@arjunkhera/atlas 0.3.6 → 0.3.7

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "atlas",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, for any repository.",
   "author": {
     "name": "Arjun Khera"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arjunkhera/atlas",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, as a Claude Code plugin for any repository.",
   "type": "module",
   "license": "UNLICENSED",

package/work/lib/child-env.mjs

@@ -1,11 +1,25 @@
 // The variables a program started by Atlas receives: a short list, never the
 // Engram connection, never an ATLAS_WORK_* setting (F11 study, fix one).
 const CHILD_VARIABLES = ['PATH', 'HOME', 'USER', 'LOGNAME', 'LANG', 'LC_ALL', 'TMPDIR', 'XDG_CONFIG_HOME', 'SSL_CERT_FILE', 'SSH_AUTH_SOCK'];
+// A Claude cloud session reaches GitHub only through Claude's own proxy on the
+// loopback address. Its GH_TOKEN is a stand-in that only that proxy turns into
+// a real credential, so `gh` with no proxy gets "Bad credentials". In a cloud
+// session only, a program also receives the proxy variables, and only when the
+// proxy is a loopback address (owner, 7 October 2026: "yes fix it and test").
+const CLOUD_PROXY_VARIABLES = ['HTTPS_PROXY', 'https_proxy'];
+const CLOUD_NO_PROXY_VARIABLES = ['NO_PROXY', 'no_proxy'];
+const LOOPBACK_PROXY = /^http:\/\/(127\.0\.0\.1|localhost|\[::1\]):\d{1,5}\/?$/;
 
 export function childEnvironment(env = process.env) {
   const out = {};
   for (const [name, value] of Object.entries(env)) {
     if (CHILD_VARIABLES.includes(name) || name.startsWith('GH_') || name === 'GITHUB_TOKEN') out[name] = value;
   }
+  if (env.CLAUDE_CODE_REMOTE === 'true') {
+    const proxies = CLOUD_PROXY_VARIABLES.filter((name) => env[name] !== undefined);
+    if (proxies.length && proxies.every((name) => LOOPBACK_PROXY.test(env[name]))) {
+      for (const name of [...proxies, ...CLOUD_NO_PROXY_VARIABLES]) if (env[name] !== undefined) out[name] = env[name];
+    }
+  }
   return out;
 }