Claude Code v2.1.222 addresses several critical issues regarding session security, connectivity stability, and billing accuracy. Key updates include enforcing worktree isolation for destructive git commands and fixing PreToolUse hooks that previously bypassed tool restrictions in background tasks.
- Fixed startup connectivity checks hanging behind HTTPS proxies by using proxy-aware transport with clear timeouts.
- Corrected /usage credits overattribution to MCP servers so shares reflect only requests consuming their tool results.
- Resolved org-restricted model aliases dropping to parent models instead of stepping down to the newest allowed version.
- Improved auto mode safety by evaluating messages sent to other agent sessions via the permission classifier before dispatch.
- Removed the ultraplan feature and prevented repo-local settings from enabling Remote Control auto-start.
These changes enhance security boundaries for isolated sessions, ensure accurate usage reporting for team members, and improve reliability in proxy environments.