Claude Code v2.1.248 adds a --restricted mode that strips every command-executing tool and ignores all settings files

GitHub·high signalXBlueskyLinkedInCopy link

Released 2026-08-27, `--restricted` (or `CLAUDE_CODE_RESTRICTED=1`) removes the built-in tools that run commands or code plus WebFetch unless explicitly named in `--tools`, confines file tools to the working directory, refuses `bypassPermissions`, and ignores user, project and local settings files entirely. The same release adds `experimental.cacheTtl` ("5m" or "1h") to agent frontmatter for per-agent prompt cache TTL, and fixes an hourly prompt-cache miss in long sessions caused by tool definitions being re-rendered after an OAuth token refresh. For anyone running agents unattended, this is the first single-flag hard sandbox that does not depend on getting a permissions config right.