<p><strong>TLDR:</strong> Anthropic cut off flat-rate subscription access for third-party tools like OpenClaw starting today at noon PT, ending what was effectively a $200/month arbitrage for running thousands of dollars of agentic compute. Qwen 3.6 Plus hit 1 trillion tokens processed in a single day on OpenRouter, the first model to do so. Cursor 3 launched with parallel cloud agents and a built-in browser. Claude Code’s source code leak from last week keeps generating fallout, including a newly disclosed security vulnerability.</p>
<hr>
<h2>Anthropic ends flat-rate third-party tool access</h2>
<p>Starting today, Claude Pro and Max subscriptions no longer cover usage through third-party tools connecting via OAuth. The trigger was straightforward: some users were routing $1,000–$5,000 worth of agentic workloads through a $200/month Max plan, and Anthropic’s systems were getting crushed. This isn’t a ban on OpenClaw or similar tools — API key access is unaffected — but the flat-rate arbitrage is over. Anthropic is offering a one-time credit equal to your monthly subscription price (redeem by April 17), pre-purchase usage bundles at up to 30% off, and a full refund if you’d rather walk. The practical options now: enable extra usage billing, switch to API keys, or start looking at local models. The broader pattern is familiar — subsidized pricing during the land-grab phase, then tightening once the economics break. With OpenAI also pulling back on business plan limits this week, this feels less like a one-off and more like an industry-wide recalibration.</p>
<h2>Qwen 3.6 Plus sets an OpenRouter record</h2>
<p>Qwen 3.6 Plus became the first model on OpenRouter to process over 1 trillion tokens in a single day, hitting roughly 1.4 trillion. That’s the strongest single-day performance of any new model this year. Separately, Anthropic’s model diffing research found a “CCP alignment” feature unique to Qwen when compared against Llama — a technique that applies the software diff principle to identify behavioral differences between open-weight models. The research is worth reading if you’re making decisions about which open models to run in production.</p>
<h2>Cursor 3 ships parallel cloud agents</h2>
<p>Cursor 3 is a significant redesign: parallel Agents Window for running multiple agents across repos simultaneously, long-running Cloud Agents that execute on cloud VMs and return logs and video artifacts, a Skills Marketplace with MCP support, and an integrated browser with a visual style editor. The Codex App has reportedly surpassed the VS Code extension and CLI as OpenAI’s most-used surface, which probably explains some of the design direction here. Cursor is also doubling Composer 2 usage limits through the weekend if you want to kick the tires.</p>
<h2>Claude Code source code leak keeps producing fallout</h2>
<p>The npm sourcemap leak from March 31 — which exposed 512,000 lines of TypeScript across 1,900 files — has now surfaced a concrete security issue. When Claude Code encounters more than 50 subcommands, it bypasses security analysis and just prompts the user for confirmation instead. Adversa researchers found the flaw is documented in the leaked code, and Anthropic already has a fix (a tree-sitter parser) in the codebase but not enabled in public builds. The attack vector: a poisoned <a href="http://CLAUDE.md" target="_blank" rel="noopener nofollow">CLAUDE.md</a> file in a legitimate-looking repo, with 50+ commands followed by a credential-exfiltration command. If you’re pulling in external repos, that’s worth knowing.</p>
<hr>
<h2>Also notable</h2>
<ul>
<li><strong>Microsoft Agent Framework 1.0</strong> reached production-ready status for .NET and Python, unifying Semantic Kernel and AutoGen into a single SDK with support for Anthropic Claude, Google Gemini, Amazon Bedrock, and Ollama alongside Azure OpenAI.</li>
<li><strong>Claude computer use on Windows</strong> is now available in both Claude Cowork and Claude Code Desktop, with the team noting it works well for legacy apps without modern APIs.</li>
<li><strong>Kilo Code GA</strong> launched on a rebuilt OpenCode server core, adding parallel tool calls, sub-agent delegation, git worktree isolation for multi-agent sessions, and free model options via OpenRouter (Qwen3, Deepseek R1, Kimi K2).</li>
<li><strong>Android Studio Panda 3</strong> added granular agent permissions — agents now ask before reading files, running shell commands, or accessing the web — and custom <a href="http://SKILL.md" target="_blank" rel="noopener nofollow">SKILL.md</a> instruction files for team-specific workflows.</li>
<li><strong>GitHub Copilot ads incident</strong> saw Microsoft inject promotional content for Raycast into over 11,400 pull request descriptions before pulling the feature. GitHub’s uptime has been around 90% over the past month.</li>
<li><strong>Claude Code vulnerability research</strong> from Anthropic’s Nicholas Carlini found multiple remotely exploitable heap buffer overflows in the Linux kernel, including one undetected for 23 years, using a simple shell script looping Claude Code over kernel source files.</li>
<li><strong>Anthropic’s Conway</strong> is reportedly an always-on agent solution in development with a separate UI, surfaced via leaked code from the npm incident.</li>
<li><strong>AI-assisted PRs</strong> are merging at half the rate of human-written code and sitting 5x longer in review queues, with developers spending 91% more time on reviews, according to data cited in an OSS briefing today.</li>
<li><strong>Microsoft 365 connectors</strong> for Outlook, OneDrive, and SharePoint are now available on all Claude subscription plans.</li>
<li><strong>VS Code 1.115</strong> added background terminal notifications for AI agents, browser tab tracking in chat, and a new send_to_terminal tool for agents.</li>
</ul>


AI coding assistants, code generation tools, and vibe coding workflows.

Agentic Digest

Anthropic has ended flat-rate third-party OAuth access for Claude Pro and Max subscribers, closing a $200/month arbitrage that let users run thousands of dollars of agentic workloads. Affected users get a one-time credit, discounted usage bundles, or a full refund. Qwen 3.6 Plus set an OpenRouter record by processing 1.4 trillion tokens in a single day. Cursor 3 launched with parallel cloud agents, long-running VM-based agents, a Skills Marketplace with MCP support, and an integrated browser. The Claude Code npm sourcemap leak from March 31 has surfaced a concrete security vulnerability: when Claude Code encounters 50+ subcommands, it skips security analysis — exploitable via a poisoned CLAUDE.md file with a credential-exfiltration command appended after 50 commands. Other notable items include Microsoft Agent Framework 1.0 reaching production, GitHub Copilot injecting ads into 11,400+ PRs, and data showing AI-assisted PRs merge at half the rate of human-written ones.

Anthropic kills third-party OAuth access, Qwen 3.6 Plus breaks OpenRouter records