{"version":"2.1.247","anchor":"cloud-session-uploads-stage-a-private-sanitized-copy-of-your","canonical_anchor":"cloud-session-uploads-stage-a-private-sanitized-copy-of-your","heading":"Cloud session uploads stage a private, sanitized copy of your git metadata","tier":"soon","area":"Cloud Sessions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247\/e\/cloud-session-uploads-stage-a-private-sanitized-copy-of-your","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.247","markdown":"### Cloud session uploads stage a private, sanitized copy of your git metadata\n\nUploading a repo to a cloud session can read a scrubbed private copy of your git metadata.\n\n**What**\n\nA new module builds a throwaway git directory under `~\/.claude\/seed-admin` when a cloud session uploads your repo as a bundle, so the upload reads a scrubbed copy of HEAD, refs and the index rather than your working `.git`. It only runs when the bundle route is taken: set `CCR_FORCE_BUNDLE` or `CCR_ENABLE_BUNDLE`, or have the remote gate `tengu_ccr_bundle_seed_enabled` on. That gate has no compiled fallback at the call site, so off the env vars it is entirely the server's call.\n\n**Details**\n\n- The staged directory gets a fresh config carrying only a whitelist of safe keys such as `core.autocrlf`, `core.eol`, `core.symlinks` and `core.filemode`, with automatic gc and maintenance disabled. The index, packed-refs and shallow files are copied and the object store is linked in (via a junction on Windows).\n- It refuses with plain reasons, including that HEAD is not a branch or an object id, that too many shared-index files are present, and placement checks that the staged directory is not inside your checkout or is not a plain directory owned by you.\n- The git environment is scrubbed of `GIT_EXEC_PATH`, `LD_PRELOAD`, `DYLD_INSERT_LIBRARIES` and similar before anything runs, and leftover directories from earlier crashed runs are swept.\n- The upload path gained failure text explaining that this directory is made under `~\/.claude\/seed-admin` from the checkout's HEAD and index.\n\n**Evidence**\n\n`~\/.claude\/seed-admin is not a plain directory of this user`\n\n- Flag `tengu_ccr_bundle_seed_enabled`: Gate removed from the code (read for one account on one subscription tier against v2.1.247; this account: on, anonymous baseline: on, compiled default: not a boolean we can read)\n- Area: Cloud Sessions\n- Names: `CCR_FORCE_BUNDLE`, `CCR_ENABLE_BUNDLE`, `tengu_ccr_bundle_seed_enabled`\n- Tier: Nothing to try yet\n- Useful: 3\/5\n- Signal: 4\/5\n- Present in the build but not switched on"}