claude-code-infinite 1.0.36 → 1.0.37

package/dist/desktop-setup.js

@@ -0,0 +1,288 @@
+/**
+ * `ccc desktop setup`'s files and registrations (desktop-command.ts): the service's state,
+ * its certificate (mitm-ca.ts: a CA name-constrained to api.anthropic.com whose key is
+ * dropped at once; only the leaf key is kept, 0600), the Bash env file, the launchd agent
+ * and the user-scope `memtree` MCP server. The service itself is desktop-service.ts.
+ */
+import http from "node:http";
+import os from "node:os";
+import path from "node:path";
+import fs from "node:fs";
+import { spawnSync } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { createSessionCa } from "./mitm-ca.js";
+import { MESSAGE_THREADS_OFF, UNREACHABLE_BLOCKING_LIMIT } from "./claude-env.js";
+import { MEMTREE_MCP_SCRIPT } from "./memtree-mcp-config.js";
+import { MEMTREE_MCP_SERVER_NAME } from "./memtree-mcp.js";
+import { proxyUrlFor } from "./https-proxy-mode.js";
+import { cccProxyRestoreLines, ifStill, shellQuote } from "./https-proxy-session.js";
+const LAUNCHD_LABEL = "co.polychat.ccc-desktop";
+export function desktopPaths(configDir, mode) {
+    const dir = path.join(configDir, mode === "production" ? "desktop" : `desktop-${mode}`);
+    const label = mode === "production" ? LAUNCHD_LABEL : `${LAUNCHD_LABEL}-${mode}`;
+    return {
+        dir,
+        caPem: path.join(dir, "ca.pem"),
+        caCert: path.join(dir, "ccc-ca.pem"),
+        upstreamCa: path.join(dir, "upstream-ca.pem"),
+        leafPem: path.join(dir, "leaf.pem"),
+        leafKey: path.join(dir, "leaf-key.pem"),
+        state: path.join(dir, "service.json"),
+        bashEnv: path.join(dir, "bash-env.sh"),
+        log: path.join(dir, "service.log"),
+        plist: path.join(os.homedir(), "Library", "LaunchAgents", `${label}.plist`),
+    };
+}
+export function desktopLaunchdLabel(mode) {
+    return mode === "production" ? LAUNCHD_LABEL : `${LAUNCHD_LABEL}-${mode}`;
+}
+/** The lines to paste into Desktop's environment editor (one KEY=value per line). */
+export function desktopEnvLines(paths, state) {
+    return [
+        `HTTPS_PROXY=${proxyUrlFor(state.port, state.token)}`,
+        `NODE_EXTRA_CA_CERTS=${paths.caPem}`,
+        ...Object.entries(PASTED_LIMITS).map(([name, value]) => `${name}=${value}`),
+        `CLAUDE_ENV_FILE=${paths.bashEnv}`,
+    ];
+}
+/** What terminal ccc sets for MemTree (claude-env.ts), pasted for Desktop sessions. */
+const PASTED_LIMITS = {
+    DISABLE_AUTO_COMPACT: "1",
+    CLAUDE_CODE_BLOCKING_LIMIT_OVERRIDE: UNREACHABLE_BLOCKING_LIMIT,
+    CLAUDE_CODE_RESUME_TOKEN_THRESHOLD: "1000000000",
+    ...MESSAGE_THREADS_OFF,
+};
+/**
+ * Bash-tool commands get the session's env minus ccc's proxy and CA (else curl, Python
+ * and others would fail TLS to api.anthropic.com), each only while it still holds ccc's
+ * value (Claude Code's sandbox sets its own first; the token is matched by pattern, never
+ * written). Programs started from Bash (a nested `claude -p`, an SDK script) aren't routed
+ * through ccc, so they get Claude Code's own compaction back.
+ */
+export function desktopBashEnvScript(paths, state, userEnv = {}) {
+    const userFile = userEnv.CLAUDE_ENV_FILE;
+    return [
+        "# ccc desktop: written by `ccc desktop setup`; sourced by Claude Code before each Bash command.",
+        // The user's own CA file (seen at setup) comes back for Bash; ccc's bundle goes.
+        ...cccProxyRestoreLines(state.port, paths.caPem, userEnv.NODE_EXTRA_CA_CERTS ? { NODE_EXTRA_CA_CERTS: userEnv.NODE_EXTRA_CA_CERTS } : {}),
+        ...Object.entries(PASTED_LIMITS).map(([name, value]) => ifStill(name, value, `unset ${name}`)),
+        userFile ? `export CLAUDE_ENV_FILE=${shellQuote(userFile)}` : "unset CLAUDE_ENV_FILE",
+        // An env file of the user's own, which the pasted line replaced, still runs (as in
+        // terminal proxy mode).
+        ...(userFile ? [`if [ -r ${shellQuote(userFile)} ]; then . ${shellQuote(userFile)}; fi`] : []),
+        "true",
+        "",
+    ].join("\n");
+}
+function freePort() {
+    return new Promise((resolve, reject) => {
+        const s = http.createServer();
+        s.once("error", reject);
+        s.listen(0, "127.0.0.1", () => {
+            const port = s.address().port;
+            s.close(() => resolve(port));
+        });
+    });
+}
+export function readDesktopState(paths) {
+    try {
+        return JSON.parse(fs.readFileSync(paths.state, "utf8"));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Setup rotates the CA when it expires within this. */
+export const CA_ROTATE_BEFORE_MS = 30 * 24 * 3600_000;
+/**
+ * Make the CA and leaf, the token, the port and the Bash env file. A re-run keeps
+ * the port and token (the pasted lines stay valid) unless `rotateToken`, and keeps
+ * the CA (live sessions trust only the one they started with) unless `rotateCa`,
+ * it is missing or unreadable, or it expires within CA_ROTATE_BEFORE_MS.
+ */
+export async function setupDesktopFiles(paths, mode, opts = {}) {
+    fs.mkdirSync(paths.dir, { recursive: true, mode: 0o700 });
+    fs.chmodSync(paths.dir, 0o700);
+    const previous = readDesktopState(paths);
+    const now = Date.now();
+    const write = (file, text, mode) => {
+        const tmp = `${file}.${process.pid}.tmp`;
+        fs.writeFileSync(tmp, text, { mode });
+        fs.renameSync(tmp, file);
+    };
+    const caUsable = previous !== undefined && Date.parse(previous.notAfter) - now > CA_ROTATE_BEFORE_MS &&
+        [paths.caCert, paths.leafPem, paths.leafKey].every((f) => fs.existsSync(f));
+    const caRotated = opts.rotateCa === true || !caUsable;
+    if (caRotated) {
+        // The CA's key never leaves createSessionCa: it signs this one leaf and is dropped.
+        const ca = createSessionCa();
+        write(paths.leafKey, ca.leafKeyPem, 0o600);
+        write(paths.leafPem, ca.leafCertPem, 0o600);
+        write(paths.caCert, ca.caCertPem, 0o644);
+    }
+    // The pasted NODE_EXTRA_CA_CERTS replaces any the session would have had (a corporate
+    // CA from the login shell): keep those first, as terminal proxy mode does.
+    const extra = opts.userExtraCaPem?.trim() ?? "";
+    const parts = [extra, fs.readFileSync(paths.caCert, "utf8").trim()];
+    write(paths.caPem, `${parts.filter(Boolean).join("\n")}\n`, 0o644);
+    // The service's own connections to Anthropic need those roots too (launchd gives it
+    // none of the shell's env): the plist names this file when it exists (Codex r1 P2).
+    if (extra)
+        write(paths.upstreamCa, `${extra}\n`, 0o644);
+    else
+        fs.rmSync(paths.upstreamCa, { force: true });
+    const state = {
+        mode,
+        port: previous?.port ?? await pickServicePort(),
+        token: !opts.rotateToken && previous?.token ? previous.token : randomBytes(24).toString("hex"),
+        createdAt: caRotated || !previous ? new Date(now).toISOString() : previous.createdAt,
+        notAfter: caRotated || !previous ? new Date(now + 365 * 24 * 3600_000).toISOString() : previous.notAfter,
+        ...(previous?.mcpRegistered ? { mcpRegistered: true } : {}),
+        ...(opts.claudeConfigDir ? { claudeConfigDir: opts.claudeConfigDir } : {}),
+    };
+    write(paths.state, `${JSON.stringify(state, null, 2)}\n`, 0o600);
+    write(paths.bashEnv, desktopBashEnvScript(paths, state, opts.userEnv), 0o600);
+    return { ...state, caRotated };
+}
+export function writeDesktopState(paths, state) {
+    const { mode, port, token, createdAt, notAfter, mcpRegistered, claudeConfigDir } = state;
+    const tmp = `${paths.state}.${process.pid}.tmp`;
+    const kept = { mode, port, token, createdAt, notAfter, mcpRegistered, claudeConfigDir };
+    fs.writeFileSync(tmp, `${JSON.stringify(kept, null, 2)}\n`, { mode: 0o600 });
+    fs.renameSync(tmp, paths.state);
+}
+/**
+ * A fixed port for the pasted lines: below the macOS ephemeral range (49152+), so an
+ * outgoing connection can't hold it when the service restarts. Free when chosen.
+ */
+async function pickServicePort() {
+    for (let i = 0; i < 50; i++) {
+        const port = 41000 + Math.floor(Math.random() * 7000);
+        if (await portFree(port))
+            return port;
+    }
+    return freePort();
+}
+function portFree(port) {
+    return new Promise((resolve) => {
+        const s = http.createServer();
+        s.once("error", () => resolve(false));
+        s.listen(port, "127.0.0.1", () => s.close(() => resolve(true)));
+    });
+}
+/** The launchd agent: `node <cli.js> [staging|local] desktop serve`, kept alive. */
+export function launchdPlist(mode, paths, cliPath) {
+    const args = [process.execPath, cliPath, ...(mode === "production" ? [] : [mode]), "desktop", "serve"];
+    // Transcripts (usage, the final reply) are read where setup's Claude Code keeps them.
+    const configDir = readDesktopState(paths)?.claudeConfigDir;
+    const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${desktopLaunchdLabel(mode)}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args.map((a) => `    <string>${esc(a)}</string>`).join("\n")}
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>PATH</key><string>${esc(`${path.dirname(process.execPath)}:/usr/bin:/bin:/usr/sbin:/sbin`)}</string>${fs.existsSync(paths.upstreamCa)
+        ? `\n    <key>NODE_EXTRA_CA_CERTS</key><string>${esc(paths.upstreamCa)}</string>` : ""}${configDir ? `\n    <key>CLAUDE_CONFIG_DIR</key><string>${esc(configDir)}</string>` : ""}
+  </dict>
+  <key>RunAtLoad</key><true/>
+  <key>ExitTimeOut</key><integer>45</integer>
+  <key>KeepAlive</key><true/>
+  <key>ProcessType</key><string>Background</string>
+  <key>StandardOutPath</key><string>${esc(paths.log)}</string>
+  <key>StandardErrorPath</key><string>${esc(paths.log)}</string>
+</dict>
+</plist>
+`;
+}
+export function installLaunchAgent(mode, paths, cliPath) {
+    fs.mkdirSync(path.dirname(paths.plist), { recursive: true });
+    fs.writeFileSync(paths.plist, launchdPlist(mode, paths, cliPath), { mode: 0o644 });
+    const domain = `gui/${process.getuid?.() ?? 501}`;
+    spawnSync("launchctl", ["bootout", `${domain}/${desktopLaunchdLabel(mode)}`], { stdio: "ignore" });
+    // bootout returns before the job is fully gone (it may take its ExitTimeOut to final-index);
+    // wait for it to leave, then bootstrap, retrying the transient 5/37 errors.
+    for (let i = 0; i < 200 && spawnSync("launchctl", ["print", `${domain}/${desktopLaunchdLabel(mode)}`], { stdio: "ignore" }).status === 0; i++) {
+        spawnSync("sleep", ["0.25"]);
+    }
+    let last = "";
+    for (let attempt = 0; attempt < 40; attempt++) {
+        const r = spawnSync("launchctl", ["bootstrap", domain, paths.plist], { encoding: "utf8" });
+        if (r.status === 0)
+            return;
+        last = `${r.status}: ${(r.stderr || "").trim()}`;
+        spawnSync("sleep", ["0.25"]);
+    }
+    throw new Error(`launchctl bootstrap failed (${last})`);
+}
+export function uninstallLaunchAgent(mode, paths) {
+    const domain = `gui/${process.getuid?.() ?? 501}`;
+    spawnSync("launchctl", ["bootout", `${domain}/${desktopLaunchdLabel(mode)}`], { stdio: "ignore" });
+    fs.rmSync(paths.plist, { force: true });
+}
+/**
+ * The `memtree` MCP server for every Claude Code on this account (Desktop
+ * re-delivers ~/.claude.json's stdio servers to its sessions). It is inert
+ * (no tools) unless the session's HTTPS_PROXY is a ccc proxy or it runs
+ * under terminal ccc (memtree-mcp.ts desktopMcpTarget). Registered through
+ * `claude mcp add-json --scope user`, never by editing ~/.claude.json directly.
+ */
+export function desktopMcpServerJson() {
+    return JSON.stringify({
+        type: "stdio",
+        command: process.execPath,
+        args: [MEMTREE_MCP_SCRIPT],
+        env: { CCC_MEMTREE_MCP_DESKTOP: "1" },
+        alwaysLoad: true,
+    });
+}
+/** The file `claude mcp --scope user` edits: `$CLAUDE_CONFIG_DIR/.claude.json`, else `~/.claude.json`. */
+export function userClaudeJsonPath(env = process.env) {
+    return env.CLAUDE_CONFIG_DIR ? path.join(env.CLAUDE_CONFIG_DIR, ".claude.json") : path.join(os.homedir(), ".claude.json");
+}
+/**
+ * Who owns the user-scope `memtree` entry (read only; never written here). A file that
+ * exists but can't be read or parsed is "other": ccc then touches nothing.
+ */
+export function userMcpOwner(claudeJsonPath = userClaudeJsonPath()) {
+    let config;
+    try {
+        config = JSON.parse(fs.readFileSync(claudeJsonPath, "utf8"));
+    }
+    catch (err) {
+        return err?.code === "ENOENT" ? "none" : "other";
+    }
+    const entry = config.mcpServers?.[MEMTREE_MCP_SERVER_NAME];
+    if (!entry)
+        return "none";
+    return entry.env?.CCC_MEMTREE_MCP_DESKTOP === "1" ? "ccc-desktop" : "other";
+}
+/**
+ * Register (or refresh) ccc's entry. Someone else's `memtree` entry is left alone
+ * (false, with the reason): the user decides.
+ */
+export function registerDesktopMcp(claudeCommand, env = process.env) {
+    const owner = userMcpOwner(userClaudeJsonPath(env));
+    if (owner === "other") {
+        return { ok: false, reason: "a user-scope MCP server named `memtree` that ccc didn't add already exists" };
+    }
+    if (owner === "ccc-desktop") {
+        spawnSync(claudeCommand, ["mcp", "remove", "--scope", "user", MEMTREE_MCP_SERVER_NAME], { stdio: "ignore", env });
+    }
+    const r = spawnSync(claudeCommand, [
+        "mcp", "add-json", "--scope", "user", MEMTREE_MCP_SERVER_NAME, desktopMcpServerJson(),
+    ], { stdio: "inherit", env });
+    return r.status === 0 ? { ok: true } : { ok: false, reason: `\`claude mcp add-json\` exited ${r.status}` };
+}
+/** Remove ccc's entry only, and only when no other ccc desktop mode still uses it. */
+export function unregisterDesktopMcp(claudeCommand, otherModesInstalled, env = process.env) {
+    if (otherModesInstalled || userMcpOwner(userClaudeJsonPath(env)) !== "ccc-desktop")
+        return;
+    spawnSync(claudeCommand, ["mcp", "remove", "--scope", "user", MEMTREE_MCP_SERVER_NAME], { stdio: "ignore", env });
+}
+//# sourceMappingURL=desktop-setup.js.map

package/dist/desktop-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-setup.js","sourceRoot":"","sources":["../src/desktop-setup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAIrF,MAAM,aAAa,GAAG,yBAAyB,CAAC;AA+BhD,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,IAAiB;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;IACjF,OAAO;QACL,GAAG;QACH,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;QACpC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QACvC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QACtC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC;QAClC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,OAAO,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;AAC5E,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,KAAmB;IACtE,OAAO;QACL,eAAe,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;QACrD,uBAAuB,KAAK,CAAC,KAAK,EAAE;QACpC,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QAC3E,mBAAmB,KAAK,CAAC,OAAO,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,aAAa,GAA2B;IAC5C,oBAAoB,EAAE,GAAG;IACzB,mCAAmC,EAAE,0BAA0B;IAC/D,kCAAkC,EAAE,YAAY;IAChD,GAAG,mBAAmB;CACvB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAmB,EAAE,KAAmB,EAAE,UAA0B,EAAE;IAEtE,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IACzC,OAAO;QACL,iGAAiG;QACjG,iFAAiF;QACjF,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAC7C,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;QAC9F,QAAQ,CAAC,CAAC,CAAC,0BAA0B,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB;QACrF,mFAAmF;QACnF,wBAAwB;QACxB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,QAAQ,CAAC,cAAc,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,MAAM;QACN,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAQD,SAAS,QAAQ;IACf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YAC5B,MAAM,IAAI,GAAI,CAAC,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;YACpD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAiB,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAmB,EAAE,IAAiB,EACtC,OAGI,EAAE;IAEN,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY,EAAQ,EAAE;QAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,GAAG,GAAG,mBAAmB;QAClG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,oFAAoF;QACpF,MAAM,EAAE,GAAG,eAAe,EAAE,CAAC;QAC7B,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC5C,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,sFAAsF;IACtF,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnE,oFAAoF;IACpF,oFAAoF;IACpF,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC;;QACnD,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAiB;QAC1B,IAAI;QACJ,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,MAAM,eAAe,EAAE;QAC/C,KAAK,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9F,SAAS,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS;QACpF,QAAQ,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ;QACxG,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,KAAmB;IACxE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC;IACzF,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;IACxF,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,eAAe;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,IAAiB,EAAE,KAAmB,EAAE,OAAe;IAClF,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACvG,sFAAsF;IACtF,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IAC3D,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxG,OAAO;;;;4BAImB,mBAAmB,CAAC,IAAI,CAAC;;;EAGnD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;6BAIjC,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,YACjG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,+CAA+C,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GACxF,SAAS,CAAC,CAAC,CAAC,6CAA6C,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;;;;;;sCAMnD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;wCACZ,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;;;CAGrD,CAAC;AACF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAiB,EAAE,KAAmB,EAAE,OAAe;IACxF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC;IAClD,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,6FAA6F;IAC7F,4EAA4E;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9I,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC3B,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjD,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAiB,EAAE,KAAmB;IACzE,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC;IAClD,SAAS,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,kBAAkB,CAAC;QAC1B,GAAG,EAAE,EAAE,uBAAuB,EAAE,GAAG,EAAE;QACrC,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,OAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AAC5H,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,cAAc,GAAG,kBAAkB,EAAE;IAChE,IAAI,MAAyE,CAAC;IAC9E,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,uBAAuB,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,KAAK,CAAC,GAAG,EAAE,uBAAuB,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,aAAqB,EAAE,MAAyB,OAAO,CAAC,GAAG;IAE3D,MAAM,KAAK,GAAG,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;IAC7G,CAAC;IACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,SAAS,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,EAAE;QACjC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,EAAE,oBAAoB,EAAE;KACtF,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;AAC7G,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAClC,aAAqB,EAAE,mBAA4B,EAAE,MAAyB,OAAO,CAAC,GAAG;IAEzF,IAAI,mBAAmB,IAAI,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa;QAAE,OAAO;IAC3F,SAAS,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AACpH,CAAC"}

package/dist/https-proxy-eligibility.d.ts

@@ -0,0 +1,31 @@
+export declare const HTTPS_PROXY_MODE_ENV = "CCC_HTTPS_PROXY_MODE";
+export type HttpsProxyModeDecision = {
+    mode: "https-proxy";
+} | {
+    mode: "base-url";
+    requested: false;
+} | {
+    mode: "base-url";
+    requested: true;
+    reason: string;
+};
+export interface EligibilityInput {
+    env: NodeJS.ProcessEnv;
+    /** The `httpsProxyMode` config key. */
+    configured?: boolean;
+    platform: NodeJS.Platform;
+    /** Claude Code's arguments (a `--settings` file or JSON is read too). */
+    claudeArgs: readonly string[];
+    cwd: string;
+    homedir?: string;
+    readFile?: (file: string) => string | null;
+    listDir?: (dir: string) => string[];
+}
+export declare function httpsProxyModeDecision(input: EligibilityInput): HttpsProxyModeDecision;
+/** `CCC_HTTPS_PROXY_MODE` wins (1/true/yes/on or 0/false/no/off), else the config key. */
+export declare function httpsProxyModeRequested(env: NodeJS.ProcessEnv, configured?: boolean): boolean;
+/** The one-line notice for a requested mode that was skipped. */
+export declare function skippedNoticeText(reason: string): string;
+/** Every `--settings <value>` / `--settings=<value>` before a `--`. */
+export declare function settingsArgs(args: readonly string[]): string[];
+//# sourceMappingURL=https-proxy-eligibility.d.ts.map

package/dist/https-proxy-eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-proxy-eligibility.d.ts","sourceRoot":"","sources":["../src/https-proxy-eligibility.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAe3D,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,KAAK,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,uCAAuC;IACvC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,yEAAyE;IACzE,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC3C,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;CACrC;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,gBAAgB,GAAG,sBAAsB,CAQtF;AAED,0FAA0F;AAC1F,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,OAAO,GAAG,OAAO,CAK7F;AAED,iEAAiE;AACjE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxD;AAqGD,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAS9D"}

package/dist/https-proxy-eligibility.js

@@ -0,0 +1,204 @@
+/**
+ * Whether this session runs in HTTPS-proxy mode (https-proxy-mode.ts) or in today's
+ * base-URL mode. Opt-in: `CCC_HTTPS_PROXY_MODE=1` (or `=0` to force it off), else the
+ * `httpsProxyMode` config key. Even when asked for, it is skipped, with one line saying
+ * why, wherever it can't work yet (plans/2026-11-08_PLAN_https_proxy_remote_control.md,
+ * section 5):
+ *
+ * - Windows: Claude Code's PowerShell tool doesn't apply the Bash env file.
+ * - A proxy in ccc's own environment: blind tunnels and ccc's upstream would bypass it.
+ * - Claude Code settings (user, project, local, managed, or a `--settings` argument)
+ *   whose `env` sets a proxy, NO_PROXY or NODE_EXTRA_CA_CERTS: settings env overrides
+ *   the process env, so model calls would skip MemTree silently or fail TLS.
+ * - Claude Code's Bash sandbox enabled in any of those settings: its proxy forwards
+ *   through Claude Code's HTTPS_PROXY (with the token), so sandboxed calls to
+ *   api.anthropic.com would hit the interception and fail, and the sandbox's
+ *   private-address check would not apply.
+ *
+ * These are read once, at startup: enabling the sandbox or a settings proxy mid-session
+ * isn't seen here (https-proxy-session.ts warns when prompts then get no model call).
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+export const HTTPS_PROXY_MODE_ENV = "CCC_HTTPS_PROXY_MODE";
+/** A proxy in any of these (either case) means the user already routes through one. */
+const PROXY_VARS = [
+    "HTTPS_PROXY", "https_proxy", "HTTP_PROXY", "http_proxy", "ALL_PROXY", "all_proxy",
+];
+/**
+ * Settings `env` keys that would override what proxy mode gives Claude Code. A settings
+ * CLAUDE_ENV_FILE would replace the Bash env file, so Bash commands would keep the token
+ * proxy and the session CA.
+ */
+const SETTINGS_ENV_BLOCKERS = [
+    ...PROXY_VARS, "NO_PROXY", "no_proxy", "NODE_EXTRA_CA_CERTS", "CLAUDE_ENV_FILE",
+];
+export function httpsProxyModeDecision(input) {
+    if (!httpsProxyModeRequested(input.env, input.configured)) {
+        return { mode: "base-url", requested: false };
+    }
+    const reason = blockingReason(input);
+    return reason === undefined
+        ? { mode: "https-proxy" }
+        : { mode: "base-url", requested: true, reason };
+}
+/** `CCC_HTTPS_PROXY_MODE` wins (1/true/yes/on or 0/false/no/off), else the config key. */
+export function httpsProxyModeRequested(env, configured) {
+    const value = env[HTTPS_PROXY_MODE_ENV]?.trim().toLowerCase();
+    if (value && ["1", "true", "yes", "on"].includes(value))
+        return true;
+    if (value && ["0", "false", "no", "off"].includes(value))
+        return false;
+    return configured === true;
+}
+/** The one-line notice for a requested mode that was skipped. */
+export function skippedNoticeText(reason) {
+    return `ccc: HTTPS-proxy mode (Remote Control) is off for this session: ${reason}. ` +
+        "Using the base-URL mode.";
+}
+function blockingReason(input) {
+    if (input.platform === "win32")
+        return "Windows isn't supported yet";
+    const own = PROXY_VARS.find((name) => nonEmpty(input.env[name]));
+    if (own)
+        return `${own} is already set (ccc can't chain to your proxy yet)`;
+    const readFile = input.readFile ?? readTextFile;
+    for (const source of settingsSources(input, readFile)) {
+        const reason = settingsBlocker(source.settings);
+        if (reason)
+            return `${reason} in ${source.name}`;
+    }
+    return undefined;
+}
+function settingsBlocker(settings) {
+    if (!isRecord(settings))
+        return undefined;
+    const sandbox = settings.sandbox;
+    if (isRecord(sandbox) && sandbox.enabled === true)
+        return "Claude Code's Bash sandbox is on";
+    const env = settings.env;
+    if (!isRecord(env))
+        return undefined;
+    // Present at all, even empty: a settings value replaces the process env's (an empty
+    // HTTPS_PROXY would send Claude Code straight to api.anthropic.com, past MemTree).
+    const key = SETTINGS_ENV_BLOCKERS.find((name) => Object.hasOwn(env, name));
+    return key ? `${key} is set` : undefined;
+}
+/** Every settings scope Claude Code may load for this session, parsed; unreadable ones skipped. */
+function settingsSources(input, readFile) {
+    const files = [
+        ...userSettingsFiles(input.env, input.homedir),
+        ...projectSettingsFiles(input.cwd),
+        ...managedSettingsFiles(input.platform, input.listDir ?? listJsonFiles),
+    ];
+    const out = [];
+    for (const file of files) {
+        const settings = parseJson(readFile(file));
+        if (settings !== undefined)
+            out.push({ name: file, settings });
+    }
+    for (const value of settingsArgs(input.claudeArgs)) {
+        const inline = value.trim().startsWith("{");
+        const settings = parseJson(inline ? value : readFile(path.resolve(input.cwd, value)));
+        if (settings !== undefined)
+            out.push({ name: "--settings", settings });
+    }
+    return out;
+}
+function userSettingsFiles(env, homedir) {
+    const dir = nonEmpty(env.CLAUDE_CONFIG_DIR)
+        ? env.CLAUDE_CONFIG_DIR
+        : path.join(homedir ?? os.homedir(), ".claude");
+    return [path.join(dir, "settings.json"), path.join(dir, "settings.local.json")];
+}
+/** `.claude/settings{,.local}.json` from the cwd up to its git root (or the filesystem root). */
+function projectSettingsFiles(cwd) {
+    const files = [];
+    let dir = path.resolve(cwd);
+    for (;;) {
+        files.push(path.join(dir, ".claude", "settings.json"), path.join(dir, ".claude", "settings.local.json"));
+        const parent = path.dirname(dir);
+        if (parent === dir || existsSync(path.join(dir, ".git")))
+            return files;
+        dir = parent;
+    }
+}
+function managedSettingsFiles(platform, listDir) {
+    const dir = platform === "darwin"
+        ? "/Library/Application Support/ClaudeCode"
+        : "/etc/claude-code";
+    const dropIns = path.join(dir, "managed-settings.d");
+    return [
+        path.join(dir, "managed-settings.json"),
+        ...listDir(dropIns).map((name) => path.join(dropIns, name)),
+        // macOS MDM profiles (managed preferences), machine-wide or for this user.
+        ...(platform === "darwin" ? [
+            `/Library/Managed Preferences/${MDM_DOMAIN}.plist`,
+            `/Library/Managed Preferences/${userName()}/${MDM_DOMAIN}.plist`,
+        ] : []),
+    ];
+}
+const MDM_DOMAIN = "com.anthropic.claudecode";
+function userName() {
+    try {
+        return os.userInfo().username;
+    }
+    catch {
+        return process.env.USER ?? "";
+    }
+}
+/** Every `--settings <value>` / `--settings=<value>` before a `--`. */
+export function settingsArgs(args) {
+    const out = [];
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--")
+            break;
+        if (arg === "--settings" && i + 1 < args.length)
+            out.push(args[++i]);
+        else if (arg.startsWith("--settings="))
+            out.push(arg.slice("--settings=".length));
+    }
+    return out;
+}
+function listJsonFiles(dir) {
+    try {
+        return readdirSync(dir).filter((name) => name.endsWith(".json")).sort();
+    }
+    catch {
+        return [];
+    }
+}
+/** A settings file's text; a property list (MDM) as JSON through plutil. */
+function readTextFile(file) {
+    try {
+        if (!file.endsWith(".plist"))
+            return readFileSync(file, "utf8");
+        if (!existsSync(file))
+            return null;
+        return execFileSync("/usr/bin/plutil", ["-convert", "json", "-o", "-", file], { encoding: "utf8", timeout: 2_000, stdio: ["ignore", "pipe", "ignore"] });
+    }
+    catch {
+        return null;
+    }
+}
+/** JSON as Claude Code reads settings: a leading byte-order mark is allowed. */
+function parseJson(text) {
+    if (text === null)
+        return undefined;
+    try {
+        return JSON.parse(text.replace(/^\uFEFF/, ""));
+    }
+    catch {
+        return undefined;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function nonEmpty(value) {
+    return typeof value === "string" ? value.trim() !== "" : value !== undefined && value !== null;
+}
+//# sourceMappingURL=https-proxy-eligibility.js.map

package/dist/https-proxy-eligibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-proxy-eligibility.js","sourceRoot":"","sources":["../src/https-proxy-eligibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,uFAAuF;AACvF,MAAM,UAAU,GAAG;IACjB,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW;CACnF,CAAC;AACF;;;;GAIG;AACH,MAAM,qBAAqB,GAAG;IAC5B,GAAG,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,qBAAqB,EAAE,iBAAiB;CAChF,CAAC;AAoBF,MAAM,UAAU,sBAAsB,CAAC,KAAuB;IAC5D,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE;QACzB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACpD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,uBAAuB,CAAC,GAAsB,EAAE,UAAoB;IAClF,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,KAAK,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,UAAU,KAAK,IAAI,CAAC;AAC7B,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,mEAAmE,MAAM,IAAI;QAClF,0BAA0B,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,KAAuB;IAC7C,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,6BAA6B,CAAC;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG;QAAE,OAAO,GAAG,GAAG,qDAAqD,CAAC;IAC5E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,GAAG,MAAM,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,QAAiB;IACxC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,kCAAkC,CAAC;IAC7F,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,oFAAoF;IACpF,mFAAmF;IACnF,MAAM,GAAG,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3E,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3C,CAAC;AAOD,mGAAmG;AACnG,SAAS,eAAe,CACtB,KAAuB,EAAE,QAAyC;IAElE,MAAM,KAAK,GAAG;QACZ,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC;QAC9C,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC;QAClC,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,aAAa,CAAC;KACxE,CAAC;IACF,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB,EAAE,OAAgB;IACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;QACzC,CAAC,CAAC,GAAG,CAAC,iBAAkB;QACxB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,iGAAiG;AACjG,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,EACnD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACvE,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAyB,EAAE,OAAkC;IAE7D,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ;QAC/B,CAAC,CAAC,yCAAyC;QAC3C,CAAC,CAAC,kBAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACrD,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC;QACvC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3D,2EAA2E;QAC3E,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC;YAC1B,gCAAgC,UAAU,QAAQ;YAClD,gCAAgC,QAAQ,EAAE,IAAI,UAAU,QAAQ;SACjE,CAAC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,SAAS,QAAQ;IACf,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,IAAuB;IAClD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM;QACxB,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAChE,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,YAAY,CAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,EAC1E,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,IAAmB;IACpC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACjG,CAAC"}

package/dist/https-proxy-mode.d.ts

@@ -0,0 +1,59 @@
+/**
+ * ccc's loopback server as Claude Code's HTTPS_PROXY (opt-in: CCC_HTTPS_PROXY_MODE=1 or
+ * the `httpsProxyMode` config key; https-proxy-session.ts decides and sets it up). Claude
+ * Code then keeps api.anthropic.com as its base URL, and with it Remote Control, while its
+ * model calls still reach ccc and MemTree.
+ *
+ * - A CONNECT without this session's proxy token gets 407: other local users and programs
+ *   can use neither the tunnel nor the interception.
+ * - CONNECT api.anthropic.com:443: TLS is terminated with the session CA's leaf
+ *   (mitm-ca.ts) and the decrypted stream goes to a separate, never-listening http.Server
+ *   that shares ccc's request handler. proxy.ts routes only POST /v1/messages and
+ *   /v1/messages/count_tokens from it to MemTree; every other path (Remote Control's
+ *   bridge, sessions, files, OAuth, telemetry) goes verbatim to api.anthropic.com, and
+ *   ccc's loopback-only routes (hooks, /memtree/*) are not reachable from it.
+ * - Every other CONNECT: a blind TCP tunnel. ccc never decrypts or logs those bytes.
+ * - An HTTP upgrade (WebSocket) on an intercepted stream: piped raw to api.anthropic.com
+ *   over a fresh TLS connection. The loopback server itself gets no upgrade listener, so
+ *   its requests behave exactly as without proxy mode.
+ *
+ * The optional trace (CCC_PROXY_TRACE) records CONNECT targets and, for intercepted
+ * requests, method, path (no query), status and User-Agent: no other header values, no
+ * bodies.
+ */
+import http from "node:http";
+import { type SessionCa } from "./mitm-ca.js";
+/** The user name in HTTPS_PROXY; the session token is its password. */
+export declare const PROXY_USER = "ccc";
+export interface HttpsProxyModeOptions {
+    /** The leaf for api.anthropic.com (its CA's key is already gone). */
+    ca: Pick<SessionCa, "leafCertPem" | "leafKeyPem">;
+    /** Per-session secret: Claude Code sends it on every CONNECT (HTTPS_PROXY's userinfo). */
+    proxyToken: string;
+    /** Debug trace (CONNECT targets, intercepted method/path/status, User-Agent). */
+    tracePath?: string;
+}
+/** Where intercepted traffic goes: api.anthropic.com, or a test's fake upstream. */
+export interface InterceptUpstream {
+    host: string;
+    port: number;
+    secure: boolean;
+}
+/**
+ * Raw sockets drain can't see (they keep server.close() waiting): `blind` destroys the
+ * blind tunnels (no ccc work in them; called when drain starts), `all` everything left
+ * (at the drain deadline).
+ */
+export interface CloseTunnels {
+    blind: () => void;
+    all: () => void;
+}
+/** The HTTPS_PROXY value Claude Code gets: the loopback port with the token. */
+export declare function proxyUrlFor(port: number, proxyToken: string): string;
+export declare function attachHttpsProxyMode(server: http.Server, onInterceptedRequest: http.RequestListener, upstream: InterceptUpstream, opts: HttpsProxyModeOptions): CloseTunnels;
+/** host:port of a CONNECT (IPv6 in brackets); null when malformed. */
+export declare function parseAuthority(authority: string): {
+    host: string;
+    port: number;
+} | null;
+//# sourceMappingURL=https-proxy-mode.d.ts.map

package/dist/https-proxy-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"https-proxy-mode.d.ts","sourceRoot":"","sources":["../src/https-proxy-mode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,OAAO,EAAkB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAE9D,uEAAuE;AACvE,eAAO,MAAM,UAAU,QAAQ,CAAC;AAEhC,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,GAAG,YAAY,CAAC,CAAC;IAClD,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,gFAAgF;AAChF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEpE;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,oBAAoB,EAAE,IAAI,CAAC,eAAe,EAC1C,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,qBAAqB,GAC1B,YAAY,CAmBd;AAwID,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMvF"}