Claude Code Desktop's v2.1.202 → v2.1.206 push from July 6–10 is a quietly done but weighty upgrade. The most visible change is a built-in browser stuffed into the IDE: Claude can directly launch documentation sites, design drafts, or any external URL, clicking, reading, and interacting with the page just like a local preview. It's contained in a sandbox; write operations on external sites must pass a safety classifier; enterprise admins can use browserExternalPageTools to shut down this channel entirely, keeping only local dev-server previews. Even more interesting is the Agent-side hardening. The completion notification of background tasks now forcefully declares "no human input during this period" — this closes an attack chain: Claude itself fakes a "human has confirmed" marker in the transcript to induce follow-up actions. The Auto mode picks up two more guardrails: disallow tampering with session transcript files; rm -rf must double-confirm on unresolvable variables. The debugging flow is also being restructured. /doctor evolves from a read-only report to a tool that can actually fix things: automatically identifying unused skills / MCP / plugins, deduplicating the local CLAUDE.md against the repo version, suggesting trimming of paragraphs Claude could have inferred, and flagging hooks that slow responses. It reports first then asks if you want to change; /checkup is an alias. Surrounding details are also filled in: the Agent view line replaces raw tool-call text with a classifier-written subtitle + status color block, so developers aren't drowned in log screens; the background proxy seamlessly switches versions immediately after an update, no longer running into the obvious stutter when mounting a session; auto-update switches to streaming download, cutting peak memory by about 400 MB. These fragments together draw a clear roadmap: beyond "Claude Code = model driver", Anthropic is seriously polishing the product engineering of the copilot itself — sandbox, classifier, controllable channels, forgery defense — these names are becoming part of the default config.