# Usage Warnings and agents Safety Checks Level Up! Claude Code v2.1.225 Is a Quietly Solid Update

Hey everyone, it's Shiichan! I've got another Claude Code update for you today!

## What was announced?

According to the Claude Code Release page on GitHub, v2.1.225 just shipped. The headline changes are a more detailed usage warning and a new workspace trust prompt for `claude agents` when it runs in an untrusted directory. On top of that, there's a long list of smaller fixes around auth tokens, Remote Control, and session management.

## The story so far

Until now, the usage warning could tell you that you'd hit a limit, but not the exact cap, when it would reset, or any message from your organization's admin. And `claude agents` didn't show the same workspace trust prompt that `claude` itself shows when running in an untrusted directory.

A few smaller issues lingered under the hood too. A transient 401 error could replace your long-lived `CLAUDE_CODE_OAUTH_TOKEN` with a stored login's short-lived token, breaking headless sessions until you restarted. On macOS, MCP OAuth servers could intermittently fail with a burst of 401 errors, as if never authenticated, after a keychain read timed out. And in auto mode, a safety-filter refusal of the permission check itself was counted toward the consecutive-block limit.

## What changes

Let's start with the new features.

- Added gateway spend-limit support to the usage warning: the limit-reached message now names the cap, its reset time, and the operator's message (this requires the gateway to be on 2.1.225 too)
- Added a workspace trust prompt to `claude agents` for untrusted directories, matching the behavior of `claude`

A few auth and security fixes landed as well.

- Fixed a transient 401 replacing a long-lived `CLAUDE_CODE_OAUTH_TOKEN` with a stored login's short-lived token, which broke headless sessions until restart
- Fixed MCP OAuth servers on macOS intermittently failing with a burst of 401 errors, as if never authenticated, after a keychain read timed out
- Fixed auto mode counting a safety-filter refusal of its own permission check toward the consecutive-block limit; the action is still denied, but the model is now told to move on rather than retry

## Dive Deep

A number of session-related fixes and improvements landed too.

- Fixed cross-session messages staying parked without a notice or expiry in headless sessions and during startup
- Fixed conversation history breaking on Remote Control session resume after very large conversations were compacted
- Fixed hovering over a session in another project in the agents list changing the directory the next agent starts in
- Fixed `claude self-hosted-runner` registering successfully and then failing every session when `--base-dir` can't be created or written; it now exits at startup with a clear error
- Fixed Claude Code on the web sessions being misreported as stuck, re-sending a growing event backlog on every reconnect
- Improved Remote Control: photos attached from the Claude app are now shown to Claude directly, instead of being read from disk with a separate tool call

The VS Code extension's Focus view got better too. It no longer folds away the latest to-do list, a pending question's context, or settled answers, and thinking-only folds now show "Thought for Ns" and re-collapse once their turn completes.

`SendMessage` got more useful as well. Previously you could only reply once a session messaged you first; now, once you spot a name via `ListAgents` (shown as `name [ref]`), you can start a conversation yourself with a Remote Control session on another machine. On top of that, a Remote Control recipient you already confirmed is never silently swapped for a same-named session on this machine when its own list can't be checked.

## Wrap-up

- Added gateway spend-limit support to the usage warning, showing the cap, reset time, and operator message
- Added a workspace trust prompt to `claude agents` for untrusted directories
- Fixed issues around long-lived OAuth tokens, MCP OAuth, and auto mode's consecutive-block counting
- Improved Remote Control session history, photo handling, and connection display, plus the VS Code Focus view
- `SendMessage` can now start a conversation with a named session on another machine

If you use Claude Code through a gateway, or you juggle multiple sessions across machines, this update is worth a look.