News
Claude Code 2.1.248 adds --restricted; npm latest is 2.1.250 while stable stays 2.1.236.
v2.1.248 (27 Aug) ships --restricted / CLAUDE_CODE_RESTRICTED=1: drops shell and code-run tools plus WebFetch unless named in --tools, keeps file tools inside the working directory, refuses bypassPermissions, and ignores user/project/local settings.1 Same cut fixes the roughly-hourly prompt-cache miss after OAuth refresh that dropped extended-thinking context in long sessions, and a --resume cache miss when usage overage changed the ScheduleWakeup tool shape.1
npm @anthropic-ai/claude-code: stable → 2.1.236; latest/next → 2.1.250 (patch notes only on 250).23 Channel policy from #015 stands.
Use it
latest ≥2.1.248 for --restricted and the hourly cache fix; pin stable only if you need the slower channel.
Deeper — 2.1.248 surface
experimental.cacheTtl(5m|1h) on agent frontmatter.1- Cross-session
SendMessage/ListAgentson Bedrock, Vertex, Foundry, and with telemetry off.1 /usage-creditsfor Marketplace / self-serve Enterprise and trials.1- Self-hosted runner
--client-label; server-managed settings diagnostics in/doctorand/status.1
Sources
Originally part of the 28 August 2026 edition.