJqYqtCzLoCEDZ5AdBjIbMPA5xdsTe7ZFDE7oY%0ASB5bheolNxoy0x6XvgY%3D%0A)
 
 ## Managing allowed extensions
 
@@ -60,7 +60,7 @@ After enabling the allowlist, you can choose which extensions to allow:
 
 If you want to remove an extension from the allowlist, click the “...” button and “Remove from allowlist.”
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781751250/6558c0f59aea7976bd44b0213d76/e750f02b-cd0d-437e-a83f-9ac362cdf456?expires=1789674300&amp;signature=ca41f5afeb5c4b0243ad787db3e664f421c34d73fe9e876865c8ce2c303b6bd6&amp;req=dScvF857nINaWfMW1HO4zTrxBaEv%2BFOWqXridZhfx1L36Ee5ucFxf784lu2l%0AINjn9U0RECtVCT%2BdgxU%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1781751250/6558c0f59aea7976bd44b0213d76/e750f02b-cd0d-437e-a83f-9ac362cdf456?expires=1789710300&amp;signature=0a9cbbc277555f2e8494c7005087b77bedb52f8c57fb664a00095bf52aad286c&amp;req=dScvF857nINaWfMW1HO4zTrxBaEu%2FleWqXridZhfx1LJR%2FSzrH6nHnxf%2Bbyv%0AXk80g%2FRFhJKC%2Feqs01E%3D%0A)
 
 ## Uploading custom extensions
 
diff --git a/content/support/12618689-claude-code-on-the-web.md b/content/support/12618689-claude-code-on-the-web.md
index 92ba78e8b6..0fe93df801 100644
--- a/content/support/12618689-claude-code-on-the-web.md
+++ b/content/support/12618689-claude-code-on-the-web.md
@@ -10,7 +10,7 @@ This feature works with repositories you may not have on your local machine. You
 
 Claude Code for web enables asynchronous development workflows. With Claude Code in your terminal or editor, you typically work synchronously: you make a request, wait for Claude to respond, review the changes, then make another request. Synchronous work like this gives you fine-grained control but requires your attention throughout the process. Claude Code on the web handles this differently: you can assign a larger task, let Claude work independently, and return later to review the completed work.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1786446157/07ec74cd46317f8278083a317841/6448f3ee-c6df-4417-8a13-90d8c2ca3d55?expires=1789674300&amp;signature=fad9e203a898a21842585e107a226ecea835cb0c3cc29f1ad66eaa11cf863e40&amp;req=dScvEM16m4BaXvMW1HO4zR8%2BAFqGRZl17XrRA1YwWGs1G0cSBcEskVvgcNFX%0ADbf6ups%2FaRR3hd07btM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1786446157/07ec74cd46317f8278083a317841/6448f3ee-c6df-4417-8a13-90d8c2ca3d55?expires=1789710300&amp;signature=7758bb9c58650bfe89d973a6a01fcabd4da43a5dad09e5f0e9ecb5ff90c71471&amp;req=dScvEM16m4BaXvMW1HO4zR8%2BAFqHQ5117XrRA1YwWGu5ncMwp1eroMsueGjg%0AtAlJhJQfMsQ%2FIQ048qI%3D%0A)
 
 You can also run multiple tasks in parallel. Since each task runs in its own isolated environment, you can have Claude working on several different issues or repositories simultaneously. Each task proceeds independently and creates its own pull request when complete. More than one task can work on the same repository at the same time.
 
@@ -18,13 +18,13 @@ You can also run multiple tasks in parallel. Since each task runs in its own iso
 
 When you start a task, Claude Code on the web creates an isolated virtual machine for your work. Your GitHub repository is cloned into this environment, which comes pre-configured with common development tools and language ecosystems.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1786446158/c092f1383826cb871493f74169d4/97b7cb98-5da2-438e-a920-e170b8b9790e?expires=1789674300&amp;signature=a86eb3bfaff7c6e6656a81dcad35ed65dd49232e3c6aa35d5dee0d33a2660802&amp;req=dScvEM16m4BaUfMW1HO4zcR0rZ8yiO3D7DtpMiX%2FBYkPJP32UKkqDtzcUi3%2F%0AIEEjHKMzfWkRuENXrLA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1786446158/c092f1383826cb871493f74169d4/97b7cb98-5da2-438e-a920-e170b8b9790e?expires=1789710300&amp;signature=e91000cc477b323b171354e970cf47aaa3d9d8fdd6caa9098274ec4e2032b4df&amp;req=dScvEM16m4BaUfMW1HO4zcR0rZ8zjunD7DtpMiX%2FBYkq%2Bwxu7mJz7jXVeHn7%0A4Ryj1hhL76IElbDObGY%3D%0A)
 
 Claude prepares the environment by running any setup commands you've defined in your repository's configuration. This includes installing dependencies, setting up databases, or running other initialization steps your project needs. If your task requires network access, maybe to install packages or fetch data, you can configure the level of internet access the environment has.
 
 Once the environment is ready, Claude begins working on your task. Claude reads your code, makes changes, writes tests, and runs commands to verify the work. You can monitor progress and provide guidance through the web interface if needed.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1786446156/83ecf0a5b98eddc9ffc9694c50f7/353589ce-b678-441d-8909-71b45fa2d065?expires=1789674300&amp;signature=80663dbe7602a7fc86b5fbe35531e3ef924fd24a2b85edf2066b31745ae7bf06&amp;req=dScvEM16m4BaX%2FMW1HO4zVbcTGqF5MDNUQl3YqgIJdaIHOq%2FqcmxARq4nTp6%0ATCt0cilrp4LQMwnh2wM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1786446156/83ecf0a5b98eddc9ffc9694c50f7/353589ce-b678-441d-8909-71b45fa2d065?expires=1789710300&amp;signature=4098b671c2c9344888e21416d3e9f8f67161c228987193a27576c2baca6ddee8&amp;req=dScvEM16m4BaX%2FMW1HO4zVbcTGqE4sTNUQl3YqgIJdaRufiEIIjIZzEeRYxz%0ASRzKQRuc6HZKWObx6Wc%3D%0A)
 
 When Claude completes the task, it pushes the changes to a new branch in your GitHub repository. You receive a notification and can review the changes, then create a pull request directly from the interface. The pull request includes all of Claude's work, ready for your review and any additional changes you want to make.
 
diff --git a/content/support/12626668-use-quick-entry-with-claude-desktop-on-mac.md b/content/support/12626668-use-quick-entry-with-claude-desktop-on-mac.md
index b7c07e6f77..8b90757fb4 100644
--- a/content/support/12626668-use-quick-entry-with-claude-desktop-on-mac.md
+++ b/content/support/12626668-use-quick-entry-with-claude-desktop-on-mac.md
@@ -40,7 +40,7 @@ When you first open the updated version of Claude Desktop, you'll see a prompt t
 
 Once enabled, double-tapping Option will open a text box where you can type your message and start a new chat. You can also click "New chat" to see your five most recent conversations.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1893088365/2ca4b782dda90abea1fe5f4150af/CleanShot+2025-12-18+at+13_14_30%402x.png?expires=1789674300&amp;signature=6260ff83b2527ee2c7a4c7bd243ccc30314a8b119edc66c7c8ac36705e1124e2&amp;req=dSguFcl2lYJZXPMW1HO4zWggD9dXoZiZRC8c%2FcM5c2JKGuRWEJtPpwJeF73y%0AUpmIEo%2BPmXN9QeNT3i0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1893088365/2ca4b782dda90abea1fe5f4150af/CleanShot+2025-12-18+at+13_14_30%402x.png?expires=1789710300&amp;signature=130235af5971313aa505775dfff4f39e4d417a75dcb5157851ae13d4843c2317&amp;req=dSguFcl2lYJZXPMW1HO4zWggD9dWp5yZRC8c%2FcM5c2KYo1bfItIfkBng6DAc%0A7NM0ujqjRIQ0raH3MnM%3D%0A)
 
 ### Enable the voice shortcut (optional)
 
diff --git a/content/support/12883420-view-usage-analytics-for-team-and-enterprise-plans.md b/content/support/12883420-view-usage-analytics-for-team-and-enterprise-plans.md
index 52e820e697..b1e2d95f0a 100644
--- a/content/support/12883420-view-usage-analytics-for-team-and-enterprise-plans.md
+++ b/content/support/12883420-view-usage-analytics-for-team-and-enterprise-plans.md
@@ -22,7 +22,7 @@ This page includes the following analytics:
 
 - Sessions in Cowork
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515895966/9f231a620f47d49e0ee648152189/848c1787-4eaa-4809-8fd2-1dbe2722560f?expires=1789674300&amp;signature=2624de443881ac177139fc41fe176f5d940cfa11785f57399f25e021ccd3abeb&amp;req=diUmE8F3mIhZX%2FMW1HO4zZL6wa90nIFyExEG4dCAGDZ%2Bi0yyDF39ifbl0olj%0A9yDHmChYsYu0i8tWPH0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515895966/9f231a620f47d49e0ee648152189/848c1787-4eaa-4809-8fd2-1dbe2722560f?expires=1789710300&amp;signature=15d1b0ff12544a438e4ad7bec7de24eecf584783f93954c1577907fd011a2e1c&amp;req=diUmE8F3mIhZX%2FMW1HO4zZL6wa91moVyExEG4dCAGDZNWKtfEVEku%2BOAexxT%0Aiy66vdn8j7NTPlW8fEg%3D%0A)
 
 ### Who’s using Claude?
 
@@ -34,7 +34,7 @@ This page includes the following analytics:
 
 Use the dropdown on the **Active members and assigned seats** chart to filter by product, including Claude Design.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896351/4d955858e6662c37489cc1470871/457cf159-8c2a-4403-ba22-cb92cb47e459?expires=1789674300&amp;signature=4c9fe69fc6c89b939dbe59c1a7a0bd4b9f139eaa5712dc2aff8a3ed4f780f7b7&amp;req=diUmE8F3m4JaWPMW1HO4zYEqej6vRZSsYqPRsgaNdTyFCKJJsrd531%2F6no8k%0AOnjs1sjr8VQGQNc2sRA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896351/4d955858e6662c37489cc1470871/457cf159-8c2a-4403-ba22-cb92cb47e459?expires=1789710300&amp;signature=f22a44d484fd4eca942aad62ecd380cbc1c6e1fcc4960b0e74f18a005590f00e&amp;req=diUmE8F3m4JaWPMW1HO4zYEqej6uQ5CsYqPRsgaNdTxcdkomoG%2BJKWkDyI%2F7%0AbXgiHlRMPBqIVEkSwnw%3D%0A)
 
 ### How are they using Claude?
 
@@ -48,9 +48,9 @@ Use the dropdown on the **Active members and assigned seats** chart to filter by
 
 - How agentic is their work? (beta)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2583875713/e3cb3c329f3b643cb9a3809876b3/image.png?expires=1789674300&amp;signature=511719060fb38bc4110d7d4665efffbcb82140b6ac400aeb7f2c5cf44b6504cb&amp;req=diUvFcF5mIZeWvMW1HO4zciS3aHvnbpoDFD6TO7tG4hWXrzLbE0RXDLL9TNo%0AFD4vUwLjS7sVdE8N7GE%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2583875713/e3cb3c329f3b643cb9a3809876b3/image.png?expires=1789710300&amp;signature=41f43a34f8a9861889eebcaa68a59dc94d80da02e27096bf00345951eec3566a&amp;req=diUvFcF5mIZeWvMW1HO4zciS3aHum75oDFD6TO7tG4iFXssUi8EezWxlnExa%0A7XhbWJBjRXeaEhEllTM%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896563/abf008596ce5501297a609696362/fce5423c-4769-4b73-9a0a-c50f6407ebea?expires=1789674300&amp;signature=37623730ca231e773320708cec4e91da336cdadd8964cd7412d25bf16ff74a39&amp;req=diUmE8F3m4RZWvMW1HO4zR%2BIDo5ouvP0LS3kobW3ZgQg3LT4G3ipXphHYpkS%0AZ7L0%2Fzus0tKxYGS4%2FsY%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896563/abf008596ce5501297a609696362/fce5423c-4769-4b73-9a0a-c50f6407ebea?expires=1789710300&amp;signature=635927d948da4296e2dc2128d85111ae3d23dbd9ff2565536be29c21c7617cc2&amp;req=diUmE8F3m4RZWvMW1HO4zR%2BIDo5pvPf0LS3kobW3ZgRld7ol6JHWE%2FRbWcIP%0AziiuFMmGh008TXwWoNs%3D%0A)
 
 ### What are the results?
 
@@ -66,7 +66,7 @@ Use the dropdown on the **Active members and assigned seats** chart to filter by
 
 - Estimated time saved
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896943/dd415f03afe56ca38308ef987f86/189e8ebc-5594-4f4b-bd84-e3c11c824d5b?expires=1789674300&amp;signature=904628815d5607a14246c91c8ac9d51f42cc0677a150576e7319dc7af232b1e4&amp;req=diUmE8F3m4hbWvMW1HO4zfJThC05rthFiovaLYNN7RnWvepBqJhLh9ryEozS%0Ad6FYwu586Vs343reNxM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896943/dd415f03afe56ca38308ef987f86/189e8ebc-5594-4f4b-bd84-e3c11c824d5b?expires=1789710300&amp;signature=d4f786658e109dc6fc3a64d90b785718cd25a1fb69b8146cb406ce645a687bfa&amp;req=diUmE8F3m4hbWvMW1HO4zfJThC04qNxFiovaLYNN7RklOSpTKS7Xnv0UHc51%0ATmGj4oDaK8KZG8Yg25g%3D%0A)
 
 ### How much is Claude costing?
 
@@ -82,9 +82,9 @@ This section includes the following analytics:
 
 - Spend by model (month-to-date, quarter-to-date, year-to-date, 1 year)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896942/b403f2d216fc40b5195911020b8e/446b99f1-3187-4b79-b2be-9f17b1632ff8?expires=1789674300&amp;signature=fce7b6a45fa1b8fe7271885f30cbdac3d5b2c4fb04fc77636d3777342fe80d6b&amp;req=diUmE8F3m4hbW%2FMW1HO4zYE%2BQ9cE6zXeWbBLGZ4vBJWPjoGJU32bqvNMIdGG%0Ayg1PoCfcV4xudiblFF4%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896942/b403f2d216fc40b5195911020b8e/446b99f1-3187-4b79-b2be-9f17b1632ff8?expires=1789710300&amp;signature=d4e7c144f59d004532604c4698836309ae467dcf35422175d999a43a02fcbef5&amp;req=diUmE8F3m4hbW%2FMW1HO4zYE%2BQ9cF7THeWbBLGZ4vBJW4GB%2BuzkKNLCkzWElN%0AwnfKvLliTNZfEdfJnbs%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896941/2239ce38639df339b24d5af1cb50/f829bc2a-ee52-4135-9b13-09ef1b7d66d6?expires=1789674300&amp;signature=186d2ce64b7fd3ff4ecf56d3ed16cb3a8a69b239cce952ff7177a7ccb1c2a252&amp;req=diUmE8F3m4hbWPMW1HO4zTz0NuMEIM1TC%2BtvTPa1I7G1YeNcILgVigdL7TB0%0AzFu81oeAhCeA2Hz4Lbs%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515896941/2239ce38639df339b24d5af1cb50/f829bc2a-ee52-4135-9b13-09ef1b7d66d6?expires=1789710300&amp;signature=789fbc8f68da55046bb3731477b6120c78dda97144c08be35dc907f08d82db96&amp;req=diUmE8F3m4hbWPMW1HO4zTz0NuMFJslTC%2BtvTPa1I7EAWJQeVSvWH5zZBWui%0ABoOflGUHCTiw4MqQpEc%3D%0A)
 
 ## Export a spend report
 
@@ -160,7 +160,7 @@ Navigate to **[Analytics > Claude Chat](https://claude.ai/analytics/usage)** to
 
 - Top members by chats
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515898793/405db0c492da11886c28a2b82731/71a55afc-1cef-4c50-b7e1-86775cb9a168?expires=1789674300&amp;signature=bcffb4bf5e17bf8d163989448ffe4b884d5ec7668e364d1dce249d4bdca7af45&amp;req=diUmE8F3lYZWWvMW1HO4zbhc8fSaZuAiTcfMEUwBBiWbH2eoZm2%2BIR5X9Cgp%0ATc6VXwkWMsLiQiShK8Y%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515898793/405db0c492da11886c28a2b82731/71a55afc-1cef-4c50-b7e1-86775cb9a168?expires=1789710300&amp;signature=e90ebf6d8fdb22b336011831e016a514e1b9b6a0c2adf41020e23ff44571cbda&amp;req=diUmE8F3lYZWWvMW1HO4zbhc8fSbYOQiTcfMEUwBBiUtk%2FF%2Fzef9vdHf9dA4%0A59vrlOP%2FOppk0BinttA%3D%0A)
 
 ### Projects
 
@@ -172,7 +172,7 @@ Navigate to **[Analytics > Claude Chat](https://claude.ai/analytics/usage)** to
 
 - Top members by project usage
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515899610/91d93108f0767e795fb9e488e882/71607d6d-dff1-4a13-a445-aa1d79850eed?expires=1789674300&amp;signature=7edebd5faa87303820ef837ae562cfe30b5d49118369be4ac2208518e43ebb64&amp;req=diUmE8F3lIdeWfMW1HO4zWhGoTWfnCehExu5cYiHHN%2Bl1LdEaVHbENJh9z84%0ArBvoSdFZYSKMZEntd2M%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515899610/91d93108f0767e795fb9e488e882/71607d6d-dff1-4a13-a445-aa1d79850eed?expires=1789710300&amp;signature=1e0c27ce96a93f20675a6846cbcbefd76b48a6488c912db2844b80f8af61d18b&amp;req=diUmE8F3lIdeWfMW1HO4zWhGoTWemiOhExu5cYiHHN%2F4TCcExz6RBM3MBDo8%0AU0ZtpKiusguUnXsz0E0%3D%0A)
 
 ### Artifacts
 
@@ -182,7 +182,7 @@ Navigate to **[Analytics > Claude Chat](https://claude.ai/analytics/usage)** to
 
 - Top 10 users by artifacts generated (month-to-date, quarter-to-date, year-to-date, 1 year)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515899838/33d737f2357d6e485704669962ae/43faadc3-47da-4a93-bbb7-47a7983e7441?expires=1789674300&amp;signature=13f08a856d6e159042eb3b0fffa6394a305f8c1cd31ab8851fa29402fbe9413e&amp;req=diUmE8F3lIlcUfMW1HO4zcSk4rPUeerDjHDogqK0V%2BzuGmc%2FKILTcjxVeN1T%0AWEMpb5qOpJXZMin6aUo%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515899838/33d737f2357d6e485704669962ae/43faadc3-47da-4a93-bbb7-47a7983e7441?expires=1789710300&amp;signature=ffdbee0ffe9e3caecccbf30b4a4655da1bfa851b9c5661054082067e15e3c408&amp;req=diUmE8F3lIlcUfMW1HO4zcSk4rPVf%2B7DjHDogqK0V%2BzlEaj3Y6QeOPFRzVzE%0AGiXI%2BvTqyfqCxI8chrA%3D%0A)
 
 ---
 
@@ -278,7 +278,7 @@ Navigate to **[Analytics > Cowork](https://claude.ai/analytics/cowork)** to view
 
 - Daily, weekly, and monthly active Cowork users
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515901489/8005693d55b7fefbfe9233258d39/106c22a0-3f47-47a6-abbd-4788dd70f218?expires=1789674300&amp;signature=022e25de258d87b76ab28f748ae21a7fe54b9f92c07408bb46f857ec057f79bb&amp;req=diUmE8B%2BnIVXUPMW1HO4zX7WEoG3WkWrFSi1Z3SzLLtdunRbTdbnOCuzOo8I%0AR2NaauXy0%2B2iTyMwFes%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2515901489/8005693d55b7fefbfe9233258d39/106c22a0-3f47-47a6-abbd-4788dd70f218?expires=1789710300&amp;signature=d6eb7cd5539416473ad712b3938aac7bf270033d19373fecae819680552d573b&amp;req=diUmE8B%2BnIVXUPMW1HO4zX7WEoG2XEGrFSi1Z3SzLLsTRWgyN3OTXtdSAUsg%0AJLd19nejTSR6WLCWnjw%3D%0A)
 
 **Note:** Cowork analytics are available alongside Chat and Claude Code data in the **[Analytics API](https://platform.claude.com/docs/en/manage-claude/analytics-api)**.
 
@@ -294,7 +294,7 @@ Navigate to **[Analytics > Surveys](https://claude.ai/analytics/surveys)** to as
 
 On Enterprise plans with usage-based billing, when your admin turns on individual usage analytics, any member of the organization can see their own usage broken down by product, model, and skill, along with where they stand against any spend limits set for them. Individual usage analytics are available in **[Settings > Usage](https://claude.ai/settings/usage)**.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2533906328/1f5cd0a57def40676410f8f379b4/member-usage-30d-model.png?expires=1789674300&amp;signature=934d8ab98596d49b1dd5004b3770376168cb9dd7a01c4344f3dcab787ebc65e1&amp;req=diUkFcB%2Bm4JdUfMW1HO4zfveB6bDe%2B%2FZWGUKUw6QS486eVNXGR5CwpPx5sgq%0AEWnMOQkLVN2WHRhbmV8%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2533906328/1f5cd0a57def40676410f8f379b4/member-usage-30d-model.png?expires=1789710300&amp;signature=0b4c9bcbe517717409ec8da3386030a0207557e4e7211474fd7d3f7d469853be&amp;req=diUkFcB%2Bm4JdUfMW1HO4zfveB6bCfevZWGUKUw6QS4%2FOGC8HgpsYTGwDPp3t%0AynTTDk98aL8lgMHhTMQ%3D%0A)
 
 ---
 
diff --git a/content/support/12902446-claude-in-chrome-permissions-guide.md b/content/support/12902446-claude-in-chrome-permissions-guide.md
index 1fba5c1539..6731ca8ef5 100644
--- a/content/support/12902446-claude-in-chrome-permissions-guide.md
+++ b/content/support/12902446-claude-in-chrome-permissions-guide.md
@@ -28,7 +28,7 @@ In "Manually approve," Claude checks with you before it acts. What that looks li
 
 Claude creates a plan from your prompt, which you can approve before Claude starts. The plan specifies which websites you're allowing Claude to access, as well as the approach it will follow:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1843320727/8d1c859ae9b8e0cdb536d024bf40/9bc3d239-8eb6-4bae-a032-a236f88ee606?expires=1789674300&amp;signature=01614876477a028a2abd14a6546666091065af4a1cc2ff6da533668f406ac230&amp;req=dSgjFcp8nYZdXvMW1HO4zYqyZctL%2B4a0gN0ADj5oqFBAfF908JUBIRrBwS6T%0AxYgsGmulfdreRYSgYDA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1843320727/8d1c859ae9b8e0cdb536d024bf40/9bc3d239-8eb6-4bae-a032-a236f88ee606?expires=1789710300&amp;signature=d05ce5d95bc593a1a17ceccc788ad10147fd911b3dabdcfa246bf70f866a5209&amp;req=dSgjFcp8nYZdXvMW1HO4zYqyZctK%2FYK0gN0ADj5oqFDV6ECfcgfDjVyEp%2FWs%0A3DBQLaeULjscqlmnbQY%3D%0A)
 
 Note that Claude will only use the websites listed in the plan, so you’ll need to manually approve any additional access requests.
 
@@ -62,7 +62,7 @@ When you choose "Skip all approvals," Claude doesn't pause to ask, and nothing c
 
 There are some websites on which Claude requires approval for every action. If you navigate to one of these sites, a **New permissions required** prompt will appear in the extension side panel, Claude Cowork, or Claude Code where Claude will ask for permission before accessing the page or taking any action.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2604970825/d7b961271be69e7541b406df1efd/d845324e-6b4a-4f54-83b9-0bea86ec09c6?expires=1789674300&amp;signature=327958107efcb248f996c82b7b2b1f0ab148e6c2f7973f1175c411d8166e8a4e&amp;req=diYnEsB5nYldXPMW1HO4zZ3Nqm92jyjv7A4lHPBihAVLbjrGJAXcgK9t%2FDZn%0AjB4gmzoLCNs8sgbTcgU%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2604970825/d7b961271be69e7541b406df1efd/d845324e-6b4a-4f54-83b9-0bea86ec09c6?expires=1789710300&amp;signature=1cd78b8cc4a0056c470be07fb13df9ce3e1ea29bc97214bc0a538aa60b79f4a9&amp;req=diYnEsB5nYldXPMW1HO4zZ3Nqm93iSzv7A4lHPBihAWo7QRFT0u%2BELLj4bZx%0AZoGADT5VLf8cRnF86eE%3D%0A)
 
 ### Permission options
 
diff --git a/content/support/12997503-team-plan-billing-faqs.md b/content/support/12997503-team-plan-billing-faqs.md
index 35a67c9c9f..1f0f444d71 100644
--- a/content/support/12997503-team-plan-billing-faqs.md
+++ b/content/support/12997503-team-plan-billing-faqs.md
@@ -18,7 +18,7 @@ Your organization's billing address determines where your invoices are sent. You
 
 If you want to use a name other than the one tied to your payment method, an organization Owner should check the "Use a different name on invoices" box when adding or updating your payment method in **[Organization settings > Billing](https://claude.ai/admin-settings/billing)**:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1922145253/f2e3d4e0fe43a2ea07e89244764c/image.png?expires=1789674300&amp;signature=da9e99eb0f4948fd93efae37e3051c004da3f29774baa3a0b394fcf81c589b5c&amp;req=dSklFMh6mINaWvMW1HO4zRZTxFPHvM%2FQKAqLF4ERnlWA4xpagTmZ5AQ%2FFRat%0AcL8O4fT6sL4sVipqBQk%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1922145253/f2e3d4e0fe43a2ea07e89244764c/image.png?expires=1789710300&amp;signature=33c5bd5e92f3022fecdfa5139592b072d4acc9e206703fc58492fe06f511cd53&amp;req=dSklFMh6mINaWvMW1HO4zRZTxFPGusvQKAqLF4ERnlVE53gdTOptPUjqUtge%0ArerxlwEgnYOEYeLrhF8%3D%0A)
 
 ## When will I be billed?
 
diff --git a/content/support/13119606-provision-and-manage-skills-for-your-organization.md b/content/support/13119606-provision-and-manage-skills-for-your-organization.md
index 45259b39f4..0caae30397 100644
--- a/content/support/13119606-provision-and-manage-skills-for-your-organization.md
+++ b/content/support/13119606-provision-and-manage-skills-for-your-organization.md
@@ -18,19 +18,23 @@ When you upload a skill through organization settings, it becomes available to e
 
 1. Navigate to **[Organization settings > Skills](https://claude.ai/admin-settings/skills)**.
 
-2. In the **Organization skills** section, click "+ Add."
+2. Click "+Add” in the upper right corner
 
-3. Select a .zip file containing your skill (must include a SKILL.md file).
+3. Choose “Upload a skill” or “Create a skill”
 
-4. The skill is immediately provisioned to all users in your organization.
+4. If uploading, select a .zip file containing your skill (must include a SKILL.md file).
 
-Admin-provisioned skills are enabled by default for everyone, but users can toggle individual skills off if they choose. This gives your organization consistent, approved workflows while letting users customize their own experience.
+5. If creating, input the skill name and description in the modal, then click “Create.”
+
+6. The skill is immediately provisioned to all users in your organization.
+
+Owner-provisioned skills are enabled by default for everyone, but users can toggle individual skills off if they choose. This gives your organization consistent, approved workflows while letting users customize their own experience.
 
 ---
 
 ## Provision skills to specific groups
 
-Provisioning a skill through **[Organization settings > Skills](https://claude.ai/admin-settings/skills)** gives it to everyone. To give a skill to only some users, bundle your skills into a plugin and assign that plugin to a group. The group's members see those skills, and members outside the group don't.
+Provisioning a skill through **[Organization settings > Skills](https://claude.ai/admin-settings/skills)** gives it to everyone. Enterprise plans can give skills to only some users by bundling them into a plugin and assigning that plugin to a group. The group's members see those skills, and members outside the group don't.
 
 For example, if you have 10 skills for your marketing team, add them to a plugin and assign it to the marketing group. Only that group gets those skills.
 
@@ -60,17 +64,97 @@ When **User-created skills** is off:
 
 ---
 
+## Let users publish skills and plugins to your organization
+
+Users can submit a skill or plugin they've built to your organization's library so everyone can use it. When your organization requires review, an owner approves each submission before it's published, and every later version goes through the same review.
+
+### Set the publishing policy
+
+1. Navigate to **[Organization settings > Skills](https://claude.ai/admin-settings/skills)** and select the “Policy” tab.
+
+2. Under **Publishing**, choose an option:
+
+  - **Requires review:** Users can submit skills and plugins, and an owner must approve each one before it's published.
+
+  - **Open:** Skills and plugins that users submit are published to the organization library without review.
+
+  - **Off:** Users don't see the "Publish to org" button. Owners can still add skills and plugins to the organization directly.
+
+Your starting setting depends on your plan:
+
+- **Team plans:** Publishing is set to “Open,” unless you already had **Share with organization** turned off, in which case “Off” is the default.
+
+- **Enterprise plans:** Publishing starts off.
+
+  - If your organization already had **Share with organization** turned on, it starts as “Open” instead.
+
+  - If you haven't chosen a setting, it switches to “Requires review” on October 2, 2026. To keep publishing off, or to choose a different setting, select it yourself before then.
+
+Turning **Publishing** off doesn't remove anything that's already published. Published items stay in the library until an owner removes them.
+
+### Review a submission
+
+Owners, and anyone whose role has Libraries set to “Can manage,” can review requests. You can't approve your own.
+
+**To review a submission:**
+
+1. Navigate to **[Organization settings > Skills](https://claude.ai/admin-settings/skills)** and select the “Requests” tab.
+
+  - Plugin submissions appear here, and each request shows who submitted it, whether it's a skill or plugin, its security scan result, and its status.
+
+2. Open a request. You'll see:
+
+  - How the item will be offered
+
+  - The scan result
+
+  - Every file
+
+  - For an update, what changed since the currently published version
+
+3. Click "Approve" to publish it, or click "Request changes" and add a note for the person who submitted it.
+
+Keep these points in mind when reviewing:
+
+- **You review a fixed version.** You see exactly the version that was submitted. The author can keep editing their own copy, but those edits don't reach the organization until they submit a new version and it's approved.
+
+- **For Enterprise plans, submitted versions are scanned.** For Enterprise plans with **Skill and plugin security scanning** enabled, each version is checked for malicious content automatically. A submission that fails the scan can't be approved until the author fixes it and submits again. Learn more about **[skill and plugin scanning](https://support.claude.com/en/articles/15927065)**.
+
+### Manage published skills and plugins
+
+Every approved item is listed in **[Organization settings > Skills](https://claude.ai/admin-settings/skills)** on the “Library” tab. From there, you can:
+
+- Choose how each item is offered to users:
+
+  - Available to install
+
+  - Installed by default
+
+  - Not available
+
+  - Required
+
+- View an item's versions
+
+- Remove an item from your organization
+
+When you approve a new version, everyone who uses the item gets the update automatically. Until then, users stay on the currently approved version.
+
+Published items are managed by your organization. If the author leaves, the published item stays in the library.
+
+---
+
 ## Control skill sharing between users
 
-In addition to provisioning skills top-down, you can let users share skills or plugins they've built with each other. Three independent toggles control this:
+In addition to provisioning skills top-down, you can let users share skills or plugins they've built with each other. Two independent toggles control this:
 
 - **Skill sharing:** Users can share a skill or plugin with specific colleagues. Recipients see the skill in the **Shared with you** section of their skills list.
 
-- **Share with organization:** Users can publish a skill to the organization directory, where anyone can find and install it.
-
 - **Share with groups:** Users can share a skill or plugin with an entire group. Recipients see it in the **Shared with you** section of their skills list, the same as items shared with individuals.
 
-The **Skill sharing** toggle is on by default for Team plans and for Enterprise plans that haven't set a skills preference. For organizations with HIPAA readiness or other regulated configurations, skills and skill sharing are off by default and an admin can enable them in **[Organization settings > Skills](https://claude.ai/admin-settings/skills)**. The **Share with organization** and **Share with groups** toggles are also off by default and can be enabled by an admin.
+To let users add skills and plugins to the organization library, use the **Publishing** setting. Learn more about **[letting users publish skills and plugins to your organization](#h_1abc45a27c)**.
+
+The **Skill sharing** toggle is on by default for Team plans and for Enterprise plans that haven't set a skills preference. For organizations with HIPAA readiness or other regulated configurations, skills and skill sharing are off by default and an admin can enable them in **[Organization settings > Skills](https://claude.ai/admin-settings/skills)**. The **Share with groups** toggle is also off by default and can be enabled by an admin.
 
 **Note:** Shared skills and plugins are view-only, and stay off until the recipient chooses to enable them. Recipients can enable and use a shared skill or plugin but can't edit its contents. When the owner saves a new version, everyone it's shared with gets the update automatically at next use. The owner can revoke someone's access at any time, and access is removed automatically if the recipient leaves the organization.
 
@@ -84,14 +168,14 @@ Once these settings are on, users can begin sharing skills with groups.
 
 ### How shared skills differ from provisioned skills
 
-|                               | **Owner-provisioned**  | **Shared peer-to-peer**               | **Shared org-wide**    | **Shared with a group**               |
-| ----------------------------- | ---------------------- | ------------------------------------- | ---------------------- | ------------------------------------- |
-| **Who can share**             | Owners only            | Any user (if enabled)                 | Any user (if enabled)  | Any user (if enabled)                 |
-| **Where it appears**          | Everyone's skills list | Recipient's "Shared with you" section | Organization directory | Recipient's "Shared with you" section |
-| **Can recipients remove it?** | Disable only           | Disable or delete                     | Disable only           | Disable only                          |
-| **Requires owner approval?**  | Owner uploads directly | No                                    | No                     | No                                    |
+|                               | **Owner-provisioned**  | **Shared peer-to-peer**               | **Published to the organization**                | **Shared with a group**               |
+| ----------------------------- | ---------------------- | ------------------------------------- | ------------------------------------------------ | ------------------------------------- |
+| **Who can share**             | Owners only            | Any user (if enabled)                 | Any user (if Publishing is on)                   | Any user (if enabled)                 |
+| **Where it appears**          | Everyone's skills list | Recipient's "Shared with you" section | Organization library                             | Recipient's "Shared with you" section |
+| **Can recipients remove it?** | Disable only           | Disable or delete                     | Depends on how an owner offers it                | Disable only                          |
+| **Requires owner approval?**  | Owner uploads directly | No                                    | Yes, when Publishing is set to “Requires review” | No                                    |
 
-**Important:** There's no approval workflow for org-wide sharing. If you enable **Share with organization**, any user can publish a skill to the directory without review. Consider enabling peer-to-peer sharing only if this is a concern.
+**Important:** When Publishing is set to “Open,” anything a user publishes goes straight to the organization library without review. Choose “Requires review” if you want an owner to check each skill and plugin first."
 
 ### Monitor sharing activity
 
@@ -109,7 +193,7 @@ Skills appear for each user in **[Customize > Skills](https://claude.ai/customiz
 
 - **Shared with you:** Skills colleagues have shared directly with a user. These appear grayed out until enabled.
 
-- **Organization skills:** Skills an owner has provisioned and skills users have shared organization-wide. Users install these from the directory.
+- **Organization skills:** Skills an owner has provisioned and skills published to the organization. Users install these from the directory.
 
 Owner-provisioned skills are marked with a visual indicator so users can distinguish them from other skill types. Users can click on any skill to preview its contents and description.
 
@@ -129,7 +213,7 @@ To remove a skill from your organization, locate it in the **Organization skills
 
 ## Scan skills and plugins for malicious content
 
-On the Enterprise plan, you can turn on skill scanning for your organization. When it's on, Claude checks each third-party skill and plugin your users upload or edit for malicious content before it can run. Scanning is off by default, and it applies only to new uploads and edits, so skills and plugins already in your organization keep working.
+On the Enterprise plan, you can turn on skill scanning for your organization. When it's on, Claude checks each third-party skill and plugin your users upload or edit for malicious content before it can run. Scanning is off by default until October 2, 2026. From that date it's on by default, where available, for Enterprise organizations that haven't set it. Organizations that already turned it on or off keep their choice.
 
 To turn on skill scanning for your organization:
 
@@ -163,4 +247,4 @@ A blocked skill can't be overridden by the user who uploaded it, and can't be ap
 
 - **Consider default status carefully:** Enable skills by default when they're broadly useful to most users. Keep specialized skills disabled by default for the users who don't need them.
 
-- **Decide on sharing deliberately:** Organization-wide sharing has no approval step. If you want to review skills before they reach everyone, keep organization-wide sharing off and ask users to submit skills to an owner for provisioning instead.
\ No newline at end of file
+- **Decide on publishing deliberately:** Set Publishing to “Requires review” if you want an owner to check skills and plugins before they reach everyone.
\ No newline at end of file
diff --git a/content/support/13132885-set-up-single-sign-on-sso.md b/content/support/13132885-set-up-single-sign-on-sso.md
index c614e3f9a2..48a80a151e 100644
--- a/content/support/13132885-set-up-single-sign-on-sso.md
+++ b/content/support/13132885-set-up-single-sign-on-sso.md
@@ -42,7 +42,7 @@ You can verify multiple domains for a single organization, but all domains must
 
 3. Enter the domain(s) you want to verify in the **Update organization email domains** modal and click the “+” button:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2498843282/561d5ceb1c3a5df75bdfee8bfc3f/d2491145-362d-490b-bdcf-66a0a7656ddc?expires=1789674300&amp;signature=7b0c52bca827f4cd119e374ee0aa83150c7a82705405b97c868d7081715afe91&amp;req=diQuHsF6noNXW%2FMW1HO4zSdmHnU%2F%2FcCPe3H0OpmIzWFCe8Ijle4%2FcoCSQ8Hn%0Afaz8%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2498843282/561d5ceb1c3a5df75bdfee8bfc3f/d2491145-362d-490b-bdcf-66a0a7656ddc?expires=1789710300&amp;signature=a5f8e51919854c99f40f5f344d49cd76f8dc534f9492c24055b715b6fcf6dba9&amp;req=diQuHsF6noNXW%2FMW1HO4zSdmHnU%2B%2B8SPe3H0OpmIzWFzFEjM7Y%2FZTrdb5%2FaF%0AAbm%2F%0A)
 
 4. Click “Save” when you’re finished adding domains.
 
@@ -50,7 +50,7 @@ You can verify multiple domains for a single organization, but all domains must
 
 6. Enter your domain in the text box and click “Continue”:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2047042630/0617a562cd28a7ff0e607d66a30b/6bd08e1d-2b65-40ab-bc79-a257153854c1?expires=1789674300&amp;signature=7846c68ed428865533c98fa46f92853f7cd459f9b270ebf21e87432ffa7db66e&amp;req=diAjEcl6n4dcWfMW1HO4zWHctRSRkNWpyoyXAW0OlXqV68cFp3THGLY5cjeb%0AvgBi%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2047042630/0617a562cd28a7ff0e607d66a30b/6bd08e1d-2b65-40ab-bc79-a257153854c1?expires=1789710300&amp;signature=b15e0d7f79a3c432819fd97b0524a2e03f07810fde30c156f899794091804d9e&amp;req=diAjEcl6n4dcWfMW1HO4zWHctRSQltGpyoyXAW0OlXpbXJOTftW4CFfMR%2Bsr%0ACCq1%0A)
 
 7. The setup screen displays a TXT record. **Copy the full Value using the copy button**—it begins with `anthropic-domain-verification-` and is longer than what's visible in the box. In your DNS provider, add a TXT record to your domain and **Value** set to the copied string. The domain must match exactly what you entered in the previous step, including any subdomains. Add it alongside any existing TXT records; don't replace them. The value is case-sensitive, so paste it exactly. Please refer to your DNS provider's documentation on this topic.
 
@@ -76,7 +76,7 @@ Clicking "Refresh" re-checks your DNS; it won't show Verified until the publishe
 
 If the record is correct and propagated but the status still shows Pending, contact Support.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2047044496/b8df54a0331784cc9ae8f00112aa/bf9609c1-dc93-4665-a066-4cae2fe4b002?expires=1789674300&amp;signature=bc7d3d1514bd8e9713976e5661326de83ca38dc25e8ab936aaefa98edf9dc10a&amp;req=diAjEcl6mYVWX%2FMW1HO4zVjmWSAGaHC6PM2D8ZcdgrgRYfFN6RbHBo4vbhIl%0AeX8Vwv2zQpXdbQEDMcE%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2047044496/b8df54a0331784cc9ae8f00112aa/bf9609c1-dc93-4665-a066-4cae2fe4b002?expires=1789710300&amp;signature=894a5ac39d5bc2a7e244564597540decca7648d53fd5a81fff97020e7eb5d043&amp;req=diAjEcl6mYVWX%2FMW1HO4zVjmWSAHbnS6PM2D8ZcdgrhuJP%2BEKbovxJ8BsynX%0Aes8gJ1%2FRNWrojcWaLK0%3D%0A)
 
 **Note:** Once your domain is verified, you'll see a **Restrict organization creation** toggle under **Security** on the Organization and access organization settings page. Enable this if you want to prevent users from creating new Claude or Console organizations—including personal accounts—using your verified domains.
 
@@ -116,7 +116,7 @@ For IdP-specific setup instructions, see:
 
 You can now choose to toggle on **Require SSO for Console** and/or **Require SSO for Claude,** on the **Organization and access** page, under the **Authentication** section:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312690200/bd2403586d4f6651ccd79e2a45af/b9f8d7ce-0def-49d9-bfb2-3a14352d7214?expires=1789674300&amp;signature=f28216b156c261c4cd43bc6997a0de78fefd3052dea16e29b5eb7c8431d49748&amp;req=diMmFM93nYNfWfMW1HO4zdAICwanBXgJItXtKivx6ZE8xJy1XH8FJyLszV3j%0AMPTQyk2QwLfz1QHhOJM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312690200/bd2403586d4f6651ccd79e2a45af/b9f8d7ce-0def-49d9-bfb2-3a14352d7214?expires=1789710300&amp;signature=a68ec3dcd66611cd70c076335228fc9ca416c6be2c18c6ec9d455579a65ff08d&amp;req=diMmFM93nYNfWfMW1HO4zdAICwamA3wJItXtKivx6ZGgzHCz6k5iaFWB5et0%0A637Y5%2BoI2DA0ecYsdoE%3D%0A)
 
 When SSO is required, users must use the “Continue with SSO” option to log in to their Claude/Console accounts. When SSO is not required, they will have the option to choose “Continue with SSO” or “Continue with email.”
 
diff --git a/content/support/13163631-configuring-session-security-settings.md b/content/support/13163631-configuring-session-security-settings.md
index f9a8908d49..98c8790235 100644
--- a/content/support/13163631-configuring-session-security-settings.md
+++ b/content/support/13163631-configuring-session-security-settings.md
@@ -18,7 +18,7 @@ Session duration controls allow Enterprise and Console Admins to set a maximum s
 
 5. Confirm your selection by clicking “Enable.”
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1888469436/1725e63ea1a2615948faecf4ec73/9bd276a1-7329-414d-87a1-d04dac93fff7?expires=1789674300&amp;signature=b0cd1b278b07199f8b8b30af1c034172bc62c080d2e4511ca0b6302d42f47805&amp;req=dSgvHs14lIVcX%2FMW1HO4zQNx6%2BshRF5Tg%2F6XaftFnjxCq4gZpLRdGGdxg3eA%0AttBN8Sg6NwLgdCl0Kus%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1888469436/1725e63ea1a2615948faecf4ec73/9bd276a1-7329-414d-87a1-d04dac93fff7?expires=1789710300&amp;signature=3cd5864f88481ff19786de9e6be0099fbf497b9cdc457ee0366d8be23580ae90&amp;req=dSgvHs14lIVcX%2FMW1HO4zQNx6%2BsgQlpTg%2F6XaftFnjxYIsUu%2FkPy%2FQ2LvCs3%0AjjUGc6st1OimdhY9tgY%3D%0A)
 
 ### For Console Admins
 
@@ -32,7 +32,7 @@ Session duration controls allow Enterprise and Console Admins to set a maximum s
 
 5. Confirm your selection by clicking “Enable.”
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1888469435/7a766bbe02e61c7d8f05deb5b8f0/b0bda400-47c6-43dd-9907-131ebe180b36?expires=1789674300&amp;signature=dab5dcf759d4d5ea30685ed35f99b858d76f4fe5833024faf69e11ef481c836e&amp;req=dSgvHs14lIVcXPMW1HO4zWzx2LAwIHsiXZ5D7eVpMte1Jiq7UNzeXZLJPALC%0AyevoDW1wFeCBLSb7SLw%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1888469435/7a766bbe02e61c7d8f05deb5b8f0/b0bda400-47c6-43dd-9907-131ebe180b36?expires=1789710300&amp;signature=8d87437fd5bbbb553e24fcd69098a55aece9e551660dfaa2a777008fad1d87e7&amp;req=dSgvHs14lIVcXPMW1HO4zWzx2LAxJn8iXZ5D7eVpMtdqidYjETj%2BtKEn5iT7%0AeNrQnJdvKlW2KObLzlA%3D%0A)
 
 ### What happens after enabling shortened session length?
 
@@ -50,7 +50,7 @@ You can change the session duration at any time by selecting a new value from th
 
 - Sessions scheduled to expire beyond the new duration will have their expiration shortened accordingly.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1888469437/46ac5bc55484ca01556d87a5ade7/b01a7651-ad65-4b32-93ff-16dbc9ca97c0?expires=1789674300&amp;signature=eb793d54e8d8e4e8d36e74b1661685427c2bd382068c48b1f18b9685c3a59f52&amp;req=dSgvHs14lIVcXvMW1HO4zZ7mWsGd4D2gA00cbyPOLDUL7extkVkb6Rdx7WTX%0AkWJxoWAhrFK8mVLApS0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1888469437/46ac5bc55484ca01556d87a5ade7/b01a7651-ad65-4b32-93ff-16dbc9ca97c0?expires=1789710300&amp;signature=a2026c58e652f975040fac859af465362f6dc1657bde3028606e0890a27e211a&amp;req=dSgvHs14lIVcXvMW1HO4zZ7mWsGc5jmgA00cbyPOLDWLTT5sOsVUqDrsXTcI%0AIpw87GXdVjioknd5YC4%3D%0A)
 
 ## Disabling session length settings
 
diff --git a/content/support/13189465-log-in-to-your-claude-account.md b/content/support/13189465-log-in-to-your-claude-account.md
index 924b9787ce..4a9204d53f 100644
--- a/content/support/13189465-log-in-to-your-claude-account.md
+++ b/content/support/13189465-log-in-to-your-claude-account.md
@@ -2,7 +2,7 @@
 
 When you open Claude on a web browser ([claude.ai](http://claude.ai)), the desktop app, or a mobile app, you will see two different options for logging in to your Claude account.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1893216804/f2209c3ec6cf4fc2e803d13bbc9d/40520c9e-ff82-4a7c-adca-5a064fe18d8c?expires=1789674300&amp;signature=68b9d94272e3ecf9d9dfa7fb30ee47e188b7157671fe3f2da264bb3ff9c6055c&amp;req=dSguFct%2Fm4lfXfMW1HO4zXg5BouK5Ba3zWhrqpWiTMlCF8zdjBHUuEu6%2Fgl%2F%0AdGM3neC6TTHcnRwtyqI%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1893216804/f2209c3ec6cf4fc2e803d13bbc9d/40520c9e-ff82-4a7c-adca-5a064fe18d8c?expires=1789710300&amp;signature=fcbcd30b1ed9a0db935e7acb42d8fde6f5b7220bf0c95412e430a8aca5c7f4ce&amp;req=dSguFct%2Fm4lfXfMW1HO4zXg5BouL4hK3zWhrqpWiTMnpiExFxBA3lWWjDiby%0AAgog5QKfBTxXad4TU3I%3D%0A)
 
 ## Continue with Google
 
diff --git a/content/support/13325567-account-management-faqs.md b/content/support/13325567-account-management-faqs.md
index 5c2f85fb61..eccc180043 100644
--- a/content/support/13325567-account-management-faqs.md
+++ b/content/support/13325567-account-management-faqs.md
@@ -44,6 +44,6 @@ The email domain that was used to create your Team or Enterprise plan organizati
 
 Owners can remove domains by opening up the same modal and clicking the trash can icon to the right of the domain:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2053873852/1cbccea3b7067e03205f2ff8546b/CleanShot+2026-02-11+at+11_16_07%402x.png?expires=1789674300&amp;signature=5caa8912ac7b7f77cb3af7bfee0b2b7e64f58dd76d123be17e8c5c1edaed01fa&amp;req=diAiFcF5nolaW%2FMW1HO4zUrhFuKebgwZkeFUnrkrQZjfNLq%2Fq4iEQDK0phbz%0Af4k9uiEXNPj3TFrj4JQ%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2053873852/1cbccea3b7067e03205f2ff8546b/CleanShot+2026-02-11+at+11_16_07%402x.png?expires=1789710300&amp;signature=89597b79cd2e0ca21b5920ffeb8bf647a0b7e0b93f75b534aada3e0d99896677&amp;req=diAiFcF5nolaW%2FMW1HO4zUrhFuKfaAgZkeFUnrkrQZigvcvGYoC9DTB6p1%2B2%0A82rCAkvY%2B9d88k4kp8E%3D%0A)
 
 While the account creator must use a business email address, you can add public domains like @gmail.com, @yahoo.com, and @hotmail.com as allowed domains for other members of your organization.
\ No newline at end of file
diff --git a/content/support/13346458-customizing-your-console-appearance-settings.md b/content/support/13346458-customizing-your-console-appearance-settings.md
index d0c39d9b58..5310cd3cc1 100644
--- a/content/support/13346458-customizing-your-console-appearance-settings.md
+++ b/content/support/13346458-customizing-your-console-appearance-settings.md
@@ -8,4 +8,4 @@
 
 3. Select from Light, System, or Dark under **Color mode**.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1922579101/ede30d38dca693c59f9c15d79e69/CleanShot+2026-01-08+at+15_45_20%402x.png?expires=1789674300&amp;signature=ca1e9de197e7cba2947f00e0bac3a09b38e9e7c2e513c012bef9cd2baafe7d35&amp;req=dSklFMx5lIBfWPMW1HO4zRpFC8ECShZ1O9Kw38RlAYJiUxMIqnpgcG6rfOdL%0AYovQJKWxPNMtSi9ftig%3D%0A)
\ No newline at end of file
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1922579101/ede30d38dca693c59f9c15d79e69/CleanShot+2026-01-08+at+15_45_20%402x.png?expires=1789710300&amp;signature=4d8686bb19e8d926f38f31695ae78b3bf987a27ff96ec01ba9ac0692463b75db&amp;req=dSklFMx5lIBfWPMW1HO4zRpFC8EDTBJ1O9Kw38RlAYKW1OWHxm%2FNJ6L6vCIV%0A1zgBAEHXLUDqwTF%2B2Ws%3D%0A)
\ No newline at end of file
diff --git a/content/support/13371040-log-in-to-your-console-account.md b/content/support/13371040-log-in-to-your-console-account.md
index d8a5d2669f..b24666f83c 100644
--- a/content/support/13371040-log-in-to-your-console-account.md
+++ b/content/support/13371040-log-in-to-your-console-account.md
@@ -2,7 +2,7 @@
 
 When you navigate to the **[Claude Console](https://platform.claude.com)**, you will see two different options for logging in to your Console account.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1935026646/d90d1613a3dbe763fef5abb96e3c/image.png?expires=1789674300&amp;signature=f24079ca5bb4d05897546545ae309344c62569bbd54bb41bf85391e57d8db8d2&amp;req=dSkkE8l8m4dbX%2FMW1HO4zcrI54Dqp4QO8vUNcPt4%2B73bZ2IbbiDDOjDvhMhg%0AMMLmBjmRLWG0uD7Uixo%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1935026646/d90d1613a3dbe763fef5abb96e3c/image.png?expires=1789710300&amp;signature=bfda95416e0218777b5fe57b9cfb0093c0ac0226b1b340cfbacb0a71d492b27a&amp;req=dSkkE8l8m4dbX%2FMW1HO4zcrI54DroYAO8vUNcPt4%2B70l379Q61dHO8Uxh1d9%0AYt4Yad8ewHThm%2BIv7bI%3D%0A)
 
 ## Continue with Google
 
diff --git a/content/support/13641943-visual-and-interactive-content.md b/content/support/13641943-visual-and-interactive-content.md
index cce2abc756..0b94f76010 100644
--- a/content/support/13641943-visual-and-interactive-content.md
+++ b/content/support/13641943-visual-and-interactive-content.md
@@ -18,7 +18,7 @@ Claude can show current weather conditions and forecasts when you ask about the
 
 Claude automatically displays temperatures in Fahrenheit for US locations and Celsius for everywhere else.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2040544927/3a9c695b24df387ecdd766ad308c/8be9f393-dcb0-4ff8-89e8-5fa47bedaa38?expires=1789674300&amp;signature=8104095e4aeea3862e8607c81ee0f43f3c00ba16c524f1e64fd3d5652ad8e704&amp;req=diAjFsx6mYhdXvMW1HO4zXlB7Te80hyLdgndksVD5R3jSDA2fM7VPyi5mfvv%0AxOq%2BVhKt0%2FwggrePb0s%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2040544927/3a9c695b24df387ecdd766ad308c/8be9f393-dcb0-4ff8-89e8-5fa47bedaa38?expires=1789710300&amp;signature=8acf2bae6596f86b2a563608b7b1f84e38e546474d7fd559030975f855291544&amp;req=diAjFsx6mYhdXvMW1HO4zXlB7Te91BiLdgndksVD5R14fM2lqPNCyD2qNuDm%0AyiJnFA78HqC9ICuJn5A%3D%0A)
 
 Weather is powered by Google Maps (<https://policies.google.com/privacy>).
 
@@ -28,7 +28,7 @@ When you ask about recipes, Claude can display formatted recipe cards that are e
 
 **Note:** Visual recipe cards are available on web and desktop only. On mobile, Claude provides recipe information as text in the conversation.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2040544929/12f4c51eda7779d65d3ea2c7ab16/d0f4a314-cff8-421a-b401-10c2bf50374e?expires=1789674300&amp;signature=82328439a3be346ff0ae1a95c8e248f2a999d597c7c31e04c33e9bcbebded6a7&amp;req=diAjFsx6mYhdUPMW1HO4zUQpe7kT1VCUrIPm%2FImZVg2AtWEOh8KXMcvwGFLB%0A4cwwKQ1c0n%2F326nJpno%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2040544929/12f4c51eda7779d65d3ea2c7ab16/d0f4a314-cff8-421a-b401-10c2bf50374e?expires=1789710300&amp;signature=098c2221f4261f0f232867e4d1d588db4c6e532e145638c42770ce62731ccf25&amp;req=diAjFsx6mYhdUPMW1HO4zUQpe7kS01SUrIPm%2FImZVg1VFucmwpbvVPNyYPrD%0A5EAgsV8Zj6TVpJ653as%3D%0A)
 
 ### Custom visuals
 
@@ -76,7 +76,7 @@ For example, if you ask Claude to help you plan a trip, it might ask you to:
 
 This content appears at the bottom of the chat. You can still type a response if you prefer.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2040544930/9ad066e137d11e4b559b0217e12d/9bf30d2d-1715-42b3-9da5-2a9298f41f08?expires=1789674300&amp;signature=cd167e4d940c23712b8bed84ccd42c3f38cff47aea5fcc72df66f5e3a77b9469&amp;req=diAjFsx6mYhcWfMW1HO4zWmF5%2Fy4bhqhx4wz0C7CTAJJUZEoqaJ2Fr%2F49P7t%0Aa%2Fb9H3xHBOW%2Fc416TJE%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2040544930/9ad066e137d11e4b559b0217e12d/9bf30d2d-1715-42b3-9da5-2a9298f41f08?expires=1789710300&amp;signature=109b0d308c99b0c9a966dc7e06ea3ad7015b4d07a1a6081c8d65228a63db301c&amp;req=diAjFsx6mYhcWfMW1HO4zWmF5%2Fy5aB6hx4wz0C7CTAIlPhJjMNBpDLR0wyIE%0Azep23kd27ecQrN3bysg%3D%0A)
 
 ---
 
diff --git a/content/support/13756069-public-sector-faqs.md b/content/support/13756069-public-sector-faqs.md
index 20caa51c15..e26719555c 100644
--- a/content/support/13756069-public-sector-faqs.md
+++ b/content/support/13756069-public-sector-faqs.md
@@ -6,7 +6,7 @@
 
 Select your product based on both your technical/functional requirements, and also your compliance/security/deployment environment requirements. Here is a list of options:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2197717161/79965a24090029e9e58c727c3c24/pubsec-product-matrix_png+%281%29.jpg?expires=1789674300&amp;signature=bfcf04273ab423e92e13be55be6f35f2d3582952cffc23fca0a09e00fd58acb6&amp;req=diEuEc5%2FmoBZWPMW1HO4zU94LlAjGtkz2WxtU42UVC3dtGWMxrsrIon7jCX6%0AT666lhQ7%2BmZNaJ7pDaw%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2197717161/79965a24090029e9e58c727c3c24/pubsec-product-matrix_png+%281%29.jpg?expires=1789710300&amp;signature=1223a0b1a64c2f5f410fd559a5132b3a62ef8af27628356ab01c682cfa136b81&amp;req=diEuEc5%2FmoBZWPMW1HO4zU94LlAiHN0z2WxtU42UVC2xK%2BCeOemTuHREUHKp%0Avwo%2BhdKwgwMds%2FteSe4%3D%0A)
 
 ### What is Claude for Government (C4G)?
 
diff --git a/content/support/13837433-manage-plugins-for-your-organization.md b/content/support/13837433-manage-plugins-for-your-organization.md
index cb9516eb65..5d9480b699 100644
--- a/content/support/13837433-manage-plugins-for-your-organization.md
+++ b/content/support/13837433-manage-plugins-for-your-organization.md
@@ -112,7 +112,7 @@ Your personal GitHub token is verified to confirm you have access, then Cowork u
 
 An initial sync runs automatically when you connect a repository. After that, organization owners can opt-in to continued automatic updates per marketplace by going to **[Organization settings > Plugins](https://claude.ai/admin-settings/plugins)**, clicking the menu button in the upper right corner of the marketplace, then toggling "Sync automatically" on:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2193200015/a239033a9ab19fbd39f1a0d9edce/CleanShot+2026-03-23+at+11_41_31%402x.png?expires=1789674300&amp;signature=47a9d971ba69df98565a1f2357bc571ddecb64e7cd24e2514902024c7b46139b&amp;req=diEuFct%2BnYFeXPMW1HO4zUYv5tT%2FxnsXRDH%2FtUo5ov5SEgijnbeJcsfdy9dA%0AKONgmdSahQwJ3wWONkU%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2193200015/a239033a9ab19fbd39f1a0d9edce/CleanShot+2026-03-23+at+11_41_31%402x.png?expires=1789710300&amp;signature=018bc77f714d0251efbb600224b2a1c5585a57e661bb72f1f530f72612ed379c&amp;req=diEuFct%2BnYFeXPMW1HO4zUYv5tT%2BwH8XRDH%2FtUo5ov5vMRaMCN0K%2F6CkZFUW%0AFK%2BnNzrO%2Bt0iLSdNVyY%3D%0A)
 
 Enabling automatic sync creates a webhook on the connected repository. The person turning the toggle on must have admin-level access to that repository on GitHub. This is checked through their personal GitHub connection, which is separate from the Claude GitHub App installation. Without admin access, the page shows "Cannot access repository. Ensure the repository exists and the Claude GitHub App is installed," even when the App is installed correctly and manual updates work.
 
diff --git a/content/support/13837440-use-plugins-in-claude.md b/content/support/13837440-use-plugins-in-claude.md
index c99f4d3330..fec052f7c3 100644
--- a/content/support/13837440-use-plugins-in-claude.md
+++ b/content/support/13837440-use-plugins-in-claude.md
@@ -40,7 +40,7 @@ In Cowork, open the "Cowork" tab first, then open **Customize**.
 
 You can also upload a custom plugin file if you built one yourself. On Team and Enterprise plans, a colleague can share a plugin with you directly instead of sending you the file. See **[Use a plugin shared with you](#h_ef985546b4)** below. On Claude Desktop and in Cowork, plugins you add yourself are saved locally to your computer.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2100409211/fc01614dde1a616fa31ffaa9cb04/47bacf5b-a810-45b5-a468-9769f1a58ef8?expires=1789674300&amp;signature=773b51b69745f038442b770f37a557f45540eece8909ddf1f5639820c1c05d7d&amp;req=diEnFs1%2BlINeWPMW1HO4zZF3IhzbNPFWxakFVfq5Wwy3GoL6nh0oceF4voiK%0AMQoNueMxnAJZ8uJzfts%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2100409211/fc01614dde1a616fa31ffaa9cb04/47bacf5b-a810-45b5-a468-9769f1a58ef8?expires=1789710300&amp;signature=a45e918d07f8811c54b166d7e3ebd521f1f05c5a9b4d46f877404fa611488c3f&amp;req=diEnFs1%2BlINeWPMW1HO4zZF3IhzaMvVWxakFVfq5WwwXdWU9zVars73eqCTj%0ARuqYSR%2FyK6PhWnfhe4A%3D%0A)
 
 If you're on the Enterprise plan and your organization has skill scanning turned on, plugins are checked for malicious content when they're installed or updated. A plugin with malicious content is blocked, and one that may carry risk shows a caution banner. Learn more about **[skill and plugin scanning](https://support.claude.com/en/articles/15927065)**.
 
@@ -50,7 +50,7 @@ If you're on the Enterprise plan and your organization has skill scanning turned
 
 Each plugin you install adds skills you can use while working with Claude. Type "/" or click the "+" button to see the available skills from your installed plugins, in chat and in Cowork. Click any skill to see its details.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2157396844/4a790e10f5b88df770783df1d7e9/image.png?expires=1789674300&amp;signature=b5a2a86968ee22fe73384d08ceb2a25072425a5d0f8dcf527303de7b7cf36735&amp;req=diEiEcp3m4lbXfMW1HO4zf4NBP%2F6hESXmKUxugP2BQtFOieJ0yOp53XlMRAQ%0ACb8nYvPqL6gPYeyH088%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2157396844/4a790e10f5b88df770783df1d7e9/image.png?expires=1789710300&amp;signature=840739610eb39aece90992d1434f62f51e537a92ca26f9f2abc71f27ccdb92c3&amp;req=diEiEcp3m4lbXfMW1HO4zf4NBP%2F7gkCXmKUxugP2BQv31nWqcmhN73wgyqFT%0ASt8PeDgc1HubjFJMWIc%3D%0A)
 
 ---
 
diff --git a/content/support/14499648-how-scim-sync-works-for-enterprise-organizations.md b/content/support/14499648-how-scim-sync-works-for-enterprise-organizations.md
index 136fb2d57a..6ba653188e 100644
--- a/content/support/14499648-how-scim-sync-works-for-enterprise-organizations.md
+++ b/content/support/14499648-how-scim-sync-works-for-enterprise-organizations.md
@@ -50,7 +50,7 @@ You can trigger a manual sync from two places in your admin settings.
 
 2. Click "Check for updates" under **SCIM sync**:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312613548/44cd5970ee3c3b2c7f8dcd592d71/image+%2824%29.png?expires=1789674300&amp;signature=04c3feafec4e3f85537f65f2a4024d062ce9c73e27204cab844c3e804b5c962c&amp;req=diMmFM9%2FnoRbUfMW1HO4zW4gbDyrMsm3rgfl7PnOiulqTI43oTmmUn%2BDQqAG%0AzplA%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312613548/44cd5970ee3c3b2c7f8dcd592d71/image+%2824%29.png?expires=1789710300&amp;signature=cd037f4192c6f0ae03ec802f09e91a9b13bffaae4cb78c2d94bc511dd37ad163&amp;req=diMmFM9%2FnoRbUfMW1HO4zW4gbDyqNM23rgfl7PnOiunQ2pvynStqRI073GhB%0Apn5y%0A)
 
 3. Select whether to sync members, groups, or both.
 
@@ -62,7 +62,7 @@ You can trigger a manual sync from two places in your admin settings.
 
 3. Select whether to sync members, groups, or both:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312608119/e4b0ef4f309f3c4eac8311a6ef47/image.png?expires=1789674300&amp;signature=90bb29ee9ec286701fbaca83fac192e7afccf774f0a040e727f76d6a2b0c1c4c&amp;req=diMmFM9%2BlYBeUPMW1HO4zX%2F4frP2zD8c43OpyTHzM9R8BIQGu9NhYuecQBXQ%0A8AJc%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312608119/e4b0ef4f309f3c4eac8311a6ef47/image.png?expires=1789710300&amp;signature=32e94d80852ed35e49c7a0e5b82811f30260c537f0cbdec8c349500503987241&amp;req=diMmFM9%2BlYBeUPMW1HO4zX%2F4frP3yjsc43OpyTHzM9SfkhXkP7V6cC1L3hoy%0ABNZL%0A)
 
 **Note:** If you trigger a manual sync while background changes are processing, your organization takes the most recent change for each member or group. If multiple changes are queued for the same member or group, you may need to resync again to make sure everything applies correctly.
 
diff --git a/content/support/14503613-sso-login.md b/content/support/14503613-sso-login.md
index 7ed1825816..d9d01e4302 100644
--- a/content/support/14503613-sso-login.md
+++ b/content/support/14503613-sso-login.md
@@ -47,9 +47,9 @@ Before configuring your Identity Provider (IdP), you must verify ownership of yo
 
 3. Wait for the DNS propagation. Once the platform detects the record, the domain status will update to “**Verified**.”
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256015862/476131c3139aec4db01b96127544/10c7a165-8b26-4443-b064-9d659659c65e?expires=1789674300&amp;signature=a43d24c1e85f2961af8b48fd1595e20a123afe02b205e8407e035f48c5dfbdc6&amp;req=diIiEMl%2FmIlZW%2FMW1HO4zdpfuCOOHVeM006zz1SmF9V0E4MM1SVFx3qNL8qU%0A1B0wrWkSMtAXH77iUm0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256015862/476131c3139aec4db01b96127544/10c7a165-8b26-4443-b064-9d659659c65e?expires=1789710300&amp;signature=418388e004b81078a21e1e3ba10bebe077a2f9e70f710ecaf2b38c9506218daa&amp;req=diIiEMl%2FmIlZW%2FMW1HO4zdpfuCOPG1OM006zz1SmF9XRY3Z8Kavj%2Frozp62L%0Azw4dQjSxQUQSBqVjFKY%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256025910/a82e2de9382824fa9db7666f67c4/CleanShot%2B2026-04-09%2Bat%2B16_25_20-402x.png?expires=1789674300&amp;signature=bb4d1ce23c86642be0811e32f8a8370d20e15b47d8180051530317594cb93c77&amp;req=diIiEMl8mIheWfMW1HO4zV%2BGnRA5RLtEx57dwYq5DdJWKiZqWtE9SzFr5WEx%0APrKg55VScXM%2BT1qTWks%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256025910/a82e2de9382824fa9db7666f67c4/CleanShot%2B2026-04-09%2Bat%2B16_25_20-402x.png?expires=1789710300&amp;signature=424bcb359e973297e15791441148392472868198bd4bbac71d61b4d1899236f8&amp;req=diIiEMl8mIheWfMW1HO4zV%2BGnRA4Qr9Ex57dwYq5DdKe0x17yOEE4cX%2F%2BuAc%0AbHZ7rwbXFXnRWVYCq4o%3D%0A)
 
 **Important:** Each domain can only have one identity provider. If multiple organizations share a single login domain, IT administrators from both organizations will be able to modify login settings. Contact **[Anthropic Support](https://claude.fedstart.com/support)** for assistance with multi-organization setups. For more details about multi-organization setups, see our **[SCIM provisioning guide](https://support.claude.com/en/articles/14503643-set-up-scim-in-claude-for-government)**.
 
@@ -77,7 +77,7 @@ Once your SAML application is set up in your IdP, provide Anthropic with the det
 
 - Claims Information — Attribute mappings for user name and email.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256004522/a97b91092b393e93b2d7779f63e6/2db86a6d-1582-419e-925e-cbc914468fa1?expires=1789674300&amp;signature=522b0d2d842af802e261b4b82109cdbdb8c8c6263f7839deb11ba10916318553&amp;req=diIiEMl%2BmYRdW%2FMW1HO4zQE9Jr6w%2FRD4bfNHh%2Fvd8OFYUKAThRiWexb9WKh%2F%0AoPszlUe7uuNTOyoamuA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256004522/a97b91092b393e93b2d7779f63e6/2db86a6d-1582-419e-925e-cbc914468fa1?expires=1789710300&amp;signature=a288982ac5e5cdd6111bb9dd5e4200e7e059c2a5dc7c380ef0735851f24d1c1a&amp;req=diIiEMl%2BmYRdW%2FMW1HO4zQE9Jr6x%2BxT4bfNHh%2Fvd8OGrbRBdFB%2BjgvnFUM%2B3%0AwOminQhftcgj5EkocHI%3D%0A)
 
 **Tip:** Using a metadata XML file: Most IdPs let you download a metadata.xml file. Upload it on the identity settings page to auto-fill the Signing Certificate, IdP Entity ID, and SSO URL. Some IdPs (like Entra ID) also include claims information in the metadata file; if present, the system will suggest field mappings automatically.
 
diff --git a/content/support/14503643-set-up-scim-in-claude-for-government.md b/content/support/14503643-set-up-scim-in-claude-for-government.md
index 507fca67a4..8b399d0f89 100644
--- a/content/support/14503643-set-up-scim-in-claude-for-government.md
+++ b/content/support/14503643-set-up-scim-in-claude-for-government.md
@@ -41,7 +41,7 @@ With SCIM, login and provisioning are separate. Your IdP tells Anthropic who sho
 
 **Important**: Store this key securely. It cannot be retrieved after you leave the page.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256040196/c3b045028c4c2edef9172b6fb424/9a71258e-ae73-41e3-83a2-d24a240ac0ae?expires=1789674300&amp;signature=83614a1e16c6de33f3807c825c4519f8998e7cf3bef56f41313fba6ce3150250&amp;req=diIiEMl6nYBWX%2FMW1HO4zSrRlaUZbjIXyIvvU1hav7MC3R5Y83Na06k58rNg%0Aqn4dhzOuMDUNV%2FdqPA8%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256040196/c3b045028c4c2edef9172b6fb424/9a71258e-ae73-41e3-83a2-d24a240ac0ae?expires=1789710300&amp;signature=cea6bbc13fcb85750415cf61d6e6930bb040f4209210d494072972522f18f809&amp;req=diIiEMl6nYBWX%2FMW1HO4zSrRlaUYaDYXyIvvU1hav7OP1e3DpdBWyfh8jA6n%0AjZ2U6vpIbrrLoIjdz7c%3D%0A)
 
 ### Step 2: Configure SCIM in your Identity Provider
 
@@ -67,7 +67,7 @@ After enabling the integration in your IdP:
 
 **Warning**: When you fully enable SCIM provisioning, any users who were **not** synced via SCIM will be removed from the organization. Confirm that all expected users appear in the sync before proceeding.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256040198/da9188b8b968d5f900cc08e9ceb2/3814ab37-c3fa-4256-8d16-49c1e1b4c654?expires=1789674300&amp;signature=b9fac0810ce69bc1718973ac6fcbacf70c49900de1e8c31a07c30a3eb40dc46a&amp;req=diIiEMl6nYBWUfMW1HO4zeLvMlFpTUj5oWupW8zJgMrbucP2GyWcqQtj%2FWP6%0AMrXr%2FkELjGehlhzTUs4%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256040198/da9188b8b968d5f900cc08e9ceb2/3814ab37-c3fa-4256-8d16-49c1e1b4c654?expires=1789710300&amp;signature=3d9a977fad3e015f1ae3b8a0f4c94cb2deaed244d233fc5a8649300db9820a35&amp;req=diIiEMl6nYBWUfMW1HO4zeLvMlFoS0z5oWupW8zJgMojLdzlqpkoeJwUQLTr%0A2LUndlWh6Sfd9Tda66s%3D%0A)
 
 ### Step 4: Map groups to roles and seat tiers
 
@@ -83,7 +83,7 @@ SCIM provisioning uses IdP groups to assign roles and seat tiers within Claude f
 
 3. Save your mappings.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256056441/f7eb09bba549e9861fc81b961cc7/2760fa5b-87bb-491f-9354-ca3cd2bc4475?expires=1789674300&amp;signature=b0cd857eaae6710cdc22f3d0a077ab69ff21a2a9a2430eccfede22a32e646f86&amp;req=diIiEMl7m4VbWPMW1HO4zaWhsXoktUMYh340B79BYGYGwfhBXMahqsrgQcCL%0ALv9pVn8BuFTnZ6iPdUY%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256056441/f7eb09bba549e9861fc81b961cc7/2760fa5b-87bb-491f-9354-ca3cd2bc4475?expires=1789710300&amp;signature=384f1dcdc1792eaba19329921651ef747d93dbe026120d4d46ef989e72044117&amp;req=diIiEMl7m4VbWPMW1HO4zaWhsXols0cYh340B79BYGYpIDdKoHLIMoeITA1T%0AryAZaM%2Fz4vtESdCA9cE%3D%0A)
 
 If you manage multiple organizations under a single parent (see below), each organization maintains its own role and seat tier mappings. Switch between organizations using the organization selector in the bottom-left corner of the page.
 
diff --git a/content/support/14503775-mcp-web-search.md b/content/support/14503775-mcp-web-search.md
index dfdb85b192..d6db83f5b5 100644
--- a/content/support/14503775-mcp-web-search.md
+++ b/content/support/14503775-mcp-web-search.md
@@ -4,7 +4,7 @@ The Web Search connector gives Claude the ability to search the public internet
 
 For questions about web search in commercial Claude, see **[Enabling and using web search](https://support.claude.com/en/articles/10684626-enabling-and-using-web-search)**.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256120763/7652c6c669446113eae75f3c5977/9c74d57e-aaa2-4f1c-bfe4-2b9b87fd41ab?expires=1789674300&amp;signature=a34982f1547974235c7cb1a578bed678c4ceaacce1bb3092d9db6e7ff315afa2&amp;req=diIiEMh8nYZZWvMW1HO4zQvFLLtVisD7M%2Fw5SJgC29HChnIQSYiMbw1tw4DM%0Af1nLXclvxhq1kvPstLA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2256120763/7652c6c669446113eae75f3c5977/9c74d57e-aaa2-4f1c-bfe4-2b9b87fd41ab?expires=1789710300&amp;signature=2d828926336baabb84673235998fdee484e74e090461d1a493b83094587bd0ed&amp;req=diIiEMh8nYZZWvMW1HO4zQvFLLtUjMT7M%2Fw5SJgC29HLYTQkhCoZoHeMQM39%0AHYpz%2FYxQHaL9VEFY4QA%3D%0A)
 
 ## How Web Search differs for Claude for Government
 
diff --git a/content/support/15694740-manage-model-access-for-your-organization.md b/content/support/15694740-manage-model-access-for-your-organization.md
index f57e3cac6e..aeface1b61 100644
--- a/content/support/15694740-manage-model-access-for-your-organization.md
+++ b/content/support/15694740-manage-model-access-for-your-organization.md
@@ -42,9 +42,9 @@ The organization setting is the ceiling. A role can't grant access to a model th
 
 If any custom role uses the model you’re disabling as its default, you’ll be prompted to change that role’s default before the change can be saved.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693921/02ea72756f5163f14e5d158516dc/69102088-cd86-498e-97aa-c8a6e0004419?expires=1789674300&amp;signature=107aaa22dfe9a7344b416099c610a2bff1f653c0f149de1da7b9e36e9f593ac4&amp;req=diUmEs93nohdWPMW1HO4zXlxEu6%2FUNVUQf5Pb7M2Q0uSw13JHKkqgS4EEa81%0AQdxh%2BK2LZ2DBz5vd0bg%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693921/02ea72756f5163f14e5d158516dc/69102088-cd86-498e-97aa-c8a6e0004419?expires=1789710300&amp;signature=fd5e3b3c0027176f576c50789f9f674d6c6debc98f71f16aa123d74f7151e3d6&amp;req=diUmEs93nohdWPMW1HO4zXlxEu6%2BVtFUQf5Pb7M2Q0vuRhoWaY72Y9858wop%0AYJjEQeacxuNljnYdRjw%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693922/bfc5de6626eb19dca1d7caf818ca/c3cd8bb6-f86c-4d01-92da-6ae4ca966662?expires=1789674300&amp;signature=236e85ce1230096a52ba0b262a0557c956061d9d4401c9e3d920ac5c4ea98c50&amp;req=diUmEs93nohdW%2FMW1HO4zTqNsYDDQVxUAod9uc510lzSsP2ioscRZqgH056Y%0Amy16b1TiKYBChOLSK4Q%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693922/bfc5de6626eb19dca1d7caf818ca/c3cd8bb6-f86c-4d01-92da-6ae4ca966662?expires=1789710300&amp;signature=3da1ca6ff6d8ac0f3df84615e060cfbea8a0c3a49cea42a1949939c61602ea98&amp;req=diUmEs93nohdW%2FMW1HO4zTqNsYDCR1hUAod9uc510lyfPWgQMu9Bw6o4U3gf%0Af0pCKyz%2FFROHvxGwkAk%3D%0A)
 
 ---
 
@@ -78,7 +78,7 @@ If any custom role has an effort cap higher than the new organization cap for th
 
 Only models the role grants access to can be selected as that role’s default model.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693923/880665a87dbd4776cf19d6063a37/29d30c6d-f9fc-408c-8c72-4320c6d88d14?expires=1789674300&amp;signature=7eb7894d4c38e3d791827b351bbed24895b640ff772f794e5f720b89fa37dc5d&amp;req=diUmEs93nohdWvMW1HO4zYj9SfwF6oW%2BXsqpNqvyFRIVRHD1brVy4626SyxY%0AQ58MUqUQArQCk325SnA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693923/880665a87dbd4776cf19d6063a37/29d30c6d-f9fc-408c-8c72-4320c6d88d14?expires=1789710300&amp;signature=a706c4fae494781469b1429e8b0d4efec8cd0033b3d53915f307102a8b17e0cf&amp;req=diUmEs93nohdWvMW1HO4zYj9SfwE7IG%2BXsqpNqvyFRKLSn4%2F0RRXPXLAtAEl%0Aieg%2FfDjkfwgTuegiYXc%3D%0A)
 
 ---
 
@@ -96,7 +96,7 @@ Effort limits determine how much computation members on a role can apply per res
 
 5. Click "Save" to save your changes.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693927/7a25673b3b075d72adb3cdc371e3/d2d7cd8d-a713-4e91-a706-f589ac46a9fe?expires=1789674300&amp;signature=5114708ebc70e33e0f21831a48ca39162ceee1f9afebb1074c2b024a2da839f6&amp;req=diUmEs93nohdXvMW1HO4ze1xBjq6dL0aDeA1RkowXUG%2FJ%2Bck1B5zaS7GbOQv%0Ac4HPrf02JfN%2FoAs0UGM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2514693927/7a25673b3b075d72adb3cdc371e3/d2d7cd8d-a713-4e91-a706-f589ac46a9fe?expires=1789710300&amp;signature=a7e28ab6aaf7eda189e9f12f1babdf38165ed9473e44bdcd406b9739616c4832&amp;req=diUmEs93nohdXvMW1HO4ze1xBjq7crkaDeA1RkowXUEZ4Sxm3S8GVnmrMJFU%0Ai752TT6d9rvts6DT8JU%3D%0A)
 
 Members on the role see only effort levels at or below the cap in their model menu. Note that available effort levels differ depending on the model, and some models don’t support effort level settings at all. For an explanation of each level, see **[Change the model, effort, and thinking settings](https://support.claude.com/en/articles/8664678)**.
 
diff --git a/content/support/15936181-get-started-with-1password-for-claude.md b/content/support/15936181-get-started-with-1password-for-claude.md
index 91f535e883..93014233b0 100644
--- a/content/support/15936181-get-started-with-1password-for-claude.md
+++ b/content/support/15936181-get-started-with-1password-for-claude.md
@@ -52,7 +52,7 @@ Once the requirements are in place, you can set up 1Password from a few places i
 
 4. Toggle on **Password managers**:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2546126596/ba71ca47e2df21cec62c243831f8/5b1c67e1-607d-4c73-8f61-d1ceb081082a?expires=1789674300&amp;signature=a887f607a6664754c42958172cfbe8dd6d5ca6cf22643619f8ca60baa2684870&amp;req=diUjEMh8m4RWX%2FMW1HO4zU5lnmJoqsFgGkiu4hEpcPUceCP5m394PKU1ZqtW%0AxwEIq0PIjUSGXCij3B0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2546126596/ba71ca47e2df21cec62c243831f8/5b1c67e1-607d-4c73-8f61-d1ceb081082a?expires=1789710300&amp;signature=eeae91fa99fcb60e381ef904b94abdcc8f44feed81be93d66fba0f57ff3b87dd&amp;req=diUjEMh8m4RWX%2FMW1HO4zU5lnmJprMVgGkiu4hEpcPVUfE5HTSBg0c%2FOfBNE%0A5Cllpn5ZlYRNW3OFumo%3D%0A)
 
 Once enabled, eligible users will see the discovery options above. Users still need to install and set up the required apps and extensions themselves.
 
diff --git a/content/support/16607638-understanding-your-pro-or-max-plan-invoices.md b/content/support/16607638-understanding-your-pro-or-max-plan-invoices.md
index 81eed41884..24aaa554c9 100644
--- a/content/support/16607638-understanding-your-pro-or-max-plan-invoices.md
+++ b/content/support/16607638-understanding-your-pro-or-max-plan-invoices.md
@@ -40,7 +40,7 @@ You can also open any invoice from your account:
 
 **Amount due.** The invoice total minus any applied balance. This is what your payment method was charged.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2629072970/c514f489b65072ccad08e803864f/e8c7a7de-905f-4a40-815f-c9c66edcdbf6?expires=1789674300&amp;signature=2b59e00bb857d18dbbdbf86c460023df008e2146d187582630b9753052eec532&amp;req=diYlH8l5n4hYWfMW1HO4zdWraBg56VAdPZYKVlMiWEXi3h1p69vvGAy58fKD%0A1s4fDRSjbep4z6pTZUs%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2629072970/c514f489b65072ccad08e803864f/e8c7a7de-905f-4a40-815f-c9c66edcdbf6?expires=1789710300&amp;signature=1127dac15cf2e2849bb998814c5c884bfcc8b6fe342867916dbe033ddfa6fa59&amp;req=diYlH8l5n4hYWfMW1HO4zdWraBg471QdPZYKVlMiWEW6VSLSCOS4j%2F4BI31r%0A0%2F9Tn4j0ZebtlqJbXR0%3D%0A)
 
 ## Billing details on your invoice
 
diff --git a/content/support/16764810-assign-a-program-to-workspaces-in-claude-console.md b/content/support/16764810-assign-a-program-to-workspaces-in-claude-console.md
index d96ca7d100..f2a2a288e8 100644
--- a/content/support/16764810-assign-a-program-to-workspaces-in-claude-console.md
+++ b/content/support/16764810-assign-a-program-to-workspaces-in-claude-console.md
@@ -20,27 +20,27 @@ In the Console, programs are issued to your organization and apply to workspaces
 
 1. **[Sign in to the Console](https://platform.claude.com/)** as an organization Admin. Go to **[Organization settings > Programs](https://platform.claude.com/settings/organization/programs)**. The program card shows whether it applies automatically or needs workspaces assigned.
 
-  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642744587/d4584e035604f3b7c08afa53a1c6/ee1183ff-e591-4484-a989-1f754245d39c?expires=1789674300&amp;signature=04f53bdd8059ad2961711c800930dcf7153fe3e150958f04d39fc76dff701583&amp;req=diYjFM56mYRXXvMW1HO4zT%2FymECBEw2kktHcEoeKC4e24ug%2FpiTz%2FSnZTO%2BE%0A89Mc%0A)
+  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642744587/d4584e035604f3b7c08afa53a1c6/ee1183ff-e591-4484-a989-1f754245d39c?expires=1789710300&amp;signature=33e2bd485c33f0655d3b2f62012502cb71a745cd10422efbaaafa5326db24a4c&amp;req=diYjFM56mYRXXvMW1HO4zT%2FymECAFQmkktHcEoeKC4cEHhiXY7r7aQVZ7goE%0AwRTR%0A)
 
 2. Select the program to open its page. The **Workspaces** table shows each workspace's status. A workspace marked with an issue does not meet a requirement yet.
 
-  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642745562/253e55a3292b35f728fb5dc89fb2/0878a8a9-dce5-4df2-9826-3796605b52a0?expires=1789674300&amp;signature=79f0053abf26cc40a7ed38b7d7122ce4c330712f147c714e78dbc1ec6918e339&amp;req=diYjFM56mIRZW%2FMW1HO4zc116gduR1SyMCr%2B42fbmkZzmN9Use6Z8R5MUNtk%0AG%2Bsy%0A)
+  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642745562/253e55a3292b35f728fb5dc89fb2/0878a8a9-dce5-4df2-9826-3796605b52a0?expires=1789710300&amp;signature=61ab071efbbd46e96fbc9add087f108b8110b109748af104be15d6a24a31b538&amp;req=diYjFM56mIRZW%2FMW1HO4zc116gdvQVCyMCr%2B42fbmkbvE5Sy9ZuogSkUeYcM%0A9wKU%0A)
 
 Hover over the issue to see which requirement is not met.
 
-  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642746466/c49291119729e99f4dba8ec924e4/3f802c0e-7fbc-4e80-935a-05da58f65bde?expires=1789674300&amp;signature=c1f217103fa923aa11c5a0dbe5223535abd379c0424d6afd2a61242af708c7a7&amp;req=diYjFM56m4VZX%2FMW1HO4zaveae9kkXnDVPpeIJbmktR4pKyiMWvprD9anpgv%0Amr1Y%0A)
+  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642746466/c49291119729e99f4dba8ec924e4/3f802c0e-7fbc-4e80-935a-05da58f65bde?expires=1789710300&amp;signature=706ef7ab69175813f3ca78f89438fe9c970a84c64d6df85d5f4745e1336d7ba6&amp;req=diYjFM56m4VZX%2FMW1HO4zaveae9ll33DVPpeIJbmktRmKKKMzjLb343d52xl%0AgocL%0A)
 
 3. To give a workspace access, make it meet the requirements. Open the workspace, select "Manage," then "Programs," and check the **Qualifications** panel.
 
-  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642768117/1304e6b1350fc9bd88c4238a00e3/db606eb5-39d5-4309-a5a9-ee33847fc233?expires=1789674300&amp;signature=10c611a83e90f2a5f7ff2e77ba21c004eef6a30a770120972ac7d196966236a5&amp;req=diYjFM54lYBeXvMW1HO4zTU0lNKWLEJE9BWcjfiNKI38KH7AIvUd%2FVhEO%2BQi%0ABxGH%0A)
+  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642768117/1304e6b1350fc9bd88c4238a00e3/db606eb5-39d5-4309-a5a9-ee33847fc233?expires=1789710300&amp;signature=a44d558a7508b13af60520b79676f65768bcda75ec943a422c5cc2754a11e9cf&amp;req=diYjFM54lYBeXvMW1HO4zTU0lNKXKkZE9BWcjfiNKI3AABKm%2F2RJGKy7CK6d%0ANFNC%0A)
 
 4. Fix the requirement. For the Cyber Verification Program, turn on data retention under Manage, then Privacy controls. Then select "Rerun."
 
-  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642746995/87151a11687a9c631b7a9d681390/d40a6c12-283d-4b3b-b6d6-9f631a73e7c0?expires=1789674300&amp;signature=14bad3ab3dcd2ecf5f5160150920b3a2f690d346ac146666b2fb724d2ca20d89&amp;req=diYjFM56m4hWXPMW1HO4zQfcHTKo6Hoo9apHi%2BiM8ojsb8KFeOBKgOcndQKI%0AKW%2FX%0A)
+  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642746995/87151a11687a9c631b7a9d681390/d40a6c12-283d-4b3b-b6d6-9f631a73e7c0?expires=1789710300&amp;signature=41f524756812f1dabfa99ece1e4dcf41546c539ea3b0eb309c6dc2da0f89fbb7&amp;req=diYjFM56m4hWXPMW1HO4zQfcHTKp7n4o9apHi%2BiM8ojbt%2BIXDC5NGN4LHV3P%0A9xAC%0A)
 
 5. The program shows **Active** for the workspace.
 
-  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642747200/a18bdccde474c9f4eba371cf6050/b0e9d5e3-1e5f-4f27-b682-5684084f92e8?expires=1789674300&amp;signature=e5192ff5dbc82fc09bbfa9c4d2e3221a329446d09cf42beadfd74b23947d4679&amp;req=diYjFM56moNfWfMW1HO4zaUR8q9h8fo7fTukdAE3MWvPzDUMEOMT1QkDRlT3%0AyJOk%0A)
+  ![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2642747200/a18bdccde474c9f4eba371cf6050/b0e9d5e3-1e5f-4f27-b682-5684084f92e8?expires=1789710300&amp;signature=e8b12fc709d3ee1588188e9bc1a7381f5ad084814153e8d5afa9d6488e71df8c&amp;req=diYjFM56moNfWfMW1HO4zaUR8q9g9%2F47fTukdAE3MWtP9WxXoO9L3CS917TA%0AZzpQ%0A)
 
 ## Troubleshooting
 
diff --git a/content/support/16893491-get-started-with-smart-reports.md b/content/support/16893491-get-started-with-smart-reports.md
index ee6b545fb6..ed1a26eeff 100644
--- a/content/support/16893491-get-started-with-smart-reports.md
+++ b/content/support/16893491-get-started-with-smart-reports.md
@@ -24,13 +24,13 @@ Each report includes the following sections:
 
 Workstreams shows what the group used Claude for most, by sessions and by spend, side by side.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671030907/7b62b605189fe8e9474a20c1eaf2/image.png?expires=1789674300&amp;signature=85081b16eab5a878069b8e2a98de2698d05d4e9c258cdf79b813f50b10c67eac&amp;req=diYgF8l9nYhfXvMW1HO4zZse%2B2uaTAwPVa%2FWhnGS4GlVqIPn3q4P5nd3Oqze%0AiGqw88ffaIws4s6t%2Fao%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671030907/7b62b605189fe8e9474a20c1eaf2/image.png?expires=1789710300&amp;signature=6118430010799228cebbfa154f6212a899b3bb4186a42075113ea6d24ad59be8&amp;req=diYgF8l9nYhfXvMW1HO4zZse%2B2ubSggPVa%2FWhnGS4GkaQxqbAq20ZWX5u9Y2%0At2Wsm4RkvoaIdGSkJKw%3D%0A)
 
 ### Deliverables produced
 
 Deliverables produced groups sessions by the type of output that was produced. For example, analysis, documentation, content drafts, and code.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671035220/2a582bc047a6ba46e7dbd6f05d9f/e17881ac-874c-4747-94ca-8679e0301455?expires=1789674300&amp;signature=c7e2474a4ba8c2fe2926f85bdf6fc6317b329514acc083e6ab39ff11198017c8&amp;req=diYgF8l9mINdWfMW1HO4zelj0q5dlNnxYDEFlKbF9Y9T%2B2fOREHLQSWwNl4K%0Aq8Yrxgx86B26YH%2BGxO8%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671035220/2a582bc047a6ba46e7dbd6f05d9f/e17881ac-874c-4747-94ca-8679e0301455?expires=1789710300&amp;signature=02c75cab3b72b3108d6268b4c919c10bb589dcf5e683f461c82741cc14a8194e&amp;req=diYgF8l9mINdWfMW1HO4zelj0q5ckt3xYDEFlKbF9Y8Ufe5p0k1umeo0F7Ah%0A3dJ55M3Z2JNT%2BxBiiPk%3D%0A)
 
 ### Cost per session by type of output
 
@@ -44,17 +44,17 @@ Task outcomes  shows what each session produced.
 
 Most common frictions shows what got in the way, by category. For example, a connector that wasn’t set up, output that didn’t match the ask, approval or sign-in gating, tool failures, or rework loops.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671052365/b69f22b75729e5587563e7ab6830/b1647659-a7ea-403b-89fc-0b150ee97675?expires=1789674300&amp;signature=96b8391b0f37270cd347069bea6333671c26e38ac826891c034d29c9fe278eaf&amp;req=diYgF8l7n4JZXPMW1HO4zdDit7MzU9lSjFK5P3Uf7Rhjw3RlXk4nmZHPSYEl%0AHmqVOkYmJzKhMP%2B42a0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671052365/b69f22b75729e5587563e7ab6830/b1647659-a7ea-403b-89fc-0b150ee97675?expires=1789710300&amp;signature=8b282b823fa89b17f16ef18d5191cacec56b8983db5d386aba570694096c6116&amp;req=diYgF8l7n4JZXPMW1HO4zdDit7MyVd1SjFK5P3Uf7RiKk4akuuFhr3g4H6Cm%0AG%2Bp1sUqJRbdciCWF4rg%3D%0A)
 
 Click into a category to see more information:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671053199/b68936dd5d590c5fbcbbc092b332/5ec247b2-cd67-4f3f-97b5-23479b87a5c6?expires=1789674300&amp;signature=8f8e2b74093ccc5ea243f12fabe8020b506307fe3c7d60ae00a15db172c69e3c&amp;req=diYgF8l7noBWUPMW1HO4zbuGOoIuIb0fodOVMLl17PVPeLuETq73kSiVvYzm%0A3Ykj7%2Fg4aww%2FhJvKiL4%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671053199/b68936dd5d590c5fbcbbc092b332/5ec247b2-cd67-4f3f-97b5-23479b87a5c6?expires=1789710300&amp;signature=ed1197a85b2facd4c7a309f03ee2ce6f2b26a4ca3f40817975a9cb3d338d99b0&amp;req=diYgF8l7noBWUPMW1HO4zbuGOoIvJ7kfodOVMLl17PW9yVvEHmHUpvVm3rz6%0AUeDqeJED9uxiY6HzQds%3D%0A)
 
 ### Inefficiencies
 
 Inefficiencies counts sessions that produced nothing usable and sessions that were personal or off-topic, with their cost (shown only as an aggregate count and cost, with no summaries or drilldown).
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671036122/90dc848a7adf371a872bd89a2f5e/de86945b-ccfe-4e0f-892d-abacc475c5c4?expires=1789674300&amp;signature=1d27cf8b16c0ee7806aa0f1db2c6d975cdfcca90c55f8de1973151ec5867a547&amp;req=diYgF8l9m4BdW%2FMW1HO4zcYfhwaQCvAZBas8rgXn%2Fb1MaDDOQFHQNH%2BNxVpQ%0ADLxxxBJNPpYQyNpRX40%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671036122/90dc848a7adf371a872bd89a2f5e/de86945b-ccfe-4e0f-892d-abacc475c5c4?expires=1789710300&amp;signature=9ace844e44756df40c56a12946ae5b6c184d550d57180d2bb902b4d5ddc9fcdf&amp;req=diYgF8l9m4BdW%2FMW1HO4zcYfhwaRDPQZBas8rgXn%2Fb2Eakt6Q2JlRAwiNwEI%0ArmXQlRKR%2Bf7dQkT77gI%3D%0A)
 
 ### Reusable skills and workflows to build
 
@@ -64,13 +64,13 @@ Reusable skills and workflows to build identifies repeated patterns that could b
 
 Most expensive sessions lists where spend concentrates.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671032083/2b075387a4a3473f884a8ba26436/image.png?expires=1789674300&amp;signature=c49e3192ad7b766dfb227261f1aad2fd18d045904c57e2e75e301aed42eb050a&amp;req=diYgF8l9n4FXWvMW1HO4zdLkI2aj7UIqnUoxuhUXEhiD55cTZ0f2%2BnfvUE6B%0AJ1TIw6poE7U5o0FnT%2FQ%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671032083/2b075387a4a3473f884a8ba26436/image.png?expires=1789710300&amp;signature=ff441e30cf1e68a5d19608f81faf119fb6de8b522e2b49209aec62168ab76b39&amp;req=diYgF8l9n4FXWvMW1HO4zdLkI2ai60YqnUoxuhUXEhgUwzMtIIe0I5dprzTe%0AKDeHOMlxJojV4WRSTjY%3D%0A)
 
 ### Complex, autonomous work
 
 Complex, autonomous work shows  sessions scoring highest on task complexity, time saved, how long Claude worked on its own, and the expertise required.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671031695/3781b98c5cb9cdc069439aa3d9ab/image.png?expires=1789674300&amp;signature=e80909060a1cd87e33fdbfc75ee50df180fd4a083868951d65b217a583e2ab44&amp;req=diYgF8l9nIdWXPMW1HO4zcPtgzv3DNvHtjDEKfEvx0P6DysAn6cq3AhEhiB4%0ANvnjscugHPlamYusCGM%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2671031695/3781b98c5cb9cdc069439aa3d9ab/image.png?expires=1789710300&amp;signature=9b64e014cb0a29c1e36904b50cee5c5304d8f7181922a6f918c1a24dfbb2e2be&amp;req=diYgF8l9nIdWXPMW1HO4zcPtgzv2Ct%2FHtjDEKfEvx0Ps2XVecJKN4RNCLEGs%0AN1VTX7J3JFP0Jv8IjLI%3D%0A)
 
 ### Answers to custom questions
 
diff --git a/content/support/8230524-delete-or-rename-a-conversation.md b/content/support/8230524-delete-or-rename-a-conversation.md
index a03f43e996..27bdfa6165 100644
--- a/content/support/8230524-delete-or-rename-a-conversation.md
+++ b/content/support/8230524-delete-or-rename-a-conversation.md
@@ -44,15 +44,15 @@ These steps apply to Claude for iOS, listed on the App Store as Claude by Anthro
 
 4. If deleting, tap "Delete" again in the confirmation prompt.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599501318/75c28edc693efbe8befd21e4da64/d18a921a-df4b-4788-833c-12c966a32527?expires=1789674300&amp;signature=5c48592d1c4e58a48c3b59d0cf4f8a05166edfdaf0240dd7ce6461971231aa25&amp;req=diUuH8x%2BnIJeUfMW1HO4zSc12adcj2So1DBI29QsIlEZQYRZN1rWi5GrqpLV%0AlKBpwt4dUFVsDlRmgFc%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599501318/75c28edc693efbe8befd21e4da64/d18a921a-df4b-4788-833c-12c966a32527?expires=1789710300&amp;signature=45048b09b8bf216f64954034330f3827aae4edd8f5a41467557e4fe3a9b4a5c9&amp;req=diUuH8x%2BnIJeUfMW1HO4zSc12addiWCo1DBI29QsIlFxyE1D0SdH%2FlPgjL0Z%0AY0KftUhGicuh%2FUvi%2FPY%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493852/2e58b92d18f307bb79ae30650f26/1bbe52f3-202b-4d5d-9f9a-eeda4d6952c3?expires=1789674300&amp;signature=a0f2ca2f2adda275247830214d9800dcaac40b6596d54df5ab4e81f901be3c66&amp;req=diUuH813nolaW%2FMW1HO4zTjXMu6KKcTmj7blKEDtUI3hLCM%2B2hdMDVXLJw9X%0AhxEzUxjMlVdhzg2ZZ8I%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493852/2e58b92d18f307bb79ae30650f26/1bbe52f3-202b-4d5d-9f9a-eeda4d6952c3?expires=1789710300&amp;signature=1113bb60b978b8ddb03897d624530aa44ad2ff2d9174ade1fcfbee2222477b6c&amp;req=diUuH813nolaW%2FMW1HO4zTjXMu6LL8Dmj7blKEDtUI1HqzBPDa9JHAmQ6OeN%0AqeY7%2FLsRqFPCFuxNjKM%3D%0A)
 
 You can also delete the conversation you have open: tap the "⋯" button in the top right corner, tap "Delete," then confirm.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493848/997184c386d0e6fb0bd2d7c1f2b6/5d2bc394-25fc-4814-8c2a-2f54d004f83f?expires=1789674300&amp;signature=8aa81a5399b371853e8e12b5e9642f44438f107b8b922466328a1f66739d75cc&amp;req=diUuH813nolbUfMW1HO4zVCIqpPJzNhFzQl%2BKgU984x%2BffN03EfVetqh3xs1%0APlnIXBYN0QqX4HuXYJk%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493848/997184c386d0e6fb0bd2d7c1f2b6/5d2bc394-25fc-4814-8c2a-2f54d004f83f?expires=1789710300&amp;signature=bd88de86fbcaf23d8afd4642e5285f4d68c9fe02f1825e60d6e9093ec2db6fbd&amp;req=diUuH813nolbUfMW1HO4zVCIqpPIytxFzQl%2BKgU984z3Jj68lLV%2BLkVPyf0N%0ADoAccd5wGalSes0Nu20%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493856/799041da9fa918e90068c5ebf5bd/2e8d5cee-c45a-41d7-a14b-486e50a37f88?expires=1789674300&amp;signature=f868a2b431f98e08c6372979509f33e71169c64de302ba410144a9eed7942ac7&amp;req=diUuH813nolaX%2FMW1HO4zVCl4AH01mFOEDIU8RT6jk2ntWKbZt96cvtLE1E3%0AOZ%2BVicDylWmTnlsV7Fo%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493856/799041da9fa918e90068c5ebf5bd/2e8d5cee-c45a-41d7-a14b-486e50a37f88?expires=1789710300&amp;signature=8989f915494af75847c131c8a75ddbc8ac22b46d40a6348f0ea723c58039077d&amp;req=diUuH813nolaX%2FMW1HO4zVCl4AH10GVOEDIU8RT6jk3bEa54ZK%2BJCfNuKsyb%0ANZ5aOv1JPhqNCv9PZ4A%3D%0A)
 
 ## Delete or rename a conversation on Claude for Android
 
@@ -66,9 +66,9 @@ These steps apply to the Claude for Android, listed on Google Play as Claude by
 
 3. If deleting, tap "Delete" again in the confirmation prompt.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493850/a64e6561222d535f2f5bd03e71f0/5de429c2-d8ed-4e8a-89e8-a13ccaa49767?expires=1789674300&amp;signature=2b20b1a082279dc8dd33f44b703706cc61c45129154f883b11406f7c67808f5a&amp;req=diUuH813nolaWfMW1HO4zVTdd9sqxVR2rqtc0YNNUtI%2FKC%2Bw5yhIyiO6M%2FUE%0AxvdUbvkkmBOA3smB4wI%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493850/a64e6561222d535f2f5bd03e71f0/5de429c2-d8ed-4e8a-89e8-a13ccaa49767?expires=1789710300&amp;signature=08aedb8eaa719f86199ae7e0e9ca5d3837387b3ead03a6cf41ab9cf95956ac32&amp;req=diUuH813nolaWfMW1HO4zVTdd9srw1B2rqtc0YNNUtKWfIzCvbyrjdk0Q8RF%0A6m2VvTH3GWQ5jsSEnSo%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493851/f21b39c60e88050d4b0745325f0d/0a8c0d08-dc53-4ef1-8d9f-2b995242c1f9?expires=1789674300&amp;signature=65761e07e37e02e35d3b9401ca7fdb46e7910deb92d75ab5cacbe66d02a97e61&amp;req=diUuH813nolaWPMW1HO4zUYvw1wNpTpf%2FjekULCQNzWW25ki%2BNiGt%2FurX8Be%0AHu3pmfqgTKh9UjFztFQ%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493851/f21b39c60e88050d4b0745325f0d/0a8c0d08-dc53-4ef1-8d9f-2b995242c1f9?expires=1789710300&amp;signature=6074e8dca2413cf29ee95dd9427c73d14d7349ff8fed3c697e38fa9fabd3a301&amp;req=diUuH813nolaWPMW1HO4zUYvw1wMoz5f%2FjekULCQNzX2cI9kXZ1gKH2pPZES%0A3iqtm78lpGq3eyxfHaQ%3D%0A)
 
 **To delete multiple conversations at once:**
 
@@ -78,9 +78,9 @@ These steps apply to the Claude for Android, listed on Google Play as Claude by
 
 3. Tap the trash icon, then tap "Delete" in the confirmation prompt.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493849/3013a0ab921337b4544f7ffeffa6/e828ec14-fb52-4205-a840-707b6f2a848d?expires=1789674300&amp;signature=d9c8a569b6172daa1c720e445cdc76ca7288604ce73819e426dac2870d7785f0&amp;req=diUuH813nolbUPMW1HO4zWGamM5yfYnc4AqhTnZa84VgmCjDbZvkFEGHt8JP%0AlELulaVGXVS%2FhopyWog%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493849/3013a0ab921337b4544f7ffeffa6/e828ec14-fb52-4205-a840-707b6f2a848d?expires=1789710300&amp;signature=3dc734722cd8cfef6be62dcbe3a67ea260754c701c751db47a2f92c13c5848a5&amp;req=diUuH813nolbUPMW1HO4zWGamM5ze43c4AqhTnZa84W1cOYyAEWu%2BctkaKbm%0Az5OPfnRa0IGAGd6MLks%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493853/e2507f53cce8a26776a22a457b1a/bd79bb8a-b078-420f-a4e1-75590367aa80?expires=1789674300&amp;signature=8bf9230f78f11ca1118d152ddfb99e1b4ee6de8f124674e16aae509a45c438ea&amp;req=diUuH813nolaWvMW1HO4zQTtExz3w0Q7SBGfF3I2bRjv%2FNh6egHzGSJ7echb%0A9WhKULICFLADhcKLvco%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2599493853/e2507f53cce8a26776a22a457b1a/bd79bb8a-b078-420f-a4e1-75590367aa80?expires=1789710300&amp;signature=7605ba152534df310d4a1d7e669a9ef1b47582426d11dcd779b604f8c01ca596&amp;req=diUuH813nolaWvMW1HO4zQTtExz2xUA7SBGfF3I2bRjRCbecFJIOwhmq4qtT%0AYl0sjS2hnBiOOSMy1AM%3D%0A)
 
 ## What happens when you delete a conversation
 
diff --git a/content/support/8325618-paid-plan-billing-faqs.md b/content/support/8325618-paid-plan-billing-faqs.md
index 521fd19ed2..a4707c3657 100644
--- a/content/support/8325618-paid-plan-billing-faqs.md
+++ b/content/support/8325618-paid-plan-billing-faqs.md
@@ -50,7 +50,7 @@ There's no separate option to remove a card, and updating to a new card replaces
 
 If you want to use a name other than the one tied to your payment method, check the "Use a different name on invoices" box when adding or updating your payment method in **[Settings > Billing](https://claude.ai/settings/billing)**.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1922141785/666191101c11030b05f03a668a74/image.png?expires=1789674300&amp;signature=08974a5e0a132bb20891bb741b6b6ca352f002c5cc7f334083755ffc4765d82c&amp;req=dSklFMh6nIZXXPMW1HO4zVXW8GStbDfPQoNvNFTb5ceH1KPXpjj%2BN0m2xrqH%0AhJH2NljO%2BsOEa7gYoaA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1922141785/666191101c11030b05f03a668a74/image.png?expires=1789710300&amp;signature=ce37b11930b61b1522bfe13c8fbea7eb4f4b5833f3376c6a478a16475da4bfe1&amp;req=dSklFMh6nIZXXPMW1HO4zVXW8GSsajPPQoNvNFTb5cdYu2IYLFEL%2F0Ntxdw9%0AGw9rzD1mbwoQMXAnqtk%3D%0A)
 
 ## How can I edit a paid invoice?
 
diff --git a/content/support/8887527-customizing-your-appearance-settings.md b/content/support/8887527-customizing-your-appearance-settings.md
index 854ae57cbe..9d1e41aecb 100644
--- a/content/support/8887527-customizing-your-appearance-settings.md
+++ b/content/support/8887527-customizing-your-appearance-settings.md
@@ -8,7 +8,7 @@
 
 3. Select from Light, Match System, and Dark under **Color mode**.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1648260417/d478c757c7115ad58a12026d4caf/AD_4nXc__Qop4X9hknWGfGj_y_DCpLutLruhxIclJIfir0ilsgNMg7X8ksIVnqk1Oce5FKlGIOYu9CKbVsu8DqD7iIY2aC0ZfXMyFTeAdNq-Cao2mXcj_WUpNF0kM2HoYR_dEx6N_cuJow?expires=1789674300&amp;signature=3ca30ccdde24e64d53d111369373361cec6d48545b623e3faf32fd57debb132e&amp;req=dSYjHst4nYVeXvMW1HO4zc2jJ6s7h4%2FnSBkgeTglJrosfKKEhGGa%2BVJJ0cnI%0AGNAgeBOHKa4Q9ESScNE%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1648260417/d478c757c7115ad58a12026d4caf/AD_4nXc__Qop4X9hknWGfGj_y_DCpLutLruhxIclJIfir0ilsgNMg7X8ksIVnqk1Oce5FKlGIOYu9CKbVsu8DqD7iIY2aC0ZfXMyFTeAdNq-Cao2mXcj_WUpNF0kM2HoYR_dEx6N_cuJow?expires=1789710300&amp;signature=d4d001969d568cebc8d1111af8070b20b55a46e1d9c6c5eb0d0550ff83e7b335&amp;req=dSYjHst4nYVeXvMW1HO4zc2jJ6s6gYvnSBkgeTglJrqYH2WYZFDlCblN5ILB%0AZ5cF9oFN4DwXlRZU5c0%3D%0A)
 
 ## How to change your font
 
@@ -16,10 +16,10 @@
 
 2. Select from Default, Match System, and Dyslexic Friendly.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1648260416/7fc0803d44d8de40f8e6636b2eb6/AD_4nXf0UEDa1i2QmqlQtoB5BgpQ-FfZVzss_7wMVQdvkmEDSfoTxixnG0GSxC6qrOs21HdkXH-I2Yn_GHDAf8yjd6FJtoh9FadALozvIErFp9r8LychDGLPb7OpN1CN4PRcgVAYNCre?expires=1789674300&amp;signature=8a12c281b2d61b99139ec2bbaea2475007adf2844ec8ac0a57f737ad4847fdd4&amp;req=dSYjHst4nYVeX%2FMW1HO4zc8962njWnU%2FQtNFlF5%2FHEd1TadygkSJXnmJA%2FZi%0AUxjemLrvoKywNrYRRqQ%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1648260416/7fc0803d44d8de40f8e6636b2eb6/AD_4nXf0UEDa1i2QmqlQtoB5BgpQ-FfZVzss_7wMVQdvkmEDSfoTxixnG0GSxC6qrOs21HdkXH-I2Yn_GHDAf8yjd6FJtoh9FadALozvIErFp9r8LychDGLPb7OpN1CN4PRcgVAYNCre?expires=1789710300&amp;signature=4e5bacc1ce86aa99d0906752da57bbcbd580df86256686b71d8c63c152cdc272&amp;req=dSYjHst4nYVeX%2FMW1HO4zc8962niXHE%2FQtNFlF5%2FHEfVBaWMiPkPsSPIQyWV%0ASdwytWW4vGDtjqroc4E%3D%0A)
 
 ## Can I disable the sidebar?
 
 It's not currently possible to completely disable the sidebar. You can click the button on the top right of the sidebar to open or close it.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1941108004/5217903737ddd9bb62fe5d7a904c/CleanShot+2026-01-14+at+09_12_58.png?expires=1789674300&amp;signature=7ed3086515d3815e226e01d04da181f8550c663235fc7b672af5e33690d519db&amp;req=dSkjF8h%2BlYFfXfMW1HO4zUS%2BB1bwXn%2FsylfYa7uDb9nxnhYzNMEmzaC89S98%0Atj0EmWTWpEB31JMycR0%3D%0A)
\ No newline at end of file
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1941108004/5217903737ddd9bb62fe5d7a904c/CleanShot+2026-01-14+at+09_12_58.png?expires=1789710300&amp;signature=d1e520ca1f4d0825e8aada7ebb5a462c71567126ed26836eee36b1256ceb0654&amp;req=dSkjF8h%2BlYFfXfMW1HO4zUS%2BB1bxWHvsylfYa7uDb9mRvmnDLyE3poFXKpyY%0Az08oGVufJyFd2JgvJrg%3D%0A)
\ No newline at end of file
diff --git a/content/support/9267400-move-your-personal-claude-account-to-a-team-or-enterprise-organization.md b/content/support/9267400-move-your-personal-claude-account-to-a-team-or-enterprise-organization.md
index 18b04e3101..b283e331c5 100644
--- a/content/support/9267400-move-your-personal-claude-account-to-a-team-or-enterprise-organization.md
+++ b/content/support/9267400-move-your-personal-claude-account-to-a-team-or-enterprise-organization.md
@@ -126,7 +126,7 @@ For the full walkthrough of your options, deadlines, and what happens to your su
 
 You may have both a personal account and an organization account tied to the same email address. You can switch between them by clicking your initials or name in the lower left corner of the screen.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312193347/712f763fc290b2488c103849f20c/0c135a6f-3442-4ee1-9ab7-98673f03ef6e?expires=1789674300&amp;signature=c7348e484129715e023dc723fcd717e1b454646e53e4e4db4b2d975a946bf521&amp;req=diMmFMh3noJbXvMW1HO4zXhPndkwzxtiufhmlOXMdYb8WQEW2%2FRnkfB9tFd5%0AQeiPkwdXYIO5wDatjNw%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2312193347/712f763fc290b2488c103849f20c/0c135a6f-3442-4ee1-9ab7-98673f03ef6e?expires=1789710300&amp;signature=24fe4afabd6991e04daa7bf01299ad5bdde8cebd905d3f25a4e922e834b82641&amp;req=diMmFMh3noJbXvMW1HO4zXhPndkxyR9iufhmlOXMdYZoKR9Irh1KYO%2FR1%2B0y%0A1Q5wKLR2zhAnKn25jjE%3D%0A)
 
 A blue checkmark shows which account you're currently using. Click the other account to switch to it and access its separate conversations and projects.
 
diff --git a/content/support/9519177-how-can-i-create-and-manage-projects.md b/content/support/9519177-how-can-i-create-and-manage-projects.md
index 1b98ac8395..f341880de7 100644
--- a/content/support/9519177-how-can-i-create-and-manage-projects.md
+++ b/content/support/9519177-how-can-i-create-and-manage-projects.md
@@ -104,15 +104,15 @@ Starring a project allows for quick access from your projects and chats list, vi
 
 You can move a standalone chat into a project by clicking on the dropdown arrow next to the chat name, then “Add to project”:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1784190248/0f19c8de18b494a27be252fdfaff/d4e7a5c5-25f5-4623-862b-c593d2dc0b39?expires=1789674300&amp;signature=649b7cc4074f532baed9ed01bf913538052cc0010cc569279498af3fd3565030&amp;req=dScvEsh3nYNbUfMW1HO4zQABaWhqTaQWBSXNVFXQ%2FVECWsED6C7iI0lwvrRj%0A4%2FMrcP4q1rqfn7bXWtI%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1784190248/0f19c8de18b494a27be252fdfaff/d4e7a5c5-25f5-4623-862b-c593d2dc0b39?expires=1789710300&amp;signature=844eb178e4451961c75686b5a393e9737a1b48355ae3c0be17b86f451b76fd7c&amp;req=dScvEsh3nYNbUfMW1HO4zQABaWhrS6AWBSXNVFXQ%2FVEkGNxpSUmNmQ2oWjqj%0AJ3r7MBkzYPjlZq6akNA%3D%0A)
 
 Browse or search for the correct project in the **Move chat** modal that appears, then click on it to move the chat.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1784190951/34dc256ccd4c0cf74976f31062e6/55365cf2-059d-41b2-ac95-4b00c4389a76?expires=1789674300&amp;signature=5ab96bf6897ad3b3a728cdd321d1eababb8b7b6214037e4c2bf779c5eda3606d&amp;req=dScvEsh3nYhaWPMW1HO4zSMECim2zA0CgYbpTjViBxDGhjpmrkjGssdnXzX%2F%0AqS9ZLOkDtzETU4sM3F4%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1784190951/34dc256ccd4c0cf74976f31062e6/55365cf2-059d-41b2-ac95-4b00c4389a76?expires=1789710300&amp;signature=787d415da755c9368948e1ff98f2ef0da1110ad8430acc7a1765be421473f3b1&amp;req=dScvEsh3nYhaWPMW1HO4zSMECim3ygkCgYbpTjViBxA2SzE5oFl0QUb1N2tR%0Ajz%2FM9dW1dPVmQdhlGoo%3D%0A)
 
 You can also remove chats from projects, or move them between projects, using the same dropdown menu within the chat:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1784185682/8625eac15b9fa452f148a6c47250/c53a1bc4-a991-4684-a789-5447ed789d35?expires=1789674300&amp;signature=25f8f27e2a2d53749962f357bac1ca935c8e6146e2fc905dcc34448189198d7e&amp;req=dScvEsh2mIdXW%2FMW1HO4zb6DuP4qCUEJS2r1%2FGRlqOTBTcnxYfv3OSRMTXwq%0AgXuPNbn4s%2BhgSssvbj4%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1784185682/8625eac15b9fa452f148a6c47250/c53a1bc4-a991-4684-a789-5447ed789d35?expires=1789710300&amp;signature=05825254e5ee5693fde92f026c6c7f8d380593b4853ea7a22819f7ebf80f19c0&amp;req=dScvEsh2mIdXW%2FMW1HO4zb6DuP4rD0UJS2r1%2FGRlqORDp8LbWl7vweQpO9Et%0AKWkKyYd5fcUv3ck9e%2Bo%3D%0A)
 
 ---
 
diff --git a/content/support/9519189-manage-project-visibility-and-sharing.md b/content/support/9519189-manage-project-visibility-and-sharing.md
index 6cd10b0688..8cbc3b4d14 100644
--- a/content/support/9519189-manage-project-visibility-and-sharing.md
+++ b/content/support/9519189-manage-project-visibility-and-sharing.md
@@ -12,7 +12,7 @@ When creating a project on a Team or Enterprise plan, you can choose between two
 
 - **Private:** Only invited members can view and use the project.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370991/2b6b16e5deff094e073a5b4bb0ea/63197103-24c0-41e5-aebd-9b8f431837bb?expires=1789674300&amp;signature=eadd941823614f8a89df40630a8fe9ff6e87460313b9fbbad793b4354b3b0ba2&amp;req=dScjFsp5nYhWWPMW1HO4zd3a2VUiI4qkHK95%2FTFaPykvL7UnCR%2BPTMIL9aZk%0AousxHgSQMrtYYvBq98M%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370991/2b6b16e5deff094e073a5b4bb0ea/63197103-24c0-41e5-aebd-9b8f431837bb?expires=1789710300&amp;signature=0cbd4f63254fdc1165f8deecb89d18b9becbef22fc0d94904eec60dbbfa9b4ce&amp;req=dScjFsp5nYhWWPMW1HO4zd3a2VUjJY6kHK95%2FTFaPykrLuketeE294dUCHt2%0Amz0EwmuO%2FCaytu53%2FSU%3D%0A)
 
 ## What are public projects?
 
@@ -22,11 +22,11 @@ If you choose to share a project with the rest of your organization upon creatio
 
 Yes, you can switch the visibility of a project you created as public to private at any time by opening the project and clicking the “Share” button to the right of the project name:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370987/5d5db997e6b42e627ffa62fddf75/4823906b-9535-4a19-b89e-a1003f1e6e68?expires=1789674300&amp;signature=ec99d5d97c097a58e7ddbf16d9e7ae06e757dbc7d2c70c15431616c59c473e3e&amp;req=dScjFsp5nYhXXvMW1HO4zUiDoiDxhgIqE8Kp5wh0MSBnBbk8xJ22WMVtFrNg%0Aq3hVe22Ee7Q6wwW9l04%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370987/5d5db997e6b42e627ffa62fddf75/4823906b-9535-4a19-b89e-a1003f1e6e68?expires=1789710300&amp;signature=9d9cf148291d4468b57f3f29dce017bfc34d5f8d530ec9b9c3d2f66a410c9f96&amp;req=dScjFsp5nYhXXvMW1HO4zUiDoiDwgAYqE8Kp5wh0MSCWN9%2FXjYeaTE90Is98%0Ai5%2BqqrwE9vCHuyHpE%2FE%3D%0A)
 
 Click “Everyone at [your organization]” under **General access** and select “Only people invited” to change the project from public to private:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370988/386407facbf3e73d2f5538623a18/69d8ffcd-e1ca-470f-a219-5b88704e41f2?expires=1789674300&amp;signature=a4288183b5a0cf9db251cc7de2a652e7f094a4214307c6cd5a0cb28645c32810&amp;req=dScjFsp5nYhXUfMW1HO4zckCIftkZSanl3XeGelDRW30OYqTBuCG0UJU%2FUfx%0A1mG%2BE5wqtstNCJff5so%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370988/386407facbf3e73d2f5538623a18/69d8ffcd-e1ca-470f-a219-5b88704e41f2?expires=1789710300&amp;signature=d86c4825a414ce68532b453c9ef92e7b30c9e4f7759a445cd704b0f03541b851&amp;req=dScjFsp5nYhXUfMW1HO4zckCIftlYyKnl3XeGelDRW3G7zixHIQH6uAOU4%2Bf%0ATgVXre9piW8yXFQEd9o%3D%0A)
 
 ## What are private projects?
 
@@ -36,11 +36,11 @@ Choosing “Only people invited” keeps your project private so that you are th
 
 Yes, you can switch the visibility of a project you created as private to public at any time by opening the project and clicking the “Share” button to the right of the project name:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370989/f829dcd8bdd88e944322f678323f/9d25eff1-6df3-40be-82eb-ba7fe09187e8?expires=1789674300&amp;signature=94aafcef22b0089b36d692e82144100acc1fa5fac6fcbd32d55859bf797f677f&amp;req=dScjFsp5nYhXUPMW1HO4zaSEGlqaTbwO2JrJefVtywmTWqwgHwEVGBtsfinp%0AMIC4Itu7uo8CHEcFNz0%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370989/f829dcd8bdd88e944322f678323f/9d25eff1-6df3-40be-82eb-ba7fe09187e8?expires=1789710300&amp;signature=190ed4b115d4518f16a407b0b9add8b981afe9c0c8a81a64939707ea15092a26&amp;req=dScjFsp5nYhXUPMW1HO4zaSEGlqbS7gO2JrJefVtywmhq3VUIc2mIUQXK1aM%0A2Jv9rnqlGBRKqxpDZfY%3D%0A)
 
 Click “Only people invited” under General access and select “Everyone at [your organization]” to change the project from private to public:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370990/d173fbc6f030780d30c6d7b8e204/7e47b9d1-89fe-4607-8b5b-f7b06e7ad0d6?expires=1789674300&amp;signature=7423abedebf41fead92d621189a6cf99b90a7b6494d096329fc2c75cb5976161&amp;req=dScjFsp5nYhWWfMW1HO4zT7Q08G9uggVAmYRPrgMBZlVOT7aRoZgOnx8ZRYW%0AtUCpl4at7EFef7goH1E%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1740370990/d173fbc6f030780d30c6d7b8e204/7e47b9d1-89fe-4607-8b5b-f7b06e7ad0d6?expires=1789710300&amp;signature=e5e9ffa37e66b35a2c79debdd1bd887b3008c2a4b0c347e84c681e227cb174e6&amp;req=dScjFsp5nYhWWfMW1HO4zT7Q08G8vAwVAmYRPrgMBZmB6HQvXK8Vr0KlZH7d%0AD6l7aGatCKaLXfNRs94%3D%0A)
 
 ## Add and remove access to private projects
 
diff --git a/content/support/9534590-cost-and-usage-reporting-in-the-claude-console.md b/content/support/9534590-cost-and-usage-reporting-in-the-claude-console.md
index 32ffe38049..bc639b52ca 100644
--- a/content/support/9534590-cost-and-usage-reporting-in-the-claude-console.md
+++ b/content/support/9534590-cost-and-usage-reporting-in-the-claude-console.md
@@ -8,7 +8,7 @@ The Claude Console provides detailed cost and usage reporting to help you effect
 
 Users with access to these reports can click into them on the left navigation menu on the Console:
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584654217/db0a977417e38e43639f060d96e0/image.png?expires=1789674300&amp;signature=12045e293a9ef264afcd63da19439379d6a0d3550b2630c08b0e4ecb8128a41e&amp;req=dSUvEs97mYNeXvMW1HO4zYCWiS0ehsKZuqqBX2puyxQqj6w7n77LdJoins6f%0AgMF%2BJBu1ZJKMNnmZTrI%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584654217/db0a977417e38e43639f060d96e0/image.png?expires=1789710300&amp;signature=63ad05823a4992c3780d40ec40787190ec31c280b1ce08df1b1b9804fcd6c2a4&amp;req=dSUvEs97mYNeXvMW1HO4zYCWiS0fgMaZuqqBX2puyxQTa3Mgp4MQqoPKBlYH%0A07sNmGkdTF2pm8jgqqs%3D%0A)
 
 ---
 
@@ -46,9 +46,9 @@ The [Usage page](https://platform.claude.com/usage) offers a detailed breakdown
 
 6. Use the export button to download a CSV of the displayed data.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584664321/59b50eba0b61e0789f7055fcf9f4/image+%285%29.png?expires=1789674300&amp;signature=2d8a1707738635b51b5d9da13d524a2a53a0b40d54d68d93d7a461fcc3ab1a65&amp;req=dSUvEs94mYJdWPMW1HO4zQwER3osJotlqMITUZbanFB64Cr472WKka0jtPmd%0A3empO1yhhdGthm4RNHA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584664321/59b50eba0b61e0789f7055fcf9f4/image+%285%29.png?expires=1789710300&amp;signature=c91b3731f995cbb0cf3d0ca962fa3558587525d8158dd431bc77a73b547528d6&amp;req=dSUvEs94mYJdWPMW1HO4zQwER3otII9lqMITUZbanFA8nnvcO%2FPTC6kiSDZj%0AVdNOscl5lZAW6zijG9I%3D%0A)
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584693386/aed472efe163abcbc14fa32f3699/rate+limited+requests.png?expires=1789674300&amp;signature=21cc7fbe11aaadc1aa54380ac858104738508a3ae170e11bb5845aae429cdaed&amp;req=dSUvEs93noJXX%2FMW1HO4zRxEwWJL4VVv21D6pckxWMaAEli2nsV44wBP8VLM%0A4IiHfGZfu2Y8w9crmdA%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584693386/aed472efe163abcbc14fa32f3699/rate+limited+requests.png?expires=1789710300&amp;signature=04fdd1f2e166a885166342729d8e1c0c0f4789254661220721fdb3b6e9bb17dc&amp;req=dSUvEs93noJXX%2FMW1HO4zRxEwWJK51Fv21D6pckxWMYgvFpswK5MX7Zdu%2FhP%0A9EKsesIhJBvEwZvZBmA%3D%0A)
 
 ### Rate Limit Use
 
@@ -88,6 +88,6 @@ The [Cost page](https://platform.claude.com/cost) helps you understand your spen
 
 5. Use the export button to download a CSV of the cost data.
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584679401/4d0bc8ed08625e1adee414e77030/CleanShot+2025-06-23+at+08_54_40%402x.png?expires=1789674300&amp;signature=779719bae19331d1cb28a4197ad86fa7a0f1e6d6dc93c8aed3d3ff8fc7a24b0b&amp;req=dSUvEs95lIVfWPMW1HO4zUR%2Bh5XFVNRiCyIF5nuUsbzNfzjBaYZbtvoxbUjR%0ABScZq8u2G5HgpYcx9Ao%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/1584679401/4d0bc8ed08625e1adee414e77030/CleanShot+2025-06-23+at+08_54_40%402x.png?expires=1789710300&amp;signature=00f3f4b878a9862930614770339711c110823c91e7a7af9440864c7605e876f4&amp;req=dSUvEs95lIVfWPMW1HO4zUR%2Bh5XEUtBiCyIF5nuUsbwr3K1C2bABqAYh8zzS%0AFtcE6rvF%2FQDDmRMik%2Fk%3D%0A)
 
 **Note**: Currently, it's not possible to break down usage or cost by individual users.
\ No newline at end of file
diff --git a/content/support/9927533-disable-public-projects-for-your-organization.md b/content/support/9927533-disable-public-projects-for-your-organization.md
index 3d25e6a912..fc524e89fc 100644
--- a/content/support/9927533-disable-public-projects-for-your-organization.md
+++ b/content/support/9927533-disable-public-projects-for-your-organization.md
@@ -10,7 +10,7 @@ Follow these steps:
 
 2. Find **Public projects** and toggle it off
 
-![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2053902291/8c39d1a79dedc97411eed54dec5c/CleanShot+2026-02-11+at+11_25_34%402x.png?expires=1789674300&amp;signature=697fb727c76e65b5ecf5cfcf461a2e7d5a957b8759a8fd63077d21fc25f6697a&amp;req=diAiFcB%2Bn4NWWPMW1HO4zfGib26ibARcYabJlVJ9VPyNvD3izMTTeUJBFJ7R%0ALPOAZGSuHs7zSJSc9R4%3D%0A)
+![](https://downloads.intercomcdn.com/i/o/lupk8zyo/2053902291/8c39d1a79dedc97411eed54dec5c/CleanShot+2026-02-11+at+11_25_34%402x.png?expires=1789710300&amp;signature=aea73ba8874f83aabea19ab9e06eb94fca917044090043b5e5f75735d0655b38&amp;req=diAiFcB%2Bn4NWWPMW1HO4zfGib26jagBcYabJlVJ9VPycCCY2cEjJ1rZ5U7Df%0Auyfzb9FLMEub0Dc7nj8%3D%0A)
 
 ## How does disabling public projects work?
 
diff --git a/discovery.json b/discovery.json
index 46ebf3431d..8652efb88f 100644
--- a/discovery.json
+++ b/discovery.json
@@ -1,7 +1,7 @@
 {
   "version": 1,
   "note": "What the last full run could see outside sources.json. Written by the fetcher so a new source arrives as a diff a human reviews, not as a line in an Actions log nobody reads. Stable facts only: a change here is always news. `review` is the actionable list \u2014 domains we could archive today and do not.",
-  "updated": "2026-09-17",
+  "updated": "2026-09-18",
   "domains": {
     "anthropic.com": {
       "status": "frozen",
diff --git a/tombstones.json b/tombstones.json
index f79b399a0c..461fb896a0 100644
--- a/tombstones.json
+++ b/tombstones.json
@@ -1,7 +1,7 @@
 {
   "version": 1,
   "note": "URLs confirmed gone upstream. Kept so a page that died once does not report as a fresh failure on every later run, which would bury the failure that is actually new. An entry clears itself if the URL answers again -- but only while something still probes it. Entries whose local file was removed are no longer fetched, so they stay as a record of the restructure rather than a live check.",
-  "updated": "2026-09-17",
+  "updated": "2026-09-18",
   "urls": {
     "https://claude.com/docs/claude-science/annotations": {
       "since": "2026-09-01",