Daily AI Builder Brief - July 20, 2026

The Operator's Take

The item that actually costs you money today is buried in the Claude Code 2.1.214 bug list: a broad Edit(src/**) style allow rule was auto-approving writes to any nested src/ directory anywhere in the tree, not just under your working directory. If you run Claude Code headless with allowlists, your permission surface has been wider than you thought, and this release quietly narrows it. Go re-audit every single-segment dir/** rule in your settings before your next automated run, because a rule that "worked" yesterday may now prompt or deny where it silently passed. The MCP stateless rewrite lands July 28, but the permission fix bites right now.

Executive Summary

Claude Code 2.1.214 (July 18) fixes several permission auto-approve bypasses, including nested-directory dir/** rules and a PowerShell 5.1 check bypass.
2.1.214 adds the EndConversation tool, a progress heartbeat for long tool calls, and new OpenTelemetry attributes.
Claude Code 2.1.215 (July 19) stops Claude from auto-running /verify and /code-review; you now invoke them explicitly.
The MCP 2026-07-28 spec release candidate goes fully stateless, dropping the initialize handshake and protocol session.
Beta SDKs for that spec are out: Python 2.0.0b1, TypeScript v2 split packages, Go 1.7.0-pre.1, C# 2.0.0-preview.1.
MCP breaking changes include standardized error codes and deprecated roots, sampling, and logging capabilities.
Anthropic's newsroom had no new drops inside the 48-hour window.

Claude Code

2.1.214: permission hardening and the EndConversation tool

The big one. Beyond the nested dir/** fix, this release makes Bash permission checks fail closed on file-descriptor redirects, forces prompts on commands over 10,000 characters, fixes a Windows PowerShell 5.1 bypass, and adds prompts for docker daemon-redirect flags. New: an EndConversation tool for cutting off abusive or jailbreak sessions, a heartbeat for long-running calls, and OTel log attributes (message.uuid, client_request_id, tool_source). Changelog

2.1.215: /verify and /code-review no longer auto-run

Claude won't fire these skills on its own anymore. If your workflow assumed automatic review passes, wire in explicit /verify or /code-review calls or they just won't happen. Changelog

Anthropic

Nothing today. The official newsroom's latest items (Claude for Teachers, the Canadian research commitment) predate the 48-hour window and were covered previously. Newsroom

MCP Ecosystem

2026-07-28 spec release candidate goes stateless

The largest MCP revision since launch removes the initialize handshake and protocol session, so every request is self-contained and remote servers can sit behind a plain round-robin load balancer. New Mcp-Method and Mcp-Name headers let gateways route without reading the body, and list/resource results carry ttlMs for caching. This reshapes how you deploy and secure a server, so review the MCP security model before migrating. Release candidate

Beta SDKs are live for testing

Python 2.0.0b1, TypeScript v2, Go 1.7.0-pre.1, and C# 2.0.0-preview.1. Watch the renames: Python's FastMCP becomes MCPServer, TypeScript splits into focused packages, and missing resources now return JSON-RPC -32602 instead of -32002. New clients fall back to the 2025-11-25 protocol against older servers. SDK betas

Broader AI

Nothing today.

What This Means For Builders

Audit your Claude Code permission allowlists now: single-segment dir/** rules were broader than intended, and 2.1.214 changes that behavior under you.
If you run Claude Code in CI or headless, add explicit /verify and /code-review steps since they no longer self-invoke.
Pin and test the MCP beta SDKs against real traffic, not the happy path, especially the stateless HTTP path, before the July 28 final.
Plan for the MCP error-code and capability deprecations (roots, sampling, logging) now while backward compatibility still cushions the transition.