Claude Code 2.1.289 closes managed-policy and plugin boundary gaps
Anthropic released Claude Code 2.1.289 with fixes for Bash deny and ask rules behind environment-variable assignments or inside compound commands, Read denials reached through symlinks from IDE and @-mentioned files, and a path where user-installed plugins could rewrite organization-managed MCP sign-in tool descriptions. The release also adds teammate agent spawning and more durable plugin and terminal rendering.
Why it matters: Several fixes affect whether organization policy still holds after shell parsing, symlink resolution or plugin customization. The new teammate-spawn surface expands coordination authority at the same time, so policy regression tests should accompany the…