Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.238 Home All releases ←olderv2.1.237 v2.1.239newer→
Claude Code v2.1.238

Files that look like credentials are refused when syncing to a cloud session

You'll notice
Useful4 Signal4
Cloud Sessions

Credential-looking files, including .mcp.json and .claude.json, are refused when syncing to a cloud session.

What

When Claude Code copies your working files up to a cloud or lane session, each path is now checked against a credential test and refused outright instead of uploaded. .mcp.json and .claude.json join .claude in the set of sensitive names.

Details
  • Refusal short-circuits before the file is even fetched, and is carried as its own result flag rather than as a generic failure.
  • Counts are reported separately for refused files, files withheld even though git tracks them, and files skipped by the filter, along with how long the filter took and how many decisions it settled.
  • Rewind and checkpoint listings label such paths as "sensitive" so you can see why they were left behind.
Evidence

credential_refused: a.credentialRefused,, credentialRefused

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.238 →