Claude Code 2.1.145 patched a Bash permission bypass and shipped scripting hooks for agent sessions; the SDK tier added self-hosted sandbox support across Python and TypeScript in the same cycle.
Claude Code 2.1.145 shipped at 21:31 UTC and closed a permission-prompt bypass: bare variable assignments to non-allowlisted environment variables in Bash commands were being auto-approved. In agentic workflows, that is a real security hole, not a cosmetic patch. The fix sits at bullet twelve of a nineteen-item changelog, which is the right amount of understatement.
The same build added claude agents --json to output live session lists as JSON, which unlocks tmux-resurrect integrations, status bars, and external session pickers. OTEL spans now carry agent_id and parent_agent_id with correct trace parenting for background subagents. The /plugin Discover and Browse screens show a plugin's full capability manifest before install. The agent-as-platform surface area keeps accumulating. Two versions in one day.
v2.1.144 (released 00:48 UTC May 19, 20:48 ET May 18) was covered in yesterday's sweep.
claude agents --json surfaces live sessions as JSON for external tooling. OTEL gains agent_id and parent_agent_id on claude_code.tool spans with corrected trace parenting for background subagents. Status line JSON now includes GitHub repo and PR context. /plugin Discover and Browse show a plugin's full manifest before install. claude agents tab titles show awaiting-input count. Security fix: bare variable assignments to non-allowlisted environment variables in Bash were auto-approved; now blocked. Also fixed: MCP slash command error messaging, spinner freeze after resize, Windows PowerShell separator, voice push-to-talk in agent view, task list ordering on concurrent creation, Agent Teams non-ASCII name header encoding, /review GraphQL regression on Classic Projects repos, skill context: fork infinite loop, Read tool hard errors on token-limit overflow replaced with partial content notice.
claude update or npm i -g @anthropic-ai/claude-code. Script sessions: claude agents --json | jq '.[] | .id'
diagnostics.previous_message_id on a Messages request and the API returns a cache_miss_reason field explaining where the prompt cache prefix diverged from the previous turn. Useful for debugging multi-turn cache behavior without guessing.
cache-diagnosis-2026-04-07. Add diagnostics: { previous_message_id: "<id>" } to the request body.
speed: "fast" and model: "claude-opus-4-7" with the fast-mode-2026-02-01 beta header. Join the waitlist.
pip install anthropic==0.103.0
SessionToolRunner now skips tool calls it does not own, preventing dispatch conflicts when multiple runners share a session.
pip install anthropic==0.103.1
npm install @anthropic-ai/sdk@0.97.0
SessionToolRunner skips tool calls it does not own. Mirrors Python SDK 0.103.1.
npm install @anthropic-ai/sdk@0.97.1
@types/node aligned across sub-packages to fix CI build failures. No feature changes.
npm install @anthropic-ai/bedrock-sdk@0.29.2 or @anthropic-ai/vertex-sdk@0.16.1
No new Claude Apps updates, research papers, or news announcements found in the window. anthropic.com/news last moved May 14 (Gates Foundation partnership). anthropic.com/research: no new publications today. docs.anthropic.com returned 403 on all direct fetches; API items above confirmed via web search.
Daily digest at 9 PM ET. Weekly magazine every Friday morning. Six labs, one feed. No spam, one-click unsubscribe.