Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.219 Home All releases ←olderv2.1.218 v2.1.220newer→
Claude Code v2.1.219

Admin-workspace helpers get a random per-run token and path guards

Under the hood
Useful1 Signal2
Elsewhere

Admin workspace helpers gained a random run marker and stricter name and path-traversal checks.

The marker and validation patterns exist, but whether any of it is reachable for users could not be resolved.

What

Admin-workspace helper code gained a per-run marker and input validation patterns, with no confirmed user-facing surface in this build.

Details
  • A module initialiser builds a random zzadminwc-prefixed marker from 8 random bytes.
  • New regexes reject characters such as /, @, #, ?, \ and whitespace in names.
  • A separate pattern catches dot-segment path traversal, including the %2e encoded form.
  • Whether any of this is reachable for users could not be resolved.
Evidence

zzadminwc

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.219 →