Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.234 Home All releases ←olderv2.1.233 v2.1.235newer→
Claude Code v2.1.234

One approval path for sending files and messages to peer machines

You'll notice
Useful2 Signal2
Session Messaging

File and message sends to peer machines share one approval path and refuse altered answers.

What

SendFile and the message-send path now share a single permission routine when isolation between peer machines is turned on. It re-asks for permission, and refuses the send if the answer comes back altered.

Details
  • Refusals name their reason: recipient_changed when the permission handler points the send at a different recipient, bad_shape when it returns something the tool cannot accept, and non_text_message when it rewrites the message into a non-text form.
  • Only runs when peer-machine isolation is on and the permission phase has not already happened for that send.
Evidence

The permission handler changed the recipient (from

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.234 →