Claude Code 2.1.289 ships agent.spawn and fixes @-mention permission bypass
ClaudeCodeLog · x · 2026-10-04
Claude Code CLI 2.1.289 is now available with 27 changes.
- Agents: teammates can spawn shared agents via agent.spawn; agent IDs unified and idle/waiting states clarified.
- Security: Read deny rules now apply to @-mentioned files, preventing @-references from bypassing file read restrictions.
- Enterprise: user plugins can no longer rewrite org-managed MCP server sign-in descriptions, preserving org sign-ins.
Full details in thread.
Related event: Claude Code 2.1.289 Adds agent.spawn, Fixes Permission Bypass(3 posts)→
More from coding & agent
- Vercel hits $600M annualized revenue, up 148%, as coding agents drive half of new business — evilrabbit_ · 2026-10-04
- Hallmark: an open-source skill making Claude Code, Cursor and Codex UIs look less AI-generated — tom_doerr · 2026-10-04
- Stop fine-tuning to fix retrieval problems: Oracle technologist on where knowledge should live — AI Engineer · 2026-10-04
- KMP: recovering project decisions and evidence across Claude and Codex via MCP — Mountain-Raise-4556 · 2026-10-04
- (Lean)DOOM: DOOM fully rewritten in the Lean proof assistant, with formal proofs included — akbirthko · 2026-10-04
- Jin: a minimalist coding agent that swaps MCP/plugins for prompts and bash — aldapsiger · 2026-10-04