Follow Discord
Sweep 22 Oct 2026 · 04:32Z Build v2.1.308 527 read Stable v2.1.308 Latest v2.1.308 Next v2.1.308 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.247 ·

Device hooks get a full child environment, and an untrustworthy shell prefix is dropped

Hooks run for cloud sessions get a full environment, and an untrusted CLAUDE_CODE_SHELL_PREFIX is dropped with a warning.

You'll notice Notable New Features
JSON All of v2.1.247
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Cloud SessionsArea: what it touches
New FeaturesKind: in v2.1.247,
What probably matters to youSection of the release
What

Hooks run on your machine for a cloud session now get a composed environment rather than just a PATH. If CLAUDE_CODE_SHELL_PREFIX is set but is not an absolute path outside what the cloud session can write, it is left out of the hook's environment and you are warned that the hook ran unwrapped.

Details
  • PATH entries that the session can write to, or that cannot be resolved on this machine, are stripped and reported.
  • The old host-path/search-path plumbing is replaced by host environment composition, child environment construction, and explicit path placement and program resolution.
Evidence

Hooks marked cloud: "device" run for the cloud session WITHOUT your CLAUDE_CODE_SHELL_PREFIX here: this machine cannot vouch for that wrapper (it is not an absolute path outside what the session can write).

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from
Names in the bundleCLAUDE_CODE_SHELL_PREFIX

See this entry in the whole of v2.1.247 →

Feedback