Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.234 Home All releases olderv2.1.233 v2.1.235newer
Claude Code v2.1.234

Policy-helper subprocesses run in a scrubbed, pinned environment

Under the hood
Useful2 Signal3
Permissions

Policy helper subprocesses now run with a scrubbed, fixed environment rather than inheriting yours.

What

The helper that evaluates policy no longer inherits the parent process environment shape, and inline interpreters get a fixed environment: for sh, a deny-list of variables and prefixes is deleted, PATH is replaced with a fixed value and LC_ALL is set to C; for pwsh, PSModulePath, PATH, PATHEXT and COMSPEC are pinned and TERM is set to dumb. CLAUDE_CODE_VERSION is injected explicitly.

Details
  • The no-inherit behaviour comes from a new option threaded through the internal exec wrapper.
  • Failures now report structured codes such as bad_path, exit_nonzero and "no path or script configured".
Evidence

extendEnv

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.234 →