Follow Discord
Sweep 06 Nov 2026 · 01:32Z Build v2.1.319 537 read Stable v2.1.311 Latest v2.1.318 Next v2.1.319 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeReleasesv2.1.277entry #83

Claude Code v2.1.277 ·

Coordinator sessions blocked from reading worker transcripts/task outputs via shell tricks

Coordinator agents are now blocked from reading worker transcripts or task outputs via shell workarounds

You'll notice Improvements
JSON All of v2.1.277
You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.277,
ImprovementsSection of the release
What

When an agent acting as a 'coordinator' (an agent that manages other worker agents) tries to run a shell command, Claude Code now rejects commands that attempt to read a worker's transcript file or task output directory indirectly, including via:

  • command substitution ($(...))
  • a variable
  • a ~name shorthand path
  • a .. path segment
  • an overly broad wildcard pattern
Why

A worker's result is meant to be read through the proper channel, the task notification or an explicit request to the worker, not by having the coordinator shell directly into the worker's transcript files. This closes off ways that check could previously be bypassed.

See this entry in the whole of v2.1.277 →

Feedback