{"name":"credentials.files","slug":"credentials-files","family":"setting","title":"Settings keys","noun":"settings key","description":"Settings docs now explain that masked credential files survive a relaxed sandbox filesystem policy while denied ones do not.","description_source":"entry","described_by":{"version":"2.1.221","anchor":"sandbox-filesystem-disabled-description-corrected-on-credent"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.296","anchor":"sandbox-option-settings-merge","heading":"The sandbox option now merges with your settings instead of replacing them","line":"Sandbox options passed in now merge with your sandbox settings, deny lists add up, and failIfUnavailable defaults to true","released_at":"2026-10-09 16:58:10","reason":"found in this entry's text"},{"version":"2.1.284","anchor":"sandbox-settings-reject-deny-globs-that-end-in-a-path-separa","heading":"Sandbox deny rules ending in a slash are now flagged as invalid","line":"Sandbox deny paths that end in a slash now show a validation error, because they matched nothing and protected nothing","released_at":"2026-09-28 17:11:59","reason":"found in this entry's text"},{"version":"2.1.268","anchor":"sandbox-runtime-credential-masking-gains-jwt-decoding-claim","heading":"Sandbox-runtime credential masking gains JWT decoding, claim-level masking, and duplicate-value scrubbing","line":"Sandbox credential masking adds JWT decoding, per-claim masking, and scrubbing of duplicate secret values","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text, named in this entry"},{"version":"2.1.221","anchor":"sandbox-filesystem-disabled-description-corrected-on-credent","heading":"Sandbox filesystem.disabled description corrected on credential masks","line":"Settings docs now explain that masked credential files survive a relaxed sandbox filesystem policy while denied ones do not.","released_at":"2026-08-03 22:16:25","reason":"named in this entry, found in this entry's text"},{"version":"2.1.199","anchor":"credential-masking-regex-extract-patterns","heading":"Credential Masking: Regex Extract Patterns","line":null,"released_at":"2026-07-02 17:33:48","reason":"found in this entry's text"}],"entries_total":5,"docs":[{"source":"claude-code","path":"agent-sdk\/claude-code-features","title":"Use Claude Code features in the SDK","documented":false},{"source":"claude-code","path":"changelog","title":"Claude Code changelog","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"settings","title":"Claude Code settings","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false}],"docs_total":5,"gates":[],"related":[{"name":"credentials.awsPairs","slug":"credentials-awspairs","description":"Conflicting AWS credential pairs in the sandbox now resolve predictably and warn about risky setups."},{"name":"credentials.envVars","slug":"credentials-envvars","description":"Sandbox credential masking adds JWT decoding, per-claim masking, and scrubbing of duplicate secret values"},{"name":"credentials.sigv4","slug":"credentials-sigv4","description":"AWS calls from inside the sandbox now work with masked credentials, since the proxy re-signs them for you."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/credentials-files","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}