Issue 019 — window: 24h to 06:00 UTC, 28 Aug 2026nofeed.dev
No. 019 · 28 August 2026 · 3 min← No. 018 · No. 020
SIGNALNORMAL|SHIPPED 2|SKIPPED 5Grok Bot on standard Cursor / Grok plansRETIRING MAI-Code-1-Flash (Copilot) · 13d

The one thing

01

Claude Code 2.1.248 adds --restricted; npm latest is 2.1.250 while stable stays 2.1.236.

v2.1.248 (27 Aug) ships --restricted / CLAUDE_CODE_RESTRICTED=1: drops shell and code-run tools plus WebFetch unless named in --tools, keeps file tools inside the working directory, refuses bypassPermissions, and ignores user/project/local settings.1 Same cut fixes the roughly-hourly prompt-cache miss after OAuth refresh that dropped extended-thinking context in long sessions, and a --resume cache miss when usage overage changed the ScheduleWakeup tool shape.1

npm @anthropic-ai/claude-code: stable → 2.1.236; latest/next → 2.1.250 (patch notes only on 250).23 Channel policy from #015 stands.

VERDICT · USE IT — latest ≥2.1.248 for --restricted and the hourly cache fix; pin stable only if you need the slower channel.
Deeper — 2.1.248 surface
  • experimental.cacheTtl (5m|1h) on agent frontmatter.1
  • Cross-session SendMessage / ListAgents on Bedrock, Vertex, Foundry, and with telemetry off.1
  • /usage-credits for Marketplace / self-serve Enterprise and trials.1
  • Self-hosted runner --client-label; server-managed settings diagnostics in /doctor and /status.1

Shipped

02
Use it

Claude Code 2.1.248 · --restricted, hourly cache fix, cross-session messaging

Hardened mode for sandboxes and CI: no shell, no code-run, no WebFetch by default, cwd-only files, no bypassPermissions, settings files ignored.1 Long-session cache repair after OAuth refresh is the quiet fix most terminal users feel first.1 latest on npm is 2.1.250; stable remains 2.1.236.23

MATTERS TO · anyone running Claude Code in CI, shared machines, or multi-hour sessions
nofeed.dev/issues/2026-08-28/claude-code-2-1-248/
Breaking

Anthropic Console · personal and service-account API keys; Python SDK 1.2.0 GA shapes

Console can mint personal keys and service-account keys scoped to a workspace or admin-wide; they die when the linked account leaves the org. Workspace keys stay as legacy.4 Platform notes 27 Aug: Python/TS/Go/Java/Ruby/C# SDKs drop dated beta headers on client.beta.files and client.beta.skills and return GA shapes; beta.skills.delete() removes a skill and all versions; BetaSkillBetaContainerSkill.4 anthropic-sdk-python v1.2.0 matches that cut.5

MATTERS TO · orgs rotating API keys and anyone still on files-api / skills beta headers
nofeed.dev/issues/2026-08-28/anthropic-keys-sdk-1-2-0/

Promised, not shipped
GitHub Actions retention covers checks, runs, statuses — 1 Oct 2026 · OpenAI Private Safety Processing / frontier ZDR — September white paper (issue 013) · Origin agent-native source-control — early beta ongoing (issue 011) · Claude Code /design skill — research preview · MAI-Code-1-Flash off Copilot — 10 Sept 2026 · OpenAI Ultrafast — expands with capacity · GPT-5.6 Sol promo pricing — at least through 21 Nov 2026 · Plus Codex/Work 5h limit — live from 25 Aug; Pro stays off for upcoming months · GitHub Copilot global model policy enforcement — rolling through 1 Sept 2026

The conversation

01
The claim — including ours

Grok Bot is on every standard Cursor and Grok plan; Codex 0.150 still drawing field-report heat from yesterday's break.67

From the floor
  • @mntruell (Cursor) via X accounts digestVendor, digest 27 Aug 05:30 (~24.5h old at window close)

    Grok Bot open to every standard Grok or Cursor subscription; usage range includes e-commerce ops and production testing.6

  • @theo via same digestVendor, same digest

    Codex 0.150 broke T3 Code; hotfix cut same night.7

  • Vercel changelogPrimary, 27–28 Aug

    Cursor joins the AI SDK harness layer via @ai-sdk/harness-cursor (ACP). Claude Managed Agents run under Chat SDK for multi-platform bots.89

Our take

Treat Grok Bot as a separate pool from IDE Composer usage until Cursor publishes a quota page. Codex 0.150+ remains the pin after yesterday's T3 break. Harness adapters are for teams already on AI SDK, not a day-one switch.

GitHub releases: 28 repos, sweep_complete true, authenticated, 18 in-window. Vendor feeds: 12 sources, sweep_complete true, 14 in-window (Copilot model providers critical 2.1h resolved; OpenAI Work/Agents minor 4.2h resolved; Cursor IDE critical 0.1h and Grok Bot minor 0.7h resolved). X accounts digest (~101 roster) 05:30 UTC 27 Aug (~24.5h old) — colour only. X keyword digest 27 Aug incomplete (11-byte JSON); layer declared incomplete. Reddit pulse today: 6 subs, 11 posts ≥10 comments. HN in-window: Anthropic blacklist ruling, agent-coding essay, Sourcehut LLM ToS. arXiv not swept. npm registry blocked from this host; dist-tags read via ExaContents on registry.npmjs.org.

Skip this

05

Everything we saw

62
62 candidates scanned · 7 used in this issue — the rest, with the reason each one was left out
The receipt. Ranking is only trustworthy if the discarded pile is visible, so here it is: everything the collectors surfaced in the window, with its signal and what we did with it.
ItemSourceSignalCall
Claude Code v2.1.248github releases7.9hled the issue
Claude Code v2.1.250github releases5.3hone thing / latest tag
npm @anthropic-ai/claude-code dist-tagsnpm registry via ExaContentsstable 2.1.236 / latest 2.1.250one thing
Anthropic platform release notes — 27 Augvendor feedsdated_dayshipped
anthropic-sdk-python v1.2.0github releases9.6hshipped
Vercel — Cursor in AI SDK harnessvercel changelogin-windowconversation
Vercel — Claude Managed Agents + Chat SDKvercel changelogin-windowconversation
X accounts digest 27 Aug 05:30digests~24.5h old; 101 accountsconversation colour
GitHub Actions retention (1 Oct 2026)github changelogin-windowskipped / promised
Copilot code review expandedgithub changelogin-windowskipped
GitHub Copilot AI model providers criticalgithub status2.1h critical resolvedskipped weather
OpenAI Work/Agents minor 4.2hopenai status4.2h minor resolvedskipped weather
goose v1.48.0github releases10.9hskipped
OpenHands v1.16.0github releases11.8hskipped
OpenCode v1.18.24 / v1.18.25github releases0.1–1.9hskipped
Cline Desktop v0.0.20 Windowsgithub releases4.5hskipped
HN — Anthropic blacklist rulingnews.ycombinator.com212 pts / 91 cmtskipped off-beat
HN — Six months of writing code exclusively with agentsnews.ycombinator.com66 pts / 99 cmtskipped essay
Reddit pulse — 6 subs, 11 postsreddit pulselayer ranlayer ran
X keyword digest 27 Augdigestsincomplete filelayer incomplete
EOF

End of feed. That is everything from the window worth your time.
Next issue tomorrow, 06:00 UTC — and if nothing ships, it will say so in two hundred words.

Still developingClaude Code stable lag (015/017/018/019). AGENTS.md native still unshipped. Origin beta (011). Ultrafast capacity (009). MAI-Code-1-Flash off Copilot 10 Sept. ZDR white paper September. Sol promo ≥21 Nov. Plus Codex/Work 5h from 25 Aug. Copilot global model policy through 1 Sept. Actions retention 1 Oct.
Sources — each with the date it was read01 github — claude-code v2.1.248 (2026-08-28) · 02 npm — @anthropic-ai/claude-code dist-tags (via ExaContents) (2026-08-28) · 03 github — claude-code v2.1.250 (2026-08-28) · 04 Anthropic — platform release notes (27 Aug) (2026-08-28) · 05 github — anthropic-sdk-python v1.2.0 (2026-08-28) · 06 X — @mntruell Grok Bot on standard plans (2026-08-28) · 07 X — @theo Codex 0.150 broke T3 Code (2026-08-28) · 08 Vercel — Cursor AI SDK harness adapter (2026-08-28) · 09 Vercel — Claude Managed Agents with Chat SDK (2026-08-28)

Get it by email.

One issue every weekday. The whole thing, not a teaser.

Or RSS, if you would rather we never had your address.