CATCH #1020
DETECTED AUG 27, 2026 22:27 UTC
THE CATCHscore 8/10
EXHIBIT 1020 · FLASH
Aug 27, 2026 22:27 UTC
github_releases+npm+pages
https://raw.githubusercontent.com/anthropics/claude-code/main/CHANGELOG.md
Anthropic's Claude Code v2.1.248 introduces a `--restricted` mode for enhanced security, per-agent prompt caching, self-hosted runner labeling, and various diagnostics and fixes.
READY TO POST:
anthropic's claude code just dropped v2.1.248 with a new `--restricted` mode. looks like they're giving devs more control over tool access and permissions. smart for security!
big claude code update! v2.1.248 adds per-agent prompt caching with `experimental.cacheTtl`. this could be a game-changer for long-running sessions and faster responses.
EVIDENCE — the receipts
[MERGED across 3 sources: github_releases, npm, pages]
shared signal: claude-code
--- npm :: @anthropic-ai/claude-code ---
@anthropic-ai/claude-code 2.1.247 -> 2.1.248: +3 strings, -4 strings, 1 flagged as interesting
[sentence] (1)
+ s first publish; omit on a redeploy (same file path this session, or `url`) to keep the artifact
--- github_releases :: anthropics/claude-code ---
anthropics/claude-code release: v2.1.248
name: v2.1.248
published: 2026-08-27T22:12:20Z
url: https://github.com/anthropics/claude-code/releases/tag/v2.1.248
## What's changed
- Added `--restricted` (or `CLAUDE_CODE_RESTRICTED=1`): removes the built-in tools that run commands or code and `WebFetch` (unless named in `--tools`), keeps file tools inside the working directory, refuses `bypassPermissions`, and ignores user, project and local settings files
- Added `experimental.cacheTtl` (`"5m"` or `"1h"`) to agent frontmatter: a per-agent prompt cache TTL used when no subagent TTL setting is configured
- Added `claude self-hosted-runner --client-label <label>` (or `SELF_HOSTED_RUNNER_CLIENT_LABEL`) to override the label the runner registers with (default: hostname)
- Added server-managed settings diagnostics: a startup warning when the settings fail to load, and a `/doctor` and `/status` line explaining a load failure or why they weren't fetched (Bedrock/Vertex/third-party provider, custom `ANTHROPIC_BASE_URL`)
- Added a warning in `/web-setup` when the GitHub CLI token lacks the `workflow` scope, since pushes to very large repositories can be rejected without it
- Added `/usage-credits` for Enterprise organizations billed through AWS Marketplace, self-serve Enterprise, and Enterprise trials, so members can request a higher usage limit from their admin
- Added cross-session messaging (`SendMessage` / `ListAgents`) between sessions on the same machine on Bedrock, Vertex, and Foundry, and when telemetry is disabled
- Fixed a prompt-cache miss (and lost extended-thinking context) roughly once
caught by the 20-minute sweep ·
the live wire · all receipts