What
When Claude Code resumes a persisted background job, it now strips any providerEnv keys or respawnFlags tokens from the saved state that are not on the internal allowlist. This prevents unintended environment leakage from older or externally-modified job state.
Details
- A warning is logged when stripping occurs:
[jobs] stripped non-allowlisted providerEnv key(s) from persisted job state - Duplicate
respawnFlagstokens (same flag specified multiple times) are also deduplicated — the last occurrence wins for flags that take a value - Behavior is transparent to users; jobs continue to resume normally
Evidence
Job state sanitizer (search for "[jobs] stripped non-allowlisted providerEnv key(s)") — nY7() and XXH() at line ~219333
Strings lifted out of the shipped bundle, so the claim above can be checked against them.