Anthropic released Claude Code v2.1.234 on August 17 while also introducing a new research-preview feature to the CLI and Desktop — a near-symmetric dual-track update: one track welds shut the last gap from last week's NTLM credential-leak patch, the other brings Claude Design's artboard workflow into the coding environment. One side is security tightening; the other is boundary expansion.
NTLM Path Bypass Fixes: The Last Mile
The headline fix in v2.1.234 is rejection handling for Windows NT-namespace (\??) paths. Last week's 2.1.233 patch addressed the Windows NTLM credential-leak vector, but several pre-approved file-access paths could still bypass approval via NT-namespace paths and reach the leaked credentials:
- Remote file reads
- Session resume
- CLAUDE.md includes
- Workflow scripts
- File uploads
- Auto-continue on session usage-limit reset — when a session pauses after hitting the claude.ai usage cap, Claude Code can now automatically resume the previous work once the limit resets, with no restart or context re-pasting. A real improvement for long-running coding tasks, especially agents doing multi-step reasoning with heavy context budgets.
- GitLab merge request badges — when the repository has a GitLab remote and an authenticated glab CLI is present locally, the footer and statusline display MR status. Another step in Claude Code's support for collaboration platforms beyond GitHub.
v2.1.234 closes all five paths at once, so even an attacker holding leaked NTLM credentials cannot use path tricks to read files they shouldn't. This is the "last mile" of the NTLM vulnerability patch series, and the first time Claude Code approaches a complete credential isolation model on Windows.
claude-api Skill Context Cost Cut ~8x
Another subtle but engineering-heavy change in the same version: the built-in claude-api skill's context cost dropped from ~200k+ tokens to ~25k. The technique is "on-demand loading of reference documentation" — instead of stuffing the full API docs into context at skill startup, reference docs are fetched externally as needed. This ~8x reduction means the claude-api skill is no longer a context-budget monster in the 200K window; developers can attach multiple skills simultaneously without squeezing out readable length for core tasks.
/design Skill Brings Design Workflows into the Coding Environment
The /design skill (research preview), launched the same day, gives Claude Code CLI and Desktop Claude Design's artboard capabilities. Running /design makes Claude generate editable artboards as visual UI artifacts — developers pick one, fine-tune it on the artboard, then have Claude implement it. This compresses the design-to-implementation feedback loop from "switch to a Design tool → screenshot → write a text description → write code" down to "/design → pick one → tweak → implement." For frontend engineers, UI/UX designers, and full-stack developers, Claude Code now produces not just text but editable visual artifacts.
Two Quieter Engineering Changes
What the NTLM Last Mile Means
Claude Code 2.1.234 moves the Windows credential-leak vector from "main path blocked, sub-paths bypassable" to "sub-paths also blocked." For engineering teams deploying Claude Code on Windows workstations, the NTLM credential isolation model is nearly complete for the first time — even with leaked credentials, an attacker can't reach any file-access surface that could exploit them. It's Anthropic paying down "prompt injection defense" and "credential isolation" as the same engineering debt, a story it has been telling since enabling Auto mode by default on August 14.
What It Changes
With this update, Claude Code demonstrates two things at once: tightening defenses (all NTLM sub-paths closed) and expanding boundaries (/design bringing artboards into the CLI). These lines seem contradictory but point to the same conclusion — the moat for AI coding tools is no longer "how many lines of code it can write," but "how much more it can do within an enterprise-grade security budget." With the NTLM fixes and design artboards delivered in the same release cycle, Claude Code is shifting tracks from "coding assistant" to "coding platform."