verify-networking-plugin CLAUDE.md

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Commands

cargo build --release          # build the binary
cargo clippy                   # lint
./install.sh                   # build + install binary + add shell wrapper to RC file

To test the binary directly:

./target/release/verify-networking; echo "exit: $?"

# Test daemon mode (starts proxy, Ctrl+C to stop)
./target/release/verify-networking --daemon

# Test daemon mode with custom port
./target/release/verify-networking --daemon --port 9999

Makefile targets

make          # debug build
make release  # release build
make test     # run tests
make lint     # clippy
make fmt      # format source
make clean    # remove build artifacts
make install  # build + install + patch shell RC
make hooks    # install git pre-push hook

Architecture

The plugin is a Rust binary installed at ~/.claude/plugins/verify-networking. install.sh adds shell wrapper functions to the user's RC file that intercept every claude (and codex, if installed) invocation before the process starts:

claude() {
    local checker="$HOME/.claude/plugins/verify-networking"
    [[ -x "$checker" ]] && { "$checker" claude || return 1; }
    command claude "$@"
}

codex() {
    local checker="$HOME/.claude/plugins/verify-networking"
    [[ -x "$checker" ]] && { "$checker" codex || return 1; }
    command codex "$@"
}

The tool name (claude / codex) is passed as the first argument so the binary knows which API endpoint to probe. This ensures the network check runs before either tool makes any outbound requests.

Checks (src/checks.rs): All three run concurrently via tokio::join!. Targets differ by tool:

Check	Claude target	Codex target
DNS	api.anthropic.com	api.openai.com
Exit IP	ipinfo.io/json — blocks CN/HK/KP/CU/IR/SY/RU/BY	same
Connectivity	3 × TCP to api.anthropic.com:443, 5 s timeout	3 × TCP to api.openai.com:443, 5 s timeout