chore(agent-tools): bump Claude Code pin 2.1.221 → 2.1.263 #296

Open

dominik.polakovics wants to merge 1 commit from lab/20260908-1942 into main

dominik.polakovics commented

2026-09-08 20:06:24 +02:00

Owner

Why 2.1.263 (latest) over 2.1.236 (stable): the 2.1.222–2.1.263 range fixes several auto-mode permission-classifier holes — the only guard on lab's unattended runs (zsh [[ ]] parsing divergence 2.1.257, hidden command substitutions in zsh env assignments 2.1.260, permissions.ask skipped in compound commands 2.1.257, file-tool symlink TOCTOU 2.1.263). Same latest-over-stable reasoning as the 2.1.221 bump.

Verification (recorded in internal/compat/compat.md, 2.1.263 note): both artifacts' sha256 re-derived from Anthropic's per-version manifest; the musl image input executed through the agent-tools image's own loader and reports 2.1.263; --help diff additions-only with every lab spawn flag and value list unchanged; auth-status keys unchanged (+2 additive); all §2/§4/§5/§9/§11/§12 static markers present; §10 re-scraped — /review left the command table (now an alias of the /code-review bundled skill, row re-pinned) and cloud-plugins/list-agents/plugin-types curated out.

Owed: the live tmux recipe suite could not run in the verifying container (no go/tmux) — tracked as #295, the 2.1.220-bump shape.

The PR leg's injection smoke test builds the image from the new pin and runs claude --version on debian + alpine, which re-proves the sha256 and the PT_INTERP patch end to end.

Closes #294

Bumps the agent-tools claude image to Claude Code 2.1.263, following ADR-0051's bump order: the compat record was re-verified against the new binary FIRST, then CLAUDE_CODE_VERSION + CLAUDE_CODE_SHA256_X64_MUSL moved together. **Why 2.1.263 (latest) over 2.1.236 (stable):** the 2.1.222–2.1.263 range fixes several auto-mode permission-classifier holes — the only guard on lab's unattended runs (zsh `[[ ]]` parsing divergence 2.1.257, hidden command substitutions in zsh env assignments 2.1.260, `permissions.ask` skipped in compound commands 2.1.257, file-tool symlink TOCTOU 2.1.263). Same latest-over-stable reasoning as the 2.1.221 bump. **Verification (recorded in internal/compat/compat.md, 2.1.263 note):** both artifacts' sha256 re-derived from Anthropic's per-version manifest; the musl image input executed through the agent-tools image's own loader and reports 2.1.263; `--help` diff additions-only with every lab spawn flag and value list unchanged; auth-status keys unchanged (+2 additive); all §2/§4/§5/§9/§11/§12 static markers present; §10 re-scraped — `/review` left the command table (now an alias of the `/code-review` bundled skill, row re-pinned) and `cloud-plugins`/`list-agents`/`plugin-types` curated out. **Owed:** the live tmux recipe suite could not run in the verifying container (no go/tmux) — tracked as #295, the 2.1.220-bump shape. The PR leg's injection smoke test builds the image from the new pin and runs `claude --version` on debian + alpine, which re-proves the sha256 and the PT_INTERP patch end to end. Closes #294

dominik.polakovics added 1 commit

2026-09-08 20:06:24 +02:00

chore(agent-tools): bump Claude Code pin 2.1.221 → 2.1.263 2fa7010188

Re-verify the compat record against 2.1.263 first (ADR-0051's bump order),
then move the version + sha256 together in versions.env.

Motivation: 2.1.222–2.1.263 fixes several auto-mode permission-classifier
holes — the only guard on lab's unattended runs — including zsh [[ ]]
conditionals and hidden command substitutions being auto-approved,
permissions.ask skipped in compound commands, and a file-tool symlink
TOCTOU. Channel shape: stable was 2.1.236, 2.1.263 was latest — latest
taken for the stated reason, same as the 2.1.221 bump.

Verified (bundle extraction + CLI probes, from inside the agent-tools
container; both artifacts' sha256 re-derived from Anthropic's manifest,
the musl image input executed through the image's own loader):
- §1 no drift: --help diff is additions-only; all spawn flags and the
  --permission-mode/--effort value lists unchanged; opus alias catalog
  byte-identical (fable alias now resolves to claude-fable-5-1, noted).
- §3/§3a: pinned auth-status keys unchanged plus two additive keys the
  subset parser ignores; CLAUDE_CONFIG_DIR still honored.
- §2/§4/§5/§9/§11/§12 static markers all present.
- §10: nine of ten chat-safe rows extract verbatim; /review left the
  command table (now an alias of the /code-review bundled skill) — row
  re-pinned; new cloud-plugins/list-agents/plugin-types curated out.

The live tmux recipe suite is owed on this pin (no go/tmux in the
verifying container, the 2.1.220 shape) — tracked as #295.

Closes #294

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PqhY19JaJ6nn68yaheaBsd

Some required checks are missing.

You are not authorized to merge this pull request.

View command line instructions