Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.224 Home All releases ←olderv2.1.223 v2.1.225newer→
Claude Code v2.1.224

Plugins can be installed from a zip archive over HTTPS

Use it now
Useful3 Signal2
Plugins

Install plugins from an HTTPS zip, with a sha256 pin checked on every download.

archivesha256
What

Marketplaces can now offer a plugin as a downloadable zip. A new source kind archive takes an HTTPS zip URL plus an optional sha256 pin; when the pin is set every download is checked against it and the install is refused on mismatch, and the digest also stands in as the plugin's version when none is declared.

Details
  • Downloads are hardened against server-side request forgery: HTTPS only, loopback, link-local and cloud-metadata hosts refused, at most 5 redirects, a 256 MB size cap, a 120 second timeout, and a fixed User-Agent of Claude-Code-Plugin-Manager.
  • Headers configured on the enclosing marketplace url-source are only reused when the origin matches.
  • Installed plugin records gained a contentSha256 field, and the temp directory used during install has an "archive" naming case.
Evidence

plugin archive URL policy rejected

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.224 →