Claude Report — 2026-10-22

🚀 Anthropic Official

Claude Code v2.1.307 (Oct 21)

• Adds claude_code.safety_event, an OpenTelemetry event firing whenever a permission rule, auto mode, a safety check, a hook, or the sandbox stops, prompts, or rolls back a tool call — useful for org-wide telemetry dashboards.
• Adds /claude-api api-version to move a project's Claude API code onto API version 2026-10-21.
• Fixes model-not-found errors when CLAUDE_CODE_DISABLE_1M_CONTEXT is set alongside model aliases carrying a [1m] suffix (e.g. opus[1m]).
• Fixes MCP servers reporting "needs authentication" on macOS when the keychain is locked, and MCP servers staying stuck "failed" in headless runs after the machine sleeps mid-connection.
• Fixes HTTP MCP tool calls being sent twice on connection closure — only idempotent tools now retry.
• Fixes /autocompact and /clear state not surviving cloud-session restarts, and subagent transcripts recording placeholder token usage.
• Fixes Agent SDK setModel() model switches being refused after 5+ seconds (now waits up to 15s).

Claude Code v2.1.308 (Oct 22)

Bug fixes and reliability improvements, no user-facing feature changes.

Claude Agent SDK (TypeScript) v0.3.307 (Oct 21) / v0.3.308 (Oct 22)

Adds wakeup_source and scheduled_for to the command_lifecycle "started" frame for scheduled wakeups/tasks, and supportedDialogKinds to the browser SDK's query(); both releases otherwise track Claude Code v2.1.307/308 for parity. v0.3.304 (Oct 19) separately added suspendSseStream()/resumeSseStream() to the browser SDK and stable row IDs in getContextUsage().

Claude Agent SDK (Python) v0.2.171 (Oct 21) / v0.2.172 (Oct 22)

Parity-only releases updating the bundled Claude CLI to v2.1.307 and v2.1.308 respectively; no SDK-level behavior changes.

API version 2026-10-21 and SDK major version bumps (Oct 21)

• Ships a new, breaking API version: temperature/top_p/top_k now return a 400 error even at default values; assistant messages can no longer contain document blocks (user messages only); user-message text blocks can't carry non-empty citation fields; several Admin API fields are renamed (workspace_id→scope, roles→role_ids, group_id→rbac_group_id).
• Bumps all client SDKs to new major versions defaulting to the new API version: Python 2.0.0, TypeScript 1.0.0, C# 13.0.0, Go 2.0.0, Java 3.0.0, PHP 1.0.0, Ruby 2.0.0, and the ant CLI 2.0.0.
• Switches API-key transmission from the X-Api-Key header to Authorization: Bearer, which can break proxies/gateways reading the old header.
• Relicenses the new SDKs from MIT to Apache 2.0.
• Adds enforcement_status/enforcement_actions fields (plus an enforcement_status[] list filter) to user profiles, so platforms can see whether Anthropic has restricted or banned an end customer.

Web Fetch tool and Managed Agent domain controls (Oct 20)

Lets organization admins disable the web_fetch tool org-wide or set allowed/blocked domains from the Capabilities page; Claude Managed Agents now enforce both the org's domain list and the agent's own allowed_domains/blocked_domains (including through redirects), and agent web-search sessions inherit the org's web-search domain restrictions.

Claude Duet research preview (Oct 21)

Opens a waitlisted research preview, US Pro/Max only, of a proactive agent built on Opus 5.5 that sends a morning brief, checks connected apps (Gmail, Slack, QuickBooks, etc.) every few hours, keeps working in the cloud after the user steps away, and asks for approval before sending, paying, signing, or deleting anything; ships as a standalone iOS/Android app plus claude.ai.

Anthropic could publicly file its S-1 as soon as Oct 23

Reports say Anthropic may file its public IPO prospectus this Friday, opening its financials to broader scrutiny ahead of a targeted mid-November Nasdaq listing; the filing follows last week's disclosure of an $80.7B H1 2026 net loss (mostly a convertible-bond accounting charge).

Physicist Christopher Stubbs joins Anthropic's Long-Term Benefit Trust (Oct 21)

Adds the Harvard astrophysicist and former Dean of Science — the Trust's first physicist member — to the independent body that can appoint a majority of Anthropic's board.

🔌 Claude Code Plugins

Plugin tracking skipped this run — marketplace install-count cache unavailable, per instructions.

🛠️ Skills

None of the top 5 updated in window.

Unchanged in window: addyosmani/agent-skills (last commit Oct 13), anthropics/skills (last commit Oct 9), kharmanskyi/open-steps (last commit Oct 5), K-Dense-AI/scientific-agent-skills (only an automated security-scan-report bot commit on Oct 19, no content change), cloudflare/security-audit-skill (last commit Sep 14).

🤖 Agents & Subagents

davila7/claude-code-templates (Oct 19-22)

Ships a versioned public catalog API (/api/v1/) for its 1,900+ component index, adds a new "stack-viewer" dashboard pane that maps a session's built-in commands, subagents, and skills, cuts catalog-JSON cache from 24h to 5 minutes, and rewrites its Stripe MCP integration to point at the official remote server.

Unchanged in window: nicobailon/pi-subagents (v0.80.0 shipped Oct 21, already covered previously), wshobson/agents (last commit Oct 17), VoltAgent/awesome-claude-code-subagents (last commit Oct 11), anthropics/commerce-agents (last commit Aug 31).

🔗 MCPs & Integrations

None of the top 5 updated in window.

Unchanged in window: oraios/serena (v2.1.0 shipped Oct 19, already covered previously), upstash/context7 (v4.4.4 shipped Oct 19, already covered previously), modelcontextprotocol/servers (v2.0.0 shipped Oct 19, already covered previously), ChromeDevTools/chrome-devtools-mcp (last release Oct 15), DeusData/codebase-memory-mcp (last release Oct 16).

💡 Community — Workflows & Ideas

Quorus-dev/Quorus (Oct 20-22, v0.6.4 → v0.7.0)

Adds "Never Stuck" cross-vendor task handoff — when an agent hits its vendor usage limit mid-task, a teammate on another vendor picks the task up from the exact commit — plus limit-status and track-record monitoring, and fixes git-identity leakage and token survival bugs found in a security audit.

📰 Quick Mentions

• Claude Code catches a hidden XMRig cryptominer (Oct 20) — a developer's temperature-monitor project led Claude Code to flag an XMRig process hogging 1,175% CPU and pushing the Mac to 112°C.