You'll noticeTier: how much it should matter to you
4Useful: my rating, 1 to 5
0Signal: worth watching, 1 to 5
InternalsArea: what it touches
ImprovementsKind: in v2.1.221,
What probably matters to youSection of the release
What
The importer now validates the export JSON before trusting it, and imported content can no longer masquerade as agent configuration.
Details
every field is type-checked (uuid, name, prompt_template, docs, files entries) and malformed records are skipped rather than imported
project directory names are capped at 200 characters against a name pattern; imported filenames are sanitised to at most 128 characters
a project's prompt template is written to project-instructions.md instead of CLAUDE.md
any imported doc or file whose name would collide with an agent-config file (claude.md, .claude*, .cursorrules, .windsurfrules, .clinerules, project-instructions.md and similar) is prefixed so it cannot be picked up as configuration
Evidence
project-instructions.md
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
