ANTHROPIC_BASE_URL inherited by unrelated child processes breaks third-party CLI compatibility probes

[SiNaPsEr0x]

What happens

Setting ANTHROPIC_BASE_URL to point at pxpipe (as documented) makes every child process spawned from that shell inherit the variable — not just the intended AI client. In my case, claude-mem (a Claude Code memory plugin) spawns claude.exe as a subprocess to run a CLI-compatibility probe and internal SDK queries. Those subprocess calls got silently routed through pxpipe too.

The probe's request through the proxy failed in a way that made claude-mem misdiagnose it as "CLI too old — rejects flags every memory agent spawn requires", even though the exact same CLI binary worked perfectly when called directly (bypassing pxpipe). This cost significant time to trace back to pxpipe, since the error message pointed entirely at the wrong component.

Repro

1. ANTHROPIC_BASE_URL=http://127.0.0.1:47821 + npx pxpipe-proxy
2. Run any tool that spawns its own claude CLI subprocess for internal purposes (health checks, version probes, etc.) — it silently inherits the proxy.
3. If that tool's probe logic isn't tolerant of proxy-mediated responses, it fails and misattributes the cause.

Why this happens, concretely (claude-mem example)

claude-mem reads a CLAUDE_CODE_PATH setting from its own config file (on Windows: ~/.claude-mem/settings.json, a flat JSON key alongside its other env-style settings) that tells it which claude executable to spawn whenever it needs to run a CLI-compatibility probe or start a memory-agent SDK query. By default this points straight at the real CLI binary, e.g.:

{
  "CLAUDE_CODE_PATH": "C:\\Users\\you\\.local\\bin\\claude.exe"
}

claude-mem's worker process is a child of your main Claude Code session. Since ANTHROPIC_BASE_URL lives in that session's environment (required to route through pxpipe), the worker — and anything it spawns, including the claude.exe probe above — inherits it silently. claude-mem never asked for this and has no way to know its internal CLI spawn is being proxied; it just sees the probe fail and reports a misleading "CLI too old" diagnosis.

The fix is repointing that one CLAUDE_CODE_PATH value at a wrapper instead of the real binary:

{
  "CLAUDE_CODE_PATH": "C:\\path\\to\\claude-noproxy.cmd"
}

The wrapper (full script below) does exactly one thing: clears ANTHROPIC_BASE_URL before exec'ing the real CLI, so claude-mem's internal spawns go straight to api.anthropic.com, while your main Claude Code session — started separately, with the proxy env set only in that process — keeps going through pxpipe as intended. After changing the setting, restart claude-mem's worker process (kill it, let it respawn) for the new path to take effect.

This is almost certainly not specific to claude-mem — any plugin/tool that spawns its own claude CLI subprocess for internal control-plane purposes will hit the same silent-inheritance issue, just with whatever error message that particular tool happens to surface when its request is unexpectedly proxied.

Workaround scripts (Windows / PowerShell)

claude-noproxy.cmd — pointed to by claude-mem's CLAUDE_CODE_PATH setting, so its internal probes/spawns bypass pxpipe entirely

@echo off
rem Wrapper for third-party tools that spawn claude.exe internally (e.g. claude-mem):
rem strips ANTHROPIC_BASE_URL so those calls go straight to api.anthropic.com,
rem instead of silently inheriting the pxpipe proxy from the parent shell.
set ANTHROPIC_BASE_URL=
"C:\path\to\real\claude.exe" %*

claude-pxpipe.ps1 — starts pxpipe-proxy, launches Claude Code with the proxy env scoped to that process only, and kills the whole proxy process tree (via a Windows Job Object, KILL_ON_JOB_CLOSE) whenever the session ends, however it ends

[CmdletBinding()]
param(
    [string]$ProxyHost      = "127.0.0.1",
    [int]   $ProxyPort      = 47821,
    [int]   $TimeoutSeconds = 60,
    [string]$PxpipeModels   = ""
)

$ErrorActionPreference = "Stop"
$proxyUrl = "http://{0}:{1}" -f $ProxyHost, $ProxyPort

# Job Object with KILL_ON_JOB_CLOSE: guarantees the whole proxy process tree
# (cmd -> npx -> node) dies when this script/window terminates, in ANY way
# (normal exit, Ctrl+C, closing the window, crash) - not just the happy path.
$jobSource = @"
using System;
using System.Runtime.InteropServices;
public static class KillOnCloseJob {
    [DllImport("kernel32.dll")] static extern IntPtr CreateJobObject(IntPtr a, string n);
    [DllImport("kernel32.dll")] static extern bool SetInformationJobObject(IntPtr h, int t, IntPtr p, uint l);
    [DllImport("kernel32.dll")] public static extern bool AssignProcessToJobObject(IntPtr h, IntPtr p);
    [StructLayout(LayoutKind.Sequential)] struct BASIC { public long a,b; public uint LimitFlags; public UIntPtr c,d; public uint e; public UIntPtr f; public uint g,h2; }
    [StructLayout(LayoutKind.Sequential)] struct IOC { public ulong a,b,c,d,e,f; }
    [StructLayout(LayoutKind.Sequential)] struct EXT { public BASIC Basic; public IOC Io; public UIntPtr a,b,c,d; }
    const uint KILL_ON_CLOSE = 0x2000;
    public static IntPtr Create() {
        IntPtr job = CreateJobObject(IntPtr.Zero, null);
        var info = new EXT(); info.Basic.LimitFlags = KILL_ON_CLOSE;
        int len = Marshal.SizeOf(typeof(EXT));
        IntPtr p = Marshal.AllocHGlobal(len);
        Marshal.StructureToPtr(info, p, false);
        SetInformationJobObject(job, 9, p, (uint)len);
        Marshal.FreeHGlobal(p);
        return job;
    }
}
"@
Add-Type -TypeDefinition $jobSource -Language CSharp
$jobHandle = [KillOnCloseJob]::Create()

function Test-Port {
    param([string]$TargetHost, [int]$Port, [int]$TimeoutMs = 300)
    try {
        $c = New-Object System.Net.Sockets.TcpClient
        $a = $c.BeginConnect($TargetHost, $Port, $null, $null)
        $ok = $a.AsyncWaitHandle.WaitOne($TimeoutMs, $false) -and $c.Connected
        $c.Close(); return [bool]$ok
    } catch { return $false }
}

if (-not (Test-Port -TargetHost $ProxyHost -Port $ProxyPort)) {
    $cmdLine = "/c npx -y pxpipe-proxy"           # -y skips the first-run install prompt
    if ($PxpipeModels) { $cmdLine = "/c set PXPIPE_MODELS=$PxpipeModels&& npx -y pxpipe-proxy" }
    $proxyProc = Start-Process -FilePath "cmd.exe" -ArgumentList $cmdLine -WindowStyle Minimized -PassThru
    [KillOnCloseJob]::AssignProcessToJobObject($jobHandle, $proxyProc.Handle) | Out-Null

    $elapsed = 0
    while (-not (Test-Port -TargetHost $ProxyHost -Port $ProxyPort)) {
        Start-Sleep -Milliseconds 500; $elapsed += 500
        if ($elapsed -ge $TimeoutSeconds * 1000) { & taskkill /PID $proxyProc.Id /T /F | Out-Null; exit 1 }
    }
}

try {
    $env:ANTHROPIC_BASE_URL = $proxyUrl   # scoped to this process only
    & claude
} finally {
    Remove-Item Env:\ANTHROPIC_BASE_URL -ErrorAction SilentlyContinue
    if ($proxyProc -and -not $proxyProc.HasExited) { & taskkill /PID $proxyProc.Id /T /F | Out-Null }
    # if the block above doesn't run in time (window force-closed), the Job
    # Object still kills everything as soon as this process exits.
}

The key insight for the fix suggestions below: the wrapper only had to exist because there's no way to tell pxpipe "don't touch this particular subprocess's traffic" short of physically stripping the env var before it spawns.

Suggestions

1. Docs: call out explicitly in the README that ANTHROPIC_BASE_URL is inherited by all child processes of the session, including helper/plugin subprocesses that spawn their own claude CLI — this is easy to miss and hard to trace when it bites.
2. Optional bypass signal (nice-to-have, not trivial): some way for a subprocess to opt out — e.g. honoring a PXPIPE_BYPASS=1 env var or a request header, so tools that spawn their own CLI instances for internal control-plane calls can explicitly skip the proxy without a full wrapper script.
3. Persist dashboard model selection across restarts: the opt-in model chips on the dashboard (for Sol, Opus 4.7/4.8, GPT 5.5, Grok, etc.) appear to live in memory only — every time the proxy is restarted (e.g. via npx pxpipe-proxy in a fresh session), the selection resets to default and has to be re-toggled by hand. Persisting the last-selected set to disk (e.g. alongside ~/.pxpipe/events.jsonl) and reloading it on startup would remove that friction for anyone who enables more than the default model.

Happy to test a fix if useful. Thanks for the tool — the compression numbers on the main session are genuinely great once this was sorted out.

[teamchong]

Thanks for the detailed trace — the claude-mem misdiagnosis chain ("CLI too old") makes this expensive to debug, and the writeup will save others real time.

Two angles on this:

1. Scoping (docs fix, on us): exporting ANTHROPIC_BASE_URL shell-wide is the documented quickstart, and that's the footgun. The README will be updated to recommend scoping the variable to the one process you intend to proxy — e.g. a wrapper alias (alias claudep='ANTHROPIC_BASE_URL=http://127.0.0.1:47821 claude') or Claude Code's per-project settings.json env block — instead of a global export, so unrelated child processes (probes, plugins, health checks) never see it.

2. Hardening (pxpipe fix): a version/compat probe shouldn't fail just because it transits pxpipe. If you can still reproduce, running the proxy with PXPIPE_DEBUG_CAPTURE_4XX=1 and sharing the captured request/response for the failing probe would tell us whether pxpipe mangled it or just added latency the probe couldn't tolerate — non-chat traffic should pass through untouched, and if it doesn't, that's a bug we'll fix.

Leaving this open to track both the docs change and the passthrough audit.

[SiNaPsEr0x]

Thanks for the detailed trace — the claude-mem misdiagnosis chain ("CLI too old") makes this expensive to debug, and the writeup will save others real time.

Two angles on this:

1. Scoping (docs fix, on us): exporting ANTHROPIC_BASE_URL shell-wide is the documented quickstart, and that's the footgun. The README will be updated to recommend scoping the variable to the one process you intend to proxy — e.g. a wrapper alias (alias claudep='ANTHROPIC_BASE_URL=http://127.0.0.1:47821 claude') or Claude Code's per-project settings.json env block — instead of a global export, so unrelated child processes (probes, plugins, health checks) never see it.
2. Hardening (pxpipe fix): a version/compat probe shouldn't fail just because it transits pxpipe. If you can still reproduce, running the proxy with PXPIPE_DEBUG_CAPTURE_4XX=1 and sharing the captured request/response for the failing probe would tell us whether pxpipe mangled it or just added latency the probe couldn't tolerate — non-chat traffic should pass through untouched, and if it doesn't, that's a bug we'll fix.

Leaving this open to track both the docs change and the passthrough audit.

{
  "event_1": {
    "ts": "2026-07-18T07:27:59.869Z",
    "status": 429,
    "model": "claude-sonnet-5",
    "duration_ms": 563,
    "error_body": {"type":"error","error":{"type":"rate_limit_error","message":"Error"},"request_id":"req_011Cd98NrRhWFzuFpm6JJ9Ro"},
    "decoded_request_body": {"model":"claude-sonnet-5","max_tokens":1,"messages":[{"role":"user","content":"quota"}],"metadata":{"user_id":"<redacted>"}},
    "reason": "below_min_chars (0 < 2000)",
    "compressed": false
  },
  "event_2": {
    "ts": "2026-07-18T07:31:23.857Z",
    "status": 429,
    "model": "claude-sonnet-5",
    "duration_ms": 458,
    "error_body": {"type":"error","error":{"type":"rate_limit_error","message":"Error"},"request_id":"req_011Cd98dtxffYugAvjMemDTH"},
    "reason": "below_min_chars (0 < 2000)",
    "compressed": false,
    "note": "identico al probe 'quota' dell'evento 1, stesso pattern a ogni restart del proxy"
  }
}

[SiNaPsEr0x]

Reproduced 6 times across two proxy sessions today (same machine, same repro steps: PXPIPE_DEBUG_CAPTURE_4XX=1, fresh npx pxpipe-proxy@latest start, then launch Claude Code pointed at the proxy).

Decoded request body (identical shape on every occurrence, gzip+base64 from req_body_sample_b64 in events.jsonl):

{"model":"claude-sonnet-5","max_tokens":1,"messages":[{"role":"user","content":"quota"}],"metadata":{"user_id":"<redacted>"}}

Response returned to the client on every occurrence:

{"type":"error","error":{"type":"rate_limit_error","message":"Error"},"request_id":"<see below>"}

All 6 occurrences (ts / request_id / req_body_sha8 — all logged reason: "below_min_chars (0 < 2000)", compressed: false, i.e. passthrough, no imaging applied):

ts (UTC)	request_id	req_body_sha8
2026-07-18T07:27:59.869Z	req_011Cd98NrRhWFzuFpm6JJ9Ro	8c038982
2026-07-18T07:31:23.857Z	req_011Cd98dtxffYugAvjMemDTH	328a1dc1
2026-07-18T07:56:09.001Z	req_011Cd9AXPDKfrEr8cV3zsAfq	23aef011
2026-07-18T07:56:25.627Z	req_011Cd9AYc2HSQevWKwQByMgM	d578d650
2026-07-18T07:56:25.720Z	req_011Cd9AYcXo4StSVytpFQV4Y	a05ab5e8
2026-07-18T07:56:29.287Z	req_011Cd9AYs7szpkcddHv96xaq	73d5d796

Note the pair at 07:56:25.627Z / 07:56:25.720Z — 93ms apart, both failing identically. Looks like an automatic client-side retry that doesn't help because the failure isn't transient on pxpipe's side.

Since the request is confirmed passthrough (below_min_chars, compressed: false), the malformed/synthetic-looking "message": "Error" body isn't coming from a compression bug — it looks like it's generated by pxpipe itself rather than relayed from api.anthropic.com, given real Anthropic 429 bodies are normally more descriptive.

Bonus, same sessions: two more previously-unseen unknown static tags beyond total_tokens:

[pxpipe warn] unknown tag(s) in static slab: severity, category

Consistently attached to small recurring requests (~90 input tokens, 4 images, likely security-guidance plugin output). Happy to send the full events.jsonl slice if useful.

---

Update — same session, a related failure at much larger scale (real upstream 429, not the quota probe):

Captured via the same PXPIPE_DEBUG_CAPTURE_4XX=1 flow, two 4xx bodies ~2 minutes apart on a long-running conversation (claude-opus-4-8, 35 images, baseline_tokens: ~790,000 uncompressed-equivalent).

This one is a real Anthropic rate limit, not a synthetic error:

{"type":"error","error":{"type":"rate_limit_error","message":"This request would exceed your account's rate limit. Please try again later."},"request_id":"req_011Cd9ECXByuVjyrdLAmuEzB"}

(second occurrence 2 min later, same message, request_id req_011Cd9EN1b2q16a3m9SsFW6v)

Makes sense given the size — but here's the part that ties back to caching: I diffed the two captured request bodies (~2 min apart) and they're 99.99% identical — only 810 bytes different out of ~6MB. Confirmed via matching hashes:

cache_prefix_sha8:  e2bf51fc → e2bf51fc   (identical, 5.3MB prefix)
history_image_sha8: 3b0c39f4 → 3b0c39f4   (identical)

Yet in the three successful (200) requests immediately preceding these two 429s (same session, ~30s apart), cache_read_tokens stayed flat around 25-32K while cache_create_tokens climbed 349K → 359K → 361K each call. A 5.3MB prefix that's byte-identical across calls but apparently not being read from cache in proportion to its size looks like the same underlying issue as a smaller repro I can share separately, just at 10x scale — and plausibly why the account then hits a real rate limit shortly after (repeatedly re-writing ~350K tokens of "cache" instead of reading ~5MB back cheaply adds up fast).

Also confirms total_tokens is genuinely dynamic, not a static false-positive: diffing the two bodies shows the <total_tokens>...tokens left</total_tokens> reminder actually changed value between the two captures — and the old value wasn't replaced, a second <total_tokens> tag with a new value got appended right after the first one instead of replacing it. Worth checking whether that reminder is meant to be appended cumulatively, or if something in the transform pipeline is duplicating it — either way it supports moving total_tokens to DYNAMIC_BLOCK_TAGS.

Full request bodies are large (~6MB, contain project-specific paths/code) so I'm not attaching them here, but I have both .json.gz files (req_body_sha8: e6ec0924 and 6207e723) if useful for a closer look — req_body_sample_path in events.jsonl (under .pxpipe/4xx-bodies/) confirms where these get written locally.

log of pxpipe:

npm notice run npx
npm notice run pxpipe
[pxpipe] listening on http://127.0.0.1:47821
[pxpipe] anthropic upstream → https://api.anthropic.com
[pxpipe] openai upstream → https://api.openai.com
[pxpipe] tracking events → C:\Users\rocco\.pxpipe\events.jsonl
[pxpipe] dashboard → http://127.0.0.1:47821/
[2026-07-18T11:47:42.980Z] HEAD / → 404 (177ms)
[2026-07-18T11:47:43.690Z] POST /v1/messages → 429 (417ms) unsupported_model
[pxpipe 429] upstream body: {"type":"error","error":{"type":"rate_limit_error","message":"Error"},"request_id":"req_011Cd9UBcs9avBN3TvUC5NNf"}
[2026-07-18T11:49:37.616Z] POST /v1/messages → 200 (1744ms) unsupported_model tokens=90+9 cache_read=36088
[2026-07-18T11:49:38.631Z] POST /v1/messages → 200 (30490ms) unsupported_model tokens=2+2059 cache_read=0
[2026-07-18T11:49:49.548Z] POST /v1/messages → 200 (1461ms) unsupported_model tokens=90+9 cache_read=36659
[2026-07-18T11:50:15.694Z] POST /v1/messages → 200 (22007ms) unsupported_model tokens=2+1733 cache_read=92101
[2026-07-18T11:50:16.700Z] POST /v1/messages → 200 (3289ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=0
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:50:23.518Z] POST /v1/messages → 200 (2790ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=7747
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:50:41.335Z] POST /v1/messages → 200 (2838ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=8002
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:50:41.403Z] POST /v1/messages → 200 (12635ms) compressed 177293ch → 7img/668870B tokens=2+858 cache_read=0
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:50:48.817Z] POST /v1/messages → 200 (2468ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=8365
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:51:41.150Z] POST /v1/messages → 200 (3186ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=8670
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:51:42.851Z] POST /v1/messages → 200 (49565ms) compressed 177293ch → 7img/668870B tokens=2+4095 cache_read=25695
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:52:54.310Z] POST /v1/messages → 200 (2115ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=9279
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:52:57.486Z] POST /v1/messages → 200 (66217ms) compressed 177293ch → 7img/668870B tokens=2+5002 cache_read=25695
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:53:00.557Z] POST /v1/messages → 200 (1919ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=10295
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:53:38.439Z] POST /v1/messages → 200 (3847ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=10912
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:53:38.810Z] POST /v1/messages → 200 (33722ms) compressed 177293ch → 9img/848698B tokens=2+2098 cache_read=25695
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:53:49.891Z] POST /v1/messages → 200 (6391ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=11312
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:54:53.319Z] POST /v1/messages → 200 (55964ms) compressed 177293ch → 9img/848698B tokens=2+3768 cache_read=25695
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:54:57.532Z] POST /v1/messages → 200 (9197ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=11694
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:55:06.114Z] POST /v1/messages → 200 (2731ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=12264
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:55:52.026Z] POST /v1/messages → 200 (2501ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=12658
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:55:55.302Z] POST /v1/messages → 200 (40993ms) compressed 177293ch → 9img/848698B tokens=2+2641 cache_read=25695
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:56:06.878Z] POST /v1/messages → 200 (2552ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=13410
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:56:43.546Z] POST /v1/messages → 200 (2251ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=13833
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:56:46.118Z] POST /v1/messages → 200 (33539ms) compressed 177293ch → 9img/848698B tokens=2+2236 cache_read=25695
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:56:54.908Z] POST /v1/messages → 200 (2205ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=14419
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:57:45.451Z] POST /v1/messages → 200 (2189ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=14828
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:57:47.353Z] POST /v1/messages → 200 (43396ms) compressed 177293ch → 10img/874440B (tr+1) tokens=2+2721 cache_read=25695
[pxpipe warn] unknown tag(s) in static slab: total_tokens  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts
[2026-07-18T11:57:55.858Z] POST /v1/messages → 200 (2506ms) compressed 107692ch → 4img/406367B tokens=90+9 cache_read=15322
[pxpipe warn] unknown tag(s) in static slab: severity, category  — may need to add to DYNAMIC_BLOCK_TAGS (per-turn) or KNOWN_STATIC_TAGS (static) in src/core/transform.ts

[teamchong]

Opened #122 for this

I don't have Windows to test this, can you verify if this work for you? If you'd rather take this in a different direction, feel free to supersede the PR.

[SiNaPsEr0x]

I send a PR