Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Cross-Session MessagingArea: what it touches
New FeaturesKind: in v2.1.248,
New FeaturesSection of the release
What
When Claude Code sends a message to another local Claude Code process over its messaging socket and expects a specific process id, it now also checks that the socket endpoint is owned by your uid and that the peer's process start token matches, so a recycled pid or another user's socket is refused.
Details
Refusal message: "Refusing to send: connected endpoint is a different process with the expected pid".
Callers pass a new expectPeerProcStart option; the session-rename notice path supplies both pid and start token.
No flag; applies whenever a peer pid is expected, and not on Windows.
Evidence
Refusing to send: connected endpoint is a different process with the expected pid
Strings lifted out of the shipped bundle, so the claim above can be checked against them.