From d86b8924d99c01ee5df836fac0c90938e3ab8826 Mon Sep 17 00:00:00 2001
From: Alexandre <44178713+alexbelgium@users.noreply.github.com>
Date: Fri, 10 Jul 2026 14:27:18 +0200
Subject: [PATCH] Clarify Claude terminal secure defaults

---
 claude_desktop/CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/claude_desktop/CHANGELOG.md b/claude_desktop/CHANGELOG.md
index 04ba951d2e..efcdbffbba 100644
--- a/claude_desktop/CHANGELOG.md
+++ b/claude_desktop/CHANGELOG.md
@@ -1,7 +1,7 @@
 ## 1.13 (10-07-2026)
 
 - Add the official Claude Code stable package, `tmux`, `ripgrep`, and a pinned upstream `ttyd` binary for both supported architectures.
-- Add an optional authenticated Claude Code web terminal on port `7681`; reconnecting clients attach to the same persistent tmux session.
+- Add an optional authenticated Claude Code web terminal on port `7681`; the port remains unmapped by default and reconnecting clients attach to the same persistent tmux session.
 - Validate and canonicalize `terminal_workspace`, restrict it to supported storage roots, and never re-own existing directories.
 - Order the terminal after service initialization and start tmux with an explicit Bash shell and workspace.
 - Add `claude-headroom` for Headroom's supported wrapper, reusing the supervised proxy with `--no-proxy` while leaving RTK management to the add-on.