Shipped.

Anthropic bought the company that built everyone's SDKs and shut it down. Claude Code shipped five times.

There is a company most developers have never heard of that built the SDKs they use every day to talk to Claude, GPT, Gemini, and Llama. It is called Stainless. Monday morning, it became an Anthropic asset. The service shut down.

The rest of the week was Claude Code. Five versions in four days. Three of those drops contained security patches for permission boundary issues in Bash, PowerShell, and git worktrees. The platform is accumulating surface area. The security work is keeping pace, mostly.

Code with Claude London ran May 19 and 20, showcasing self-hosted sandboxes and MCP tunnels for Claude Managed Agents. The features were already shipped. The event was the demonstration.

The factory that built everyone's tools

There is a peculiar position in the AI infrastructure stack: building the tooling layer that every competing lab relies on. Stainless occupied it. Founded in 2022 by former Stripe engineer Alex Rattray and backed by Sequoia Capital and Andreessen Horowitz, Stainless generated production-ready SDKs, CLIs, and MCP servers from API specifications. Its customers included OpenAI, Google, Cloudflare, and Meta. It also generated every official Anthropic SDK.

Anthropic announced the acquisition Monday without disclosing terms. The Information reported before the announcement, and TechCrunch confirmed, that talks valued Stainless at over $300 million, with part of the consideration in Anthropic equity. Post-close: all hosted Stainless products, including the SDK generator, wind down. Existing customers retain their generated SDKs with full modification rights.

The generator stops. The parts stay where they landed.

The move is about supply chain, not product. A $300 million acquisition to secure a build pipeline is unusual. The calculation becomes less unusual when you note that the same pipeline was building the developer tooling that makes every competing lab accessible to developers. Anthropic now owns the team, the generator, and the institutional knowledge of exactly how its competitors ship SDKs.

What Stainless becomes internally is not stated. The external service is closing.

Self-hosted sandboxes land in the SDKs

Python SDK v0.103.0 and TypeScript SDK v0.97.0 (both May 19) added self-hosted sandbox support in the Compute Management API. Operators can now configure custom sandbox environments for Claude Managed Agents rather than relying on Anthropic's hosted compute. Both SDKs shipped the same day; the feature was demoed at Code with Claude London on May 20. Install: pip install anthropic==0.103.0 or npm install @anthropic-ai/sdk@0.97.0. (Python, TypeScript)

Fast mode reaches Opus 4.7

Fast mode, previously limited to Opus 4.6, now supports Opus 4.7 as a research preview. Faster output at full Opus 4.7 capability. Pricing matches Opus 4.6 fast mode. Waitlist via the Console; beta header fast-mode-2026-02-01, set speed: "fast" and model: "claude-opus-4-7". (API release notes)

Cache diagnostics: know why you missed

Pass diagnostics.previous_message_id on a Messages request and get back cache_miss_reason, which explains exactly where the prompt cache prefix diverged. Requires the cache-diagnosis-2026-04-07 beta header. This landed May 18 and was confirmed via web search; docs.anthropic.com returned 403 on all sweeps this week. (API release notes)

Extended thinking with a running meter

Python SDK v0.104.0 and TypeScript SDK v0.98.0 (both May 21) added streaming token count estimates for extended thinking. Token estimates arrive as metadata on thinking block delta events during streaming, enabling cost estimation and context budget management without waiting for full completion. Beta header: thinking-token-count. (Python, TypeScript)

/code-review, /usage, and four security patches

Claude Code v2.1.147 renamed /simplify to /code-review (with effort levels and a --comment flag for GitHub PR inline comments) and pinned background sessions that survive idle and restart through updates. v2.1.149 carried four security fixes: a PowerShell built-in cd bypass, a git worktree sandbox scope issue, wildcard pre-approval gaps for native executables, and stale PWD variable tracking. The same drop added a per-category /usage cost breakdown (skills, subagents, plugins, per-MCP-server) and keyboard navigation for /diff. Between v2.1.147 and v2.1.149, v2.1.148 was a one-liner hotfix: Bash tool was returning exit code 127 on every command, a regression that broke all shell execution for anyone who updated Thursday. (CHANGELOG)

The KPMG alliance, announced May 19, appeared in Friday's sweep as a reference but has no corresponding daily page (Wednesday's page is absent from this week's record). Scope and structure unconfirmed. No model releases this week. docs.anthropic.com returned 403 on every sweep from Monday through Friday; several API items in the release log were confirmed via web search rather than direct source verification.

Anthropic bought the factory and shut the door.

Claude Code patched its own permission gaps five times in four days.

The platform you build on is changing shape.

Release Log
Date Area Title One-liner
2026-05-18 NEWS Anthropic acquires Stainless SDK generator used by OpenAI, Google, Cloudflare, Meta, and Anthropic acquired; service wound down. Reported at $300M+ by The Information.
2026-05-18 CODE Claude Code v2.1.144 Resume support for background sessions. Elapsed-duration notifications. Per-session model selection. Startup hang and terminal corruption fixes.
2026-05-18 API Cache diagnostics beta diagnostics.previous_message_id returns cache_miss_reason. Header: cache-diagnosis-2026-04-07.
2026-05-18 API Fast mode for Opus 4.7 Research preview. Fast output at full Opus 4.7 capability. Header: fast-mode-2026-02-01. Waitlist via Console.
2026-05-18 API SEC filing data in web search Built-in web search now returns richer SEC filing data with primary-source citations.
2026-05-19 CODE Claude Code v2.1.145 Security fix: Bash env var auto-approval bypass. claude agents --json. OTEL agent_id/parent_agent_id spans. Plugin manifest on discover. 19 items.
2026-05-19 SDK-PY Python SDK v0.103.0 Self-hosted sandbox support in CMA with new sandbox helper utilities.
2026-05-19 SDK-PY Python SDK v0.103.1 Bug fix: SessionToolRunner skips tool calls it does not own.
2026-05-19 SDK-TS TypeScript SDK v0.97.0 Self-hosted sandbox support in CMA. Node 26 compatibility via tsc-multi upgrade.
2026-05-19 SDK-TS TypeScript SDK v0.97.1 Bug fix: SessionToolRunner skips tool calls it does not own. Mirrors Python v0.103.1.
2026-05-19 SDK-TS bedrock-sdk v0.29.2, vertex-sdk v0.16.1 @types/node alignment for CI. No features.
2026-05-21 CODE Claude Code v2.1.147 /simplify renamed to /code-review with effort levels and --comment for GitHub PR inline comments. Pinned sessions survive idle and updates. 28 fixes.
2026-05-21 SDK-PY Python SDK v0.104.0 thinking-token-count beta: estimated token counts for thinking block deltas during streaming.
2026-05-21 SDK-TS TypeScript SDK v0.98.0 Parity with Python v0.104.0: same thinking-token-count beta for streaming extended thinking.
2026-05-22 CODE Claude Code v2.1.148 Critical hotfix: Bash tool returned exit code 127 on every command. Regression from v2.1.147.
2026-05-22 CODE Claude Code v2.1.149 4 security fixes (PowerShell cd bypass, git worktree scope, wildcard pre-approval, stale PWD tracking). /usage per-category breakdown. /diff keyboard nav. GFM checkboxes. Enterprise allowAllClaudeAiMcps.
2026-05-22 SDK-PY Python SDK v0.104.1 Bug fix: encrypted_content not carried through beta compaction accumulator during streaming.
Stay on the frontier

Get Shipped. in your inbox.

Daily digest at 9 PM ET. Weekly magazine every Friday morning. Six labs, one feed. No spam, one-click unsubscribe.