Claude Code 2.1.248 adds --restricted sandbox mode, removes a dozen env vars
ClaudeCodeLog · x · 2026-08-28
Claude Code CLI 2.1.248 highlights:
- New --restricted / CLAUDECODERESTRICTED=1: removes built-in tools that run commands or code plus WebFetch (unless named via --tools), keeps file tools inside the working directory, refuses bypassPermissions, and ignores user/project/local settings — effectively a hardened sandbox mode.
- New env vars including DISABLEAUTOUPDATER, DISABLECOMPACT, SELFHOSTEDRUNNERCLIENTLABEL; claude-3-5-haiku added to models.
- Experimental per-agent cacheTtl ("5m" or "1h") in agent frontmatter.
- Removed a dozen-plus env vars such as CLAUDEBGISOLATION, CLAUDECODEEFFORTLEVEL, and CLAUDECODESHELLPREFIX.
More from coding & agent
- Desktop as Agent 'Second Brain' Replaces Scattered MD Files — draginol · 2026-08-28
- Multi-agent systems may have advantages over single-agent replacements — 841io · 2026-08-28
- M3 Max achieves 70 tok/s locally with 20GB RAM free after 32k task — mayfer · 2026-08-28
- Practitioner take: cross-product MCP workflows are missing; agents could run 60-80% of company ops — pritisinghhhh · 2026-08-28
- Dev newsletter: 'My AI assistant is turning into an operating system' — dSebastien · 2026-08-28
- Grok Bot Tested: Reuses Hermes Patterns, Controls Any API — gregmushen · 2026-08-28