Fetching from the wire…
Vibe Coding2026-08-27 · source-backed
Version 2.1.247 adds a skill that profiles a project's Claude API spend and walks through cost levers (prompt caching, token hygiene, batch, reasoning effort, model choice) as individually measured changes rather than a bundled rewrite (Claude Code changelog). The same release expands /claude-api with Admin API coverage: organization members, invites, workspaces, API keys, rate limit reports, workload identity federation and CMEK. One-change-at-a-time is the right structure and the reason most cost-tuning attempts fail: bundle five changes and you learn nothing about which one worked.
Each link below shares sources, entities, or timing with this story.
One Claude Code release fixed two independent permission-check bypasses on the same day. That's the story. Version 2.1.221, shipped August 4, patches a Bash tool bypass where zsh could execute hidden commands embedded inside [[ ]] regex conditionals. The approval prompt never...
Hook matchers are now exact-match instead of substring, so a matcher like code-reviewer silently stopped firing. Switch to regex like mcp__brave-search__.* to match a hyphenated MCP server's tools (Changelog). And the streaming idle watchdog now defaults on: no stream events f...
It now dedupes local CLAUDE.md files against checked-in ones, proposes trimming content it can derive from the codebase, ranks unused skills, MCP servers, and plugins by context cost, and flags slow hooks. Background subagents run by default and, when launched from claude agen...
The Linux x64 payload is compressed with zstd for both install and auto-update, the binary drops another 2MB by storing bundled skill and prompt text more compactly, code loads on demand rather than staying resident, and the runtime garbage-collects sooner as the heap grows in...
The changelog adds a warning before login expiry so background sessions don't die mid-run, a grey pause badge in the footer to confirm you're in manual permission mode, additional working directories now surfaced through MCP roots/list with change notifications, and a fix for...
Per the changelog, Anthropic shipped a Trusted Devices control letting Team/Enterprise admins require device verification before a member can view or steer local Claude Code sessions remotely. v2.1.195 adds CLAUDE_CODE_DISABLE_MOUSE_CLICKS, which kills fullscreen click/drag/ho...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.