@simonyea/holysheep-cli 1.7.78 → 1.7.79

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simonyea/holysheep-cli",
-  "version": "1.7.78",
+  "version": "1.7.79",
   "description": "Claude Code/Cursor/Cline API relay for China — ¥1=$1, WeChat/Alipay payment, no credit card, no VPN. One command setup for all AI coding tools.",
   "keywords": [
     "openai-china",

package/src/commands/claude.js

@@ -81,8 +81,9 @@ async function runClaude(args = []) {
     ...process.env,
     ANTHROPIC_API_KEY: undefined,
     ANTHROPIC_AUTH_TOKEN: apiKey,
-    // Force Anthropic API traffic through the local process proxy instead of
-    // relying on the Claude binary to honor HTTP(S)_PROXY on every code path.
+    // Route ALL Anthropic API traffic exclusively through ANTHROPIC_BASE_URL.
+    // HTTP(S)_PROXY must NOT be set: it causes Claude Code to open CONNECT
+    // tunnels to api.anthropic.com, bypassing CRS multi-account scheduling.
     ANTHROPIC_BASE_URL: proxyUrl,
     CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
     HOLYSHEEP_CLAUDE_PROCESS_PROXY: '1',
@@ -90,10 +91,10 @@ async function runClaude(args = []) {
     HS_PROXY_URL: proxyUrl,
     HOLYSHEEP_CLAUDE_RUNTIME_KIND: runtime.kind || 'unknown',
     HOLYSHEEP_CLAUDE_LAUNCH_MODE: launchMode,
-    HTTP_PROXY: proxyUrl,
-    HTTPS_PROXY: proxyUrl,
-    ALL_PROXY: proxyUrl,
-    NO_PROXY: mergeNoProxy(process.env.NO_PROXY, ['127.0.0.1', 'localhost']),
+    HTTP_PROXY: undefined,
+    HTTPS_PROXY: undefined,
+    ALL_PROXY: undefined,
+    NO_PROXY: undefined,
   }
 
   // 不再写 settings.json — 只用 env 变量，避免 Claude Code 从两个来源

package/src/tools/claude-process-proxy.js

@@ -233,6 +233,10 @@ function createProcessProxyServer({ sessionId, configPath = CONFIG_PATH }) {
     }
   })
 
+  // Hosts that must NOT be tunneled directly — they must go through CRS via
+  // the HTTP path (ANTHROPIC_BASE_URL), not a CONNECT tunnel that bypasses it.
+  const BLOCKED_CONNECT = new Set(['api.anthropic.com'])
+
   server.on('connect', async (req, clientSocket, head) => {
     const target = String(req.url || '').trim()
     const [host, rawPort] = target.split(':')
@@ -242,6 +246,13 @@ function createProcessProxyServer({ sessionId, configPath = CONFIG_PATH }) {
       return clientSocket.destroy()
     }
 
+    if (BLOCKED_CONNECT.has(host)) {
+      // Block direct CONNECT tunnels to Anthropic — traffic must go through
+      // ANTHROPIC_BASE_URL so CRS can apply multi-account scheduling.
+      clientSocket.write('HTTP/1.1 403 Forbidden\r\ncontent-type: text/plain; charset=utf-8\r\n\r\nDirect tunnel to api.anthropic.com is blocked; use ANTHROPIC_BASE_URL path')
+      return clientSocket.destroy()
+    }
+
     const doConnect = async (lease) => {
       const upstreamSocket = await createConnectTunnel(
         deriveNodeProxyUrl(lease),