Claude Code v2.1.248 introduces a new `--restricted` mode that removes built-in command execution tools and ignores user settings to enhance security. The update also adds cross-session messaging capabilities between sessions on the same machine across Bedrock, Vertex, and Foundry environments.

  • Added `--restricted` flag to disable code execution tools and bypass permissions.
  • Introduced `experimental.cacheTtl` for per-agent prompt cache configuration.
  • Enabled cross-session messaging via `SendMessage` and `ListAgents` APIs.
  • Fixed prompt-cache misses in long sessions caused by OAuth token refreshes.
  • Resolved issues with session disappearance after 30 days and login screen loops.
  • Improved Workflow tool prompt footprint by reducing description size from 5.7k to ~1k tokens.

These changes provide tighter security controls for restricted environments and improve reliability in long-running or multi-session workflows.