[BUG] Claude code session should not be a part of the commit message by default when using claude code web

[vibecoder-1z3r0]

Preflight Checklist

• I have searched existing issues and this hasn't been reported yet
• This is a single bug report (please file separate reports for different bugs)
• I am using the latest version of Claude Code

What's Wrong?

During my latest claude code web session, I noticed that the claude session via https://claude.ai/code/session_[id] was in every commit message. Looks like this is a part of some template in new claude code web sessions.

This is not OK, and is forcing me to have to re-write my commit history to remove the session ID from commits to a public repo.

What Should Happen?

No identifying information for a claude code session should be in the git commit history.

Error Messages/Logs

Steps to Reproduce

Start a claude code web session.
Have claude commit code.
Look at the commit history.

Claude Model

Sonnet (default)

Is this a regression?

I don't know

Last Working Version

No response

Claude Code Version

claude 2.1.87 (Claude Code)

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

Other

Additional Information

No response

[yurukusa]

You can prevent this with a PreToolUse hook that strips session IDs from commit messages:

INPUT=$(cat)
COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
[ -z "$COMMAND" ] && exit 0
if echo "$COMMAND" | grep -qE 'git commit' && echo "$COMMAND" | grep -qE 'claude\.ai/code/session'; then
  echo '{"decision":"deny","message":"⛔ Commit message contains a claude.ai session URL. Remove it before committing — session IDs should not be in public git history."}'
  exit 0
fi
exit 0

For the commits already pushed, git rebase -i with reword is the cleanest fix (or git filter-branch for many commits).

[vibecoder-1z3r0]

You can prevent this with a PreToolUse hook that strips session IDs from commit messages:

INPUT=$(cat)
COMMAND=$(echo "$INPUT" | jq -r '.tool_input.command // empty' 2>/dev/null)
[ -z "$COMMAND" ] && exit 0
if echo "$COMMAND" | grep -qE 'git commit' && echo "$COMMAND" | grep -qE 'claude.ai/code/session'; then
echo '{"decision":"deny","message":"⛔ Commit message contains a claude.ai session URL. Remove it before committing — session IDs should not be in public git history."}'
exit 0
fi
exit 0
For the commits already pushed, git rebase -i with reword is the cleanest fix (or git filter-branch for many commits).

This'll work in claude code web? Not sure how. It seems as though something in claude code web had the template to have the session ID as a part of the commit message.

[github-actions]

Closing for now — inactive for too long. Please open a new issue if this is still relevant.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.