Claude Report — 2026-10-02

🚀 Anthropic Official

Claude Code v2.1.287 — Claude Mods (Oct 1)

Ships Claude Mods: plugins can now register TypeScript function hooks that rewrite prompts, block or rewrite tool calls, approve/deny permission requests, redact secrets from tool output, and draw custom UI inside the CLI and desktop app. Ships a built-in "You should know" mod — a side agent that flags things you or Claude might miss (/plugin enable cc-plugin-you-should-know@builtin) — and a sec-default mod that loads first on Team/Enterprise/managed-settings plans so user-installed mods can't override admin permission rules. The same release sets Opus 4.7+ and Fable to a 1M-token context window by default on Bedrock, Vertex, Foundry and the Claude apps gateway (no [1m] suffix needed), adds an n:<text> filter to the agents view, and fixes dozens of Remote Control, VS Code, screen-reader, and Bedrock/Vertex bugs. The tracking GitHub issue #91870 has drawn 230+ comments since launch.

Claude Code v2.1.285 (Sep 29)

Adds CLAUDE_CODE_DISABLE_WEB_FETCH, a claude --desktop command to open the desktop app, and claude plugin configure with stdin support; fixes cloud-session artifact loss after compaction and a sandbox auto-allow bug for inline scripts containing =.

Claude for Government — general availability (Sep 30)

Exits its July public beta to reach GA for federal, state, and judicial agencies, delivering FedRAMP High-authorized Claude Code, Claude Desktop, skills, plugins, and projects. Priced at $60/seat/month direct or via reseller Carahsoft, with deployment on Bedrock GovCloud and Vertex Assured Workloads meeting IL5/IL6, and usage-based spend caps replacing per-seat billing.

claude-agent-sdk-typescript v0.3.287 (Oct 1)

Adds optional remote-session latency fields to success-result messages, caps structured MCP content over 1,048,576 JSON characters with structuredContentOmitted: true, fixes MCP tool calls left waiting after a server disable/removal, and improves the revoked-login error to "Failed to authenticate: OAuth token revoked."

sandbox-runtime — continued Linux hardening (Sep 29–Oct 1)

Ships a run of Linux glob-walk and dangerous-directory-detection fixes (up to ~6x faster read-deny walks), merges the mandatory-names-resolution-below-a-path fix (#629), and raises the supported Node floor to 22.12 while moving CI to Node 22 (#636).

claude-plugins-official — dependency repoints (Sep 29)

Repoints the postman plugin to postmanlabs/postman-plugin and the aws-startup-advisor plugin to aws/agent-toolkit-for-aws so both track their upstream sources directly.

Claude platform-wide incident (Sep 29)

Claude.ai, Claude Code, Cowork, and the API show partial outage/degraded performance from 14:00–14:59 UTC; sign-in, new conversations, and file uploads fail, with some messages sent during the window not saved.

🔌 Claude Code Plugins

Plugin install-count cache unavailable this run — top-10-by-installs tracking is skipped per instructions. The only official-repo plugin-folder activity found in the window (postman, aws-startup-advisor dependency repoints) is covered above under Anthropic Official.

🛠️ Skills

K-Dense-AI/scientific-agent-skills

Ships v2.71.0 (Oct 1, refreshes every skill to the latest API endpoints/packages/docs and fixes validation, rendering, and file-handling bugs), followed same-day by v2.72.0 (removes vendored Anthropic document-handling skills and adds illustrated guides for scientific capabilities).

Unchanged in window: anthropics/skills (same Sep 29 claude-api update already reported, no further commits), kharmanskyi/open-steps (still at v0.4.6 from Sep 30), addyosmani/agent-skills (last commit Sep 26), cloudflare/security-audit-skill (last commit Sep 14).

🤖 Agents & Subagents

davila7/claude-code-templates

Ships four new mods — prompt-cache-control, neon-branch-per-session, vercel-deploys, linear-tickets — plus a follow-up fix addressing automated review findings on the same PR (Oct 1).

Unchanged in window: nicobailon/pi-subagents (still at v0.74.0 from Sep 30), wshobson/agents (only a Sep 29 dangling-reference cleanup, already reported), VoltAgent/awesome-claude-code-subagents (last commit Sep 21), anthropics/commerce-agents (last commit Aug 31).

🔗 MCPs & Integrations

ChromeDevTools/chrome-devtools-mcp

Adds a --file-navigations flag to reject file: URL navigations, escapes client-supplied values in MCP context logs and errors, hardens third-party tool-result serialization, and rejects unrestricted paths without an explicit workspace (Sep 29–Oct 1).

DeusData/codebase-memory-mcp

Merges over a dozen fixes including a trace-path fallback leak, build-seam and temp-file issues, a Cypher optional-join overflow, and a PyPI-publish urllib3 bump (Oct 1–2).

Unchanged in window: upstash/context7 (no new commits since the Sep 30 fix already reported), oraios/serena (no new commits since Sep 30), graygnatconsole/mcp-audit-tool (last commit Sep 26).

💡 Community — Workflows & Ideas

gil2abir/claude-compass

Ships a live session-map Claude Mod within a day of the Mods launch — a docked pane with a git-style flow chart, a Jira-style task board, and cross-agent chat — reaching v0.6.0 the same day (Oct 2).

"Mods - make Claude 10x more extensible"

The Mods tracking issue draws 230+ comments and 130 reactions in the days after launch, with developers pushing Anthropic for deeper hook access beyond the initial API surface.

📰 Quick Mentions

• issue-to-pr v9.5.2 — fixes worktree removal when PR/issue numbers differ and preserves worktrees when cleanup can't read registrations (Oct 1).