More environment variables carried into remote sessions

More environment variables get carried into remote sessions; none are set by default.

Under the hood Notable Internal Changes

JSON All of v2.1.248

Under the hoodTier: how much it should matter to you

2Useful: my rating, 1 to 5

3Signal: worth watching, 1 to 5

Cloud SessionsArea: what it touches

Internal ChangesKind: in v2.1.248, 27 Aug 26

What probably matters to youSection of the release

What

The list of variables passed through to remote sessions grew, and one older group was dropped. None are set by default.

Details

Added: CLAUDE_CODE_REMOTE_HERMETIC_MODE (only honoured alongside CLAUDE_CODE_REMOTE), CLAUDE_CODE_HOME_SEED_HOLD_TIMEOUT_MS, CLAUDE_CODE_HOME_SEED_VERDICT_TIMEOUT_MS, CLAUDE_CODE_DISABLE_PLUGIN_FORWARDING, and CLAUDE_CODE_RESTRICTED, which is also injected as "1" under some conditions.
The config-directory list adds CLAUDE_CODE_DIR_SYNC_STREAM.
The remote workflow script, args and workflow-name-only variables no longer appear in this file.

Evidence

CLAUDE_CODE_HOME_SEED_VERDICT_TIMEOUT_MS

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

Read from

Names in the bundleCLAUDE_CODE_DIR_SYNC_STREAMCLAUDE_CODE_RESTRICTED

How sure we are

Two sources agreeTwo things we can check say the same as this entry.

Anthropic's release notes agreeAdded --restricted (or CLAUDE_CODE_RESTRICTED=1): removes the built-in tools that run commands or code and WebFetch (unless named in…

The name it cites is new in this buildNew in this build: CLAUDE_CODE_DIR_SYNC_STREAM

See this entry in the whole of v2.1.248 →

The build it came inv2.1.248

27 Aug 2026 · 876 entries, this one is #165.

Use it now64
You'll notice420
Nothing to try yet95
Under the hood297

Either side of it

v2.1.247Older
v2.1.250Newer

Open the release →

Names in this entry

envCLAUDE_CODE_REMOTE_HERMETIC_MODE
More environment variables get carried into remote sessions; none are set by default.
envCLAUDE_CODE_REMOTE
Remote sessions started from review can skip writing some state to disk.
envCLAUDE_CODE_HOME_SEED_HOLD_TIMEOUT_MS
A cloud session can hold its first reply until your settings arrive; two env vars shorten the wait.
envCLAUDE_CODE_HOME_SEED_VERDICT_TIMEOUT_MS
A cloud session can hold its first reply until your settings arrive; two env vars shorten the wait.
envCLAUDE_CODE_DISABLE_PLUGIN_FORWARDING
Two new environment variables let you refuse plugin or hook forwarding to a device.
envCLAUDE_CODE_RESTRICTED
New --restricted flag starts a locked-down session with no shell tools and no settings files.
envCLAUDE_CODE_DIR_SYNC_STREAM
More environment variables get carried into remote sessions; none are set by default.

Anthropic's note

Upstream's own release notes for v2.1.248 name something this entry names, so the two are probably about the same change. Probably: the pairing is made on a shared name rather than on the words around it.

Added --restricted (or CLAUDE_CODE_RESTRICTED=1): removes the built-in tools that run commands or code and WebFetch (unless named in --tools), keeps file tools inside the working directory, refuses bypassPermissions, and ignores user, project and local settings files

Is this right?

Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.

v2.1.275 New credential/auth error reason ip_restricted
Both mention restricted
v2.1.292 Attached files are checked again to be the exact path that was approved
Both mention restricted
v2.1.300 Help for --restricted no longer lists REPL among the removed tools
Both mention restricted