$ cat anthropics/week/2026-09-14.log
the week in review · Sep 14 – Sep 20, 2026
Claude Code 2.1.277 adds AGENTS.md support
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
The same week, sandbox-runtime closed a hole where a root write or read root silently disabled every deny beneath it.
v2.1.277 anthropics/claude-code
In a project with no CLAUDE.md, Claude Code now reads AGENTS.md instead, and the change is switchable under "Project instructions" in /config. Note the platform gap: it is not yet on Bedrock, Vertex or Foundry, so teams running those deployments get no AGENTS.md pickup. The release also adds CLAUDE_GATEWAY_PROXY_IS_EGRESS_BOUNDARY=1 for gateway deployments.
A `/` write root (Linux) or read root (macOS) no longer switches off the denies beneath it anthropics/sandbox-runtime
On Linux, a `/` in allowWrite caused the sandbox to silently drop every write deny, and on macOS the read-root case did the same to reads. denyWrite entries and the built-in protections (.git/hooks, .git/config, shell rc files, .mcp.json, .claude/commands) got no read-only bind over a root that had just been bound writable. That is a security fix, not a behavior tweak: prior versions of sandbox...
perf: resolve the global npm root off the event loop anthropics/sandbox-runtime
initialize() shelled out with execSync to ask `npm root -g` where the vendor binaries live, blocking the event loop for roughly 70 to 100 ms at startup, or the full 5 s timeout when npm is slow. The lookup now runs off the event loop, so startup no longer stalls on a global npm install.
feat(sales): rebuild sales plugin as 2.0.0 with 36 skills anthropics/knowledge-work-plugins
The sales plugin goes to 2.0.0 and from 9 skills to 36. The plugin name, author and the 9 existing skill names are unchanged, so current installs update in place; six existing skills were replaced in place, including call-prep and daily-briefing.
feat(sales): add Salesforce and Microsoft 365 connectors (2.0.1) anthropics/knowledge-work-plugins
The plugin now declares Salesforce and Microsoft 365 directory connectors in .mcp.json, so they appear on the plugin card, and the docs state that an organization admin enables each one. That admin step is the gate before either connector does anything on your install.
diff: the first edit opens the pane only where the layout docks it anthropics/claude-code
mods/diff opened its pane on the first successful edit whenever the terminal was 144 columns or wider, whether or not the layout could dock it. On the main screen (CLAUDE_CODE_NO_FLICKER=0) nothing docks, so the pane now stays closed there instead of opening inline above the prompt in the built-in dialog's shape.
access_policies: document and validate the file_path identifier anthropics/financial-services
The file_path identifier for access_policies lets admins allow or deny the add-in by the open document's path, which covers files that cannot carry a sensitivity label, such as those on a network share. The manifest builder accepts it too, so path rules no longer warn.
Add Slack and Sentry Managed Agents quickstarts anthropics/claude-quickstarts
Two runnable Managed Agents apps land under managed-agents/: a stateless Bun webhook bridge where an @mention creates a session with channel and thread in session metadata and the session.status_idled webhook posts the reply in-thread, and a Sentry triage app. Alongside: Pendo and Intuit QuickBooks plugins were added to the official directory, a Noibu bump merged, and the small-business plugin ...
$ ls anthropics/week/ # the briefings behind this review
Keep up with Anthropic in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.