v0.2.0 β Daemon mode for per-call network checking
π New: Daemon Mode (per-call proxy)
Run verify-networking --daemon to start an HTTP CONNECT proxy that intercepts every API request to api.anthropic.com and api.openai.com. Before each connection is proxied, the full network check runs β and if a risk is detected, the connection is held until you confirm.
Quick start
# Terminal 1: start the daemon
verify-networking --daemon
# Terminal 2: configure Claude to use it
export https_proxy=http://127.0.0.1:8443
claudeWhen risk is detected:
β οΈ Network risk detected β connection from 127.0.0.1:54321 to api.anthropic.com is held
[C]ontinue [R]etry [B]lock session [Q]uit βΊ
How it works
- Listens on
127.0.0.1:8443(configurable with--port) - Monitors:
api.anthropic.com:443,api.openai.com:443 - All green β proxy transparently
- Risk detected β hold connection β prompt via
/dev/tty Blocks the host for the entire session (persists across connections)- Non-monitored hosts are proxied without checks
Full changelog
- New:
src/proxy.rsβ HTTP CONNECT proxy daemon (277 lines) - New:
--daemon/-dflag inmain.rswith--port/-poption - New:
Choice::BlockSessionvariant for session-level blocking - New:
ui::overall_status()made public for reuse by proxy module - New:
install.shadds commented-out daemon proxy env vars to shell RC - Docs: README updated with daemon mode overview, setup, and examples
- Docs: CLAUDE.md updated with daemon architecture documentation
- Internal: Clean build with no warnings, clippy-clean
What's Changed
- docs: sync README and CLAUDE.md with PRs #11β#13 by @Laotree in #18
- feat: show mtr/traceroute hop path on Fail or Warn by @Laotree in #19
- feat: spinner + path-inconsistency warning during traceroute by @Laotree in #20
- feat: enrich mtr/traceroute output with nali IP geolocation by @Laotree in #21
- docs: document nali optional dependency and updated trace output by @Laotree in #22
- feat: add --daemon mode for per-call TCP CONNECT proxy network checking by @Laotree in #23
Full Changelog: v0.1.0...v0.2.0