Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.235 Home All releases olderv2.1.234 v2.1.236newer
Claude Code v2.1.235

An approved database read or write is bound to the exact target

You'll notice
Useful3 Signal3
Permissions

Approving a database read or write now locks it to that exact action and project.

What

When you approve a Claude Design read_db, write_db or watch call, the approval now records which action and which project it was for and re-checks that at execution time. If the action or the target URL changed after you approved, the call is refused with a db_target_changed error instead of running against a different database.

Details
  • Consent is stored as an action plus project slug pair in tool state.
  • The refusal message states that nothing was written and asks you to retry so the call is checked again.
  • No flag involved; this is active in this build.
Evidence

` action or url no longer names the database write that was approved — nothing was written; retry so it is checked again `

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.235 →