Usage Warnings and agents Safety Checks Level Up! Claude Code v2.1.225 Is a Quietly Solid Update

Hey everyone, it's Shiichan! I've got another Claude Code update for you today!

Claude Code Release github.com

What was announced?

According to the Claude Code Release page on GitHub, v2.1.225 just shipped. The headline changes are a more detailed usage warning and a new workspace trust prompt for claude agents when it runs in an untrusted directory. On top of that, there's a long list of smaller fixes around auth tokens, Remote Control, and session management.

The story so far

Until now, the usage warning could tell you that you'd hit a limit, but not the exact cap, when it would reset, or any message from your organization's admin. And claude agents didn't show the same workspace trust prompt that claude itself shows when running in an untrusted directory.

A few smaller issues lingered under the hood too. A transient 401 error could replace your long-lived CLAUDE_CODE_OAUTH_TOKEN with a stored login's short-lived token, breaking headless sessions until you restarted. On macOS, MCP OAuth servers could intermittently fail with a burst of 401 errors, as if never authenticated, after a keychain read timed out. And in auto mode, a safety-filter refusal of the permission check itself was counted toward the consecutive-block limit.

What changes

Let's start with the new features.

• Added gateway spend-limit support to the usage warning: the limit-reached message now names the cap, its reset time, and the operator's message (this requires the gateway to be on 2.1.225 too)
• Added a workspace trust prompt to claude agents for untrusted directories, matching the behavior of claude

A few auth and security fixes landed as well.

• Fixed a transient 401 replacing a long-lived CLAUDE_CODE_OAUTH_TOKEN with a stored login's short-lived token, which broke headless sessions until restart
• Fixed MCP OAuth servers on macOS intermittently failing with a burst of 401 errors, as if never authenticated, after a keychain read timed out
• Fixed auto mode counting a safety-filter refusal of its own permission check toward the consecutive-block limit; the action is still denied, but the model is now told to move on rather than retry

Dive Deep

A number of session-related fixes and improvements landed too.

• Fixed cross-session messages staying parked without a notice or expiry in headless sessions and during startup
• Fixed conversation history breaking on Remote Control session resume after very large conversations were compacted
• Fixed hovering over a session in another project in the agents list changing the directory the next agent starts in
• Fixed claude self-hosted-runner registering successfully and then failing every session when --base-dir can't be created or written; it now exits at startup with a clear error
• Fixed Claude Code on the web sessions being misreported as stuck, re-sending a growing event backlog on every reconnect
• Improved Remote Control: photos attached from the Claude app are now shown to Claude directly, instead of being read from disk with a separate tool call

The VS Code extension's Focus view got better too. It no longer folds away the latest to-do list, a pending question's context, or settled answers, and thinking-only folds now show "Thought for Ns" and re-collapse once their turn completes.

SendMessage got more useful as well. Previously you could only reply once a session messaged you first; now, once you spot a name via ListAgents (shown as name [ref]), you can start a conversation yourself with a Remote Control session on another machine. On top of that, a Remote Control recipient you already confirmed is never silently swapped for a same-named session on this machine when its own list can't be checked.

Wrap-up

• Added gateway spend-limit support to the usage warning, showing the cap, reset time, and operator message
• Added a workspace trust prompt to claude agents for untrusted directories
• Fixed issues around long-lived OAuth tokens, MCP OAuth, and auto mode's consecutive-block counting
• Improved Remote Control session history, photo handling, and connection display, plus the VS Code Focus view
• SendMessage can now start a conversation with a named session on another machine

If you use Claude Code through a gateway, or you juggle multiple sessions across machines, this update is worth a look.