@arjunkhera/atlas 0.3.3 → 0.3.4

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "atlas",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, for any repository.",
   "author": {
     "name": "Arjun Khera"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arjunkhera/atlas",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, as a Claude Code plugin for any repository.",
   "type": "module",
   "license": "UNLICENSED",

package/work/mcp.mjs

@@ -140,8 +140,16 @@ export function readConnection(env, { allowLoopbackHttp = false, now = Date.now(
 // so the server refuses to start when one is set. The plugin's .mcp.json sets
 // NODE_OPTIONS to empty.
 export const HOSTILE_NODE_VARIABLES = Object.freeze(['NODE_TLS_REJECT_UNAUTHORIZED', 'NODE_EXTRA_CA_CERTS', 'NODE_USE_ENV_PROXY', 'NODE_PATH']);
+// A Claude cloud session reaches the network only through Claude's own proxy,
+// which opens HTTPS. The cloud sets two of these variables to fixed values for
+// that proxy. The owner accepted that proxy on 7 October 2026 ("Narrow
+// exception"): the server accepts exactly these values, and only when the
+// cloud's own marker is set. Any other value stays hostile, in the cloud too.
+export const CLOUD_NODE_VARIABLES = Object.freeze({ NODE_EXTRA_CA_CERTS: '/root/.ccr/ca-bundle.crt', NODE_PATH: '/usr/local/lib/node_modules_global' });
+export const inClaudeCloud = (env) => env.CLAUDE_CODE_REMOTE === 'true';
 export function hostileVariables(env) {
-  const found = HOSTILE_NODE_VARIABLES.filter((name) => env[name] !== undefined && env[name] !== '');
+  const cloud = inClaudeCloud(env);
+  const found = HOSTILE_NODE_VARIABLES.filter((name) => env[name] !== undefined && env[name] !== '' && !(cloud && CLOUD_NODE_VARIABLES[name] === env[name]));
   if (env.NODE_OPTIONS !== undefined && env.NODE_OPTIONS !== '') found.push('NODE_OPTIONS');
   return found;
 }