Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.221 Home All releases ←olderv2.1.220 v2.1.222newer→
Claude Code v2.1.221

Sandbox credential masking documents its platform limits

Use it now
Useful4 Signal0
Sandbox Notable

Sandbox credential masking now documents that it falls back to deny on macOS and Windows.

maskdenyextract
What

The settings schema description for sandbox credential files now explains what mask actually does and where it does not work.

Details
  • mask shows sandboxed commands a sentinel-substituted copy of the file, either the whole file or only the spans captured by extract.
  • The proxy swaps the real value back in on egress.
  • The description now states outright that the mode degrades to deny on macOS and Windows.
Evidence

On macOS and Windows mask degrades to deny.

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.221 →