Skip to content

v0.2.0 β€” Daemon mode for per-call network checking

Choose a tag to compare

@Laotree Laotree released this 06 Jul 02:37

🌐 New: Daemon Mode (per-call proxy)

Run verify-networking --daemon to start an HTTP CONNECT proxy that intercepts every API request to api.anthropic.com and api.openai.com. Before each connection is proxied, the full network check runs β€” and if a risk is detected, the connection is held until you confirm.

Quick start

# Terminal 1: start the daemon
verify-networking --daemon

# Terminal 2: configure Claude to use it
export https_proxy=http://127.0.0.1:8443
claude

When risk is detected:

  ⚠️  Network risk detected β€” connection from 127.0.0.1:54321 to api.anthropic.com is held

  [C]ontinue  [R]etry  [B]lock session  [Q]uit β€Ί

How it works

  • Listens on 127.0.0.1:8443 (configurable with --port)
  • Monitors: api.anthropic.com:443, api.openai.com:443
  • All green β†’ proxy transparently
  • Risk detected β†’ hold connection β†’ prompt via /dev/tty
  • B locks the host for the entire session (persists across connections)
  • Non-monitored hosts are proxied without checks

Full changelog

  • New: src/proxy.rs β€” HTTP CONNECT proxy daemon (277 lines)
  • New: --daemon / -d flag in main.rs with --port / -p option
  • New: Choice::BlockSession variant for session-level blocking
  • New: ui::overall_status() made public for reuse by proxy module
  • New: install.sh adds commented-out daemon proxy env vars to shell RC
  • Docs: README updated with daemon mode overview, setup, and examples
  • Docs: CLAUDE.md updated with daemon architecture documentation
  • Internal: Clean build with no warnings, clippy-clean

What's Changed

  • docs: sync README and CLAUDE.md with PRs #11–#13 by @Laotree in #18
  • feat: show mtr/traceroute hop path on Fail or Warn by @Laotree in #19
  • feat: spinner + path-inconsistency warning during traceroute by @Laotree in #20
  • feat: enrich mtr/traceroute output with nali IP geolocation by @Laotree in #21
  • docs: document nali optional dependency and updated trace output by @Laotree in #22
  • feat: add --daemon mode for per-call TCP CONNECT proxy network checking by @Laotree in #23

Full Changelog: v0.1.0...v0.2.0