$ cat ai-agents/week/2026-10-26.log
the week in review · Oct 26 – Nov 1, 2026
Claude Code closes a TOCTOU hole in its edit tool
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
The same week Claude Code added a permissions flag to block writes outside working directories, opencode patched a webfetch redirect bypass.
TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace anthropics/claude-code
A time-of-check to time-of-use race let the edit tool write outside the workspace, so if you run Claude Code unattended or against untrusted repos, upgrade now. Version 2.1.314 also ships permissions.blockWritesOutsideWorkingDirectories, which makes Write, Edit and NotebookEdit refuse paths outside the working directories in every permission mode.
fix(core): apply webfetch URL rules to redirect targets anomalyco/opencode
webfetch checked your URL rules against the address the model requested, then let fetch follow redirects on its own, so a deny rule or an allowlist of hosts did not apply to wherever the page went. It now follows redirects itself and re-checks each target; operators relying on webfetch policy for network egress should pull v2.2.0 or later.
0.165.0 openai/codex
Codex gained a built-in Google Cloud Vertex AI provider (`model_provider = "gcp"`) and GPT-6.1 Terra in its model catalogs, plus a repository filter in the session picker and directory grouping in the agent command center. Teams pinned to Vertex for data residency can now select it without a custom provider block.
v2.2.3 anomalyco/opencode
Install Claude Code, run `claude auth login`, then pick Claude Agent in `/connect` and OpenCode uses your Claude Code login and models. Desktop also gets faster long sessions via streaming replay, which matters if you keep multi-hour sessions open.
v1.57.0 aaif-goose/goose
The allowlist now requires HTTPS, validates redirects and blocks on policy failure, closing the obvious way around a host restriction. Callers can also supply Goose session IDs, which helps if you script runs and need to correlate them.
v2.2.1 anomalyco/opencode
Run `/goal <objective>` in the TUI or Desktop and the session keeps working until a reviewer confirms the objective is met, with `/goal pause`, `/goal resume` and `/goal clear` for control. Treat it as a spend lever: long autonomous sessions get easier to launch, not cheaper.
fix: stop tasks from getting stuck when they're opened in two apps or an app closes mid-task (#15244) cline/cline
An orphaned run no longer stalls the session when the same task is opened in two apps or an app closes mid-task (the fix landed in the changelog ahead of its release notes). Cline's desktop release also added a dedicated Changes pane and a last-turn receipt in the transcript, so per-turn diffs are readable without scrolling back.
fix(client): let clients drop tool-result image payloads from the store anomalyco/opencode
Alongside: OpenCode clients can drop tool-result image payloads from the store, so long sessions with browser or computer-use tools no longer hold hundreds of MB of base64 screenshots, and Gemini CLI now classifies AI Studio spending-cap 429s as terminal quota errors instead of retrying them.
$ ls ai-agents/week/ # the briefings behind this review
Keep up with Agentic Coding in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.