Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-07-24 · source-backed
v2.1.218 took dangerous-rm, background-&, and suspicious-Windows-path checks out of permission dialogs, and stopped prompting in plan mode for Bash the static analyzer can't prove read-only. /deep-research also now starts only when you invoke it. Fewer interrupts, but a model judgment now sits where a deterministic prompt was. If those dialogs were your last human checkpoint, re-establish it with hooks or explicit permission rules.
Each link below shares sources, entities, or timing with this story.
The changelog shows sandbox filesystem deny entries being bypassed on Linux and macOS: specifically, denyRead: "~/.aws/" written with a trailing slash was silently ignored. That follows the zsh regex bypass, the PreToolUse auto-allow bypass, and the tabs/invisible-Unicode prom...
The changelog for Aug 4–6 is an unusually dense run: a crafted Bash command could hide parts of itself from permission checks, tab padding and invisible Unicode could hide text from the approval dialog, workflow scripts escaped their sandbox via dynamic import(), and agent def...
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
If you've written Claude Code skills with context: fork in the frontmatter, go check them right now. As of the July 22 release, /code-review runs as a background subagent, and any skill declaring context: fork runs in the background by default (release notes). The opt-out is b...
The headline feature: /loop 5m check the deploy schedules a recurring prompt that fires every 5 minutes in the background. Boris Cherny demoed: "/loop babysit all my PRs -- auto-fix build issues and when comments come in, use a worktree agent to fix them." Tasks auto-delete af...
If you run long multi-agent sessions and have watched RSS climb until the CLI gets sluggish, that's the fix. Same release stops custom output styles from drifting back to the default voice mid-session, adds a keybindingFlavor setting, and adds headersHelper on plugin marketpla...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.