Skip to content
EventMonitoring

Anthropic launches TypeScript mods for Claude Code

3 reports3 reporting sourcesLatest report

Start here

AI overview

Anthropic has launched a mods system for Claude Code, allowing developers to use TypeScript or JavaScript functions to hook into events such as tool calls, user prompts, and UI rendering, rewriting prompts, adding or removing interface elements, or replacing built-in features. The built-in /diff has been changed to be implemented by a mod, and the feature is now available in the CLI and desktop app. Mods are distributed with plugins, run with user permissions, and are not sandboxed, having the same machine permissions as Claude Code; the official recommendation is to install only from trusted sources. Enterprises can control which mods are allowed to load; Team and Enterprise plans and machines configured with managed settings will load the sec-default mod first. Subsequent testing showed that on Claude Code 2.1.287, running the same prompt seven times in headless mode, one run loaded a seven-line plugin and a Bash(touch:*) deny rule simultaneously, and the file was created; the result JSON reported zero permission denials, and debug logs showed that the plugin returned allow and overrode the deny rule. The results were the same when the plugin was installed normally via claude plugin install.

Generated by AI from reports · Updated 8 days ago

Latest developments

2 developments
  1. · 1 reports
    Claude Code plugins can override user deny rules
    dev.to:Tests show Claude Code plugins can override user deny rules
  2. · 2 reports
    Anthropic launches TypeScript mods for Claude Code
    Claude:Claude Code introduces TypeScript mods that can rewrite prompts and replace built-in features

Progress timeline

Oct 3
  1. The Decoder
    Claude Code introduces Mods system, letting developers rewrite this AI coding tool from within

    Anthropic released a plugin-style Mods system for Claude Code, essentially middleware running inside the tool, allowing developers to hook into events such as tool calls, user prompts, and UI rendering using JavaScript or TypeScript functions, customize panels, intercept tool calls, or integrate new commands; built-in features like /diff are already implemented by Mods. Mods run with user permissions and are not sandboxed; Anthropic advises installing only from trusted sources, and enterprises can control which Mods are allowed to load; the first official Mod plugin, "You Should Know", launches an independent agent that monitors Claude's output and surfaces important information that might otherwise be missed.

  2. dev.to
    Tests show Claude Code plugins can override user deny rules

    AINews ran the same prompt seven times in headless mode on Claude Code 2.1.287 to test behavior when plugins and permission rules conflict. In one run, a seven-line plugin and a Bash(touch:*) deny rule were loaded together; the file was created, the result JSON reported zero permission denials, and debug logs showed that the plugin returning allow overrode the deny rule. The result was the same when the plugin was installed normally via claude plugin install, while under --safe-mode and disableAllHooks: true the deny rule still took effect. The author noted that cc-plugin-sec-default, which maintains deny rules, is only enabled with Team or Enterprise login or when managed settings exist; on Pro, Max, or API-key machines it logs not seated and steps aside.

Oct 1
  1. Claude
    Claude Code introduces TypeScript mods that can rewrite prompts and replace built-in features

    Anthropic has launched mods for Claude Code—using TypeScript functions to rewrite prompts, add or remove UI, or replace built-in features, now available in the CLI and desktop app, with the built-in /diff changed to a mod. Mods are distributed with plugins, have the same machine permissions as Claude Code, and are not sandboxed; the official recommendation is to install only from trusted sources. Team and Enterprise plans and machines configured with managed settings will load the sec-default mod first, blocking high-risk operations such as user-installed mods overriding permission denial rules.

Related discussion

Total 5 items

Attention trend

New sources per day

13 days total6 ·Maximum3(Oct 2)·Today0

  • Oct 1New1 sources (1 outlets,0 accounts)
  • Oct 2New3 sources (0 outlets,3 accounts)
  • Oct 3New2 sources (2 outlets,0 accounts)
  • Oct 4New0 sources (0 outlets,0 accounts)
  • Oct 5New0 sources (0 outlets,0 accounts)
  • Oct 6New0 sources (0 outlets,0 accounts)
  • Oct 7New0 sources (0 outlets,0 accounts)
  • Oct 8New0 sources (0 outlets,0 accounts)
  • Oct 9New0 sources (0 outlets,0 accounts)
  • Oct 10New0 sources (0 outlets,0 accounts)
  • Oct 11New0 sources (0 outlets,0 accounts)
  • Oct 12New0 sources (0 outlets,0 accounts)
  • Oct 13New0 sources (0 outlets,0 accounts)

Hourly attention

Current attention43·Peak in the comparable period43(Oct 7 12:00)·Change over the comparable past 24 hours –

0204060Oct7Oct7Oct7Oct7