Claude Report — 2026-10-04

🚀 Anthropic Official

Claude Code v2.1.289 (Oct 3)

Fixes deny/ask permission rules not applying to nested compound shell commands (a permission-bypass bug), terminal freezes triggered by script-tag-heavy code blocks, Read deny rules not applying through symlinks, a VSCode sign-out regression (reverted), and stale plugin-marketplace listings. Also exposes idle/waiting agent states in $.agent.list() for agent.spawn.

Claude Mods: customizing Claude Code with TypeScript (Oct 3)

Anthropic publishes an architecture explainer for Mods — small TypeScript functions that hook into Claude Code's internal events to rewrite prompts before they reach the model, block/retry tool calls, approve/deny permissions, redact secrets from output, and replace UI elements. Mods ship inside plugins and run unsandboxed with full machine privileges, the same trust level as any local program; Anthropic converted its own diff pane, AGENTS.md loader, and telemetry into mods at launch.

sandbox-runtime — Linux restart-path fix (Oct 3)

Merges PR #644, fixing a restart/retry path that could read a stale directory listing after a command-wrap restart on Linux.

claude-agent-sdk-typescript v0.3.289 (Oct 3)

Bumps the bundled CLI to parity with Claude Code v2.1.289; claude-code-action and claude-code-base-action sync to the same version the same day. The Python SDK also bumps its bundled CLI to 2.1.289 in an unreleased commit, not yet tagged.

🔌 Claude Code Plugins

Plugin install-count cache unavailable this run — top-10-by-installs tracking is skipped per instructions. No new plugin-folder commits landed in anthropics/claude-plugins-official beyond the already-reported Oct 2 security-guidance/AWS version bump; no official plugin updates fall in the Oct 3–4 window.

🛠️ Skills

addyosmani/agent-skills (Oct 3)

Merges doc-guide commits adding a "bar/scoring" section for host guides and an "other hosts" page, while reverting two earlier doc-guide PRs (#616, #617).

Unchanged in window: K-Dense-AI/scientific-agent-skills (last release Oct 1, already reported), anthropics/skills (last commit Sep 29), kharmanskyi/open-steps (last release v0.4.6 Sep 30, already reported), cloudflare/security-audit-skill (last commit Sep 14).

🤖 Agents & Subagents

davila7/claude-code-templates (Oct 3–4)

Adds a PriceWin MCP server and skill entry to the web-data component catalog and ships a CI secrets-handling fix, continuing active development into Oct 4.

Unchanged in window: nicobailon/pi-subagents (last release v0.75.0 Oct 2, already reported), wshobson/agents (last commit Sep 29), VoltAgent/awesome-claude-code-subagents (last commit Sep 21), anthropics/commerce-agents (last commit Aug 31).

🔗 MCPs & Integrations

upstash/context7 (Oct 1–2)

Ships a batch of commits on its master branch: limits the free Docs7 tier to three sites (CTX7-3042), adds OpenCode v2 plugin support, and documents Pi's built-in MCP integration — activity missed in yesterday's check, which looked at the nonexistent main branch.

Unchanged in window: ChromeDevTools/chrome-devtools-mcp (last commit Oct 2, already reported), DeusData/codebase-memory-mcp (last merge Oct 2, already reported), oraios/serena (last commit Sep 30), graygnatconsole/mcp-audit-tool (last commit Sep 26).

💡 Community — Workflows & Ideas

agent-blackbox (Oct 3)

Ships v0.3 of a tamper-evident "flight recorder" and prompt-injection firewall for Claude Code: records every prompt, tool call, and result in an append-only, Ed25519-signed hash chain, and detects the "lethal trifecta" (private data + untrusted content + outbound call) to block exfiltration before execution.

Gobstopper (Oct 3)

Launches v0.8.5, a context-compaction proxy for Claude Code and Codex that keeps the system prompt, first task, and newest turns verbatim while rule-summarizing older turns locally with no extra model calls; claims a 29% input-token reduction on Terminal-Bench 2.1 versus no proxy.

optimAIzr (Oct 3)

Adds Claude Code mod integration (v0.8.0) to its CLI that profiles token waste across Claude Code, Codex, and custom APIs, detecting 13 waste patterns (oversized models, cache misses, runaway reasoning) and testing cheaper-model substitutions against real traffic.

RepoGuard (Oct 3)

Publishes an npm package that auto-generates CLAUDE.md/.cursorrules/.windsurfrules guardrails tailored to a repo's stack and audits diffs against 12 architecture rules — layering violations, hardcoded secrets, SQL injection, stray any usage — across TypeScript, Python, and Go stacks.

jpm (Oct 4)

Shows a JavaScript package manager written in Rust with "every line written by Claude Code," a notable Show HN showcase of a fully agent-authored open-source tool.

📰 Quick Mentions

• Terminal Gym — a Claude Code mod that adds a rep-progress band above the prompt and a strict mode pausing input until reps are logged via /fit (Oct 3).
• Claude Mods: Minesweeper (arcade) — packages classic desktop games as Claude Code mods playable in a side pane, starting with a Minesweeper clone run via /mines (Oct 3).
• Claude Code Routine Session Cleanup Skill — bulk-deletes old scheduled-task session runs from the Claude desktop app while protecting any run containing a user reply (Oct 3).