Claude Code 2.1.325 patches compressed-response decoding
Claude Code 2.1.325 fixes a security issue in zstd-compressed response decoding and repairs sandbox, worktree, context-compaction and resumed-session failure paths. It follows 2.1.321, which added Fable 5.2 and tightened MCP redirect, file-write and protected-path checks.
Why it matters: Compressed-response parsing sits before higher-level agent policy, so a decoder flaw can affect every session using the path. The surrounding fixes also make protected-file writes and resumed histories less likely to cross an authority or integrity boundary…