claude-code-cache-fix 1.9.2 → 1.10.0

package/README.md

@@ -2,7 +2,19 @@
 
 English | [中文](./README.zh.md) | [Português](./docs/guia-pt-br.md)
 
-Fixes prompt cache regressions in [Claude Code](https://github.com/anthropics/claude-code) that cause **up to 20x cost increase** on resumed sessions, plus monitoring for silent context degradation. Confirmed through v2.1.97.
+Fixes prompt cache regressions in [Claude Code](https://github.com/anthropics/claude-code) that cause **up to 20x cost increase** on resumed sessions, plus monitoring for silent context degradation. Confirmed through v2.1.107.
+
+## Security model
+
+> **This interceptor patches `globalThis.fetch`.** By design, it has full read/write access to all API requests and responses in the Claude Code process. This is inherent to the approach — any fetch interceptor, proxy, or gateway has this position.
+
+**What it does:** Modifies outgoing request structure (block order, fingerprint, TTL, git-status) to fix cache bugs. Reads response headers and SSE usage data for monitoring.
+
+**What it does NOT do:** No network calls from the interceptor. All telemetry is written to local files under `~/.claude/`. No data leaves your machine unless you explicitly opt in to [claude-code-meter](https://github.com/cnighswonger/claude-code-meter) sharing (separate package, requires interactive consent).
+
+**Supply chain:** Single unminified file (`preload.mjs`, ~1,700 lines). One dependency (`zod` for schema validation in tests only). Review before installing. npm provenance links each published version to its source commit.
+
+**Independent audit:** [Assessed as "LEGITIMATE TOOL"](https://github.com/anthropics/claude-code/issues/38335#issuecomment-4244413605) by @TheAuditorTool (2026-04-14).
 
 ## The problem
 
@@ -266,6 +278,7 @@ Add to `~/.claude/settings.json`:
 ```json
 {
   "statusLine": {
+    "type": "command",
     "command": "~/.claude/hooks/quota-statusline.sh"
   }
 }

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "claude-code-cache-fix",
-  "version": "1.9.2",
+  "version": "1.10.0",
   "description": "Fixes prompt cache regression in Claude Code that causes up to 20x cost increase on resumed sessions",
   "type": "module",
   "exports": "./preload.mjs",
   "main": "./preload.mjs",
   "files": [
     "preload.mjs",
+    "postinstall.js",
     "tools/",
     "claude-fixed.bat"
   ],
@@ -14,7 +15,8 @@
     "node": ">=18"
   },
   "scripts": {
-    "test": "node --test"
+    "test": "node --test",
+    "postinstall": "node postinstall.js"
   },
   "keywords": [
     "claude-code",

package/postinstall.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+console.log(`
+┌─────────────────────────────────────────────────────────────────────┐
+│  claude-code-cache-fix — SECURITY NOTICE                           │
+│                                                                     │
+│  This interceptor patches globalThis.fetch to fix prompt cache      │
+│  bugs in Claude Code. By design, it has full read/write access      │
+│  to all API requests and responses in the Claude Code process.      │
+│                                                                     │
+│  • All telemetry is LOCAL ONLY (no network calls from interceptor)  │
+│  • Source is a single unminified file: preload.mjs (~1,700 lines)   │
+│  • Review before use: github.com/cnighswonger/claude-code-cache-fix │
+│                                                                     │
+│  Independent audit: github.com/anthropics/claude-code/issues/38335  │
+│  (search "TheAuditorTool" — assessed as LEGITIMATE TOOL)            │
+└─────────────────────────────────────────────────────────────────────┘
+`);

package/preload.mjs

@@ -870,6 +870,7 @@ function printHealthLine() {
   if (FIXES_DISABLED) {
     debugLog("HEALTH: all fixes disabled via CACHE_FIX_DISABLED=1 (monitoring active)");
   }
+  debugLog("SECURITY: This interceptor has full read/write access to API requests. All telemetry is local only — no network calls. Source: github.com/cnighswonger/claude-code-cache-fix");
 }
 
 // --------------------------------------------------------------------------