You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SessionsArea: what it touches
ImprovementsKind: in v2.1.295,
ImprovementsSection of the release
What
Claude Code can now delete credential files, which are files holding login secrets. It does this only in remote sessions, meaning runs where the environment variable CLAUDE_CODE_REMOTE is set. Each time it deletes one, it logs a message starting "Removed the credential file at".
A new remotely controlled setting was added alongside this. If the server sends nothing for it, it falls back to on.
Why
Remote sessions are less likely to leave login secrets behind on the machine they ran on.
