It decided to leave the write endpoints added to an authentication service completely unauthenticated. The effort to do the contrary was about 6 characters, and in the claude.md. It tried to implement PKCE by embedding _everything_ in the state.
This thing is beyond untrustworthy.
The fact that they are using Claude to build Claude (not just Claude Code) probably explains a lot.
https://claude.com/resources/tutorials/working-with-claude-o...
You want extended thinking? It's not adaptive thinking and opus will turn it on if it thinks it needs to. But it probably won't, according to user reports as tokens are expensive. Except opus 4.7 now uses 35% more and outputs more thinking tokens.
With Opus 4.7 you absolutely do. Users don't have a choice.
https://code.claude.com/docs/en/model-config
> Opus 4.7 always uses adaptive reasoning. The fixed thinking budget mode and CLAUDE_CODE_DISABLE_ADAPTIVE_THINKING do not apply to it.