Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.202 Home All releases ←olderv2.1.201 v2.1.203newer→
Claude Code v2.1.202

Agent Proxy: Governed Git and GitHub (gh) Shim

Background agents running through the agent proxy now get automatic git and GitHub CLI (gh) authentication wired in per-session.

Details
  • On startup, the proxy writes a per-session git config that routes github.com traffic through the relay, sets the CA bundle, and injects a dummy token guard so accidental raw requests to GitHub fail fast
  • If gh is on PATH, the proxy also writes a per-session gh wrapper script (shim) in a temp directory and prepends it to PATH so gh commands also route through the relay
  • Supported tokens: GH_TOKEN, GITHUB_TOKEN, GH_ENTERPRISE_TOKEN, GITHUB_ENTERPRISE_TOKEN
  • The relay routing entry is appended to the global git config file named by $GIT_CONFIG_GLOBAL (refuses if the variable is unset to avoid writing a shared config)
  • Skip conditions are logged: CA bundle path contains newline/quote, gh not on PATH, path contains a single quote
  • The permission pattern for gh operations has been expanded to include prs+comment, releases+upload, and repos+fork
  • The proxy status message now clearly distinguishes between git-only and git+gh modes
Evidence

Git proxy config writer (search for "[agent-proxy] governed git: relay routing for" and "governed-git (auto-generated; do not edit)")

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.202 →