News / Claude Code
All Claude Code stories, newest first. Every card links to a TLDR page with the original source.
2.1.235 makes permission dialog text and 'don't ask again' scopes match the actual grant, fixes a Shift+Tab permission prompt bug, prompt-cache invalidation on language server reconnects, and adds an optional.
2.1.234 adds auto-continue when the usage limit resets, fixes an MCP secret leak and a permission preview security issue. The review tallies 3 warnings and 17 informational changes; no critical findings.
Review confirms Write() permission deny rules are no-ops; matching Edit() rules are required to actually block file modification. 2.1.233 fixes MCP v2 reconnection loops, adds memory cgroup support, and configurable.
2.1.231-2.1.232 enable subagent forking by default (forks inherit conversation and cache), run /code-review at high effort as a background agent, and background non-teammate agent spawns in interactive sessions by.
2.1.229 adds SSE keepalive pings, workflow prefix staggering, dangerous-flag protection for /commit-push-pr and 32MB conversation limit handling, but /model breaks when a custom ANTHROPIC_BASE_URL is configured.
2.1.228 fixes session cleanup deleting contents inside a project's memory folder, sessions that stop redrawing while the process runs, and cross-session messaging starting without an inbox after upgrade.
Upgrade review from 2.1.220 to 2.1.226: base-URL idle timeout and background PreToolUse bypass bugs are resolved, headless OAuth 401s fixed in 2.1.225, subagent spawn depth 3 is default, and several security fixes.
Review of 2.1.224-2.1.226 flags transient OAuth 401s in headless sessions (fixed in 2.1.225), notes 2.1.226 is an opaque release, and warns crossSessionInbound defaults can block cross-session messaging after upgrades.
2.1.224 adds cross-session SendMessage with crossSessionInbound and dialogExpiry settings, removes the 200-subagent per-session cap, and aliases /review to /code-review.
2.1.223 ships Bash permission bypass security fixes, reliability fixes for forked background agents and resume diagnostics, /code-review effort memory, and warnings when subagent models are restricted.
2.1.222 fixes stream idle timeouts on ANTHROPIC_BASE_URL gateways and SendMessage rejecting long summaries; 2.1.221 fixed an MCP connector refresh race.
2.1.221 (38 changes) makes background sessions commit and push to preserve work, gives /fork its own worktree, adds sandbox credential masking on Linux/WSL, fixes an MCP connector refresh race, and activates plugins.
Review of 2.1.220 finds Write(path) permission deny rules are not matched by file permission checks; only Edit(path) rules cover file-editing tools. Teams using Write() deny rules for sensitive files have no protection.
2.1.219 changes default subagent nesting depth from 1 to 3 (the third change in three releases), makes Opus 5 the default Opus model, improves MCP error reporting, and removes Opus 4.7 from fast mode.
2.1.206 lets background agents auto-upgrade right after a Claude Code update, auto-allows git push to the configured remote in /commit-push-pr, asks confirmation for outside worktrees, and fixes OAuth MCP re-auth loops.
2.1.205 adds an auto-mode rule blocking session transcript tampering, turns /doctor into a full diagnostic, fixes structured output on invalid schemas, a Windows worktree deletion bug via NTFS junctions, and.
2.1.203 and 2.1.204 shipped without changelog entries, likely hotfixes. The review warns dark releases make pre-deployment risk assessment impossible for teams running unattended agents on pinned versions.
2.1.202 changes /review <pr> to a single-pass engine, adds a dynamic workflow size setting and OpenTelemetry workflow attributes, and fixes Remote Control command handling, mTLS rotation failures, and duplicate skills.
2.1.200-2.1.201 rename the default permission mode to manual, stop AskUserQuestion auto-continuing by default, fix tmux 3.4+ flicker, background session crash resilience, and subagent rate-limit handling.
2.1.199 raises default retry counts for transient errors, auto-retries transient 429s for subscribers, fixes a Linux daemon self-kill loop after unclean shutdowns, SendMessage misrouting, and hook stderr visibility.
2.1.197 makes Sonnet 5 the default model. 2.1.198 adds background agent auto-PR in worktrees, agent notification hooks, thinking-config inheritance for subagents, and gateway failover improvements.
Review of 2.1.192-2.1.197 highlights a hook matcher regression fix in 2.1.195 and new behaviors in 2.1.193. Two warnings: background shell reaping and version guards acting as floors without ceilings.
2.1.188-2.1.191 bring MCP reliability and performance improvements. The review again documents the binary updating itself despite both update-suppression env vars, urging external enforcement for regulated deployments.
2.1.187 adds sandbox.credentials to block sandboxed commands from reading secrets, org-configured model restrictions across pickers and env vars, a 5-minute idle abort for hung remote MCP calls, and worktree cleanup.
2.1.186 fixes Agent(type) deny rules not being enforced for named subagent spawns, surfaces background subagent permission prompts in the main session, adds claude mcp login/logout, and fixes post-wake streaming errors.
2.1.183 blocks destructive git commands in auto mode unless requested (reset --hard, checkout -- ., clean -fd, stash drop), adds deprecated-model warnings, and stops scheduled triggers being treated as keyboard input.
Review documents Claude Code auto-updating from 2.1.178 to 2.1.181 despite DISABLE_UPDATES and DISABLE_AUTOUPDATER being set, and a changelog gap for 2.1.179-2.1.181.
2.1.179 fixes mid-stream connection drops leaving sessions stuck at 'running tool' (a 2.1.172 regression) and improves plugin loading in remote sessions. WSL2 mouse-wheel scrolling remains broken since 2.1.172.
2.1.178 fixes an OOM crash caused by stale FD env vars inherited from parent processes, an ANTHROPIC_BASE_URL auth issue, and credential refresh persistence. New Tool(param:value) permission syntax lands.
A PM with 12 years of 0-to-1 product experience built `vibe-check`, a free MIT-licensed Claude skill that forces proper product discovery *before* any code is written. It runs you through problem validation (with Redd...
Terminal dashboard that runs multiple AI agent CLI sessions (Claude Code, Codex, npm) in a single 3-pane window. Solves window-switching chaos. Shows context window %, session timing, git branch per pane, global persi...
Ponytail is a CC plugin (AGENTS.md + slash commands) enforcing a "lazy senior dev" decision ladder before any code: does it need to exist? stdlib? platform native? one-liner? Only then write minimum code. Benchmarked:...
Cumulative 2.1.168-2.1.177 review: subagent nesting to 5 levels can bypass naive spawn guards, WebFetch wildcard deny rules like *.onion were silently broken and are now fixed, 1M sessions auto-compact when stuck.
TodoWrite injects a `todo_reminder` block near the FRONT of the conversation. Every checkbox update re-stamps that block, busting the prompt cache after the system prompt - forcing a full context rewrite (800k-900k to...
Review of 2.1.174-2.1.177: mostly bug fixes, with Remote Control flagged as a silent model-switching vector. The reviewer argues against multi-step upgrade plans since the changes are overwhelmingly fixes, not.
Design agency founder turned their repeated Claude prompts into 30 reusable skill markdown files covering the full brand-building process: strategy, naming, identity, voice, messaging, positioning, competitive mapping...
2.1.173 strips the [1m] suffix from Fable 5 model names (1M context is default), fixes a spurious sandbox dependency warning on Windows, and leaves two dark releases (2.1.174-175) without published changelogs.
A poisoned-package campaign hit 32 npm packages (117k weekly downloads) plus 57 more. Malware persists through Claude Code SessionStart hooks and VS Code tasks, exfiltrates cloud and git credentials, and survives.
2.1.172 addresses long-conversation performance and plugin lock files, while the review warns of 1M-context sessions getting stuck on older builds, ineffective WebFetch wildcard deny rules, and deeper subagent.
2.1.169-2.1.170 ship incremental fixes with no critical findings. The review carries three warnings for unattended deployments, including missing fallback-model config and version pin staleness.
Claims Anthropic open-sourced `anthropics/knowledge-work-plugins` for Claude Cowork - role-based plugins (sales, marketing, finance, legal, data) with skills/commands/connectors. Commenter flagged: the org is "anthrop...
Recap of 2.1.162-2.1.168 recommends configuring a fallbackModel for API resilience and warns against 7-version jumps without intermediate testing. No critical findings; two warnings carried forward.
A Claude Code skill called Canary that closes the loop on UI validation. Instead of manually checking if a fix worked, Claude reads the code diff, identifies affected UI flows, and runs them in a real browser - leavin...
Free Claude Cowork skill (not CC) that audits Meta Ads end-to-end using live data via Two Minute Reports MCP. Read-only - pulls 9 data layers (campaigns, ad sets, creative, placements, device, geo, dayparting, funnel ...
Claude is blocked from direct Reddit scraping (legal dispute + anti-bot). Community found 3 clean workarounds: (1) Reddit's public JSON API - free, no auth for public subs, returns 100 posts as structured JSON; (2) ol...
Repo github.com/ahmeabd/italia-corpus contains all Italian legislation in clean Markdown. A git clone gives Claude Code (or any LLM) instant access to the full corpus. Most valuable feature: every legislative update i...
Munder Difflin orchestrates existing Claude Code terminals as an "office" of agents (The Office theme). GOD agent "Michael" runs hourly standups, agents share a MemPalace memory layer. Survives the June 15 billing cha...
2.1.168 ships without notable documented changes. The review criticizes changelog opacity across recent releases, making risk assessment impossible, and notes incremental version gaps compound behavioral changes for.
Review of 2.1.166-2.1.167 flags a real gap in permission deny-rule coverage with no configuration workaround, and warns that pinning old versions accumulates security debt.
Review of 2.1.162-2.1.165: auto mode improves data exfiltration detection, WebFetch deny enforcement and a startup hang fix land, and 2.1.164 was skipped upstream. Classified as safe, incremental releases.
Built a physical device that shows Claude Code token/usage stats in real time on a GeekMagic Small TV Ultra - a tiny $8 esp8266 + ST7789 screen. Ported and rebuilt from an existing M5StickC Plus project by u/Mechanica...
Data scientist new to AI-first company finds CC slow and mentally draining. Top community response: vanilla setup = bad results - you need CLAUDE.md, skills, hooks, and memory configured. Heavy users who get productiv...
2.1.162 enforces WebFetch deny rules correctly, fixes cross-session SendMessage routing via TMPDIR, respects MCP timeout config, quiets startup output, and changes error message formats that scraping tools may depend on.
2.1.161 fixes tmux pane capture corruption and MCP secrets leaking into daily logs; 2.1.160 removed the Opus 4.6 fast-mode override and renamed the workflow keyword to ultracode.
2.1.160 appears internal-only with no visible breaking changes. The review focuses on the risk of large version jumps for long-lived sessions and the fragility of adaptive-thinking env var overrides across releases.
2.1.158-2.1.159 introduce no breaking changes, but the review warns that pinned deployments now trail 13 releases, accumulating unpatched fixes. Floating 1M-context model aliases are flagged as an upgrade hazard.
Version-by-version risk map for 2.1.146 to 2.1.157 recommends skipping 2.1.147 (Bash regression), 2.1.148-152 (MCP reconnect loop, credential leak) and 2.1.153-156 (tmux regression), landing on 2.1.157 where all are.
2.1.154 is a major release: Opus 4.8 becomes the default model, Dynamic Workflows (parallel subagents) arrive as a research preview, MCP stdio servers gain new env vars, and a trailing-slash bypass in rm -rf.
Author runs 13 Claude Code agents on one filesystem, each a domain specialist with identity loaded via hooks. After building a mail system (inbox file per agent, sender/recipient/subject/body), the first emergent beha...
2.1.153 fixes a regression where custom API gateways could receive the user's OAuth credential instead of the gateway token, enforces managed MCP policies on subagent frontmatter servers, and makes /model persist as.
Post-incident review of an unattended session silently downgrading from 2.1.146 to 2.1.140, losing fixes like the unreachable-API startup timeout.
Cumulative review of 2.1.138-2.1.146 for unattended agents: fast mode defaulting to Opus 4.7, hooks running without terminal access, the stop-hook block cap of 8, and full MCP pagination are the changes most likely.
AI coding agents (Claude Code, Cursor, Codex CLI, etc.) waste significant tokens/time on repeated repo search - grepping, reading, re-reading just to figure out where code belongs. CodeGraph builds a local knowledge g...
2.1.149-2.1.150 add a per-category /usage breakdown (skills, subagents, plugins, per-MCP-server cost), keyboard scrolling in /diff, sandbox write allowlist fixes in git worktrees, and a managed-settings startup.
2.1.148 fixes a 2.1.147 regression where every Bash command returned exit code 127. Also: pinned background sessions survive idle and restart in place on updates, and enterprise login restrictions now cover API-key.
2.1.146 renames /simplify to /code-review with effort levels, fixes MCP pagination dropping resources and prompts, forwards CLAUDE_CODE_SUBAGENT_MODEL to child processes, and improves auto-updater retries.
2.1.144-2.1.145 fix MCP paginated tools/list responses silently dropping tools past page one, cut the unreachable-API startup hang from 75s to 15s, and stop background side-queries misrouting on custom base URLs.
Across 2.1.139-2.1.143: stop-hook blocks are capped at 8, corrupt credentials.json files are handled safely, MCP_TOOL_TIMEOUT is respected, and compaction preserves sensitive user instructions.
A practical breakdown of underused context management: /btw for side questions outside context, /rewind with directional summarization, /compact with explicit instructions, and CLAUDE.md compaction invariants set once.
Follow-up review of the 2.1.142-2.1.143 line: teams that restrict which models may run should set the fast-mode override env var explicitly, and raise MCP_TOOL_TIMEOUT for cloud connector reliability.
A critical bug in versions before 2.1.142 lets plugin cache cleanup delete the active plugin version directory when install metadata is missing, breaking running sessions.
2.1.142 switches fast mode to Opus 4.7 by default, with an env override to pin Opus 4.6. Also: a plugin cache cleanup race fix, MCP_TOOL_TIMEOUT honored properly, and cleaner daemon exits on binary upgrades.
Max 20x previously gave ~$5,000 effective subsidized value for SDK/claude -p. New $200 bucket is a 10× value cut. Anthropic framed it as "giving you extra credits" - PR spin on a downgrade. Community sentiment: switch...
From June 15, 2026, headless CLI and Agent SDK usage stops drawing on subscription token pools and moves to separate monthly credits: $20 Pro, $100 Max 5x, $200 Max 20x. When credits run out, full API pricing applies.
Review of 2.1.141 flags a critical operational pattern: static version pins force downgrades when the binary moves ahead. Also noted: plugin hooks failing during cache cleanup, and remote features gated on API key.
A user lost $187 because Claude Code read ANTHROPIC_API_KEY from a project .env meant for another server and silently billed the API instead of the subscription. Anthropic confirmed this is intentional behavior.
In 2.1.139-2.1.140, Remote Control, /schedule, cloud MCP connectors and notification preferences are silently disabled when ANTHROPIC_API_KEY or an auth token is set, even with a Claude.ai login.
2.1.139 is a major release: 50+ items including plugin cache restructuring, hook terminal isolation changes, a continueOnBlock option for PostToolUse hooks, a /goal command, and compaction that preserves sensitive.
Reference repo with 10 financial workflow agents (investment banking, PE, asset management, ops). Same agent definitions run via Claude Cowork plugin OR Managed Agents API - harness-neutral architecture. Key agents fo...
PM-ish background, built an internal tool used by 15 people daily (saves each 4-6h/week). Key: PRD-first, new session per feature, UI before backend, AI-written tests, proper CLAUDE.md, /review on every PR, multi-mode...
Karpathy expanded his 4-rule CLAUDE.md to 12 rules over 30 codebases, dropping mistake rates from 41% to 3%. New rules target silent pattern blending, read-before-write discipline and checkpointing.
The argument: Markdown's easy-editing advantage matters less now that humans read and share agent outputs rather than edit them. HTML brings tables, CSS, SVG and interactivity for roughly 25% more tokens.
Anthropic returns `anthropic-ratelimit-unified-5h-utilization` and `anthropic-ratelimit-unified-7d-utilization` headers on every inference response - Claude Code uses them to render UI bars but never exposes them to t...
Anthropic returns utilization headers on every response that Claude Code renders but never exposes to the model. A local HTTP proxy set as the base URL intercepts them and writes a status file the model can read.
As CLAUDE.md files, skills and knowledge docs proliferate, stale instructions and obsolete paths get silently loaded and followed as current. A data-quality failure mode specific to persistent agent systems.
The latest Claude Code release ships with a changelog that says only 'internal fixes'. The review warns that opaque releases make risk assessment impossible for teams that must vet versions before unattended deployment.
Open-source MCP server (n8n-MCP) that gives Claude full knowledge of 1650+ n8n nodes, operations, and real template examples. Instead of clicking through the n8n UI, you describe the workflow to Claude and it builds i...
Developer landing a big accounting dashboard/RAG project asks how experienced Claude Code users plan large apps. Top patterns: plan exhaustively in Claude chat before touching Claude Code, generate structured docs (SP...
24/7 AI internet radio station (WRIT-FM) where Claude CLI writes every script (1,500-3,000 words), Kokoro TTS speaks it, ACE-Step generates music bumpers, and Icecast streams it publicly. 5 AI hosts with distinct pers...
Review of 2.1.133-2.1.137 flags MCP servers disappearing after /clear or context compaction, OAuth token races with parallel sessions, and broken subagent skill discovery.
2.1.133 adds a worktree.baseRef setting that changes where worktrees branch from (origin default vs local HEAD), fixes the MCP stdout memory leak, a remote-control interrupt bug, and an ECOMPROMISED file lock crash.
u/AregNoya built iai-mcp - a local daemon running since January that captures every Claude conversation into a 3-tier memory system and feeds context back on new sessions. No explicit "remember this" - it learns codin...
Review of 2.1.127-2.1.132: the prompt cache TTL bug is fixed, but an unbounded memory leak (10GB+ RSS) from stdio MCP servers writing non-protocol data to stdout remains open.
CLI tool that injects 29 security context modules into any project covering OWASP Top 10, CWE Top 25, and ASVS Level 3 standards. Run `npx @netxeo/security-skill` → creates `.skills/security/` folder with 29 markdown ...
`pin-llm-wiki` is a Claude skill that ingests any URL (web, YouTube, GitHub) and produces structured, wikilinked, citable notes - essentially automating the Karpathy-style personal LLM wiki workflow. It includes linti...
User built a Claude skill (`who-built-this-before-me`) that triggers on phrases like "I want to build..." and searches GitHub, npm, PyPI, HN threads, and docs to find prior art before wasting a weekend building someth...
On 2026-04-29 Meta released the official Meta Ads AI Connectors in open beta - an MCP server at `mcp.facebook.com/ads` + CLI. Connect Claude or ChatGPT to any Meta ad account via OAuth in <8 minutes, then manage campa...
2.1.129 fixes a silent prompt cache TTL downgrade from 1 hour to 5 minutes that inflated costs. 2.1.128 added parallel shell call resilience, subagent token savings, and reserved the MCP server name workspace.
Bun 1.3.12-1.3.13 fix process.ppid, activating previously dead orphan detection in supervised setups, plus memory leaks (unsettled promises, AbortSignal), a fs.watch deadlock, and worker lifecycle stability issues.
"Relay" - MIT plugin by vildanbina. Each session runs a tiny MCP server; a hub daemon routes between them over a unix socket using Claude Code's built-in `channels` capability. Say "ask the backend session what the us...
In 2.1.126 the dangerously-skip-permissions flag also bypasses prompts for writes to .claude, .git, .vscode and shell config files.
Claude Code 2.1.122-2.1.123 ship minor fixes with no breaking changes. Review classifies overall risk as low, with no critical or warning-level findings for automated or long-running sessions.
In 2.1.120-2.1.121, PostToolUse hooks can replace tool output for all built-in tools, not just MCP tools. MCP servers auto-retry startup 3 times, and unbounded memory growth with images was fixed.
Claude Code 2.1.119 makes /config changes persist to settings.json with override precedence, and pinned plugins can now auto-update to the highest satisfying tag.
OpenMontage is an open-source agentic video production system built on Claude Code - 11 pipelines, 49 tools, 400+ agent skills. Zero-API-key free tier produces real animated video with TTS + royalty-free music + subti...
video-use (by the browser-use team) takes a folder of raw footage + assets and auto-edits: cuts clips, removes filler words, adds subtitles, applies color grading/filters/animations, renders final video. No timeline, ...
GrayMatter is a single Go binary that acts as a persistent memory layer for AI agents. Uses hybrid retrieval (vector + keyword) to cut context tokens by 97%. Stores entities, people, facts as a Knowledge Graph with de...
Superpowers is a Claude Code plugin that enforces a structured development methodology: brainstorm → spec → plan → subagent execution → TDD → two-stage code review → systematic debugging. The core discipline: no code ...
User shared a before/after redesign using Claude Design - fast, low-effort transformation they liked for personal use. But top comments converge on one theme: Claude Design outputs a recognizable house style (same fon...
Power user burned $120 in API credits testing Opus 4.7 and found it hallucinates constantly, refuses correction even with direct evidence, and is far worse than 4.6. Root cause appears to be Junie CLI defaulting to `r...
Developer with ~1yr Claude Code experience spent 10hrs with Claude Design (Anthropic's new AI design tool). Used 80% of weekly 5x plan. Key finding: Opus 4.7 for the initial/first prompt is critical (sets the foundati...
Community verdict after day 1: ~20% better output for ~40% more token usage. Key upgrade: longer uninterrupted execution, better phase-following, better architecture-level reasoning. Key regression: "GPT vibe" - pushe...
v2.1.96 addressed the most-complained-about regressions: 429 retry logic burning all attempts in 13 seconds, stop hooks failing on long sessions, the rate-limit upgrade UI vanishing after compaction, and MCP.
A power user distills 50+ internal retros into 10 rules. Core thesis: model choice is about 20% of output quality; the other 80% is scaffolding, and every rule exists because a real mistake happened.
The Claude Code creator published six practical tips for getting the most out of Opus 4.7, collected in a community best-practices repo alongside other dated tip sheets.
Claude analyzed every Boris Cherny (CC lead) reply across 162 CC GitHub issues. Two dominant pain classes: (1) 1M context + cache misses = surprise bills, (2) old flat-string shell parser allowed dangerous permission ...
45-year veteran dev says the default CC system prompt tries to serve everyone and fails all sides. Recommends: read the extracted prompts at Piebald-AI/claude-code-system-prompts, take the best parts, build a custom o...
All of Claude Code's system prompts extracted from source - updated within minutes of each new release. Covers 152 version changelog. Includes sub-agent prompts (Explore, Plan), slash command prompts (/batch, /review-...
CLI/TUI dashboard that reads Claude Code session files from ~/.claude/projects/ directly - no wrapper, no proxy, no API keys. Shows token spend by task type, tool, model, MCP server, and project. Tracks one-shot succe...
Output styles change tone and format at session start. Built-ins include Default, Explanatory and Learning; custom styles are Markdown files with frontmatter in an output-styles directory, activated via /config or.
Official docs detail the opusplan alias (Opus in plan mode, Sonnet for execution), low to max effort levels with an ultrathink keyword, 1M-context model variants, and per-run effort overrides in skill and subagent.
Claude Code lead Boris Cherny confirms leaving a session open too long causes full cache misses and inflated token usage. Advice: start fresh conversations, and note that too many skills and agents inflate context.
Since adaptive thinking shipped, the model decides reasoning per turn and default effort dropped to medium. Hallucinating turns were confirmed to have zero reasoning tokens allocated.
Three stacked bugs make alwaysThinkingEnabled do nothing since v2.0.64. The working switch is the undocumented MAX_THINKING_TOKENS env var, which must be exported by a wrapper script because settings.json env does.
AIFIRST