Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
Cross-Session MessagingArea: what it touches
New FeaturesKind: in v2.1.228,
New FeaturesSection of the release
What
The local socket other Claude Code processes use to send you messages now writes an auth key file and exports CLAUDE_CODE_MESSAGING_TOKEN to child processes. On platforms where auth is required, a failure to publish the key shuts the inbox down rather than accepting unauthenticated peers.
Details
The key file is written after the socket permissions are set.
Shutdown in the hard-failure case is recorded with cause key_publish_failed.
Where the platform treats auth as optional, the failure logs a warning and the inbox keeps running with peers sending unauthenticated.
Evidence
refusing to run an inbox no peer can authenticate to
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
