{"name":"extract","slug":"extract","family":"setting","title":"Settings keys","noun":"settings key","description":"Sandbox credential masking now documents that it falls back to deny on macOS and Windows.","description_source":"entry","described_by":{"version":"2.1.221","anchor":"sandbox-credential-masking-documents-its-platform-limits"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.268","anchor":"sandbox-schema-additions-mitm-proxy-domain-routing-and-env","heading":"Sandbox schema additions: MITM proxy domain routing and env-var credential masking with JWT decode","line":"Sandbox config gains schemas for routing traffic through a MITM proxy and masking credentials in environment variables, including JWT handling","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text"},{"version":"2.1.236","anchor":"skills-sync-refuses-to-touch-an-unsafe-root-matching-plugins","heading":"Skills sync refuses to touch an unsafe root, matching plugins","line":"Skill sync now refuses to write when its root looks unsafe, matching plugin sync.","released_at":"2026-08-19 18:45:14","reason":"found in this entry's text"},{"version":"2.1.224","anchor":"sandbox-credential-masking-gains-jwt-handling-per-claim-mask","heading":"Sandbox credential masking gains JWT handling, per-claim masking and AWS SigV4 re-signing","line":"Sandbox credential masking can fake JWTs, mask single claims, and re-sign AWS requests after swapping keys.","released_at":"2026-08-07 01:36:32","reason":"found in this entry's text"},{"version":"2.1.221","anchor":"sandbox-credential-masking-documents-its-platform-limits","heading":"Sandbox credential masking documents its platform limits","line":"Sandbox credential masking now documents that it falls back to deny on macOS and Windows.","released_at":"2026-08-03 22:16:25","reason":"named in this entry, found in this entry's text"},{"version":"2.1.221","anchor":"sandbox-credentials-files-gains-a-mask-mode-with-regex-extra","heading":"sandbox.credentials.files gains a mask mode with regex extraction","line":"You can mask secrets in credential files so sandboxed commands see placeholders while real values are swapped in on egress.","released_at":"2026-08-03 22:16:25","reason":"named in this entry, found in this entry's text"},{"version":"2.1.216","anchor":"jwt-credential-masking-for-sandbox-environments","heading":"JWT Credential Masking for Sandbox Environments","line":null,"released_at":"2026-07-20 20:19:37","reason":"found in this entry's text"},{"version":"2.1.208","anchor":"credential-masking-extract-patterns-with-onextractnomatch-co","heading":"Credential masking: extract patterns with onExtractNoMatch control","line":null,"released_at":"2026-07-13 21:31:27","reason":"found in this entry's text"},{"version":"2.1.199","anchor":"credential-masking-regex-extract-patterns","heading":"Credential Masking: Regex Extract Patterns","line":null,"released_at":"2026-07-02 17:33:48","reason":"found in this entry's text"}],"entries_total":8,"docs":[{"source":"api","path":"about-claude\/models\/migration-guide","title":"Or, for the model with the same capabilities and no access approval requirement:","documented":false},{"source":"api","path":"about-claude\/models\/optimizing-for-cost-and-intelligence","title":"optimizing-for-cost-and-intelligence","documented":false},{"source":"api","path":"about-claude\/use-case-guides\/content-moderation","title":"content-moderation","documented":false},{"source":"api","path":"about-claude\/use-case-guides\/legal-summarization","title":"legal-summarization","documented":false},{"source":"api","path":"about-claude\/use-case-guides\/overview","title":"overview","documented":false},{"source":"api","path":"about-claude\/use-case-guides\/ticket-routing","title":"ticket-routing","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/best-practices","title":"PDF Processing","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/overview","title":"PDF Processing","documented":false},{"source":"api","path":"agents-and-tools\/agent-skills\/quickstart","title":"quickstart","documented":false},{"source":"api","path":"agents-and-tools\/tool-use\/bash-tool","title":"bash-tool","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/extract","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}