Fetching from the wire…
Tools2026-09-13 · source-backed
v2.1.270, September 12 at 19:45Z, ships one change: read-only git commands in Bash stopped honoring their allow rules and started prompting mid-session, a regression attributed to 2.1.269, the release carrying the two permission-rule escape fixes and the world-readable plugin archive fix. @anthropic-ai/claude-agent-sdk v0.3.270 was cut eleven seconds later for parity with no independent changelog. Separately, 2.1.269 added CLAUDE_CODE_WORKFLOW_MAX_CONCURRENT_AGENTS (1-256) for inference-bound fan-outs, made /output-style [name] work over Remote Control and in headless and cloud sessions, and fixed /goal runs to retry with backoff or pause and say why instead of stalling after an API error or usage limit. The /goal fix is the one that matters for unattended runs.
Each link below shares sources, entities, or timing with this story.
A deny or ask rule starting with ! was applying beyond the settings source that wrote it; it's now scoped to its own source, and a bare ! negation is ignored. Separately, Edit() deny rules and the write-path check now apply to the file a Bash tee writes, so a Bash(tee:*) allow...
I've been telling people for months that the agent code I review is *correct and awful*. Correct in the sense that it compiles, passes the tests, does the thing. Awful in the sense that a 400-line function does the work of 80, the same helper exists three times under different...
I have a skills directory. I have no idea whether most of it does anything. I suspect you're in the same position, because the honest answer for almost everyone is that skills are vibes all the way down: you wrote one, the agent seemed better, you kept it. Claude Code v2.1.269...
Go rotate a key. I'll wait. Claude Code 2.1.246, released August 25, lists this in its changelog: a fix for "telemetry and metrics requests to Anthropic carrying the API key configured for a third-party gateway (ANTHROPIC_BASE_URL); a credential is now only sent to its own hos...
The changelog through 2.1.235 (code.claude.com) confirms the todo-tool removal from Opus 4.8, Sonnet 5, Fable 5, and Mythos 5+ that ran here on 2026-08-15 is restorable with that flag. Everything else in this window has already been covered: the Bash memory cgroups and the tod...
The June 25 release adds autoMode.classifyAllShell to route every Bash and PowerShell command through the auto-mode classifier, surfaces denial reasons in the transcript, and emits a claude_code.assistant_response OTel event carrying the model's actual response text. (Claude C...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.