Welcome to the show everyone!
I'm Lachlan Reed, here with James Turner, and huge thanks to Jellypod for helping
make this daily show a reality.
James, mate, have you ever had that absolute cold sweat moment where you realize a
local agent tool is scanning your entire home folder?
Like, "Oh no, did it just read my SSH keys?"
Oh, absolutely.
It is the classic "developer panic" moment.
You realize you gave an AI tool terminal permissions and suddenly it's looking
around like an unwanted house guest.
But that is exactly why Claude Code v2.1.176 is such a crucial release.
They finally fixed the permission tool path specifiers.
Yes!
The bug fixes in v2.1.176 are huge because the pattern matching for things like
`Edit(src/**)`, `Read(~/.ssh/**)`, and `Read(.env)` was slightly broken
before.
If you tried to restrict Claude, it could sometimes slip past those boundaries.
Now, they've completely tightened the screws.
It actually respects your gitignore-style anchors perfectly.
And the way you write these rules is super intuitive but incredibly powerful.
You've got three main anchors.
First, the double slash `//` anchors to your project root.
So `Read(//src/**)` means only read inside your current
project's src directory.
Then you've got the tilde slash `~/` which anchors to your home directory,
like `Read(~/.ssh/**)`.
And lastly, a single leading slash `/` anchors to the absolute system root.
It is so clean!
And the order of evaluation is the real hero here.
It's a strict deny, then ask, then allow.
So if you set a rule like `Read(~/.ssh/**)` to deny, Claude cannot touch
it.
It won't even ask you for permission; it's a hard wall.
If it matches an "ask" rule, it prompts you.
If it's "allow", it slides right through.
Exactly.
So you can put a blanket `Read(.env)` deny rule at the top of your global config,
and you never have to worry about Claude accidentally leaking your API keys in a
debug session.
It's sandboxing made simple.
Brilliant.
It's saving us from our own laziness, really.
But hey, they also snuck in some really nice quality-of-life fixes in this release
too.
If you're a terminal nerd like me who lives in tmux over SSH,
they fixed the selection-copy issue so clipboard sharing actually works smoothly
now.
Oh, thank goodness.
Copy-pasting out of tmux over SSH has been a thorn in my side for a decade.
They also improved older tmux paste buffer loading, and session titles are now
generated in your active conversation language instead of defaulting to English.
It's the little things that keep us sane.
If you haven't updated Claude Code yet, run that update command today and secure
your workspace.
That's our show for today.
I'm Lachlan Reed.
And I'm James Turner.
See you tomorrow, folks!