the notable changes are guardrails the fleet can use: `onFailure: "block"` for Agent SDK hook callbacks (a failing callback now blocks the action instead of letting it run), a check that asks before a web or shell tool call sends your account email address to the network, and a `/schedule` warning when a new cloud scheduled task gets connectors you did not ask for. It also fixes project and local MCP servers disconnecting after the first turn in some Claude desktop sessions, and adds a cost report to the Claude apps gateway admin API.