{ "baselineVersion": 1, "appVersion": "1.46388.4", "agentVersion": "2.1.260", "agentBinary": { "stagedPath": "~/Library/Application Support/Claude/claude-code-vm/2.1.260/claude", "format": "elf-aarch64", "nativeStagedPath": "~/Library/Application Support/Claude/claude-code/2.1.260/claude.app/Contents/MacOS/claude", "sha256": "9811afb5f97224c2c5d3d0ee1e8c316117d298d5ec3e095d5ff0c1dd0e889ca5", "releaseBaseUrl": "https://downloads.claude.ai/claude-code-releases", "shaProvenance": "measured-local", "manifestChecksumMatch": true, "stringSentinels": { "tengu_saddle_lantern": 2 } }, "guest": { "os": "linux", "arch": "arm64", "baseImage": "ubuntu:22.04" }, "spawn": { "configDirInGuest": "mnt/.claude", "settingSources": [ "user" ], "permissionMode": "default", "maxThinkingTokens": 31999, "effortDefault": "medium", "effortByModel": { "claude-haiku-4-5": { "modes": [ "extended" ] }, "claude-sonnet-4-5": { "modes": [ "extended" ] }, "claude-sonnet-4-6": { "effortLevels": [ "low", "medium", "high", "max" ], "recommended": "low", "modes": [ "auto" ] }, "claude-sonnet-5": { "effortLevels": [ "low", "medium", "high", "xhigh", "max" ], "recommended": "medium", "modes": [ "auto" ] }, "claude-opus-4-6": { "effortLevels": [ "low", "medium", "high", "max" ], "recommended": "medium", "modes": [ "extended" ] }, "claude-opus-4-7": { "effortLevels": [ "low", "medium", "high", "xhigh", "max" ], "recommended": "xhigh", "modes": [ "auto" ] }, "claude-opus-4-8": { "effortLevels": [ "low", "medium", "high", "xhigh", "max" ], "recommended": "high", "modes": [ "auto" ] }, "claude-opus-5": { "effortLevels": [ "low", "medium", "high", "xhigh", "max" ], "recommended": "high", "modes": [ "auto" ], "disallowThinkingDisabled": true } }, "effortRegexDefault": { "pattern": "^(?:claude-)?(?:fable|mythos)(?:-|$)", "effortLevels": [ "low", "medium", "high", "xhigh", "max" ], "recommended": "high", "modes": [ "auto" ], "disallowThinkingDisabled": true }, "tools": [ "Task", "Bash", "Glob", "Grep", "Read", "Edit", "Write", "NotebookEdit", "WebFetch", "TaskCreate", "TaskUpdate", "TaskGet", "TaskList", "TaskStop", "WebSearch", "Skill", "REPL", "JavaScript", "AskUserQuestion", "ToolSearch" ], "allowedTools": [ "Task", "Bash", "Glob", "Grep", "Read", "Edit", "Write", "NotebookEdit", "WebFetch", "TaskCreate", "TaskUpdate", "TaskGet", "TaskList", "TaskStop", "WebSearch", "Skill", "REPL", "JavaScript", "ToolSearch" ], "env": { "CLAUDE_CODE_IS_COWORK": "1", "CLAUDE_CODE_ENTRYPOINT": "local-agent", "CLAUDE_CODE_TAGS": "lam_session_type:chat", "CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST": "1", "CLAUDE_CODE_ENABLE_ASK_USER_QUESTION_TOOL": "true", "CLAUDE_CODE_DISABLE_CRON": "1", "CLAUDE_CODE_DISABLE_BACKGROUND_TASKS": "1", "CLAUDE_CODE_DISABLE_AGENTS_FLEET": "1", "CLAUDE_CODE_ENABLE_APPEND_SUBAGENT_PROMPT": "1", "CLAUDE_CODE_ENABLE_TASKS": "true", "CLAUDE_CODE_DISABLE_TERMINAL_TITLE": "1", "ENABLE_PROMPT_CACHING_1H": "1", "DISABLE_MICROCOMPACT": "1", "MCP_CONNECTION_NONBLOCKING": "true", "API_TIMEOUT_MS": "900000", "CLAUDE_CODE_EMIT_TOOL_USE_SUMMARIES": "", "CLAUDE_CODE_ENABLE_FINE_GRAINED_TOOL_STREAMING": "1", "DISABLE_AUTOUPDATER": "1", "MCP_TOOL_TIMEOUT": "180000", "USE_LOCAL_OAUTH": "", "USE_STAGING_OAUTH": "", "CLAUDE_PREVIEW_CLASSIFIER_FLOOR": "1", "CLAUDE_CODE_PROMPT_CACHE_TTL": "1h", "CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL": "5m" }, "promptTemplate": "prompts/desktop-1.18286.0/system-prompt-append.md", "subagentAppend": "prompts/desktop-1.15200.0/subagent-append-vm.md", "subagentAppendHostLoop": "prompts/desktop-1.46388.3/subagent-append-hl.md", "hooks": { "PreToolUse": [ { "matcher": "Task", "note": "blocks run_in_background ('Background agents disabled'); emits subagent_invoked telemetry", "served": true }, { "matcher": "Skill", "note": "emits skill_invoked telemetry (plugin name/source/id/marketplace); logs cowork_consolidate_memory_called; injects per-skill additionalContext", "served": false }, { "matcher": "COWORK_FORCE_ASK_TOOLS|MCP_{CREATE,UPDATE,DELETE}_SCHEDULED_TASK|MCP_{START,STOP}_WATCHING", "note": "9 tools (4 named + create/update/delete_scheduled_task + start/stop_watching). permissionDecision:'ask' EXCEPT in auto mode, where two gate-conditioned early returns of {} defer to the auto-mode classifier: the 5 scheduled-task tools behind gate 1447478638, and request_cowork_directory/save_skill behind gate 4202409342 (both force-ON 2026-09-05, so 7 of 9 skip the forced ask there). Carve-out: path-less request_cowork_directory keeps the ask in bridge/dispatch-child/scheduled/remote-origin/non-desktop-channel sessions. Outside auto mode the ask is unconditional; auto mode is structurally unreachable in this harness, so the served-set reasoning is unchanged.", "served": false }, { "matcher": "mcp__.*", "note": "remote-MCP deny hook (evaluateRemoteMcpDenyHook) -> decision:'block'", "served": false } ], "PostToolUse": [ { "matcher": "WebSearch", "note": "seeds session.webFetchAllowedUrls from search results (ingestWebSearchResultForProvenance) - a WebSearch WIDENS the web_fetch allowlist", "served": false } ], "UserPromptSubmit": [ { "matcher": null, "note": "expands a leading /slash command into hookSpecificOutput.additionalContext", "served": false } ] }, "$comment": "Binary-verified Desktop->agent spawn contract, re-derived per release. spawn.env is GENERATED by deriveSpawnEnv() in src/sync/cowork-sync.ts (windowed enumeration of the asar env construction + gate/const value resolution); the scalar options, tools/allowedTools, and prompt-asset pointers are sentinel-guarded by checkSpawnContractFacts(). Do not hand-edit spawn.env — re-run sync.", "$comment_handPinned": "Why the NON-env spawn fields stay hand-pinned: each is built in the asar as a non-literal expression (a session-path template, a session-type ternary, a const indirection, or a head+spread+tail array), so the windowed-enumeration generator that derives spawn.env cannot construct their VALUES without a full JS evaluator; instead each value was binary-verified once and is drift-guarded by a checkSpawnContractFacts() sentinel (cowork-sync.ts) that re-asserts the asar-side FACT at every sync. Scope caveat: the sentinels make DESKTOP-side drift loud; they do not validate this committed JSON itself — an erroneous hand-edit here is invisible to them.", "$comment_configDirInGuest": "Hand-pinned: the asar builds it as a per-session path template (/sessions/${id}/mnt/.claude), not a constructable literal. Sentinel S1 pins the template shape.", "$comment_settingSources": "Hand-pinned: sentinel S2 pins the settingSources:[\"user\"] literal.", "$comment_permissionMode": "Hand-pinned: the asar computes it via a session ternary whose chat-session branch resolves to \"default\". Sentinel S3 pins the ternary shape.", "$comment_maxThinkingTokens": "Hand-pinned: the asar reaches the value through const indirection. Sentinel S4 VALUE-pins the resolved const to 31999.", "$comment_effortDefault": "Hand-pinned: sentinel S5 pins the .effort … :\"medium\" default.", "$comment_tools": "Hand-pinned: the asar builds tools[] as head-list + Task-tools spread + session-type tail, not one literal. Sentinels S6 (head), S7 (the TaskCreate…TaskStop spread), S8 (tail-guard after ToolSearch) pin all three parts. As of desktop-1.21459.0 the asar head also carries an INERT `...CLAUDE_DESIGN_TOOLS` spread between Task and Bash that resolves to [] (deployment-gated off on first-party), so the rendered list — and this pin — stay 20 entries; S6b asserts it empty and fails loud if a build ever populates it.", "$comment_allowedTools": "Hand-pinned: same head+spread+tail construction as tools[], minus AskUserQuestion (tools-only by design). Sentinels S9 (head) and S10 (the built-in→mcp__ boundary tail-guard) pin it.", "$comment_promptTemplate": "Hand-pinned pointer to a RECONSTRUCTED asset (see $comment_prompts) — the generator cannot extract prose. Sentinel S15 pins the claude_code preset-append delivery site.", "$comment_subagentAppend": "Hand-pinned pointer to a reconstructed asset (see $comment_prompts). Sentinel S16 pins the per-session appendSubagentSystemPrompt generator call shape.", "$comment_subagentAppendHostLoop": "Hand-pinned pointer to a reconstructed (paraphrased) asset for the HOST-LOOP branch of the per-session sub-agent append (section key subagent_env_hl; selected purely on hostLoopMode). Sentinel: checkSubagentPromptFacts (four-axis fingerprint + substitution-value proofs). A hostloop run on a baseline lacking this pointer fails loud rather than falling back to the VM text. This pointer is hand-authored and is NOT re-derived by sync - it carries forward untouched, so it must be repointed by hand whenever the branch fingerprint moves. REPOINTED at 1.46388.3, and its SCOPE NARROWED: the hl branch text was REPLACED at this release (71e028bfa7ce596d -> 464ecc87a6810941), and the append is no longer one asset. Production now composes section + (hostLoopMode ? folder manifest : '') + a trailing skills sentence; this pointer names ONLY the section, which is also the only part a server-delivered spSectionPrompts entry can override. The other two parts are GENERATED in src/prompt/subagent-manifest.ts because the manifest is built from live mount state - the same reason the main-loop shell section became a generator at 1.14271.0 - and are guarded by the manifest/suffix fingerprint axes. Do not restore them into this asset: they would render twice.", "$comment_notSet": "Deliberately NOT set: CLAUDE_CODE_USE_COWORK_PLUGINS (Desktop never sets it; would flip the agent to cowork_settings.json/cowork_plugins — asserted absent by the S17 negative invariant). Enumerated-but-not-pinned keys are enforced by SPAWN_ENV_ALLOWLIST in src/sync/cowork-sync.ts, each with a reason; categories: host-derived (CLAUDE_CONFIG_DIR, TZ, HOST_PLATFORM, OAUTH_TOKEN/BASE_URL/CUSTOM_HEADERS, account UUIDs, WORKSPACE_HOST_PATHS, OTEL), constructed-then-deleted (ANTHROPIC_API_KEY/AUTH_TOKEN via FnA), gate-conditional-off (MCP_CONNECT_TIMEOUT_MS, ENABLE_TOOL_SEARCH, SKIP_PRECOMPACT_LOAD), non-chat/project-session (BRIEF*, PROJECT*), user-settings (SUBAGENT_MODEL, AUTO_COMPACT_WINDOW, ...), and 3p-provider-only branches. The opaque ...g.env/...l session spreads are the known static-extraction blind spot (runtime lane backstop).", "$comment_prompts": "Reconstructed cowork-specific sections, re-paraphrased from asar 1.18286.0 const aui (system prompt; RESTRUCTURED at this release — see the asset header) and 1.15200.0 generator CVr (subagent; verified unchanged in the 1.18286.0 asar, generator Zgn). Not the full base prompt (not cleanly extractable); generic refusal/safety policy elided. Delivered via --append-system-prompt (layered on the agent's built-in base prompt), NOT the initialize handshake; only the subagent append goes over initialize (appendSubagentSystemPrompt), gated on CLAUDE_CODE_ENABLE_APPEND_SUBAGENT_PROMPT.", "$comment_hooks": "Binary-verified against app.asar 1.24012.9: the Cowork spawn's hooks object, identified by the env block immediately following it (CLAUDE_CODE_IS_COWORK=1, CLAUDE_CODE_ENTRYPOINT=local-agent). Recorded as HAND-PINNED DOCUMENTATION, not as an emulation source and NOT as a drift tripwire - `served` marks what this harness actually installs (PreToolUse:Task only). It cannot detect Desktop-side hook drift: sync neither reads nor writes this field (src/cli.ts spreads spawn forward from base, so it carries through untouched) and no check*Facts sentinel covers it. Treat every note below as a DATED OBSERVATION and re-verify it against the asar before relying on it. See the demoted claim in src/types.ts. NOT installed at the Cowork spawn: SessionStart, SessionEnd, SubagentStop, PreCompact, Notification, Stop (their asar occurrences are an event-name validation list, a config-error hint, and a UI filter that skips SessionStart hook traffic - that filter implies plugin-supplied hooks.json events DO arrive, via the agent binary's own --plugin-dir channel, which is separate from this spawn bundle). HISTORY (2026-09-06): the force-ask note read \"permissionDecision:'ask' regardless of permission mode\" in every baseline from 1.24012.9 through 1.46388.3. THIS baseline carries the corrected note: it was fixed in the 1.46388.3 file before this one was synced, and carried forward by the same spawn spread described above. That was never true of any of them. The scheduled-task early return landed in Desktop 1.22209.0 - BEFORE 1.24012.9, the first baseline to carry this field - so the note was already wrong for 5 of the 9 tools the day it was first committed. The builtin early return landed three baselines later, at 1.26832.0, making it wrong for all 9 from there on. The 13 older baselines keep the old wording (a baseline is not re-litigated after the fact); only this one forward is corrected. NOTE ALSO: sync neither reads nor writes this field - src/cli.ts spreads spawn forward from base, so it carries through untouched and CANNOT detect Desktop-side hook drift; see the demoted claim in src/types.ts." }, "mountLayout": { "sessionRoot": "/sessions/{sessionId}", "cwd": "/sessions/{sessionId}", "mntRoot": "/sessions/{sessionId}/mnt", "mounts": [ { "name": "uploads", "mountPath": "uploads", "mode": "r", "purpose": "user-uploaded files (read-only — asar 'ro')" }, { "name": "projects", "mountPath": ".projects/{projectId}", "mode": "r", "purpose": "RESERVED namespace (and the separate UUID project-sync feature) — NOT the work-folder path. From Desktop 1.14271.0 selected work folders mount at mnt/ (dynamic, derived per session by buildLaunchPlan; see MOUNT_BARE_NAME_MIN_VERSION). This decorative row is not consumed for binding (staged paths come from plan.mounts). MODE CORRECTED rw -> r on 2026-08-05, first-party from the asar's mount-set builder (VM-loop runs it at spawn; host-loop recomputes it per bash call): a project ATTACHMENT mounts at `.projects/` with `mode:\"ro\"`, and the sibling `.claude/projects` is `\"ro\"` too. Neither passes through the delete-deny resolver, so a project mount is NOT writable-but-delete-denied — it is not writable at all, and therefore correctly outside deleteDeniedRootsFromPlan. checkMountModeFacts pins both. Older baselines still carry `rw` here and are deliberately NOT back-edited: below MOUNT_BARE_NAME_MIN_VERSION (1.14271.0) `.projects/` WAS the connected-folder namespace, which is resolver-driven `rw` — so `rw` is correct there, and a blanket correction would have replaced a right fact with a wrong one. Between that boundary and 1.25927.0 the row is stale rather than meaningful (the namespace is reserved); those files are frozen per-release snapshots and the mode is consumed by nothing — only cwd/sessionRoot/mntRoot are read from mountLayout." }, { "name": "local-plugins", "mountPath": ".local-plugins/marketplaces", "mode": "r", "purpose": "marketplace skills/plugins, runtime-discovered" }, { "name": "remote-plugins", "mountPath": ".remote-plugins", "mode": "r", "purpose": "org-remote plugins, runtime-discovered" }, { "name": "outputs", "mountPath": "outputs", "mode": "rw", "purpose": "session outputs/artifacts — delete denied by default (asar IX); rwd only when approved" }, { "name": "skills", "mountPath": ".claude/skills", "mode": "r", "purpose": "personal/saved skill doc bodies (NOT plugin-bundled skills, which live under local-plugins/remote-plugins above) — real VM confirmed via systemd unit sessions--mnt-.claude-skills.mount in vm_bundles/claudevm.bundle/rootfs.img. Decorative row like 'projects' above (not consumed for binding — resolveMounts()'s mounts[] is destructured away at every call site); the harness reproduces this via CLAUDE_CONFIG_DIR staging (session.ts skill copy + stage.ts cpSync), not a plan.mounts bind — see hostloop-prompt.ts's asar-verified skills bullet." } ] }, "network": { "mode": "gvisor", "allowKind": "allowlist", "allowDomains": [ "downloads.claude.ai", "api.anthropic.com", "a-cdn.anthropic.com", "a-api.anthropic.com", "assets.claude.ai", "sentry.io", "api-staging.anthropic.com", "api.claude.ai", "preview.claude.ai", "www.anthropic.com", "console.anthropic.com", "support.anthropic.com", "docs.anthropic.com", "mcp-proxy.anthropic.com", "pivot.claude.ai" ], "$comment": "network.allowDomains is a PINNED, hand-curated list — `sync` carries it forward and never re-derives it. On the first-party deployment this harness models, the VM egress allowlist is NOT in the app bundle: the 1p deployment class returns `vmEgressPolicy(){return null}`, so `resolveVmAllowedDomains` falls through to the session's SERVER-DELIVERED `egressAllowedDomains`, and the only host the bundle contributes is the OTLP endpoint appended by the augmenter. The entries below are therefore a curated RECONSTRUCTION, not an extraction — and this field is the allowlist the harness ENFORCES (boundaryAllowList + the session egress plan). UNVERIFIED as VM egress, retained deliberately rather than pruned on a guess because the true 1p list cannot be read from the asar: www.anthropic.com, console.anthropic.com, support.anthropic.com, docs.anthropic.com — these read as Desktop UI/help links swept in by the predecessor's bundle-wide domain regex. Removing one is a deliberate, reviewed act. checkEgressContractFacts in src/sync/cowork-sync.ts fails closed if the construction that justifies pinning moves." }, "bgEnvStrip": { "knownVars": [ "CLAUDE_CODE_OAUTH_TOKEN", "CLAUDE_CODE_SESSION_KIND", "CLAUDE_CODE_SESSION_ID", "CLAUDE_CODE_SESSION_NAME", "CLAUDE_CODE_SESSION_LOG" ] }, "$comment": "Platform baseline auto-derived by `cowork-harness sync` from a live Claude Desktop install + app.asar. VOLATILE per-release facts only. Regenerate per release; review the diff. Captured 2026-09-06 on macOS arm64.", "capturedAt": "2026-09-06", "platform": "darwin-arm64", "settings": { "autoMountFolders": { "key": "autoMountFolders", "default": false }, "localAgentModeTrustedFolders": { "key": "localAgentModeTrustedFolders", "default": [] } }, "provenance": { "asarPath": "/Applications/Claude.app/Contents/Resources/app.asar", "asarFingerprint": "4866948449a33ad9", "gates": { "$comment": "Production GrowthBook gate states decoded from ~/Library/Application Support/Claude/fcache (standard interactive Anthropic account, 2026-06-13; binary-verified app.asar 1.12603.1). Pin per release. Behavior-affecting gates the harness models: 1143815894 (loop), 1648655587 (dispatch cap), 1978029737 (web_fetch routing). Telemetry/auth-internal gates omitted. Also pinned: 2614807392 (skeletonHome), 123929380 (autoMemoryStandardSessions), 1696890383 (memoryGuidelinesEnv), 2860753854 (memoryExtraGuidelines) — dormant drift-sentinels for dark-launched features (host-fs skeleton, auto-memory) the harness deliberately models as OFF (or, for memoryExtraGuidelines, as inert-default: on in production but its served value equals the hardcoded default); pinned so a production flip surfaces as a sync diff instead of silent drift. The skill-family gates are pinned on the same principle but are NOT all dormant: 245679952 (suggestSkillsEnabled) and 1598976391 (proactiveSkillSuggestEnabled) ARE modeled — they gate the skills SDK-MCP tool surface. 3246569822 (canSaveSkill) is served ON/force by a server-side rollout (independent of Desktop version) and is deliberately NOT modeled: ON adds an mcp__cowork__save_skill tool and changes the skills system prompt, so this pin records a known fidelity gap rather than a modeled surface — see docs/fidelity-gaps.md. 1824824999 (canProposeSkills) is present-but-off, pinned so the same class of silent widening cannot land unnoticed. 1598976391 (proactiveSkillSuggestEnabled) flipped off/defaultValue -> ON/force by a SERVER-SIDE rollout observed 2026-08-04 — NOT a Desktop change: the gate id occurs exactly once in both the 1.24012.9 and 1.24012.11 asars and would read ON on .9 today, so this value is Desktop-version-INDEPENDENT despite living in a version-named file (same provenance class as canSaveSkill above). It is read from a SINGLE account's fcache; force rules are server-evaluated and can be segment-targeted, so whether the rollout is global is not determinable from anything on disk. Unlike canSaveSkill this one IS modeled (both branches exist), so the pin changes the emulated suggest_skills surface: proactive description + an optional trigger param + a chained empty-catalog note. Override per-session with skills.proactive_suggest_enabled. 4074604942 (1p-direct-mcp) was NEW in 1.24012.11 and DARK (absent from a standard fcache, hence its DARK_GATES entry); it arms a Desktop-side direct-MCP pool for MDM-managed 1P servers, inert for an unmanaged account, pinned as a sentinel only. Observed 2026-08-05 SERVED rather than absent (source \"force\", value false) — the rollout reached this account with the gate OFF, so nothing it arms is reachable and no modeled surface changes. Same provenance class as canSaveSkill: read from a SINGLE account's fcache, and force rules are server-evaluated and segment-targetable, so its DARK_GATES entry is retained deliberately — another account may still see it absent, and that must stay tolerated rather than hard-failing their sync.", "emitToolUseSummaries:66187241": { "on": false, "source": "defaultValue", "value": false }, "autoMemoryStandardSessions:123929380": { "on": false, "source": "defaultValue", "value": false }, "subagentPromptServerOverride:124685897": { "on": true, "source": "defaultValue", "value": true }, "suggestSkillsEnabled:245679952": { "on": true, "source": "force", "value": true }, "skill-arg-elicitation:286376943": { "on": true, "source": "force", "value": true }, "mcpConnectionNonblockingOff:434204418": { "on": false, "source": "defaultValue", "value": false }, "bridgeSdkTransport:583857784": { "on": true, "source": "force", "value": true, "note": "— Cowork uses the SDK-based transport (control protocol), confirming the harness's sdkMcpServers/mcp_message path is the production transport." }, "fineGrainedToolStreaming:714014285": { "on": true, "source": "force", "value": true }, "enableToolSearchAuto:1129419822": { "on": false, "source": "absent" }, "hostLoop:1143815894": { "on": true, "source": "force", "value": true }, "scheduledTaskToolsApprovableByAutoMode:1447478638": { "on": true, "source": "force", "value": true }, "questionExtended:1595132361": { "on": false, "source": "defaultValue", "value": false }, "proactiveSkillSuggestEnabled:1598976391": { "on": true, "source": "force", "value": true }, "scheduledTaskSessionLimiter:1648655587": { "on": true, "source": "force", "value": { "global": 3, "perTask": 1 }, "note": "SCHEDULED-TASK (cron) session limiter — NOT an in-conversation Task-tool cap (binary-verified 2026-07-04, asar 1.18286.0 class L9t [ScheduledTasks]). perTask=1: <=1 concurrent session PER SCHEDULED TASK; global=3: <=3 concurrent scheduled-task sessions globally (+_pendingTaskDispatches). Host-side SKIP (recordSkipAndEmit/PerTaskLimit|GlobalLimit — NOT queue/deny). Cowork imposes no cap on Task-tool sub-agent fan-out; the harness has no scheduled-task scheduler, so this gate has no applicable surface — pinned as a sync drift-sentinel only." }, "memoryGuidelinesEnv:1696890383": { "on": false, "source": "defaultValue", "value": false }, "canProposeSkills:1824824999": { "on": false, "source": "defaultValue", "value": false }, "oauthScopesEnv:1936081873": { "on": true, "source": "force", "value": true }, "coworkRuntimeConfig:1978029737": { "on": true, "source": "experiment", "value": { "coworkNativeFilePreview": true, "coworkWebFetchDedup": true, "coworkWebFetchDedupMaxEntries": 100, "coworkWebFetchDedupTtlMs": 3600000, "coworkWebFetchPrompt": true, "coworkWebFetchViaApi": true, "pluginsFullSyncStalenessMs": 3600000, "pluginsSyncIntervalMs": 1200000, "sessionsBridgePollBlockMs": 30, "skillsSyncIntervalMs": 1200000, "workspaceBashWaitLonger": true }, "note": "coworkWebFetchViaApi=true coworkWebFetchPrompt=true workspaceBashWaitLonger=true sessionsBridgePollBlockMs=30 — web_fetch is host/API-routed (POST /api/organizations//cowork/web_fetch), NOT container egress; gated by a separate web-fetch hostname allowlist + URL provenance." }, "cicCanUseToolEnabled:2051942385": { "on": true, "source": "force", "value": true }, "cliPlugin:2307090146": { "on": false, "source": "defaultValue", "value": false, "note": "— the CLI-plugin credential broker is dark-launched off for standard interactive accounts (Ch23/L106)." }, "pluginSyncSparkplug:2340532315": { "on": true, "source": "force", "value": true, "note": "— startup syncPlugins(); plugins load via --plugin-dir (registry inert in-VM)." }, "cuCanUseToolEnabled:2486083521": { "on": true, "source": "force", "value": true }, "skeletonHome:2614807392": { "on": false, "source": "absent" }, "memoryExtraGuidelines:2860753854": { "on": true, "source": "defaultValue", "value": "## Sensitive personal information\n\nDo not save the following to memory unless the user explicitly asks you to remember it:\n\n- Protected attributes: race, ethnicity, national origin, religion, age, sex, sexual orientation, gender identity, immigration status, disability, serious illness, union membership\n- Government identifiers: Social Security numbers, driver's license numbers, passport numbers, government ID numbers\n- Financial account details: credit card numbers, bank account numbers\n- Health information: medical conditions, diagnoses, lab results, mental health details, therapy or counseling\n- Home or personal mailing addresses (work addresses are fine)\n- Account passwords, secret tokens, or secret keys\n\nIf any of the above appears in conversation context, complete the task but do not persist it to a memory file. If the user explicitly says \"remember my address is X\", saving it is acceptable — they've given consent." }, "coworkArtifacts:2940196192": { "on": true, "source": "force", "value": true }, "canSaveSkill:3246569822": { "on": true, "source": "force", "value": true, "note": "ID ABSENT FROM THE 1.44121.1 ASAR (3 occurrences at 1.40609.1, 0 here). The row is fcache provenance and is kept as recorded — the server still serves the flag — but Desktop no longer reads it: for a standard session canSaveSkill is now the skillsEnabled conjunct alone. Treat this row as a record of what the server sent, NOT as evidence that a gate still guards the feature." }, "automode-permission-rubric:3424551112": { "on": true, "source": "force", "value": true }, "1p-direct-mcp:4074604942": { "on": false, "source": "force", "value": false }, "skipPrecompactLoad:4153934152": { "on": false, "source": "defaultValue", "value": false }, "autoModeOverridesAlwaysAllow:4200321681": { "on": true, "source": "force", "value": true }, "builtinToolsApprovableByAutoMode:4202409342": { "on": true, "source": "force", "value": true } }, "spawnEnvKeys": [ "ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_BASE_URL", "ANTHROPIC_CUSTOM_HEADERS", "API_TIMEOUT_MS", "CLAUDE_CODE_ACCOUNT_TAGGED_ID", "CLAUDE_CODE_ACCOUNT_UUID", "CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD", "CLAUDE_CODE_ATTRIBUTION_HEADER", "CLAUDE_CODE_AUTO_COMPACT_WINDOW", "CLAUDE_CODE_BRIEF", "CLAUDE_CODE_BRIEF_UPLOAD", "CLAUDE_CODE_COWORK_FRAME_ARTIFACTS", "CLAUDE_CODE_DIAGNOSTICS_FILE", "CLAUDE_CODE_DISABLE_AGENTS_FLEET", "CLAUDE_CODE_DISABLE_BACKGROUND_TASKS", "CLAUDE_CODE_DISABLE_BUNDLED_SKILLS", "CLAUDE_CODE_DISABLE_CRON", "CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS", "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC", "CLAUDE_CODE_DISABLE_OFFICIAL_MARKETPLACE_AUTOINSTALL", "CLAUDE_CODE_DISABLE_REFUSAL_FALLBACK", "CLAUDE_CODE_DISABLE_TERMINAL_TITLE", "CLAUDE_CODE_EMIT_TOOL_USE_SUMMARIES", "CLAUDE_CODE_ENABLE_APPEND_SUBAGENT_PROMPT", "CLAUDE_CODE_ENABLE_ASK_USER_QUESTION_TOOL", "CLAUDE_CODE_ENABLE_AUTO_MODE", "CLAUDE_CODE_ENABLE_FINE_GRAINED_TOOL_STREAMING", "CLAUDE_CODE_ENABLE_TASKS", "CLAUDE_CODE_ENTRYPOINT", "CLAUDE_CODE_HOST_AUTH_ENV_VAR", "CLAUDE_CODE_HOST_PLATFORM", "CLAUDE_CODE_IS_COWORK", "CLAUDE_CODE_OAUTH_SCOPES", "CLAUDE_CODE_OAUTH_TOKEN", "CLAUDE_CODE_ORGANIZATION_UUID", "CLAUDE_CODE_PROMPT_CACHE_TTL", "CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST", "CLAUDE_CODE_QUESTION_EXTENDED", "CLAUDE_CODE_RATE_LIMIT_TIER", "CLAUDE_CODE_SKIP_PRECOMPACT_LOAD", "CLAUDE_CODE_SUBAGENT_MODEL", "CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL", "CLAUDE_CODE_SUBSCRIPTION_TYPE", "CLAUDE_CODE_TAGS", "CLAUDE_CODE_USER_EMAIL", "CLAUDE_CODE_WORKSPACE_HOST_PATHS", "CLAUDE_CONFIG_DIR", "CLAUDE_PREVIEW_CLASSIFIER_FLOOR", "CLAUDE_PROJECT_TOOL", "CLAUDE_PROJECT_UUID", "CLAUDE_STREAM_IDLE_TIMEOUT_MS", "DISABLE_AUTOUPDATER", "DISABLE_BRIEF_MODE_STOP_HOOK", "DISABLE_ERROR_REPORTING", "DISABLE_FEEDBACK_COMMAND", "DISABLE_GROWTHBOOK", "DISABLE_MICROCOMPACT", "DISABLE_TELEMETRY", "ENABLE_PROMPT_CACHING_1H", "ENABLE_TOOL_SEARCH", "MCP_CONNECTION_NONBLOCKING", "MCP_CONNECT_TIMEOUT_MS", "MCP_TOOL_TIMEOUT", "TZ", "USE_LOCAL_OAUTH", "USE_STAGING_OAUTH" ], "spawnEnvSpreadCount": 34, "fcache": { "content16": "e70706f6b3ce4843", "embeddedTimestamp": 1788669127816, "featureCount": 322 }, "asarGateIds": [ "17519066", "28927217", "36693946", "40173473", "49458538", "66187241", "96101707", "96832454", "98041341", "108465228", "123929380", "124685897", "133902057", "144158705", "147471044", "151700879", "160242894", "162211072", "180602792", "206750215", "227459766", "232278890", "245679952", "254738541", "262787483", "278625510", "283281522", "286376943", "291584251", "304458538", "371539023", "397125142", "416245092", "434204418", "451382573", "458990115", "476513332", "505512513", "520984675", "541746109", "552157343", "554317356", "570403704", "574905726", "581786799", "583857784", "607406988", "613003975", "629684104", "642265585", "657187776", "693564285", "700397605", "706068684", "714014285", "717163759", "720735283", "721728391", "732695530", "733405693", "743194442", "748063099", "751369921", "762798616", "763725229", "769234850", "790863764", "816856638", "822923030", "848696239", "850702611", "873030668", "879583975", "884132720", "885442848", "890748467", "919579692", "922442190", "939257113", "942840715", "954625922", "959099749", "975112542", "976614668", "982691970", "986399546", "994878011", "999999999", "1004628546", "1028094019", "1061122496", "1085129406", "1101873029", "1109029378", "1111144847", "1126577245", "1129419822", "1131777852", "1143815894", "1144854707", "1179150525", "1183214304", "1197768857", "1215221242", "1239409407", "1263782781", "1265511872", "1278239935", "1284392461", "1287897741", "1291166712", "1294710626", "1294982044", "1310358601", "1323782925", "1340622498", "1346958739", "1395094573", "1403324732", "1410651677", "1412563253", "1434290056", "1441987769", "1447478638", "1477483922", "1480778051", "1544796833", "1549258603", "1569828280", "1588340729", "1595132361", "1603637451", "1607913098", "1629866860", "1645353060", "1648655587", "1677081600", "1695017395", "1696890383", "1701404423", "1703762832", "1707927936", "1710585411", "1743527783", "1748356779", "1754160972", "1776348311", "1781903805", "1824824999", "1825995196", "1836754949", "1868684740", "1875770773", "1893165035", "1904135164", "1923867086", "1924247864", "1925932989", "1928275548", "1936081873", "1942337209", "1942781881", "1947305033", "1972091654", "1978029737", "1992087837", "2004571505", "2016258596", "2023768496", "2048589233", "2049450122", "2051751800", "2051942385", "2062156710", "2067027393", "2071326072", "2079084046", "2096326160", "2099281725", "2114777685", "2115990222", "2129861473", "2140326016", "2143883161", "2153038254", "2192324205", "2214981414", "2216414644", "2216766246", "2216901299", "2220415149", "2229805612", "2294160313", "2307090146", "2309422447", "2339084909", "2340532315", "2345107588", "2345515473", "2358734848", "2365358358", "2369776764", "2371478310", "2392971184", "2393677837", "2394039067", "2427043945", "2431502897", "2464731750", "2464838160", "2486083521", "2529235968", "2537760906", "2547348043", "2576868839", "2605355193", "2614807392", "2654621331", "2685067074", "2688060585", "2719700143", "2720310975", "2722545484", "2725876754", "2726556121", "2745857735", "2755789005", "2767293802", "2768844978", "2795002549", "2795595714", "2798169495", "2800354941", "2806360886", "2833632524", "2848557028", "2857785401", "2860753854", "2864556627", "2877254163", "2893011886", "2895944283", "2906430762", "2906979861", "2921739883", "2938421209", "2940196192", "2941281426", "2961849615", "2971093051", "2973881027", "2974609625", "2979038612", "3007887412", "3018088575", "3019665678", "3023518717", "3025587613", "3043546415", "3045399524", "3046457088", "3046702961", "3070110303", "3093186863", "3123045134", "3142047527", "3150971238", "3163246478", "3166359512", "3183093548", "3229517805", "3269331205", "3300773012", "3302457740", "3353525254", "3356268835", "3366735351", "3368286709", "3371831021", "3372259263", "3377630395", "3414805749", "3424551112", "3436441689", "3444158716", "3448679706", "3491600236", "3527441323", "3531612483", "3531779070", "3547093683", "3555657854", "3558849738", "3559681707", "3572572142", "3577536076", "3586389629", "3602629573", "3633961296", "3635490728", "3640318556", "3646818354", "3671534883", "3691521536", "3705360580", "3723845789", "3724674924", "3728132896", "3758515526", "3764441751", "3778159589", "3783846612", "3796647113", "3807767338", "3920548810", "3927880029", "3931589559", "3946462706", "3961433847", "3976799455", "3982397363", "3990395613", "4034153053", "4039294468", "4041267332", "4044603026", "4055864154", "4066504968", "4074604942", "4083972287", "4085357330", "4108768567", "4112513247", "4114957886", "4116586025", "4141490266", "4153934152", "4156472024", "4160352601", "4185841952", "4200321681", "4202409342", "4217215889", "4272200640", "4282876673", "4293378213" ] }, "requireFullVmSandbox": null }