What
A Cloud gateway is a server, often run by an organisation, that Claude Code's requests can be routed through. At startup, Claude Code tries to restore a saved gateway connection. This release adds a check before it does:
- Claude Code reads the saved sign-in for that gateway from
gatewayAllowlistEntries. If an entry exists and no current credential matches it, the gateway is not connected. - You see a warning: "Not connected to Cloud gateway ...: the saved sign-in has ended. Run /login. If that is refused, update Claude Code, or ask your administrator which version to use."
- When a gateway credential is saved, it is now stored together with its allowlist entry for that gateway's address.
- The existing checks still apply: whether your organisation's settings name another gateway or none, and the TLS certificate fingerprint check. TLS is the encryption used for the connection. The helper that checks the certificate now receives an extra setting.
Before, the restore went straight to the organisation-settings check, with no saved-sign-in check.
Why
If you use a Cloud gateway, Claude Code may now start without connecting to it and ask you to sign in again with /login. If signing in is refused, the message points you to updating Claude Code or asking your administrator which version to use.