github/claude-code-best
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: gate preconnectAnthropicApi behind isEssentialTrafficOnly()

Browse Source 
CC_Pure:  was the last un-gated outbound
connection — it unconditionally sent a TCP+TLS handshake to
api.anthropic.com on every startup. Now checked against the central
privacy gate (CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1) and
skipped when enabled.

Verified via strace: zero remote connections after fix.
This commit is contained in:
James Feng 2026-06-02 00:14:22 +08:00
parent 144c4f551c
commit 6ddad59d2f
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/utils/apiPreconnect.ts
View File

@ -25,6 +25,7 @@
import { getOauthConfig } from '../constants/oauth.js' import { getOauthConfig } from '../constants/oauth.js'
import { isEnvTruthy } from './envUtils.js' import { isEnvTruthy } from './envUtils.js'
import { isEssentialTrafficOnly } from './privacyLevel.js'
let fired = false let fired = false
@ -32,6 +33,9 @@ export function preconnectAnthropicApi(): void {
if (fired) return if (fired) return
fired = true fired = true
// CC_Pure: skip preconnect when non-essential traffic is disabled
if (isEssentialTrafficOnly()) return
// Skip if using a cloud provider — different endpoint + auth // Skip if using a cloud provider — different endpoint + auth
if ( if (
isEnvTruthy(process.env.CLAUDE_CODE_USE_BEDROCK) || isEnvTruthy(process.env.CLAUDE_CODE_USE_BEDROCK) ||