El propio personal de Anthropic no puede usar el modo ‘Bypass Permissions’ de Claude Code, muestra el código del cliente
El JavaScript público de Anthropic separa los rechazos por control no aprobado de los errores por cliente desactualizado; otro manejador indica que las sesiones de empleados que solicitan el modo de bypass comienzan en Aceptar cambios.
By Ryan Merket · Published
RUNTIMEWIRE INVESTIGATION — Original analysis
Original reporting by RuntimeWire, based on reverse engineering, testing.
Por qué importa
El código expone un manejo de errores específico orientado a los empleados, mientras deja sin resolver las reglas del servidor y el acceso de los clientes a controles equivalentes.
Reporting record
Finding
RuntimeWire's inspection found that Claude Code's public client maps staff-linked unapproved-controls refusals separately from outdated-client errors, and that a separate session handler reports employee sessions requesting bypass mode as starting in Accept edits.
How we verified
Methods: reverse engineering, testing.
The inspected public JavaScript assets include the API-error parser, staff-facing error messages, and a separate session-start handler; RuntimeWire also preserved the retrieved assets' bytes and SHA-256 hashes.
RuntimeWire inspected the publicly distributed Claude Code JavaScript assets, traced the parser's error categories to their staff-facing messages, examined the separate employee-account session-start branch, and preserved the retrieved files' bytes and SHA-256 hashes. No live API response was observed.
Reproduction
RuntimeWire was not able to independently reproduce the finding.
El cliente de Claude Code distribuido públicamente por Anthropic contiene rutas separadas para rechazar sesiones del personal con controles de seguridad no aprobados y para identificar clientes desactualizados, según la inspección del 18 de octubre de RuntimeWire. El código muestra cómo el cliente clasifica y explica estas condiciones.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.