Anthropic shipped Claude Code 2.1.281 on 2026-09-23 (`@anthropic-ai/[email protected]`): Claude apps gateway gains newer Desktop-key desktop policy fields, Bedrock `assume_role` (cross-account STS, optional per-developer sessions) plus `guardrail:{id,version}`, richer `claude plugin validate` MCP checks, and multiple resume/retry crash fixes.
Key Takeaways
- ✓Upgrade with `npm i -g @anthropic-ai/[email protected]` (changelog dated 2026-09-23)
- ✓Bedrock upstreams support `assume_role` via STS, including cross-account and optional per-developer sessions
- ✓Optional `guardrail: {id, version}` on Bedrock upstreams — set on all Bedrock upstreams or none
- ✓`claude plugin validate` flags silently-dropped `.mcp.json` entries, undeclared `${user_config.*}`, and insecure URLs
- ✓`"attribution": false` hides commit/PR attribution; older CLIs skip whole settings files that contain it
Project Links & Resources
Direct AccessIn-Depth Technical Analysis
Core Background & Industry Pain Points
Enterprise Claude Code on Apps Gateway/Bedrock needs finer Desktop-key policy, cross-account IAM, and uniform Guardrails. 2.1.281 targets that gateway surface plus resume reliability.
Architecture Highlights & Internals
Desktop policy adds blockReadsOutsideWorkingDirectories and disableBypassPermissionsMode. Bedrock upstreams gain assume_role (STS, cross-account, optional per-developer sessions) and consistent guardrail:{id,version}. MCP URL-mode elicitation lands for 2026-07-28 protocol links; claude plugin validate catches silent .mcp.json drops.
Benchmarks & Measured Numbers
No new public coding-bench scores. Verified timestamps: GitHub 2026-09-23T19:19:15Z; npm ~2026-09-23T17:01Z; changelog matches the release notes.
Developer Getting Started
npm i -g @anthropic-ai/[email protected], configure Bedrock assume_role/guardrails, run claude plugin validate, and regression-test long-session resume. Keep shared settings compatible with older CLIs if using attribution: false.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.