Claude Code v2.1.222 Released: Fixes Worktree Isolation, Proxy Connectivity, and Stability Issues
Score
76提供了具体修复项的详细清单，对了解Claude Code当前问题和改进有信息增量。
内容详尽，修复项清晰，但属于发布说明，缺乏深入技术分析。
对于使用受影响功能的开发者有直接指导意义，可帮助避免问题。
这是最新版本发布信息，时效性强。
来自官方GitHub Releases，信源可信度高。
Base 80 × T1.5 Source weight ×0.95 = 76
Curation line 65Selected
Why selected
The fixes are specific and address real pain points, offering solid practical reference value, but the release is essentially routine maintenance.
AI commentary
「This release may look like routine fixes, but the worktree isolation and PreToolUse hook issues deserve attention; teams using Claude Code in automated workflows should upgrade promptly. Also, proxy-related fixes matter for users in restricted network environments. Developers should read the full changelog to see if their workflows are affected.」
Quick overview
Claude Code v2.1.222 has been released, fixing a vulnerability that allowed worktree-isolated sessions and their subagents to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type. It also fixes PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks, and resolves startup connectivity checks hanging behind HTTPS proxies by using the same proxy-aware transport as API requests. Other improvements include truncating long SendMessage summaries, correcting usage attribution for MCP servers, adjusting Remote Control auto-start so repo-local settings cannot enable it, and removing the ultraplan feature. This release enhances security, stability, and user experience.
- Fixed security vulnerability: worktree-isolated sessions and subagents can no longer run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type.
- Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks.
- Fixed startup connectivity check hanging behind HTTPS proxies; it now uses the same proxy-aware transport as API requests.
- Fixed SendMessage rejecting long summaries by truncating them, and corrected usage attribution for MCP servers.
Full text
Showing the source text; the full translation is being generated.
What's changed
- Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type
- Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks (summaries, compaction, renames)
- Fixed
/usage-creditson Team and Enterprise showing "you've already sent a usage credit request" for members whose earlier request was dismissed, blocking them from sending a new one - Fixed the startup connectivity check hanging and then failing behind an HTTPS proxy; it now uses the same proxy-aware transport as API requests and times out with a clear message
- Fixed "Connection closed mid-response" errors being reported on responses that had actually completed
- Fixed
/usageoverattributing usage to MCP servers: a server's share now reflects only the requests that actually consumed its tool results, instead of every turn after any call to it - Fixed sessions not linking to pull requests created after the branch was pushed, including through the GitHub REST API
- Fixed org-restricted
model: opus-style subagent and teammate family aliases dropping to the parent model instead of stepping down to the newest org-allowed model in the family - Fixed stream idle timeout firing on custom
ANTHROPIC_BASE_URLgateways despite server keep-alive pings arriving on the wire - Fixed claude.ai connectors being falsely marked as needing authorization when the session token is invalid — they now show a
/loginhint instead - Fixed tool errors not being displayed for tools no longer available locally, for example after an MCP server is removed
- Fixed
SendMessagerejecting a long summary — it now truncates instead, so sends no longer fail on a character limit - Fixed the spinner's effort label in a subagent's transcript view showing the session's effort level instead of the subagent's own
effort:setting - Fixed rare crashes when a file watcher hit a filesystem error or during file-watcher teardown
- Fixed screen readers re-reading the whole input line on every backspace in
--ax-screen-readermode — end-of-line deletions now echo just the deleted characters - Fixed host model-selection keys not taking precedence over a stale on-disk
managed-settings.jsonwhenCLAUDE_CODE_PROVIDER_MANAGED_BY_HOSTis set - Improved auto mode safety: messages sent to other agent sessions via
SendMessageare now evaluated by the permission classifier before dispatch - Improved the refusal when Claude tries to invoke a skill with
disable-model-invocation: Claude is now told to ask you to run the skill instead of replicating its workflow - Improved the
/diffview, the Remote Control workspace diff, and file-edit diffs in Claude Code on the web sessions to use raw git blob content, ignoring workspace-configured diff drivers and textconv - Changed Remote Control auto-start so repo-local settings (
.claude/settings.jsonor.claude/settings.local.json) can no longer turn it on (they can still turn it off); enable it at user scope via/config - Removed ultraplan feature
Related items
92
FeaturedOpenRouter Launches Prompt Caching with Sticky Routing to Drastically Reduce Multi-Turn Costs
OpenRouter 推出提示缓存与粘性路由，大幅降低多轮对话成本
For developers making frequent AI API calls, this feature is a direct money-saver. Sticky routing guarantees cache hit rates, and session_id requires zero configuration—every OpenRouter user should try it immediately.
91
FeaturedChatGPT Work: An AI Agent That Takes Action Across Apps and Files
ChatGPT Work：可在跨应用和文件中执行操作的AI Agent
I think this is a key step for AI assistants moving from Q&A to execution. Especially noteworthy for professionals who need to automate complex workflows. ChatGPT Work could become a new paradigm for productivity tools.
90
FeaturedAnatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
前沿实验室代理入侵事件技术时间线：2026年7月事件剖析
This technical timeline is a must-read for all AI security researchers and agent developers—it doesn't just describe one attack but sounds an alarm on the weak defense systems of agent architectures. For teams deploying autonomous agents, this is an essential disaster prevention manual.
90
FeaturedBetter Tools Made Copilot Code Review Worse? Here's How GitHub Improved It
更好的工具反而让Copilot代码审查更糟？GitHub这样改进
This blog post deserves close reading by all AI product engineers and ML practitioners—it breaks the intuition that 'more powerful tools = better AI' and instead emphasizes an engineering philosophy aligned with agent reasoning patterns. Especially important for teams optimizing code review or similar agent-based products.
88
FeaturedOpenRouter Launches Unified Multimodal API: Single Endpoint for Image, Video, Audio, Embeddings, and Transcription
OpenRouter 推出统一多模态 API：单端点支持图像、视频、音频、嵌入与转录
This news is worth attention from all developers building multimodal AI applications: OpenRouter's unified API solves the pain of model switching, especially for startups or rapid prototyping. If you're struggling with multiple API keys and SDKs, this interface could be the unified layer you need.
87
FeaturedAnthropic Launches Claude for Teachers: AI Tools Designed for Educators
Anthropic 推出 Claude for Teachers：面向教师的教育 AI 工具
This announcement is valuable for educators and AI industry watchers alike. Instead of a generic chatbot, Anthropic designed a safety-first tool specifically for teachers, demonstrating the right approach for AI vertical deployment: solving real pain points rather than showing off technology. The built-in guardrails also set a reference for other AI companies, especially when serving scenarios involving children or teenagers.
86
FeaturedOpenRouter Introduces New Auto Router: Model Routing Powered by Market Wisdom
OpenRouter发布全新Auto Router：用市场智慧优化模型路由
This update is worth attention for anyone using APIs to build AI apps. Instead of guessing or testing model selection, market data now does the heavy lifting. Though sparse on details, the direction is right, especially for teams relying on aggregated model services.
86
FeaturedClaude Code v2.1.211 Release: Multiple Fixes and Improvements
Claude Code v2.1.211 发布：多项修复与改进
As a developer who frequently uses Claude Code for automated coding, I'm particularly interested in the security fixes, especially the permission preview character bypass and auto mode overriding hook decisions—these directly affect the security boundaries during team collaboration. The improvement in background agent reporting also makes long-running tasks more reliable. I recommend all users upgrade as soon as possible.