Claude Code 2.1.248 adds --restricted sandbox mode, removes a dozen env vars
ClaudeCodeLog · x · 2026-08-28
Claude Code CLI 2.1.248 highlights:
- New --restricted / CLAUDECODERESTRICTED=1: removes built-in tools that run commands or code plus WebFetch (unless named via --tools), keeps file tools inside the working directory, refuses bypassPermissions, and ignores user/project/local settings — effectively a hardened sandbox mode.
- New env vars including DISABLEAUTOUPDATER, DISABLECOMPACT, SELFHOSTEDRUNNERCLIENTLABEL; claude-3-5-haiku added to models.
- Experimental per-agent cacheTtl ("5m" or "1h") in agent frontmatter.
- Removed a dozen-plus env vars such as CLAUDEBGISOLATION, CLAUDECODEEFFORTLEVEL, and CLAUDECODESHELLPREFIX.
Related event: Claude Code 2.1.248 Adds --restricted Mode and Cache Fixes(2 posts)→
More from coding & agent
- Veracode: AI now writes ~half of committed code, but security pass rate stuck at 56% — WeldPond · 2026-10-16
- Engineer: my job went from silently thinking at a computer to constantly talking to it — KevinNaughtonJr · 2026-10-16
- LangChain launches Managed Deep Agents: build production agents as a directory of files — hwchase17 · 2026-10-16
- Vercel Goes Full Backend: Python GA, Containers, and Daemons — cramforce · 2026-10-16
- WorldMemArena Accepted at NeurIPS: Memory Storage ≠ Memory Use — xwang_lk · 2026-10-16
- Vercel Ship Demos Container Deploys for Go, Ruby, Java and More — edwin · 2026-10-16