Release notes

FEATURE

Usage-limit warnings now explain the cap and reset time

If your company sets a Claude Code spending limit, hitting it halfway through work used to leave you guessing who set it and when work could resume. When you connect through a gateway, the warning now names the cap, reset time, and operator message. It is like a parking-lot exit sign that once showed only red; now it says today's limit, when entry reopens, and what management wants you to know. The gateway must be on 2.1.225.

FEATURE

Agents now ask before working in an untrusted folder

Before handing a downloaded project to claude agents, you now get a workspace-trust prompt. Workspace trust is a confirmation that a folder is safe for tools to work in. Claude already asked this question; agents now behave the same way. It is like repairing something in a stranger's home: ask before entering, then open the toolbox. This matters most for projects fetched from the internet that you have not inspected yet.

BUGFIX

Brief 401 errors no longer replace durable login credentials

A headless job can run without a terminal window. During one, a temporary 401 error used to replace a long-lived CLAUDE_CODE_OAUTH_TOKEN with a short-lived login token, breaking the job until restart. On macOS, MCP OAuth servers could also emit a burst of 401s after a Keychain read timed out. Both cases are fixed. It was like a transit-card reader briefly failing and then cutting your monthly pass into a one-trip ticket; it no longer swaps the card.

BUGFIX

Auto mode moves on after a blocked action instead of retrying

When auto mode asks for permission and a safety filter refuses that check, the action still stays blocked. The refusal no longer counts toward the consecutive-block limit, and the model is told to move on rather than retry. Think of a self-checkout that cannot accept one coupon: staff still reject it, but do not make the machine scan the same coupon forever; it continues with the rest of the basket.

BUGFIX

Cross-session messages no longer disappear into a silent queue

Send a message between Claude sessions from a headless environment, or during startup, and it could previously sit in a queue with neither notice nor expiry. That is fixed. A cross-session message is a handoff between separate Claude sessions; it should now produce an outcome rather than resemble a letter wedged silently inside a mailbox. You no longer need to wonder whether it is waiting forever.

BUGFIX

Remote Control reconnects stop piling up old progress

With Remote Control, you can inspect or take over Claude work from another device. Resuming a huge conversation after its history was compacted could fail, while web sessions could be falsely called stuck and resend an ever-growing backlog on each reconnect. Both are fixed. It was like rejoining an online meeting where the host lost the first half of the notes and replayed every old slide; now the meeting resumes where it stopped without piling up history.

FEATURE

Remote Control now hands app photos directly to Claude

Attach a photo in the Claude app to a Remote Control session and Claude now receives it directly, rather than fetching it from disk with a separate tool call. When you ask it to inspect a screenshot, receipt, or whiteboard photo, the handoff has one less detour. It is like handing someone a picture instead of storing it in a warehouse and asking them to fetch it with a key: same photo, more direct delivery.

BUGFIX

Agents keep the right folder, and runners fail early on bad paths

Hovering over a session from another project in the agents list could previously change the folder where the next agent started. It no longer does. Separately, if claude self-hosted-runner cannot create or write its --base-dir, it now exits with a clear startup error instead of registering and failing every session. It is like dispatch no longer sending a driver to a neighbor's address after glancing at their order, and reporting a locked garage before every trip breaks down.

FEATURE

VS Code Focus keeps current work and answers visible

When following Claude in VS Code's Focus view, the newest to-do list, context for a pending question, and settled answers could be folded away. They now stay visible. Only thinking-only sections fold, show “Thought for Ns,” and collapse again once that turn finishes. Think of folded meeting notes: the action list and conclusion remain on top, while rough scratch work goes inside the pages.

BUGFIX

SendMessage can reach named Remote Control sessions on other machines

Want help from a Remote Control session on another machine? SendMessage can now start a conversation with it by name; you no longer have to wait for it to write first. ListAgents shows it as name [ref]. A Remote Control recipient you already confirmed also cannot be silently replaced by a same-named local session if its remote list cannot be checked. It is registered mail: find the addressed recipient first, and do not hand the confirmed letter to a namesake.

Original changelog

Original changelogUsage-limit warnings now explain the cap and reset time
Added gateway spend-limit support to Claude Code's usage warning; the limit-reached message now names the cap, its reset time, and the operator's message (requires the gateway on 2.1.225)
Original changelogAgents now ask before working in an untrusted folder
Added a workspace trust prompt to `claude agents` for untrusted directories, matching the behavior of `claude`
Original changelogBrief 401 errors no longer replace durable login credentials
Fixed a transient 401 replacing a long-lived `CLAUDE_CODE_OAUTH_TOKEN` with a stored login's short-lived token, breaking headless sessions until restart
Fixed MCP OAuth servers on macOS intermittently failing with a burst of 401 errors, as if never authenticated, after a keychain read timed out
Original changelogAuto mode moves on after a blocked action instead of retrying
Fixed auto mode counting a safety-filter refusal of its own permission check toward the consecutive-block limit; the action is still denied, but the model is now told to move on rather than retry
Original changelogCross-session messages no longer disappear into a silent queue
Fixed cross-session messages staying parked without a notice or expiry in headless sessions and during startup
Original changelogRemote Control reconnects stop piling up old progress
Fixed conversation history breaking on Remote Control session resume after very large conversations were compacted
Fixed Claude Code on the web sessions being misreported as stuck, re-sending a growing event backlog on every reconnect
Original changelogRemote Control now hands app photos directly to Claude
Improved Remote Control: photos attached from the Claude app are now shown to Claude directly instead of being read from disk with a separate tool call
Original changelogAgents keep the right folder, and runners fail early on bad paths
Fixed hovering over a session in another project in the agents list changing the directory the next agent starts in
Fixed `claude self-hosted-runner` registering and then failing every session when `--base-dir` cannot be created or written; it now exits at startup with a clear error
Original changelogVS Code Focus keeps current work and answers visible
[VSCode] Fixed Focus view folding away the latest to-do list, a pending question's context, and settled answers; thinking-only folds show "Thought for Ns" and re-collapse when their turn completes
Original changelogSendMessage can reach named Remote Control sessions on other machines
SendMessage can now start a conversation with your Remote Control sessions on other machines by name (`ListAgents` shows them as `name [ref]`), instead of only replying after they message you first
SendMessage: a Remote Control recipient you already confirmed is never swapped for a same-named session on this machine when its own list couldn't be checked