You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
Scripting APIArea: what it touches
ImprovementsKind: in v2.1.319,
ImprovementsSection of the release
What
When the scripting API writes a file with $.fs.write, Claude Code now sets file permissions (the rules that control who on a computer may open a file) that keep the result private:
Folders it creates are open only to your user account (mode 0o700).
Files it writes can be read and changed only by your user account (mode 0o600).
Before, folders were created with no explicit mode and files had no file mode set.
Why
This is a small security tightening. Other user accounts on a shared machine can no longer read what the scripting API writes.
