Anthropic's claude-code released v2.1.222, improving isolation, fixing tool restrictions,

EXHIBIT 532

Aug 5, 2026 11:49 UTC github_releases+pages anthropics/claude-code

Anthropic's claude-code released v2.1.222, improving isolation, fixing tool restrictions, and removing the 'ultraplan' feature.

READY TO POST:

claude-code just dropped v2.1.222 with some solid bug fixes around isolation and tool use. also, the 'ultraplan' feature is gone.

a new claude-code release (v2.1.222) is out, bringing better security for worktree-isolated sessions and fixing some tricky tool permission issues. check it out.

[MERGED across 2 sources: github_releases, pages] shared signal: claude-code --- github_releases :: anthropics/claude-code --- anthropics/claude-code release: v2.1.222 name: v2.1.222 published: 2026-08-04T22:39:55Z url: https://github.com/anthropics/claude-code/releases/tag/v2.1.222 ## What's changed - Fixed worktree-isolated sessions and their subagents being able to run destructive git commands against the main checkout; isolation now applies to file edits and Bash in every session type - Fixed PreToolUse auto-allow hooks bypassing tool restrictions in background agent tasks (summaries, compaction, renames) - Fixed `/usage-credits` on Team and Enterprise showing "you've already sent a usage credit request" for members whose earlier request was dismissed, blocking them from sending a new one - Fixed the startup connectivity check hanging and then failing behind an HTTPS proxy; it now uses the same proxy-aware transport as API requests and times out with a clear message - Fixed "Connection closed mid-response" errors being reported on responses that had actually completed - Fixed `/usage` overattributing usage to MCP servers: a server's share now reflects only the requests that actually consumed its tool results, instead of every turn after any call to it - Fixed sessions not linking to pull requests created after the branch was pushed, including through the GitHub REST API - Fixed org-restricted `model: opus`-style subagent and teammate family aliases dropping to the parent model instead of stepping down to the newest org-allowed model in the family - Fixed stream idle timeout firing on custom `ANTHROPIC_BASE_URL` gateways despite server keep-alive pings arriving on the wire - Fixed claude.ai connectors being falsely marked as needing authorization when the session token is invalid — they now show a `/login` hint instead - Fixed tool errors not being displayed for tools no longer available locally, for example after an MCP server is removed - Fixed `SendMessage`