Anthropic 自己的员工无法使用 Claude Code 的 ‘Bypass Permissions’ 模式，客户端代码显示
Anthropic 的公开 JavaScript 将未获批准的控制拒绝与过时的客户端错误区分开；另一个处理程序表示，请求旁路模式的员工会话从 “Accept edits” 开始。
By Ryan Merket · Published
RUNTIMEWIRE INVESTIGATION — Original analysis
Original reporting by RuntimeWire, based on reverse engineering, testing.
为何重要
该代码暴露了针对员工的特定错误处理，同时将服务器规则和客户访问的等效控制问题悬而未决。
Reporting record
Finding
RuntimeWire's inspection found that Claude Code's public client maps staff-linked unapproved-controls refusals separately from outdated-client errors, and that a separate session handler reports employee sessions requesting bypass mode as starting in Accept edits.
How we verified
Methods: reverse engineering, testing.
The inspected public JavaScript assets include the API-error parser, staff-facing error messages, and a separate session-start handler; RuntimeWire also preserved the retrieved assets' bytes and SHA-256 hashes.
RuntimeWire inspected the publicly distributed Claude Code JavaScript assets, traced the parser's error categories to their staff-facing messages, examined the separate employee-account session-start branch, and preserved the retrieved files' bytes and SHA-256 hashes. No live API response was observed.
Reproduction
RuntimeWire was not able to independently reproduce the finding.
Anthropic's publicly distributed Claude Code client contains separate paths for refusing staff sessions with unapproved security controls and for identifying outdated clients, according to RuntimeWire's October 18th inspection. The code shows how the client classifies and explains these conditions.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.