Claude Code 2026 guide: Opus 4.8, dynamic workflows, auto mode, and plugins

Claude Code has changed quickly: Opus 4.8, dynamic workflows, auto mode, agent view, /goal, /usage, /code-review, and the security-guidance plugin all change the practical workflow. This guide turns the new features into a repeatable playbook.

As of June 1, 2026, the best way to use Claude Code is no longer "open the terminal and ask it to code." The product has become a small operating system for agentic engineering: model selection, effort control, background sessions, workflows, plugins, review commands, and usage diagnostics now all matter.

This guide turns the latest official updates into a practical playbook. The sources are the Claude Code changelog, the May 25-29 update notes, best practices, permission-mode docs, and the Claude blog post for dynamic workflows.

1. Update first, then choose the model

Start with the boring step: update and check your version. Claude Code's late-May features depend on recent 2.1.x builds, and Opus 4.8 support requires v2.1.154 or later.

claude update
claude --version
claude

For most serious coding tasks, switch to Opus 4.8 first. The week-22 notes say Opus 4.8 is the default on several Claude plans and the Anthropic API, defaults to high effort, and can be pushed harder with /effort xhigh.

> /model claude-opus-4-8
> /effort xhigh

Use /fast only when latency is worth paying for. The recent fast-mode update moved the default fast lane to Opus 4.8 at $10/M input and $50/M output, about 2x the standard price for roughly 2.5x speed. That is a live-debugging and interactive-review lever, not a batch-job default.

2. Split work into three modes

Treat Claude Code tasks as three categories. Small reversible edits can stay in a normal session. Medium tasks should use a written plan, a clear verification command, and possibly /goal. Large cross-repo tasks should use background agents or dynamic workflows.

Work type Use this Why
Small fix Normal session + tests Fastest path, easy to inspect.
Medium feature Plan + /goal Keeps Claude working until a pass/fail condition is true.
Audit, migration, research claude agents or workflow Parallelizes investigation and avoids flooding the main context.

Anthropic's own best-practices page puts the same idea more generally: give Claude a way to verify its work, let it explore before coding, and manage context aggressively. In practice, a prompt should include the goal, constraints, files or commands to inspect, and the exact verification command.

3. Use dynamic workflows for large tasks

Dynamic workflows are the biggest recent change. Claude writes an orchestration script for the task, fans work out across many subagents, checks results, and returns a coordinated answer. Anthropic positions them for codebase-wide audits, migrations, large research questions, and work that needs independent verification.

> create a workflow that audits every payment path for missing idempotency checks
> /workflows

The trigger is intentionally explicit: include the word "workflow" when the job is too large for one conversation. The announcement says workflows can run for hours or days and consume substantially more usage than a normal Claude Code session, so start with a scoped task. Good examples:

  • migrate all internal fetch() calls to a new HTTP client
  • audit every route handler for missing auth checks
  • compare three refactor plans and have adversarial agents break each one
  • find dead code across a large repo and verify each candidate before reporting it

Do not use workflows for tiny fixes. The coordination overhead and token cost are the point: they buy breadth, independent checks, and long-running execution.

4. Auto mode and safety boundaries

Auto mode reduces permission prompts by sending actions through a classifier that blocks destructive, suspicious, or out-of-scope behavior. It is useful for trusted development work, especially with long tasks, but it is still a research preview. It is not a replacement for reviewing diffs, secrets, deploys, or migrations.

# In an interactive session, cycle modes with Shift+Tab.
# Configure trusted infrastructure in user settings, not checked-in project settings.
> /permissions
> /status

The permission docs say auto mode trusts the working directory and repo remotes by default, while actions such as production deploys, force pushes, bulk deletion, and external data transfer are blocked unless explicitly configured. The May 30 changelog also says auto mode support expanded to Bedrock, Vertex, and Foundry for Opus 4.7 and Opus 4.8 behind CLAUDE_CODE_ENABLE_AUTO_MODE=1. If your provider behaves differently, trust the local /status output and the latest changelog.

A useful rule: write boundaries in plain language before the task starts. For example: "do not push, do not deploy, do not edit billing code, and stop after tests pass." For hard organizational rules, put deny rules in managed settings rather than relying on conversation context.

5. Use plugins, review, and usage to control cost

The new workflow is not just "let the agent run longer." Longer runs need guardrails. Install the official security-guidance plugin when Claude will change meaningful code; it reviews edits for vulnerabilities and can run deeper checks around commit or push.

> /plugin install security-guidance@claude-plugins-official
> /reload-plugins

Pair that with review commands. Use /code-review high when you want bug-finding, and use /simplify when the question is cleanup, reuse, efficiency, and readability. Those are now different tools; do not treat them as synonyms.

> /code-review high
> /simplify
> /usage

/usage matters because Claude Code cost is no longer just one chat. Usage can come from subagents, skills, plugins, MCP servers, cache misses, long context, fast mode, and workflows. Check it after a long run and before turning a pattern into a team habit.

6. A repeatable workflow

Here is the practical sequence I would use on a real repository:

  1. Update Claude Code, open the repo, and run /status.
  2. Switch to claude-opus-4-8; use /effort xhigh only for hard planning or risky changes.
  3. Tell Claude to explore first and list the files, commands, and risks it found.
  4. Ask for a plan with one verification command, such as npm test, pytest, or a build.
  5. For medium work, set /goal tests pass and build is clean.
  6. For large work, ask for a workflow and confirm the scope before it fans out.
  7. Run /code-review high, then /simplify, then inspect the diff yourself.
  8. Check /usage before deciding whether this should become your default workflow.

The main mindset shift is simple: Claude Code works best when you manage it like a junior engineering team, not like autocomplete. Give it context, isolation, a measurable finish line, and review gates. The recent updates make that pattern much stronger, but they also make cost and safety more important.