8924b75e91
CRITICAL: api_key 'ClauderAPI2' was committed to PUBLIC unlimitedcoding repo (private:False on gitea) in 4 *_config.json + 8 ps1 scripts. Anyone on the internet could read it via curl with no auth (HTTP 200 raw access). This commit: 1. Sanitizes 4 *_config.json: api_key → "YOUR_API_KEY" + _note pointing users to private config repo for production credentials. 2. Removes 'ClauderAPI2' literal from 8 ps1 installer/updater scripts (claude/codex/gemini/qwen × install/update). Each script now has a sanitized block at top that fetches api_key from private unlimitedcoding-config repo at runtime via Authorization token. 3. Switches 6 sh installer scripts from public REPO_RAW to PRIVATE unlimitedcoding-config base URL for *_config.json downloads. 4. Removes stale .patcher.config.cache.json (will regen on next install). Production configs MOVED to private repo (separate commit e839102 on unlimitedcoding-config/main). KNOWN UNCHANGED: - releases/v2.1.119/sea/cli-wrapper.cjs still has api_key (part of npm package distribution; clients need it locally; sensey serves same). - Read-only gitea token (cadffcb0...) remains in installers — needed for token-auth fetch from private repo. Scoped read-only. RECOMMEND: api_key rotation in proxy auth list because ClauderAPI2 was publicly exposed for an unknown period. Existing client installs would need re-install or env override. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Claude Code — Patched CLI
🌐 English | Русский | 中文 | Español
Patched Claude Code CLI for use with custom API endpoints. Latest: v2.1.112 (28 patches).
Install
Method A — npm registry (recommended)
Install the patched package directly from our npm registry. Updates automatically when new versions are released.
Linux / macOS:
npm config set @anthropic-ai:registry https://npm.sensey24.ru/
npm install -g @anthropic-ai/claude-code
Windows (PowerShell):
npm config set "@anthropic-ai:registry" "https://npm.sensey24.ru/"
npm install -g @anthropic-ai/claude-code
Method B — Automatic installer (backup)
Install with automatic dependency detection and setup. Downloads patched cli.js from releases.
Linux (Debian/Ubuntu/RHEL/Fedora):
curl -fsSL -H "Authorization: token cadffcb0a6a3be728ac1ff619bb40c86588f6837" \
https://git.sensey24.ru/aibot777/unlimitedcoding/raw/branch/master/claude/uclaude_install.sh \
-o /tmp/uclaude.sh && sudo bash /tmp/uclaude.sh
macOS:
curl -fsSL -H "Authorization: token cadffcb0a6a3be728ac1ff619bb40c86588f6837" \
https://git.sensey24.ru/aibot777/unlimitedcoding/raw/branch/master/claude/uclaude_install.sh \
-o /tmp/uclaude.sh && bash /tmp/uclaude.sh
Windows (PowerShell as Administrator):
$h=@{Authorization="token cadffcb0a6a3be728ac1ff619bb40c86588f6837"}
Set-ExecutionPolicy Bypass -Scope Process -Force
iwr "https://git.sensey24.ru/aibot777/unlimitedcoding/raw/branch/master/claude/uclaude_install.ps1" -OutFile "$env:TEMP\uclaude_install.ps1" -Headers $h
. "$env:TEMP\uclaude_install.ps1"
Windows (CMD as Administrator):
powershell -NoProfile -ExecutionPolicy Bypass -Command "$h=@{Authorization='token cadffcb0a6a3be728ac1ff619bb40c86588f6837'}; iwr 'https://git.sensey24.ru/aibot777/unlimitedcoding/raw/branch/master/claude/uclaude_install.ps1' -OutFile \"$env:TEMP\uclaude_install.ps1\" -Headers $h; & \"$env:TEMP\uclaude_install.ps1\""
Manual Install
git clone --depth 1 https://x-token:cadffcb0a6a3be728ac1ff619bb40c86588f6837@git.sensey24.ru/aibot777/unlimitedcoding.git
cd unlimitedcoding
| Platform | Command |
|---|---|
| Linux | sudo bash claude/uclaude_update.sh --force |
| macOS | bash claude/uclaude_update.sh --force |
| Windows CMD | claude\uclaude_update.bat --force |
| Windows PowerShell | powershell -ExecutionPolicy Bypass -File claude\uclaude_update.ps1 --force |
Update
| Platform | Command |
|---|---|
| Linux | cd ~/unlimitedcoding && sudo bash claude/uclaude_update.sh |
| macOS | cd ~/unlimitedcoding && bash claude/uclaude_update.sh |
| Windows | cd %USERPROFILE%\unlimitedcoding && claude\uclaude_update.bat |
Options
| Flag | Description |
|---|---|
--check |
Check for updates only |
--force |
Force reinstall |
--settings-only |
Only patch settings, don't replace cli.js |
What's Patched
- Custom API endpoint (base URL, auth token)
- Custom model picker (configurable model list)
- Auth/OAuth bypass for custom endpoints
- Telemetry disabled (Datadog, Segment)
- Permission prompts auto-accepted
- Root/sudo check removed
Auto-Install Chain
The updater automatically installs missing dependencies:
| Component | Linux | macOS | Windows |
|---|---|---|---|
| Git | apt/dnf/yum | brew | winget |
| Python 3 | apt/dnf/yum | brew | winget |
| Node.js v24.13+ | nodesource | brew | winget |
| Claude Code | npm | npm | npm |
Files
| File | Purpose |
|---|---|
uclaude_updater.py |
Main updater — version check, auto-install, cli.js replace, settings patch |
uclaude_update.sh |
Linux/macOS wrapper |
uclaude_update.bat |
Windows CMD wrapper |
uclaude_update.ps1 |
Windows PowerShell wrapper (auto-elevate, winget) |
uclaude_install.sh |
One-line installer (curl-friendly, full auto-install) |
patcher.config.example.json |
Example config template (real config fetched from private repo) |
releases/index.json |
Version index |
releases/v*/cli.js |
Patched cli.js per version |