@swttch/extend-kit 0.5.0 → 0.6.1

package/README.ko.md

@@ -29,6 +29,23 @@ npm install @swttch/extend-kit
 
 Node.js 버전 20 이상이 필요합니다.
 
+## 프록시 지원
+
+프록시를 거쳐야 인터넷에 나가는 환경이라면, API 요청과 받아쓰기 모두 그 프록시를 지납니다. 읽는 환경변수는 curl과 `claude` CLI가 이미 읽는 것과 같으므로, 그 도구들이 동작하는 머신이라면 따로 설정할 것이 없습니다.
+
+| 환경변수 | 적용 대상 |
+|----------|-----------|
+| `HTTPS_PROXY` / `https_proxy` | `https://` 와 `wss://` 연결 |
+| `HTTP_PROXY` / `http_proxy` | `http://` 와 `ws://` 연결 |
+| `ALL_PROXY` / `all_proxy` | 위 둘이 없을 때 사용 |
+| `NO_PROXY` / `no_proxy` | 프록시를 거치지 않을 호스트. `*` 는 프록시를 통째로 끕니다 |
+
+프록시 URL은 `http://`, `https://`, `socks://`, `socks4://`, `socks4a://`, `socks5://`, `socks5h://` 를 지원합니다. 따라서 사내 프록시뿐 아니라 `ssh -D` 로 연 터널도 그대로 동작합니다. URL에 담긴 자격증명(`http://사용자:비밀번호@호스트:포트`)은 프록시 인증에 사용됩니다.
+
+`NO_PROXY` 는 통용되는 규칙을 따릅니다. 쉼표로 구분하고, 맨 앞의 점은 무시하며, 도메인만 적으면 그 호스트와 하위 도메인이 모두 해당됩니다. 뒤에 `:포트` 를 붙이면 그 포트에만 적용됩니다.
+
+프록시가 아니라 게이트웨이를 통해 API에 접속한다면 `ANTHROPIC_BASE_URL` 을 설정하십시오. `claude` CLI가 읽는 환경변수와 같습니다.
+
 ## 빠른 시작
 
 ### SDK 사용
@@ -129,7 +146,7 @@ if (isTokenExpired(credentials)) {
 
 API 호출을 위한 클라이언트 클래스입니다. 서브모듈을 통해 API 엔드포인트에 접근합니다.
 
-#### `constructor(auth?: string | { apiKey: string })`
+#### `constructor(auth?: string | { apiKey: string }, options?: ClaudeCodeClientOptions)`
 
 OAuth 접근 토큰이나 API Key로 클라이언트를 초기화합니다. 인수를 전달하지 않으면 자동으로 크레덴셜을 읽어옵니다.
 
@@ -142,8 +159,17 @@ const client = new ClaudeCodeClient(myOAuthAccessToken);
 
 // API Key
 const client = new ClaudeCodeClient({ apiKey: process.env.ANTHROPIC_API_KEY });
+
+// API에 직접 붙지 않고 게이트웨이를 거치는 경우
+const client = new ClaudeCodeClient(myOAuthAccessToken, { baseUrl: 'https://gateway.internal' });
 ```
 
+| 옵션 | 기본값 | 설명 |
+|------|--------|------|
+| `baseUrl` | `ANTHROPIC_BASE_URL`, 없으면 `https://api.anthropic.com` | 요청을 보낼 API 주소 |
+
+프록시 설정은 환경변수에서 읽으므로 여기에 옵션으로 넘길 필요가 없습니다. [프록시 지원](#프록시-지원)을 참고하십시오.
+
 #### `oauth: OAuthApi`
 
 OAuth 관련 API를 제공하는 서브모듈입니다.
@@ -214,6 +240,8 @@ try {
 | `token_expired` | OAuth 토큰이 만료됨 | `claude login` 명령 실행으로 토큰 갱신 |
 | `api_error` | API 요청 실패 (HTTP 상태 포함) | — |
 | `unsupported_platform` | 지원하지 않는 플랫폼 | — |
+| `network_error` | API에 접속하지 못함 | 프록시를 거친 경우 그 사실을 알려줍니다 |
+| `invalid_proxy` | 프록시 환경변수가 URL이 아니거나 지원하지 않는 스킴 | 기대하는 형식을 알려줍니다 |
 
 ## 타입 정의
 

package/README.md

@@ -29,6 +29,31 @@ npm install @swttch/extend-kit
 
 Node.js version 20 or higher is required.
 
+## Proxy Support
+
+If your machine reaches the internet through a proxy, both the API requests and
+dictation go through it. The variables are the ones curl and the `claude` CLI
+already read, so a machine set up for those needs nothing extra here.
+
+| Variable | Applies to |
+| --- | --- |
+| `HTTPS_PROXY` / `https_proxy` | `https://` and `wss://` connections |
+| `HTTP_PROXY` / `http_proxy` | `http://` and `ws://` connections |
+| `ALL_PROXY` / `all_proxy` | Used when neither of the above is set |
+| `NO_PROXY` / `no_proxy` | Hosts to connect to directly. `*` disables the proxy entirely |
+
+`http://`, `https://`, `socks://`, `socks4://`, `socks4a://`, `socks5://` and
+`socks5h://` proxy URLs are supported, so an `ssh -D` tunnel works as well as a
+corporate egress proxy. Credentials embedded in the URL
+(`http://user:pass@host:port`) are used for proxy authentication.
+
+`NO_PROXY` follows the usual conventions: a comma-separated list, a leading dot
+ignored, a bare entry matching that host and its subdomains, and an optional
+`:port` to limit the entry to one port.
+
+If you talk to the API through a gateway rather than a proxy, set
+`ANTHROPIC_BASE_URL` — the same variable the `claude` CLI reads.
+
 ## Quick Start
 
 ### SDK Usage
@@ -129,7 +154,7 @@ if (isTokenExpired(credentials)) {
 
 A client class for making API calls. Access API endpoints through sub-modules.
 
-#### `constructor(auth?: string | { apiKey: string })`
+#### `constructor(auth?: string | { apiKey: string }, options?: ClaudeCodeClientOptions)`
 
 Initializes the client with OAuth access token or API Key. If no argument is provided, credentials are resolved automatically.
 
@@ -142,8 +167,17 @@ const client = new ClaudeCodeClient(myAccessToken);
 
 // API Key
 const client = new ClaudeCodeClient({ apiKey: process.env.ANTHROPIC_API_KEY });
+
+// Talk to a gateway instead of the API directly
+const client = new ClaudeCodeClient(myAccessToken, { baseUrl: 'https://gateway.internal' });
 ```
 
+| Option | Default | Description |
+| --- | --- | --- |
+| `baseUrl` | `ANTHROPIC_BASE_URL`, else `https://api.anthropic.com` | API origin to send requests to |
+
+Proxy settings are read from the environment and need no option here — see [Proxy Support](#proxy-support).
+
 #### `oauth: OAuthApi`
 
 A sub-module that provides OAuth-related API methods.
@@ -214,6 +248,8 @@ try {
 | `token_expired` | OAuth token has expired | Run `claude login` to refresh your token |
 | `api_error` | API request failed (includes HTTP status) | — |
 | `unsupported_platform` | Platform not supported | — |
+| `network_error` | The API could not be reached | Names the proxy when one was in use |
+| `invalid_proxy` | A proxy variable is not a URL, or its scheme is not supported | Shows the expected form |
 
 ## Type Definitions
 

package/dist/battery/api/client.d.ts

@@ -1,10 +1,19 @@
 import { OAuthApi } from './oauth.js';
 import type { ClientAuth } from '../auth/index.js';
+/** Options that change where or how requests go out. */
+export interface ClaudeCodeClientOptions {
+    /**
+     * API origin to talk to. Defaults to ANTHROPIC_BASE_URL when set, and to the
+     * real API otherwise.
+     */
+    baseUrl?: string;
+}
 export declare class ClaudeCodeClient {
     private auth?;
     private accessToken?;
     private _oauth?;
-    constructor(auth?: ClientAuth);
+    private readonly baseUrl;
+    constructor(auth?: ClientAuth, options?: ClaudeCodeClientOptions);
     get isApiKeyMode(): boolean;
     get oauth(): OAuthApi;
     private resolveToken;

package/dist/battery/api/client.js

@@ -1,13 +1,30 @@
 import { OAuthApi } from './oauth.js';
+import { getJson, proxyInUseFor } from './http.js';
 import { getCredentials, getAccessToken, isApiKeyAuth } from '../auth/index.js';
 import { CcbError } from '../errors.js';
 const BASE_URL = 'https://api.anthropic.com';
+/**
+ * The origin to use, with any trailing slash removed so that joining a path that
+ * starts with "/" cannot produce a double slash.
+ *
+ * ANTHROPIC_BASE_URL is honored because the `claude` CLI honors it: a user
+ * behind a corporate gateway points both at the same place, and `ccb` claiming
+ * not to know the setting the rest of their toolchain uses would be a gap for no
+ * reason. It also lets the tests here talk to a local server over the real
+ * request path instead of stubbing the transport.
+ */
+function resolveBaseUrl(explicit) {
+    const chosen = explicit ?? process.env.ANTHROPIC_BASE_URL?.trim() ?? '';
+    return (chosen || BASE_URL).replace(/\/+$/, '');
+}
 export class ClaudeCodeClient {
     auth;
     accessToken;
     _oauth;
-    constructor(auth) {
+    baseUrl;
+    constructor(auth, options = {}) {
         this.auth = auth;
+        this.baseUrl = resolveBaseUrl(options.baseUrl);
         if (typeof auth === 'string') {
             this.accessToken = auth;
         }
@@ -41,14 +58,61 @@ export class ClaudeCodeClient {
                 ...headers,
             };
         }
-        const response = await fetch(`${BASE_URL}${path}`, {
-            method: 'GET',
-            headers: requestHeaders,
-        });
+        // getJson rather than fetch: fetch takes no `http.Agent`, and `ws` proxies
+        // only when handed one, so a single proxy implementation has to be built on
+        // something both transports accept. See src/proxy.ts.
+        const url = `${this.baseUrl}${path}`;
+        const response = await getJson(url, requestHeaders);
         if (!response.ok) {
-            throw new CcbError(`API error ${response.status}: ${response.statusText}`, 'api_error');
+            throw describeApiFailure(response, url);
         }
-        return response.json();
+        return response.body;
+    }
+}
+/**
+ * Turn an HTTP status into an error a caller can route on and a person can act on.
+ *
+ * Every non-2xx used to become one `api_error` reading "API error 403: Forbidden",
+ * which is the same sentence for an expired login, a rate limit, and a request the
+ * gateway blocked. Nothing downstream could tell them apart, so the plugin's usage
+ * panel classified all of them as an authentication problem and told people to log
+ * in again no matter what had actually happened.
+ *
+ * The proxy is named whenever one is in play. A refusal that reaches this function
+ * came from the destination — {@link getJson} throws before this point when the
+ * proxy itself refused the tunnel — but knowing which route the request took is
+ * what makes the difference checkable rather than guessable.
+ */
+function describeApiFailure(response, url) {
+    const { status, statusText, retryAfterSec } = response;
+    const message = `API error ${status}: ${statusText}`;
+    const proxyUrl = proxyInUseFor(url);
+    const route = proxyUrl
+        ? `The request reached the API through the proxy at ${proxyUrl}.`
+        : 'The request went straight to the API, with no proxy configured for this process.';
+    // Repeated on every branch so a caller never has to know which code carries
+    // which facts. `reachedDestination` is true throughout: getJson throws before
+    // this point when a proxy refused the tunnel, so anything here was answered by
+    // the destination itself.
+    const details = { status, ...(proxyUrl && { proxyUrl }), reachedDestination: true };
+    if (status === 401) {
+        return new CcbError(message, 'token_expired', 'The saved login is no longer accepted. Run `claude` once to refresh it.', details);
+    }
+    if (status === 403) {
+        // The case this whole taxonomy came out of: a machine that can only reach
+        // Anthropic through a proxy, with the request going direct because the proxy
+        // was configured under a variable this tool was not reading. The gateway
+        // answers 403, which looks like an account problem and is not one.
+        return new CcbError(message, 'forbidden', `${route} A 403 here is usually the network refusing the request rather than the account lacking access.`, details);
+    }
+    if (status === 429) {
+        return new CcbError(message, 'rate_limited', retryAfterSec !== undefined
+            ? `Too many requests. The API asked us to wait ${retryAfterSec}s.`
+            : 'Too many requests in a short window. Try again shortly.', { ...details, ...(retryAfterSec !== undefined && { retryAfterSec }) });
+    }
+    if (status >= 500) {
+        return new CcbError(message, 'server_error', `${route} The API itself reported an error.`, details);
     }
+    return new CcbError(message, 'api_error', route, details);
 }
 //# sourceMappingURL=client.js.map

package/dist/battery/api/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/battery/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAE7C,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAc;IAClB,WAAW,CAAU;IACrB,MAAM,CAAY;IAE1B,YAAY,IAAiB;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QACd,OAAO,YAAY,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,OAAgC;QAC9D,IAAI,cAAsC,CAAC;QAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,cAAc,GAAG;gBACf,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC7B,mBAAmB,EAAE,YAAY;gBACjC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,cAAc,GAAG;gBACf,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE;YACjD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,QAAQ,CAAC,aAAa,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAgB,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/battery/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAqB,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,QAAQ,GAAG,2BAA2B,CAAC;AAW7C;;;;;;;;;GASG;AACH,SAAS,cAAc,CAAC,QAA4B;IAClD,MAAM,MAAM,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAc;IAClB,WAAW,CAAU;IACrB,MAAM,CAAY;IACT,OAAO,CAAS;IAEjC,YAAY,IAAiB,EAAE,UAAmC,EAAE;QAClE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,YAAY;QACd,OAAO,YAAY,CAAC,IAAI,CAAC,IAAkB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAC;YAC3C,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,OAAgC;QAC9D,IAAI,cAAsC,CAAC;QAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,cAAc,GAAG;gBACf,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC7B,mBAAmB,EAAE,YAAY;gBACjC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,cAAc,GAAG;gBACf,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,GAAG,OAAO;aACX,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAI,GAAG,EAAE,cAAc,CAAC,CAAC;QAEvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,QAA+B,EAAE,GAAW;IACtE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,QAAQ,CAAC;IACvD,MAAM,OAAO,GAAG,aAAa,MAAM,KAAK,UAAU,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ;QACpB,CAAC,CAAC,oDAAoD,QAAQ,GAAG;QACjE,CAAC,CAAC,kFAAkF,CAAC;IACvF,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,0BAA0B;IAC1B,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;IAEpF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,eAAe,EAC1C,yEAAyE,EAAE,OAAO,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,0EAA0E;QAC1E,6EAA6E;QAC7E,yEAAyE;QACzE,mEAAmE;QACnE,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EACtC,GAAG,KAAK,iGAAiG,EACzG,OAAO,CAAC,CAAC;IACb,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,cAAc,EACzC,aAAa,KAAK,SAAS;YACzB,CAAC,CAAC,+CAA+C,aAAa,IAAI;YAClE,CAAC,CAAC,yDAAyD,EAC7D,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,KAAK,oCAAoC,EAAE,OAAO,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAC5D,CAAC"}

package/dist/battery/api/http.d.ts

@@ -0,0 +1,38 @@
+import { type Agent } from 'node:http';
+/** What a caller needs to know about the response, mirroring the shape `fetch` returns. */
+export interface JsonResponse<T> {
+    ok: boolean;
+    status: number;
+    statusText: string;
+    body: T;
+    /**
+     * Seconds the destination asked us to wait, parsed from Retry-After.
+     *
+     * Surfaced as a number because the only alternative is for a caller to find it
+     * by matching prose, and a caller that reads prose breaks when the prose changes.
+     * Absent when the header was missing or was an HTTP-date rather than a count.
+     */
+    retryAfterSec?: number;
+}
+/** Options that change how a request is made, rather than what is requested. */
+export interface GetJsonOptions {
+    /** Use this agent instead of resolving one from the proxy environment. */
+    agent?: Agent;
+    /** Total budget for the request, covering connect, tunnel, and response. */
+    deadlineMs?: number;
+}
+/**
+ * GET a JSON document, through a proxy when one is configured.
+ *
+ * A dead or misconfigured proxy fails at connect time, and the raw errno that
+ * surfaces ("ECONNREFUSED 127.0.0.1:8080") names the proxy without saying that a
+ * proxy is what failed. Since the proxy is invisible in the URL the user asked
+ * for, the error says so explicitly.
+ */
+export declare function getJson<T>(url: string, headers: Record<string, string>, options?: GetJsonOptions): Promise<JsonResponse<T>>;
+/**
+ * The proxy in play for `url`, safe to print, so a caller can name it in its own
+ * errors. Credentials are stripped here rather than at each call site, because a
+ * call site that forgets is a call site that prints a password.
+ */
+export declare function proxyInUseFor(url: string): string | undefined;

package/dist/battery/api/http.js

@@ -0,0 +1,178 @@
+/**
+ * The HTTP transport for everything this package fetches.
+ *
+ * Global `fetch` cannot be handed an `http.Agent`, and `ws` proxies only when it
+ * is handed one, so routing both transports through a single proxy
+ * implementation means using `node:https` here. Proxying `fetch` itself is
+ * possible by other means — undici's ProxyAgent with setGlobalDispatcher — but a
+ * dispatcher does not cover `ws`, which is why that route was not taken.
+ * See {@link proxyAgentFor}.
+ */
+import { request as httpsRequest } from 'node:https';
+import { request as httpRequest } from 'node:http';
+import { proxyAgentFor, resolveProxyUrl, redactProxyUrl } from '../../proxy.js';
+import { CcbError } from '../errors.js';
+/** Retry-After is either a count of seconds or an HTTP-date; only the former is useful here. */
+function parseRetryAfter(value) {
+    const raw = Array.isArray(value) ? value[0] : value;
+    if (!raw)
+        return undefined;
+    const seconds = Number(raw.trim());
+    if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds;
+    const at = Date.parse(raw);
+    if (Number.isNaN(at))
+        return undefined;
+    return Math.max(0, Math.round((at - Date.now()) / 1000));
+}
+/**
+ * How long a request may take in total: connecting, opening the tunnel when a
+ * proxy is in the way, and reading the response.
+ *
+ * One budget rather than a socket timeout, because a socket timeout starts when
+ * there is a socket. A proxy that is slow to answer CONNECT has not produced one
+ * yet, so the guard that was here before did not cover the very case its comment
+ * described: a proxy asked to open a tunnel and left to think about it for 70
+ * seconds ran to completion, unguarded, while the same 70-second silence after
+ * the tunnel opened was cut off at 60. Measured, not reasoned about.
+ */
+const DEFAULT_DEADLINE_MS = 60_000;
+/**
+ * How long a request may take in total, before the caller's own option.
+ *
+ * A spawner with a shorter budget than ours can say so here. The plugin backend
+ * gives `ccb` 15 seconds and kills the process at that mark, which produces a
+ * dead child and whatever its login shell had printed by then rather than an
+ * explanation — the user was shown `(eval):1: can't change option: zle`. Told the
+ * budget, `ccb` finishes first and says what actually went wrong.
+ */
+function defaultDeadlineMs() {
+    const raw = Number(process.env.CCB_REQUEST_TIMEOUT_MS);
+    return Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_DEADLINE_MS;
+}
+/**
+ * GET a JSON document, through a proxy when one is configured.
+ *
+ * A dead or misconfigured proxy fails at connect time, and the raw errno that
+ * surfaces ("ECONNREFUSED 127.0.0.1:8080") names the proxy without saying that a
+ * proxy is what failed. Since the proxy is invisible in the URL the user asked
+ * for, the error says so explicitly.
+ */
+export async function getJson(url, headers, options = {}) {
+    const { agent: agentOverride, deadlineMs = defaultDeadlineMs() } = options;
+    // Built before the agent, because the agent needs it: see the note in
+    // proxyAgentFor on why a signal given only to the request cannot end a wait
+    // that has not produced a socket yet.
+    const abort = new AbortController();
+    const agent = agentOverride
+        ?? proxyAgentFor(url, process.env, { signal: abort.signal, timeoutMs: deadlineMs });
+    const viaProxy = agent !== undefined;
+    // Only meaningful for the agent this function built: an override comes from a
+    // caller that knows its own routing, and naming an environment proxy it is not
+    // using would be worse than saying nothing.
+    const proxyUrl = agentOverride ? undefined : redactProxyUrl(resolveProxyUrl(url));
+    // The API is always https; plain http is here so tests can run against a local
+    // server without a certificate, and it costs one branch.
+    const request = new URL(url).protocol === 'http:' ? httpRequest : httpsRequest;
+    // Aborting is what actually stops the work, rather than only telling the caller
+    // to stop waiting for it. One signal covers both halves: the agent destroys the
+    // socket it is reading the CONNECT response from, and the request tears down a
+    // socket it has already been handed.
+    let socketToKill;
+    let phase = 'connecting';
+    let proxyConnectStatus;
+    let timedOut = false;
+    const deadline = setTimeout(() => {
+        timedOut = true;
+        abort.abort();
+        socketToKill?.destroy();
+    }, deadlineMs);
+    const describeTimeout = () => new CcbError(`Request to ${url} timed out after ${Math.round(deadlineMs / 1000)}s`, 'timeout', phase === 'connecting' && viaProxy
+        ? `The proxy${proxyUrl ? ` at ${proxyUrl}` : ''} never finished opening the tunnel.`
+        : viaProxy
+            ? 'The tunnel was open, but the destination never replied.'
+            : undefined, { ...(proxyUrl && { proxyUrl }), reachedDestination: phase === 'tunnelled' });
+    let result;
+    try {
+        result = await new Promise((resolve, reject) => {
+            const req = request(url, { method: 'GET', headers, agent, signal: abort.signal }, (res) => {
+                const chunks = [];
+                res.on('data', (chunk) => chunks.push(chunk));
+                res.on('end', () => resolve({
+                    status: res.statusCode ?? 0,
+                    statusText: res.statusMessage ?? '',
+                    text: Buffer.concat(chunks).toString('utf-8'),
+                    retryAfterSec: parseRetryAfter(res.headers['retry-after']),
+                }));
+                res.on('error', reject);
+            });
+            // https-proxy-agent announces the CONNECT response here before it decides
+            // what to do with it. Recording the status is what lets a refusal be told
+            // apart from an answer by the destination — see the throw below.
+            req.on('proxyConnect', (connect) => {
+                proxyConnectStatus = connect.statusCode;
+                if (connect.statusCode === 200)
+                    phase = 'tunnelled';
+            });
+            req.on('socket', (socket) => {
+                socketToKill = socket;
+                // Without a proxy there is no CONNECT step to leave behind: once the
+                // socket exists, any further wait is the destination's.
+                if (!viaProxy)
+                    phase = 'tunnelled';
+            });
+            req.on('error', (err) => {
+                if (timedOut)
+                    return reject(describeTimeout());
+                if (err instanceof CcbError)
+                    return reject(err);
+                reject(new CcbError(`Could not reach ${new URL(url).host}: ${err.message}`, 'network_error', viaProxy
+                    ? 'This connection went through the proxy from HTTP_PROXY/HTTPS_PROXY/ALL_PROXY. Check that the proxy is running and reachable.'
+                    : undefined, { ...(proxyUrl && { proxyUrl }), reachedDestination: false }));
+            });
+            req.end();
+        });
+    }
+    finally {
+        clearTimeout(deadline);
+    }
+    // A proxy that refuses the CONNECT does not fail the request. https-proxy-agent
+    // replays the refusal onto a stand-in socket so node's HTTP parser reads it,
+    // which means the proxy's own "403 Forbidden" arrives here shaped exactly like a
+    // 403 from the API.
+    //
+    // That replay is deliberate on the library's part, not something to route around:
+    // it destroys the real socket first so the request — Authorization header and all
+    // — is never written to a proxy that just declined to carry it (HackerOne
+    // #541502). The status is therefore the only thing that survives, and it survives
+    // wearing the destination's clothes. Reporting it as an API error sends the user
+    // to look at their account when the answer is their proxy, so the two are told
+    // apart here rather than left for a person to guess at.
+    //
+    // Verified against https-proxy-agent 9.1.0 (dist/index.js:104, 134-157): the
+    // proxyConnect event fires before the stand-in socket is built.
+    if (proxyConnectStatus !== undefined && proxyConnectStatus !== 200) {
+        throw new CcbError(`The proxy refused to open a tunnel to ${new URL(url).host} (${proxyConnectStatus} ${result.statusText})`, 'proxy_rejected', proxyConnectStatus === 407
+            ? `The proxy${proxyUrl ? ` at ${proxyUrl}` : ''} requires authentication. Put the credentials in the proxy URL, as in http://user:pass@host:port.`
+            : `This is the proxy${proxyUrl ? ` at ${proxyUrl}` : ''} answering, not the Anthropic API.`, { ...(proxyUrl && { proxyUrl }), proxyConnectStatus, reachedDestination: false });
+    }
+    const { status, statusText, text, retryAfterSec } = result;
+    if (status < 200 || status >= 300) {
+        return { ok: false, status, statusText, body: undefined, ...(retryAfterSec !== undefined && { retryAfterSec }) };
+    }
+    try {
+        return { ok: true, status, statusText, body: JSON.parse(text) };
+    }
+    catch {
+        throw new CcbError(`Expected JSON from ${url} but got something else`, 'api_error', viaProxy ? 'A proxy that returns an error page instead of the response looks like this.' : undefined, { status, ...(proxyUrl && { proxyUrl }), reachedDestination: true });
+    }
+}
+/**
+ * The proxy in play for `url`, safe to print, so a caller can name it in its own
+ * errors. Credentials are stripped here rather than at each call site, because a
+ * call site that forgets is a call site that prints a password.
+ */
+export function proxyInUseFor(url) {
+    return redactProxyUrl(resolveProxyUrl(url));
+}
+//# sourceMappingURL=http.js.map

package/dist/battery/api/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/battery/api/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAkC,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAkBxC,gGAAgG;AAChG,SAAS,eAAe,CAAC,KAAoC;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;;;;GAQG;AACH,SAAS,iBAAiB;IACxB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACrE,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,OAA+B,EAC/B,UAA0B,EAAE;IAE5B,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,GAAG,iBAAiB,EAAE,EAAE,GAAG,OAAO,CAAC;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,aAAa;WACtB,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,KAAK,KAAK,SAAS,CAAC;IACrC,8EAA8E;IAC9E,+EAA+E;IAC/E,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,+EAA+E;IAC/E,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;IAE/E,gFAAgF;IAChF,gFAAgF;IAChF,+EAA+E;IAC/E,qCAAqC;IACrC,IAAI,YAAiD,CAAC;IACtD,IAAI,KAAK,GAAU,YAAY,CAAC;IAChC,IAAI,kBAAsC,CAAC;IAC3C,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;QAC/B,QAAQ,GAAG,IAAI,CAAC;QAChB,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,YAAY,EAAE,OAAO,EAAE,CAAC;IAC1B,CAAC,EAAE,UAAU,CAAC,CAAC;IAEf,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CACxC,cAAc,GAAG,oBAAoB,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EACrE,SAAS,EACT,KAAK,KAAK,YAAY,IAAI,QAAQ;QAChC,CAAC,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,qCAAqC;QACpF,CAAC,CAAC,QAAQ;YACR,CAAC,CAAC,yDAAyD;YAC3D,CAAC,CAAC,SAAS,EACf,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,KAAK,KAAK,WAAW,EAAE,CAC7E,CAAC;IAGF,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,GAAG,GAAkB,OAAO,CAChC,GAAG,EACH,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACvD,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,UAAU,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;oBACnC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC7C,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;iBAC3D,CAAC,CACH,CAAC;gBACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC1B,CAAC,CACF,CAAC;YAEF,0EAA0E;YAC1E,0EAA0E;YAC1E,iEAAiE;YACjE,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,OAAgC,EAAE,EAAE;gBAC1D,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC;gBACxC,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG;oBAAE,KAAK,GAAG,WAAW,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC1B,YAAY,GAAG,MAAM,CAAC;gBACtB,qEAAqE;gBACrE,wDAAwD;gBACxD,IAAI,CAAC,QAAQ;oBAAE,KAAK,GAAG,WAAW,CAAC;YACrC,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACtB,IAAI,QAAQ;oBAAE,OAAO,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC/C,IAAI,GAAG,YAAY,QAAQ;oBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChD,MAAM,CAAC,IAAI,QAAQ,CACjB,mBAAmB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,EACtD,eAAe,EACf,QAAQ;oBACN,CAAC,CAAC,8HAA8H;oBAChI,CAAC,CAAC,SAAS,EACb,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAC7D,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,gFAAgF;IAChF,6EAA6E;IAC7E,iFAAiF;IACjF,oBAAoB;IACpB,EAAE;IACF,kFAAkF;IAClF,kFAAkF;IAClF,0EAA0E;IAC1E,kFAAkF;IAClF,iFAAiF;IACjF,+EAA+E;IAC/E,wDAAwD;IACxD,EAAE;IACF,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,KAAK,GAAG,EAAE,CAAC;QACnE,MAAM,IAAI,QAAQ,CAChB,yCAAyC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,MAAM,CAAC,UAAU,GAAG,EACzG,gBAAgB,EAChB,kBAAkB,KAAK,GAAG;YACxB,CAAC,CAAC,YAAY,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,mGAAmG;YAClJ,CAAC,CAAC,oBAAoB,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,oCAAoC,EAC7F,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAE3D,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,SAAc,EAAE,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACxH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,sBAAsB,GAAG,yBAAyB,EAClD,WAAW,EACX,QAAQ,CAAC,CAAC,CAAC,6EAA6E,CAAC,CAAC,CAAC,SAAS,EACpG,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,OAAO,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/battery/api/index.d.ts

@@ -1,3 +1,4 @@
 export { ClaudeCodeClient } from './client.js';
+export type { ClaudeCodeClientOptions } from './client.js';
 export { OAuthApi } from './oauth.js';
-export type { UsageResponse, UsageBucket, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './types.js';
+export type { UsageResponse, UsageBucket, UsageLimit, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './types.js';

package/dist/battery/api/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/battery/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/battery/api/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC"}

package/dist/battery/api/types.d.ts

@@ -1,13 +1,55 @@
 export interface UsageBucket {
     utilization: number;
     resets_at: string | null;
+    limit_dollars?: number | null;
+    used_dollars?: number | null;
+    remaining_dollars?: number | null;
+    locked_reason?: string | null;
 }
 export interface ExtraUsage {
     is_enabled: boolean;
     monthly_limit: number | null;
     used_credits: number | null;
     utilization: number | null;
+    currency?: string | null;
+    decimal_places?: number | null;
+    disabled_reason?: string | null;
+    user_disabled?: boolean;
+    spend_limit_reached?: boolean;
 }
+/**
+ * A limit the API describes by name rather than by giving it a top-level key.
+ *
+ * Newer per-model windows arrive only in the `limits` array, so a reader that
+ * walks the top-level keys never sees them. That is why a Fable weekly limit is
+ * absent from the usage display while the API is plainly reporting it: the array
+ * is not a duplicate of the flat fields, it is where the entries the flat fields
+ * have no name for live.
+ */
+export interface UsageLimit {
+    kind: string;
+    percent: number;
+    resets_at?: string | null;
+    scope?: {
+        model?: {
+            display_name?: string;
+            [key: string]: unknown;
+        };
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+/**
+ * The usage payload, as far as it is worth naming.
+ *
+ * The index signature is deliberate. Anthropic ships new windows under
+ * codenames (`nimbus_quill`, `juniper_tide`, `tangelo`) without warning, and a
+ * closed type would mean cutting a release of this package every time one
+ * appears. More importantly, a closed type reads as a promise that these are all
+ * the fields there are, and a reader that believed that promise is exactly how
+ * the `limits` array came to be overlooked. The runtime payload was never
+ * trimmed; only the type claimed it was complete.
+ */
 export interface UsageResponse {
     five_hour: UsageBucket | null;
     seven_day: UsageBucket | null;
@@ -17,6 +59,8 @@ export interface UsageResponse {
     seven_day_cowork: UsageBucket | null;
     iguana_necktie: unknown | null;
     extra_usage: ExtraUsage | null;
+    limits?: UsageLimit[] | null;
+    [key: string]: unknown;
 }
 export interface AccountInfo {
     uuid: string;

package/dist/battery/errors.d.ts

@@ -1,9 +1,32 @@
+/**
+ * Facts a caller may need to act on, carried as fields rather than folded into
+ * the message.
+ *
+ * A caller that has to recover the retry delay by matching a regular expression
+ * against prose is a caller that breaks the next time the prose is reworded. The
+ * plugin backend does exactly that today, and every one of these fields exists
+ * because something downstream would otherwise have to read the sentence.
+ */
+export interface CcbErrorDetails {
+    /** HTTP status the destination answered with, when there was one. */
+    status?: number;
+    /** How long to wait before trying again, from a Retry-After header. */
+    retryAfterSec?: number;
+    /** The proxy the request was routed through, when one applied. */
+    proxyUrl?: string;
+    /** The status a proxy answered a CONNECT with, when it refused the tunnel. */
+    proxyConnectStatus?: number;
+    /** Whether the request reached the destination, or stalled before the tunnel opened. */
+    reachedDestination?: boolean;
+}
 export declare class CcbError extends Error {
     readonly code: string;
     readonly hint?: string | undefined;
-    constructor(message: string, code: string, hint?: string | undefined);
+    readonly details?: CcbErrorDetails | undefined;
+    constructor(message: string, code: string, hint?: string | undefined, details?: CcbErrorDetails | undefined);
     toJSON(): {
         error: {
+            details?: CcbErrorDetails | undefined;
             hint?: string | undefined;
             code: string;
             message: string;

package/dist/battery/errors.js

@@ -1,10 +1,12 @@
 export class CcbError extends Error {
     code;
     hint;
-    constructor(message, code, hint) {
+    details;
+    constructor(message, code, hint, details) {
         super(message);
         this.code = code;
         this.hint = hint;
+        this.details = details;
         this.name = 'CcbError';
     }
     toJSON() {
@@ -13,6 +15,7 @@ export class CcbError extends Error {
                 code: this.code,
                 message: this.message,
                 ...(this.hint && { hint: this.hint }),
+                ...(this.details && Object.keys(this.details).length > 0 && { details: this.details }),
             },
         };
     }

package/dist/battery/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/battery/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IACA;IAHlB,YACE,OAAe,EACC,IAAY,EACZ,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;aACtC;SACF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/battery/errors.ts"],"names":[],"mappings":"AAsBA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IACA;IACA;IAJlB,YACE,OAAe,EACC,IAAY,EACZ,IAAa,EACb,OAAyB;QAEzC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAS;QACb,YAAO,GAAP,OAAO,CAAkB;QAGzC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACrC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;aACvF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/battery/index.d.ts

@@ -8,7 +8,8 @@
  * user's own machine and their own login.
  */
 export { CcbError } from './errors.js';
+export type { CcbErrorDetails } from './errors.js';
 export { getCredentials, getAccessToken, isTokenExpired, isApiKeyAuth } from './auth/index.js';
 export type { ClaudeCredentials, ClaudeOAuthCredentials, ApiKeyAuth, ClientAuth } from './auth/index.js';
 export { ClaudeCodeClient, OAuthApi } from './api/index.js';
-export type { UsageResponse, UsageBucket, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './api/index.js';
+export type { UsageResponse, UsageBucket, UsageLimit, ExtraUsage, ProfileResponse, AccountInfo, OrganizationInfo, ApplicationInfo, } from './api/index.js';

package/dist/battery/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/battery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/F,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/battery/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/F,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/proxy.d.ts

@@ -0,0 +1,61 @@
+import type { Agent } from 'node:http';
+/**
+ * A proxy URL with any username and password taken out, safe to show a person.
+ *
+ * Proxy credentials live in the URL itself, and the URL is the most useful thing
+ * an error about a proxy can name. Those two facts together are how a password
+ * ends up in an error message, and from there in the screenshot someone attaches
+ * to a bug report. Every message this package writes goes through here first.
+ *
+ * The reporter on Swttch/swttch#181 configured exactly such a URL, so this is not
+ * a hypothetical shape.
+ */
+export declare function redactProxyUrl(proxyUrl: string | undefined): string | undefined;
+/**
+ * Whether NO_PROXY exempts this host, following the de-facto rules curl uses:
+ * a comma-separated list, `*` meaning everything, a leading dot ignored, and a
+ * bare entry matching that host plus its subdomains. An entry may pin a port,
+ * in which case the port must match too.
+ */
+export declare function isProxyBypassed(host: string, port: string, noProxy: string | undefined): boolean;
+/**
+ * The proxy URL that applies to `targetUrl`, or undefined for a direct connection.
+ *
+ * `wss:`/`ws:` are resolved as their HTTP equivalents because that is how the
+ * connection is actually made — a WebSocket starts life as an HTTP upgrade, so
+ * a user who set HTTPS_PROXY expects `wss://` to go through it.
+ *
+ * **An https target falls back to HTTP_PROXY, and that is a deliberate departure
+ * from curl.** curl reads only the variable matching the target's scheme, so
+ * HTTP_PROXY never applies to an https URL there. The `claude` CLI does not
+ * follow that rule: given HTTP_PROXY alone, whether exported in the environment
+ * or written into settings.json's `env` block, it tunnels api.anthropic.com
+ * through it. Both behaviours were measured against a local CONNECT proxy.
+ *
+ * Matching curl instead of `claude` is what broke Swttch/swttch#432 for the
+ * person who reported it: one settings.json, chat working because the CLI
+ * honored HTTP_PROXY, and the usage panel going out direct because this function
+ * did not. The user writes that file for `claude`, so `claude` is the behaviour
+ * to match — the plugin's whole premise is that anything possible from the CLI
+ * is possible from the GUI.
+ */
+export declare function resolveProxyUrl(targetUrl: string, env?: NodeJS.ProcessEnv): string | undefined;
+/**
+ * An agent that routes a connection to `targetUrl` through the configured proxy,
+ * or undefined when no proxy applies and the connection should go out directly.
+ *
+ * The result is an `http.Agent`, which is the one shape both callers accept:
+ * `https.request` takes it as `agent`, and `ws` takes the same object under the
+ * same name. That is why this package talks to the API over `node:https` rather
+ * than global `fetch` — `fetch` cannot be handed one of these, so using it would
+ * mean two separate proxy implementations for the two transports.
+ *
+ * A malformed proxy URL throws rather than falling back to a direct connection.
+ * On a machine that can only reach the internet through a proxy the direct
+ * attempt fails anyway, and it fails with a connection error that says nothing
+ * about the real cause; naming the bad setting is far more useful.
+ */
+export declare function proxyAgentFor(targetUrl: string, env?: NodeJS.ProcessEnv, options?: {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Agent | undefined;

package/dist/proxy.js

@@ -0,0 +1,184 @@
+import { HttpsProxyAgent } from 'https-proxy-agent';
+import { SocksProxyAgent } from 'socks-proxy-agent';
+import { CcbError } from './battery/errors.js';
+/**
+ * Proxy support for every outbound connection this package makes.
+ *
+ * Node does not route outbound requests through a proxy on its own. Its global
+ * `fetch` ignores HTTP_PROXY entirely (Node 24 added an opt-in flag for it, but
+ * this package supports Node 20+, and that flag does not cover SOCKS at all), and
+ * `ws` only proxies when handed an agent. So a user whose machine reaches the
+ * internet only through a proxy — a corporate egress proxy, or an `ssh -D`
+ * tunnel — got a plain connection failure from `ccb`, while `claude` itself
+ * worked because the CLI does its own proxying. That gap is what this module
+ * closes: see Swttch/swttch#181.
+ *
+ * The variables read here are the ones curl and the claude CLI already read, so
+ * a machine that is set up for those needs no extra configuration for `ccb`.
+ */
+/** Proxy URL schemes that mean SOCKS rather than an HTTP CONNECT proxy. */
+const SOCKS_PROTOCOLS = new Set(['socks:', 'socks4:', 'socks4a:', 'socks5:', 'socks5h:']);
+/**
+ * A proxy URL with any username and password taken out, safe to show a person.
+ *
+ * Proxy credentials live in the URL itself, and the URL is the most useful thing
+ * an error about a proxy can name. Those two facts together are how a password
+ * ends up in an error message, and from there in the screenshot someone attaches
+ * to a bug report. Every message this package writes goes through here first.
+ *
+ * The reporter on Swttch/swttch#181 configured exactly such a URL, so this is not
+ * a hypothetical shape.
+ */
+export function redactProxyUrl(proxyUrl) {
+    if (!proxyUrl)
+        return undefined;
+    try {
+        const url = new URL(proxyUrl);
+        if (!url.username && !url.password)
+            return proxyUrl;
+        url.username = '';
+        url.password = '';
+        // A URL that carried credentials should still look like it did, so the user
+        // recognises which setting is being talked about.
+        return url.toString().replace('//', '//***@');
+    }
+    catch {
+        // Not parseable, so it cannot be picked apart safely. Say nothing rather than
+        // risk printing a password that happens to sit in an unparseable string.
+        return undefined;
+    }
+}
+/**
+ * Read a proxy variable in either spelling.
+ *
+ * Both cases are in real use — most tooling documents the uppercase form, while
+ * curl has historically honored the lowercase one — and users copy whichever
+ * their last set of instructions showed. Reading only one spelling silently
+ * ignores a proxy the user believes they configured, which is the whole failure
+ * this module exists to prevent, so both are accepted with uppercase winning a
+ * conflict.
+ */
+function readProxyEnv(env, name) {
+    const upper = env[name.toUpperCase()];
+    if (typeof upper === 'string' && upper.trim())
+        return upper.trim();
+    const lower = env[name.toLowerCase()];
+    if (typeof lower === 'string' && lower.trim())
+        return lower.trim();
+    return undefined;
+}
+/**
+ * Whether NO_PROXY exempts this host, following the de-facto rules curl uses:
+ * a comma-separated list, `*` meaning everything, a leading dot ignored, and a
+ * bare entry matching that host plus its subdomains. An entry may pin a port,
+ * in which case the port must match too.
+ */
+export function isProxyBypassed(host, port, noProxy) {
+    if (!noProxy)
+        return false;
+    const entries = noProxy.split(',').map((e) => e.trim().toLowerCase()).filter(Boolean);
+    if (entries.includes('*'))
+        return true;
+    const target = host.toLowerCase();
+    return entries.some((entry) => {
+        let pattern = entry;
+        let entryPort;
+        // Only split a port off when it is unambiguous; a bare IPv6 literal is full
+        // of colons and must not be chopped at the first one.
+        const lastColon = pattern.lastIndexOf(':');
+        if (lastColon > 0 && !pattern.slice(lastColon + 1).includes(']') && /^\d+$/.test(pattern.slice(lastColon + 1))) {
+            entryPort = pattern.slice(lastColon + 1);
+            pattern = pattern.slice(0, lastColon);
+        }
+        if (entryPort !== undefined && entryPort !== port)
+            return false;
+        if (pattern.startsWith('.'))
+            pattern = pattern.slice(1);
+        return target === pattern || target.endsWith(`.${pattern}`);
+    });
+}
+/**
+ * The proxy URL that applies to `targetUrl`, or undefined for a direct connection.
+ *
+ * `wss:`/`ws:` are resolved as their HTTP equivalents because that is how the
+ * connection is actually made — a WebSocket starts life as an HTTP upgrade, so
+ * a user who set HTTPS_PROXY expects `wss://` to go through it.
+ *
+ * **An https target falls back to HTTP_PROXY, and that is a deliberate departure
+ * from curl.** curl reads only the variable matching the target's scheme, so
+ * HTTP_PROXY never applies to an https URL there. The `claude` CLI does not
+ * follow that rule: given HTTP_PROXY alone, whether exported in the environment
+ * or written into settings.json's `env` block, it tunnels api.anthropic.com
+ * through it. Both behaviours were measured against a local CONNECT proxy.
+ *
+ * Matching curl instead of `claude` is what broke Swttch/swttch#432 for the
+ * person who reported it: one settings.json, chat working because the CLI
+ * honored HTTP_PROXY, and the usage panel going out direct because this function
+ * did not. The user writes that file for `claude`, so `claude` is the behaviour
+ * to match — the plugin's whole premise is that anything possible from the CLI
+ * is possible from the GUI.
+ */
+export function resolveProxyUrl(targetUrl, env = process.env) {
+    const target = new URL(targetUrl);
+    const isSecure = target.protocol === 'https:' || target.protocol === 'wss:';
+    const port = target.port || (isSecure ? '443' : '80');
+    if (isProxyBypassed(target.hostname, port, readProxyEnv(env, 'NO_PROXY')))
+        return undefined;
+    const specific = isSecure
+        ? readProxyEnv(env, 'HTTPS_PROXY') ?? readProxyEnv(env, 'HTTP_PROXY')
+        : readProxyEnv(env, 'HTTP_PROXY');
+    return specific ?? readProxyEnv(env, 'ALL_PROXY');
+}
+/**
+ * An agent that routes a connection to `targetUrl` through the configured proxy,
+ * or undefined when no proxy applies and the connection should go out directly.
+ *
+ * The result is an `http.Agent`, which is the one shape both callers accept:
+ * `https.request` takes it as `agent`, and `ws` takes the same object under the
+ * same name. That is why this package talks to the API over `node:https` rather
+ * than global `fetch` — `fetch` cannot be handed one of these, so using it would
+ * mean two separate proxy implementations for the two transports.
+ *
+ * A malformed proxy URL throws rather than falling back to a direct connection.
+ * On a machine that can only reach the internet through a proxy the direct
+ * attempt fails anyway, and it fails with a connection error that says nothing
+ * about the real cause; naming the bad setting is far more useful.
+ */
+export function proxyAgentFor(targetUrl, env = process.env, options = {}) {
+    const proxyUrl = resolveProxyUrl(targetUrl, env);
+    if (!proxyUrl)
+        return undefined;
+    let protocol;
+    try {
+        protocol = new URL(proxyUrl).protocol;
+    }
+    catch {
+        throw new CcbError(`Proxy setting is not a valid URL: ${proxyUrl}`, 'invalid_proxy', 'Expected something like http://host:port or socks5://host:port');
+    }
+    // A deadline has to reach the AGENT, not just the request.
+    //
+    // While an agent is negotiating with the proxy there is no socket on the
+    // request yet, so aborting the request reaches nothing: measured against a
+    // proxy that accepted a CONNECT and stayed silent, an aborted request produced
+    // no 'socket', no 'error' and no 'close', and simply hung. The caller would get
+    // its timeout while the connection attempt carried on behind it.
+    //
+    // The two agents take different instruments for the same job, so each is given
+    // the one it honors rather than one being forced on both.
+    if (SOCKS_PROTOCOLS.has(protocol)) {
+        // socks-proxy-agent hands `timeout` to SocksClient, which applies it to the
+        // handshake. It does not read `signal`, and passing one is not merely
+        // ignored — its options type has no room for it.
+        return new SocksProxyAgent(proxyUrl, options.timeoutMs ? { timeout: options.timeoutMs } : undefined);
+    }
+    if (protocol === 'http:' || protocol === 'https:') {
+        // HttpsProxyAgent covers http: and https: alike, because every endpoint this
+        // package talks to is https/wss and therefore always reached by a CONNECT
+        // tunnel. Its options are spread into what it passes to net.connect, so a
+        // signal here destroys the socket the CONNECT wait is parked on and lets the
+        // failure surface. Measured: the error arrived 8ms after the abort.
+        return new HttpsProxyAgent(proxyUrl, options.signal ? { signal: options.signal } : undefined);
+    }
+    throw new CcbError(`Unsupported proxy scheme "${protocol.replace(':', '')}" in ${proxyUrl}`, 'invalid_proxy', 'Supported schemes: http, https, socks, socks4, socks4a, socks5, socks5h');
+}
+//# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C;;;;;;;;;;;;;;GAcG;AAEH,2EAA2E;AAC3E,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1F;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,QAA4B;IACzD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACpD,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,4EAA4E;QAC5E,kDAAkD;QAClD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,yEAAyE;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,GAAsB,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAA2B;IACrF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,SAA6B,CAAC;QAClC,4EAA4E;QAC5E,sDAAsD;QACtD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/G,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YACzC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtD,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAE5F,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC;QACrE,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACpC,OAAO,QAAQ,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAwD,EAAE;IAE1D,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAChB,qCAAqC,QAAQ,EAAE,EAC/C,eAAe,EACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,EAAE;IACF,yEAAyE;IACzE,2EAA2E;IAC3E,+EAA+E;IAC/E,gFAAgF;IAChF,iEAAiE;IACjE,EAAE;IACF,+EAA+E;IAC/E,0DAA0D;IAC1D,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,4EAA4E;QAC5E,sEAAsE;QACtE,iDAAiD;QACjD,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClD,6EAA6E;QAC7E,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,oEAAoE;QACpE,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,IAAI,QAAQ,CAChB,6BAA6B,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,QAAQ,EAAE,EACxE,eAAe,EACf,yEAAyE,CAC1E,CAAC;AACJ,CAAC"}

package/dist/stt/stream.js

@@ -1,6 +1,7 @@
 import WebSocket from 'ws';
 import { getCredentials, getAccessToken } from '../battery/auth/index.js';
 import { CcbError } from '../battery/errors.js';
+import { proxyAgentFor } from '../proxy.js';
 import { DEFAULT_KEYTERMS, packKeyterms } from './keyterms.js';
 import { AUDIO_FORMAT, TranscriptMessageType, } from './types.js';
 const VOICE_STREAM_URL = 'wss://api.anthropic.com/api/ws/speech_to_text/voice_stream';
@@ -43,13 +44,19 @@ export async function openSpeechToTextStream(handlers, options = {}, token) {
         stt_provider: 'deepgram-nova3',
     });
     const keyterms = packKeyterms([...DEFAULT_KEYTERMS, ...(options.extraKeyterms ?? [])]);
-    const socket = new WebSocket(`${VOICE_STREAM_URL}?${query.toString()}`, {
+    const streamUrl = `${VOICE_STREAM_URL}?${query.toString()}`;
+    const socket = new WebSocket(streamUrl, {
         headers: {
             Authorization: `Bearer ${accessToken}`,
             'x-app': 'swttch',
             'anthropic-client-platform': 'claude_code_swttch',
             ...(keyterms ? { 'x-config-keyterms': keyterms } : {}),
         },
+        // A WebSocket opens as an HTTP upgrade, so it needs the same proxy the usage
+        // requests use. Without this, dictation is dead on any machine that reaches
+        // the internet only through a proxy, even though the usage panel works.
+        // undefined here means "no proxy configured" and ws connects directly.
+        agent: proxyAgentFor(streamUrl),
     });
     let keepalive = null;
     let closing = false;

package/dist/stt/stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/stt/stream.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,YAAY,EACZ,qBAAqB,GAKtB,MAAM,YAAY,CAAC;AAEpB,MAAM,gBAAgB,GAAG,4DAA4D,CAAC;AAEtF,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC,4EAA4E;AAC5E,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACxD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;AAE7D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAA8B,EAC9B,UAA+B,EAAE,EACjC,KAAc;IAEd,MAAM,WAAW,GAAG,KAAK,IAAI,cAAc,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;QAC5C,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;QACvC,4EAA4E;QAC5E,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,MAAM;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,uBAAuB,EAAE,MAAM;QAC/B,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,YAAY,EAAE,gBAAgB;KAC/B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvF,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,gBAAgB,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE;QACtE,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,OAAO,EAAE,QAAQ;YACjB,2BAA2B,EAAE,oBAAoB;YACjD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;KACF,CAAC,CAAC;IAEH,IAAI,SAAS,GAA0B,IAAI,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB;;;;;;;;;OASG;IACH,MAAM,YAAY,GAAiB,EAAE,CAAC;IACtC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,iBAAiB,GAAG,YAAY,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D;;;;;;;;;OASG;IACH,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,SAAS,aAAa;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YACd,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,YAAY;QACnB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACrB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,uEAAuE;QACvE,qEAAqE;QACrE,KAAK,MAAM,KAAK,IAAI,YAAY;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,YAAY,GAAG,CAAC,CAAC;QACjB,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAC3B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QAC3B,IAAI,GAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAsB,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO;QACT,CAAC;QAED,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,qBAAqB,CAAC,iBAAiB,CAAC;YAC7C,KAAK,qBAAqB,CAAC,cAAc;gBACvC,uEAAuE;gBACvE,sEAAsE;gBACtE,qEAAqE;gBACrE,mEAAmE;gBACnE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;wBAAE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;oBAC1D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACzC,CAAC;gBACD,MAAM;YAER,KAAK,qBAAqB,CAAC,kBAAkB;gBAC3C,gDAAgD;gBAChD,YAAY,EAAE,CAAC;gBACf,MAAM;YAER,KAAK,qBAAqB,CAAC,eAAe;gBACxC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,qBAAqB,CAAC,CAAC;gBAC3D,MAAM;YAER,KAAK,qBAAqB,CAAC,KAAK;gBAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC;gBAChD,MAAM;YAER;gBACE,sEAAsE;gBACtE,2EAA2E;gBAC3E,MAAM;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QAChC,IAAI,OAAO;YAAE,OAAO;QACpB,6EAA6E;QAC7E,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,QAAQ,CAAC,OAAO,CAAC,oBAAoB,GAAG,CAAC,OAAO,EAAE,EAAE;YAClD,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,GAAG;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACtB,YAAY,EAAE,CAAC;QACf,aAAa,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,CAAC,KAAiB;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,yEAAyE;YACzE,yEAAyE;YACzE,iCAAiC;YACjC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;gBAC/C,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC;gBACjC,OAAO,YAAY,GAAG,iBAAiB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnE,YAAY,IAAI,YAAY,CAAC,KAAK,EAAG,CAAC,UAAU,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK;YACH,IAAI,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAEhF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,oEAAoE;gBACpE,oEAAoE;gBACpE,8CAA8C;gBAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC7B,aAAa,EAAE,CAAC;oBAChB,YAAY,EAAE,CAAC;oBACf,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM;wBAAE,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC3D,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,cAAc,CAAC,CAAC;gBAEnB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEpE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACxB,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,aAAa,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,IAAI,CAAC;QACH,cAAc,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../src/stt/stream.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EACL,YAAY,EACZ,qBAAqB,GAKtB,MAAM,YAAY,CAAC;AAEpB,MAAM,gBAAgB,GAAG,4DAA4D,CAAC;AAEtF,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC,4EAA4E;AAC5E,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACxD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;AAE7D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAA8B,EAC9B,UAA+B,EAAE,EACjC,KAAc;IAEd,MAAM,WAAW,GAAG,KAAK,IAAI,cAAc,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC;QAC5C,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;QACvC,4EAA4E;QAC5E,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,MAAM;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;QAClC,uBAAuB,EAAE,MAAM;QAC/B,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,YAAY,EAAE,gBAAgB;KAC/B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEvF,MAAM,SAAS,GAAG,GAAG,gBAAgB,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;IAE5D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,SAAS,EAAE;QACtC,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,OAAO,EAAE,QAAQ;YACjB,2BAA2B,EAAE,oBAAoB;YACjD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,6EAA6E;QAC7E,4EAA4E;QAC5E,wEAAwE;QACxE,uEAAuE;QACvE,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC;KAChC,CAAC,CAAC;IAEH,IAAI,SAAS,GAA0B,IAAI,CAAC;IAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB;;;;;;;;;OASG;IACH,MAAM,YAAY,GAAiB,EAAE,CAAC;IACtC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,iBAAiB,GAAG,YAAY,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1D;;;;;;;;;OASG;IACH,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,SAAS,aAAa;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,SAAS,EAAE,CAAC;YACd,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,SAAS,YAAY;QACnB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACrB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvB,uEAAuE;QACvE,qEAAqE;QACrE,KAAK,MAAM,KAAK,IAAI,YAAY;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACxB,YAAY,GAAG,CAAC,CAAC;QACjB,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAC3B,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;QAC3B,IAAI,GAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAsB,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO;QACT,CAAC;QAED,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,qBAAqB,CAAC,iBAAiB,CAAC;YAC7C,KAAK,qBAAqB,CAAC,cAAc;gBACvC,uEAAuE;gBACvE,sEAAsE;gBACtE,qEAAqE;gBACrE,mEAAmE;gBACnE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;oBACb,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;wBAAE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;oBAC1D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACzC,CAAC;gBACD,MAAM;YAER,KAAK,qBAAqB,CAAC,kBAAkB;gBAC3C,gDAAgD;gBAChD,YAAY,EAAE,CAAC;gBACf,MAAM;YAER,KAAK,qBAAqB,CAAC,eAAe;gBACxC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,qBAAqB,CAAC,CAAC;gBAC3D,MAAM;YAER,KAAK,qBAAqB,CAAC,KAAK;gBAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC;gBAChD,MAAM;YAER;gBACE,sEAAsE;gBACtE,2EAA2E;gBAC3E,MAAM;QACV,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;QAChC,IAAI,OAAO;YAAE,OAAO;QACpB,6EAA6E;QAC7E,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,MAAM,GAAG,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,QAAQ,CAAC,OAAO,CAAC,oBAAoB,GAAG,CAAC,OAAO,EAAE,EAAE;YAClD,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,GAAG;SACvD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACtB,YAAY,EAAE,CAAC;QACf,aAAa,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,SAAS,CAAC,KAAiB;YACzB,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,yEAAyE;YACzE,yEAAyE;YACzE,iCAAiC;YACjC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;gBAC/C,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC;gBACjC,OAAO,YAAY,GAAG,iBAAiB,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnE,YAAY,IAAI,YAAY,CAAC,KAAK,EAAG,CAAC,UAAU,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK;YACH,IAAI,OAAO,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAEhF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,oEAAoE;gBACpE,oEAAoE;gBACpE,8CAA8C;gBAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC7B,aAAa,EAAE,CAAC;oBAChB,YAAY,EAAE,CAAC;oBACf,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM;wBAAE,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC3D,OAAO,EAAE,CAAC;gBACZ,CAAC,EAAE,cAAc,CAAC,CAAC;gBAEnB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAEpE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACxB,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,aAAa,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,IAAI,CAAC;QACH,cAAc,CAAC,MAAM,cAAc,EAAE,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@swttch/extend-kit",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "Companion tools for Swttch that live outside the plugin bundle: Claude Code account/usage SDK, the ccb CLI, and speech-to-text.",
   "type": "module",
   "main": "./dist/index.js",
@@ -60,6 +60,8 @@
     "typescript": "^6.0.2"
   },
   "dependencies": {
+    "https-proxy-agent": "^9.1.0",
+    "socks-proxy-agent": "^10.1.0",
     "ws": "^8.21.3"
   }
 }