Daily AI Builder Brief - May 22, 2026

Executive Summary

Claude Code 2.1.148 ships a same-day hotfix for a Bash tool regression that returned exit code 127 on every command.
Claude Code 2.1.147 makes background sessions pinnable, restartable in place, and shed last under memory pressure.
/simplify is gone, replaced by /code-review with effort levels and a --comment flag that posts findings as inline GitHub PR comments.
Enterprise login restrictions (forceLoginOrgUUID, forceLoginMethod) are now enforced against third-party-provider and API-key sessions, closing a real bypass.
Plugin agents with multiple Agent(...) types in tools: frontmatter no longer drop entries silently; auto mode no longer suppresses AskUserQuestion.
Anthropic published "Widening the conversation on frontier AI" and a KPMG integration on May 19, anchoring the policy and enterprise narrative going into the week.
AWS MCP Server (GA earlier this month) continues to set the bar for managed MCP: IAM-scoped, CloudTrail-logged, and a single tool for arbitrary AWS API calls.

Claude Code

2.1.148: Bash exit code 127 hotfix

A regression in 2.1.147 made the Bash tool return exit 127 on every command for some users. Pinned and patched same day. Changelog

2.1.147: Pinned background sessions and /code-review

Ctrl+T in claude agents pins sessions so they stay alive when idle and restart in place across updates. /code-review replaces /simplify: takes an effort argument (/code-review high) and a --comment flag for inline GitHub PR comments. Old cleanup-and-fix behavior is removed. Changelog

Enterprise auth tightening

forceLoginOrgUUID and forceLoginMethod are now enforced against third-party-provider and API-key sessions. If you ship Claude Code to a regulated org, retest your bypass surface. Changelog

Anthropic

Widening the conversation on frontier AI (May 19)

Policy-shaped post anchoring this week's enterprise and regulatory framing. Anthropic news

KPMG integrates Claude across core business (May 19)

Big-four reference customer, sales signal more than technical one. Anthropic news

MCP Ecosystem

AWS MCP Server (GA context)

General availability earlier this month: agents call any AWS API through a single tool with IAM guardrails, CloudWatch metrics, CloudTrail logs, and sandboxed Python execution. If you're shipping an MCP server, this is the production baseline to copy. AWS announcement

Broader AI

Nothing today that changes how you ship.

What This Means For Builders

If you're on Claude Code 2.1.147, jump to 2.1.148. The Bash regression silently breaks any non-interactive script that checks exit codes.
Wire /code-review --comment into your PR pipeline. It collapses the "Claude finds it, human pastes it" step.
Audit enterprise auth assumptions: anything you trusted to be blocked via forceLoginOrgUUID on API-key sessions was, until this week, not actually blocked.
Treat AWS MCP Server's auth and audit model as the reference shape when you publish your own MCP server.