Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.242 Home All releases olderv2.1.241 v2.1.243newer
Claude Code v2.1.242

Credentials scrubbed from strings before logging

Under the hood
Useful3 Signal3
Telemetry

Tokens, keys, secrets and passwords are stripped from text before it gets logged or sent.

What

A new helper strips bearer and basic authorization values and token, key, secret and password assignments out of text before it is logged or sent. Directory-sync records were also added to the telemetry field mapper, carrying a project key and session id.

Evidence

dirSyncRecord

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Related

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

See this entry in the whole of v2.1.242 →