clauderipple 0.3.0 → 0.3.1

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## 0.3.1 — 2026-09-24
+
+Fixes for three reports against 0.3.0.
+
+### Fixed
+
+- **Claude account rotation no longer breaks requests with a 400** (#15). With
+  `accountPool` on, the account's `anthropic-beta` header replaced the client's,
+  so fields Claude Code enables per request (`cache_control.scope`,
+  `context_management`, …) were refused with `Extra inputs are not permitted`.
+  A conversation pinned to an added account failed on every retry, because a
+  400 does not move it. The account now supplies identity only: its OAuth flags
+  are added to the client's, on the first attempt and on every retry.
+- **The Windows tray appears** (#8). It was started with `ELECTRON_RUN_AS_NODE`
+  set to an empty string, which macOS Electron treats as unset and Windows
+  Electron treats as set, so on Windows the tray ran as plain Node and exited
+  while the CLI reported "tray started". The variable is now removed.
+- **GLM-5.3 and GLM-5.3 Flash in the Z.AI preset** (#14). Z.AI serves no model
+  list, so the preset's list is the whole picker, and it stopped at GLM-5.2.
+
 ## 0.3.0 — 2026-09-23
 
 Everything on `main` since 0.2.0. The account rotation that issue #8 asked for

package/dist/cli/src/tray.js

@@ -24,6 +24,20 @@ export function electronPath() {
         return null;
     }
 }
+/**
+ * Our environment without ELECTRON_RUN_AS_NODE, so Electron starts as the tray rather than as a
+ * plain Node process. The variable has to be removed, not emptied: macOS Electron reads an empty
+ * value as unset, but Windows Electron only asks whether it exists, so an empty one ran the tray
+ * as Node — it exited at once and no icon ever appeared (measured 2026-09-24, Electron 38,
+ * Windows 11; issue #8).
+ */
+export function trayEnv(env = process.env) {
+    const out = { ...env };
+    for (const name of Object.keys(out))
+        if (name.toUpperCase() === "ELECTRON_RUN_AS_NODE")
+            delete out[name];
+    return out;
+}
 /**
  * Starts the tray and returns immediately. `detached` outlives this process, which is what a
  * command typed in a terminal wants; the supervisor uses the foreground form instead.
@@ -32,7 +46,8 @@ export function startTray(options = {}) {
     const current = runtime();
     if (current.packaged) {
         // The packaged app IS the tray: relaunching its own binary with no script is what opens it.
-        const child = spawn(current.node, [], { detached: true, stdio: "ignore" });
+        // Our own CLI runs under ELECTRON_RUN_AS_NODE here, and inheriting it would relaunch Node.
+        const child = spawn(current.node, [], { detached: true, stdio: "ignore", env: trayEnv() });
         child.unref();
         return { ok: true, message: "✓ tray started" };
     }
@@ -51,7 +66,7 @@ export function startTray(options = {}) {
         detached: options.detached ?? true,
         stdio: "ignore",
         // Electron would otherwise re-enter as a plain Node process, since that is how the CLI runs.
-        env: { ...process.env, ELECTRON_RUN_AS_NODE: "" },
+        env: trayEnv(),
     });
     if (options.detached ?? true)
         child.unref();

package/dist/router/src/presets.js

@@ -55,7 +55,13 @@ export const PRESETS = [
         vendorUrl: "https://z.ai/",
         anthropicBaseUrl: "https://api.z.ai/api/anthropic",
         authHeader: "authorization-bearer",
-        fallbackModels: [{ id: "glm-5.2", name: "GLM-5.2" }],
+        // No model list is served, so this list is the picker. glm-5.3-flash is named in
+        // https://docs.z.ai/guides/vlm/glm-5.3-flash; its FlashX sibling is not on the Coding Plan yet (issue #14).
+        fallbackModels: [
+            { id: "glm-5.3", name: "GLM-5.3" },
+            { id: "glm-5.3-flash", name: "GLM-5.3 Flash" },
+            { id: "glm-5.2", name: "GLM-5.2" },
+        ],
         // https://docs.z.ai/devpack/tool/others documents the endpoint but not an Anthropic effort/thinking contract.
         effortLevels: [],
         thinking: "none",

package/dist/router/src/proxy.js

@@ -97,6 +97,22 @@ export function withCredential(headers, credential, previous = {}) {
         out.push(k, v);
     return out;
 }
+/**
+ * A Claude account's headers for one turn, with the client's beta flags kept. The account supplies
+ * identity; the flags belong to the request, because they switch on body fields the client sent
+ * (`cache_control.scope`, `context_management`, …) and the API refuses those fields without their
+ * flag — `Extra inputs are not permitted` (issue #15). The account's own OAuth flags are added to
+ * the client's, never used in their place. Only for native Claude accounts: a compatible vendor's
+ * beta filtering happens elsewhere and must not be undone here.
+ */
+export function withClientBetas(credential, clientBeta) {
+    if (clientBeta === undefined)
+        return credential;
+    const name = Object.keys(credential).find((key) => key.toLowerCase() === "anthropic-beta") ?? "anthropic-beta";
+    const flags = (raw) => raw.split(",").map((flag) => flag.trim()).filter(Boolean);
+    const merged = [...new Set([...flags([].concat(clientBeta).join(",")), ...flags(credential[name] ?? "")])];
+    return { ...credential, [name]: merged.join(",") };
+}
 /**
  * A body decoded for reading, as text. Bytes that cannot be decoded are read as they arrived.
  *
@@ -706,7 +722,7 @@ export class Proxy {
                     host: cfg.upstream,
                     port: this.deps.upstreamPort ?? 443,
                     agent: this.deps.upstreamAgent ?? this.agentFor(route.provider, "https:"),
-                    extraHeaders: using.headers,
+                    extraHeaders: withClientBetas(using.headers, req.headers["anthropic-beta"]),
                     dropClientAuth: true,
                     dropHeaders: new Set(credentials.flatMap((credential) => Object.keys(credential.headers).map((name) => name.toLowerCase()))),
                     dropHeaderPrefixes: ["anthropic-client-", "x-stainless-"],
@@ -871,13 +887,13 @@ export class Proxy {
             // The model's own shape again: its credential pool is the provider's, but an auth convention
             // this model overrides has to be the one the retry actually sends.
             const provider = providerFor(owner, route.model);
-            const available = provider.type === "anthropic" && provider.accountPool
-                ? this.claudeAccounts.peekCredentials()
-                : this.credentialsOf(route.provider, provider);
+            const native = provider.type === "anthropic" && provider.accountPool;
+            const available = native ? this.claudeAccounts.peekCredentials() : this.credentialsOf(route.provider, provider);
             const rest = available.filter((c) => !tried.has(c.id));
             if (rest.length === 0)
                 return null;
-            return this.pool.pick(route.provider, rest, conversationKey(json));
+            const next = this.pool.pick(route.provider, rest, conversationKey(json));
+            return next && native ? { ...next, headers: withClientBetas(next.headers, req.headers["anthropic-beta"]) } : next;
         };
         // Destroying the upstream makes it emit ECONNRESET (measured, Node 24.15), which is
         // indistinguishable from the provider dropping us unless we remember that we did it. Without

package/dist/router/src/version.js

@@ -5,4 +5,4 @@
 // from the manifests. Until 0.1.1 the router and the CLI each carried their own literal, and both
 // still said "0.1.0" in the 0.1.1 release: after an update nobody could tell which router was
 // running, and the tray app had nothing to compare (2026-09-15, reported from a Windows install).
-export const VERSION = "0.3.0";
+export const VERSION = "0.3.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clauderipple",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Use GPT and 400+ other models inside the Claude Desktop app while staying signed in to your Claude subscription — no third-party gateway mode.",
   "license": "GPL-3.0-only",
   "workspaces": [