gateway.yaml Pricing Now Flows Straight Into Claude Code's /cost
Claude Code 2.1.268 lets administrators set custom rates in gateway.yaml so /cost and telemetry match the organization's actual spend meter, plus a startup warning when a gateway's allowed CIDR list is empty.
What it is
A Claude Code release focused on self-hosted LLM gateway administration and safety warnings for misconfigured access controls.
What it does
Setting `pricing:` in `gateway.yaml` makes signed-in Claude Code clients receive matching rates through managed settings, syncing `/cost` and telemetry with real spend; a new startup warning fires when `access_control.allow_cidrs` is empty, plus a one-time alert on the first request from a public IP address. Details are in the release notes.
Why it matters
Organizations running their own Claude apps gateway previously had cost estimates drift from actual billed rates, and an empty CIDR allowlist could silently expose the gateway to the public internet with no warning until now.
Claude Code 2.1.257 Adds a Containment Escape Rule to Auto Mode
Claude Code 2.1.257 makes Claude Fable 5.1 the default Fable model and adds a Containment Escape rule so auto mode no longer auto-approves cloud metadata-credential fetches, egress evasion, or cross-tenant reach.
Claude Code 2.1.246 Warns You Before Your Wildcard Bash Rule Backfires
Claude Code 2.1.246 adds a startup warning for Bash allow rules with a wildcard placed before the subcommand, since those rules also match options inserted before it.
One Flag, No Bash, No Bypass: Claude Code 2.1.248's Lockdown Mode
Claude Code 2.1.248 adds a --restricted flag that removes command and code execution tools and WebFetch, confines file tools to the working directory, refuses bypassPermissions, and ignores local settings files.