隐藏的 Claude Desktop 代码揭示了一个尚未发布的自托管会话端点

Coder 已经披露了客户工作区执行;RuntimeWire 发现了一个未发布的 Desktop 设置,该设置会重定向会话 API,但二者之间的关系仍未厘清。

By · Published

RUNTIMEWIRE INVESTIGATION — Original analysis

Original reporting by RuntimeWire, based on reverse engineering.

为何重要

企业正把控制扩展到模型端点之外。由客户运行的会话主机将集中管理 Claude Code 的执行、策略和审计,同时保留 Desktop 作为员工界面。

Reporting record

Finding

Claude Desktop 2.2553.1 contains an internal, unreleased configuration that can redirect Code session traffic to an organization-specified HTTPS session host while supporting corporate authentication and a restricted bridge to local files.

How we verified

Methods: reverse engineering.

RuntimeWire's static analysis of the packaged Claude Desktop 2.2553.1 source found the “Self-hosted execution” configuration, routing for Code session and environment-provider APIs, authentication plumbing, and a device-file WebSocket bridge.

RuntimeWire statically analyzed the packaged application and compared the September 18 build with a September 10 comparison package; it did not alter the internal-build gate, execute the hidden functionality, authenticate to private services, or contact the placeholder endpoint.

Tested versions:

  • Claude Desktop 2.2553.1

Reproduction

Reproduction does not apply to this reporting (document-driven).

Company response

RuntimeWire requested comment; the company had not responded by publication time.

A desktop computer's screen shows a luminous data connection leading to remote server racks, with a smaller link returning to a local file folder.

Claude Desktop 2.2553.1 包含一个内部配置,根据 RuntimeWire 对该应用打包源码的静态分析,该配置可以将 Code 选项卡的会话流量重定向到组织指定的 HTTPS 服务器。

在该构建的三天前,Coder 宣布对 Claude Code 的 Agent Relay 支持——这是一项早期访问集成,同样将工具执行置于客户可控的工作区内。Coder 表示在 Claude Code 团队的支持下开发了该集成,并正与选定的设计合作伙伴合作。

裁剪后的语法高亮重构,仅显示这些字符串:Self-hosted execution URL selfHostedUrl https://claude-sessions.example.com Unreleased: only internal builds act on it. Claude Desktop 的配置模式为一个内部自托管会话端点命名,并明确标注为未发布。…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.