We break down the new permission safeguards in Claude Code v2.1.160, including explicit consent for writes to critical shell and config files like .npmrc and .zshenv. The episode also covers the faster read-before-edit check, token-saving grep behavior, and the rename of the dynamic workflow trigger to ultracode.

We break down Claude Code’s new Dynamic Workflows system, where a local JavaScript orchestrator replaces context-heavy multi-agent prompting for faster, cleaner execution. The episode also covers 16-agent parallel runs, the 1,000-invocation safety cap, Opus 4.8’s high-effort default, and the deprecation of the old fast-mode override in favor of /model and /fast commands.

We break down Claude Code 2.1.158’s new Auto Mode support for Bedrock, Vertex AI, and Palantir Foundry, and what it means for developers working inside tightly controlled enterprise environments.

Plus: the new OpenTelemetry audit flag, full autonomous write-run-correct loops, and the fix for stubborn Git worktree locks.

We break down Claude Code v2.1.157’s local .claude/skills workflow, where executable scripts can be loaded straight from a developer’s machine for instant tool creation and hot reloading. The conversation also digs into the security risks of committing custom plugins to source control, including the possibility of arbitrary code execution.

We dig into Claude Code’s new /code-review --fix workflow, which can edit files directly instead of just leaving comments, and the revamped /simplify pass for trimming dead code and redundant structure. The episode also covers safer usage tips, from keeping a clean git tree to reviewing diffs, plus the new skipLfs option for speeding up large repos.

We break down a critical credential leak in custom API gateways, where Claude Code mistakenly sent primary Anthropic OAuth credentials to the wrong place. The episode also covers faster git and GitHub plugin loading with skipLfs, plus new safeguards for subagent MCP configs to prevent privilege escalation.

This episode digs into the v2.1.132 Claude Code update, including a stdio MCP memory leak that could balloon long sessions past 10GB, plus the practical differences between stdio and HTTP transport. It also covers new session-aware Bash env vars, a terminal escape hatch for alternate screen mode, and a permission-mode bug that could quietly override your intent when resuming plan-mode sessions.

This episode breaks down how Claude Code v2.1.129 changes plugin loading with URL-based zip installs, moving plugins from local setup to a true distribution model. It also explores the new experimental themes and monitors fields, and the security tradeoffs that come with treating plugins like packaged software.

This episode breaks down a subtle Git behavior in Claude Code v2.1.128 where new worktrees now branch from local HEAD instead of origin/default-branch, preventing unpushed commits from being skipped. It also covers related reliability improvements, including OTEL isolation for subprocesses and better handling of parallel tool calls.

This episode explores how Claude Code’s `ultrareview` command uses exit codes, streamed output, and PR targeting to make AI review behave like a real CI check. It also digs into the multi-agent verification model, cost tradeoffs, and the network constraints teams need to consider before wiring it into GitHub Actions.