Claude Code v2.1.248 introduces a new `--restricted` mode that removes built-in command execution tools and ignores user settings to enhance security. The update also adds cross-session messaging capabilities between sessions on the same machine across Bedrock, Vertex, and Foundry environments.
- Added `--restricted` flag to disable code execution tools and bypass permissions.
- Introduced `experimental.cacheTtl` for per-agent prompt cache configuration.
- Enabled cross-session messaging via `SendMessage` and `ListAgents` APIs.
- Fixed prompt-cache misses in long sessions caused by OAuth token refreshes.
- Resolved issues with session disappearance after 30 days and login screen loops.
- Improved Workflow tool prompt footprint by reducing description size from 5.7k to ~1k tokens.
These changes provide tighter security controls for restricted environments and improve reliability in long-running or multi-session workflows.