Claude Code 2.1.288 ships a built-in mod called "You should know" — a side agent that watches your main session and speaks up when it notices something you or Claude might miss. It's opt-in, requires telemetry, and represents a specific bet on how to surface the class of problems that slip through when you're not watching the terminal.
Claude Code 2.1.287 ships mods: in-process TypeScript modules that can intercept, rewrite, and answer agent events before they reach the model. Unlike shell-script hooks, mods run inside the session, keep persistent state, and carry a rich sandbox API covering UI, tool routing, secret redaction, and custom slash commands. OpenAI Codex has had lifecycle hooks for a while — the two approaches reveal different theories about where agent customization should live.
Meta's new terminal coding agent reads CLAUDE.md and .codex/ skills as project context when its own AGENTS.md file doesn't exist. Any content in those files — internal URLs, API endpoint docs, project constraints — goes to Meta's servers on every call, and to Meta's training data if you're on the contributor tier.
A developer reverse-engineered Claude Code's client JavaScript and found it silently substitutes Unicode apostrophes in system prompts to fingerprint requests routed through custom API base URLs — encoding domain-list hits and timezone signals in characters visually indistinguishable from ordinary text. The finding raises the usual trust question: should a developer tool that runs in your terminal quietly rewrite what it sends?
Stanford CS336 shipped a CLAUDE.md file in its assignment repositories that instructs coding agents to act as Socratic tutors rather than solution generators. It is a small thing technically and a significant thing conceptually: domain-specific behavior specification embedded directly in the project.
Apple Support app v5.13 accidentally shipped two CLAUDE.md instruction files in the app bundle, exposing internal architecture context including a shared UI library called SAComponents and a chat module with three participant roles. Apple pushed v5.13.1 hours later to remove them, but not before the contents circulated.
GitHub paused new Copilot Pro signups and tightened limits on April 20, citing agentic workflows that exceed original plan assumptions. Two days later, Anthropic briefly moved Claude Code from its $20 Pro plan to its $100 Max plan before reversing under backlash. Both events reflect the same structural problem: per-seat flat-rate billing doesn't work when a single user session can run for hours.
Anthropic shipped Claude Code Routines in research preview: saved Claude Code configurations that run autonomously on Anthropic-managed cloud infrastructure on a schedule, triggered by an API call, or fired by GitHub events. The pieces have been building toward this — long-horizon sessions, Managed Agents, the advisor tool — and cloud-scheduled unattended execution is the natural next step.
Anthropic accidentally shipped source maps in their Claude Code npm package, exposing the full client-side source. The analysis that followed is worth reading not for the drama of a leak but for what the code reveals about the product's actual architecture: anti-distillation mechanisms, an "undercover mode" for employee contributions, and an unreleased background agent called KAIROS.