Claude Code tightens the sandbox as agent hooks misfire
Friday, August 28, 2026 · 10 min
Claude Code v2.1.248 adds restricted mode while VS Code Copilot hooks overfire and Codex on Windows hits a no-window launch bug. The through-line: agent tooling is moving from impressive demos to stubborn production controls.
Listen
Show notes
Claude Code v2.1.248 adds restricted mode while VS Code Copilot hooks overfire and Codex on Windows hits a no-window launch bug. The through-line: agent tooling is moving from impressive demos to stubborn production controls.
In this episode
- v2.1.248 — Anthropic
What's changed Added --restricted (or CLAUDE_CODE_RESTRICTED=1 ): removes the built-in tools that run commands or code and WebFetch (unless named in --tools ), keeps file tools inside the working directory, refuses bypassPermissions , and ignores user, project and local settings files Added experimental.cacheTtl ( "5m" or "1h" ) to agent frontmatter: a per-agent prompt cache TTL used when no…
- Hooks with matcher field do not filter by tool · Issue #332988 · microsoft/vscode · GitHub — GitHub
# Hooks with matcher field do not filter by tool - State: open - Author: lonitra - Created: 2026-08-27T17:21:27Z - Updated: 2026-08-27T17:30:49Z - Repository: microsoft/vscode - Number: #332988 - Assignees: pwang347 ## Labels - new release --- - VS Code Version: 1.135.0 - Feature (e.g. agent/edit/ask mode): Hooks (PreToolUse / PostToolUse) - Selected model (e.g. GPT 4.1, Claude 3.7 Sonnet):…
- Windows Desktop launches ChatGPT.exe background processes but no UI/window appears · Issue #41075 · openai/codex · GitHub — OpenAI
# Windows Desktop launches ChatGPT.exe background processes but no UI/window appears - State: closed - Author: muliang1007x-png - Created: 2026-08-27T07:12:37Z - Updated: 2026-08-27T07:19:03Z - Repository: openai/codex - Number: #41075 ## Labels - bug - windows-os - app --- ### What version of the Codex App are you…
- AG-UI tool-return rehydration parses twice, using `validate_python` where `validate_json` stays in Rust · Issue #7826 · pydantic/pydantic-ai · GitHub — GitHub
# AG-UI tool-return rehydration parses twice, using `validate_python` where `validate_json` stays in Rust - State: open - Author: dsfaccini - Created: 2026-08-27T17:01:47Z - Updated: 2026-08-27T17:02:12Z - Repository: pydantic/pydantic-ai - Number: #7826 - Assignees: dsfaccini ## Labels - performance - AG-UI --- > This issue was posted by Claude Code using claude-opus-5 on behalf of…
- The Bug Class AI Coding Agents Keep Introducing (and How We Started Catching It in CI) - DEV Community — DEV Community
The Bug Class AI Coding Agents Keep Introducing (and How We Started Catching It in CI) - DEV Community ## The pattern AI coding agents are good at producing a diff that works in the narrowest sense — the function still returns what the test expects. What they're not reliably good at is preserving properties nobody wrote a test for in the first place. The two we kept running into: an…