@askalf/dario 4.8.39 → 4.8.40

package/dist/proxy.d.ts

@@ -193,6 +193,17 @@ interface ProxyOptions {
      * Sourced from `--system-prompt=<value>` or DARIO_SYSTEM_PROMPT.
      */
     systemPrompt?: string;
+    /**
+     * Upstream auth override: forward to api.anthropic.com using `x-api-key:
+     * <this>` (the per-token API pool) instead of the Pro/Max OAuth bearer.
+     * When set, OAuth/getAccessToken and the account pool are bypassed entirely
+     * — dario becomes a thin per-token Anthropic proxy. Default (unset) keeps
+     * the subscription-OAuth behavior. Used by the self-hosted compat workflow
+     * so it can route the suite THROUGH dario without tripping the subscription
+     * pool's ~3/min cap. Sourced from ANTHROPIC_UPSTREAM_API_KEY (env-only — never
+     * a CLI flag, so the key never lands in `ps`/argv).
+     */
+    upstreamApiKey?: string;
     /**
      * Overage-guard — halt the proxy on the first response carrying
      * `representative-claim: overage`. Subscribers should never see a
@@ -253,5 +264,11 @@ export declare function authenticateRequest(headers: IncomingMessage['headers'],
  * user's real credential for some other provider. Pure over inputs (dario#97).
  */
 export declare function describeAuthReject(headers: IncomingMessage['headers']): string;
+/**
+ * Build the upstream auth header for the request to api.anthropic.com.
+ * `upstreamApiKey` set → per-token API pool (`x-api-key`); otherwise the
+ * Pro/Max OAuth bearer. Pure + exported for unit testing.
+ */
+export declare function upstreamAuthHeaders(upstreamApiKey: string, accessToken: string): Record<string, string>;
 export declare function startProxy(opts?: ProxyOptions): Promise<void>;
 export {};

package/dist/proxy.js

@@ -448,11 +448,27 @@ function enrich429(body, headers) {
         return body;
     }
 }
+/**
+ * Build the upstream auth header for the request to api.anthropic.com.
+ * `upstreamApiKey` set → per-token API pool (`x-api-key`); otherwise the
+ * Pro/Max OAuth bearer. Pure + exported for unit testing.
+ */
+export function upstreamAuthHeaders(upstreamApiKey, accessToken) {
+    return upstreamApiKey
+        ? { 'x-api-key': upstreamApiKey }
+        : { 'Authorization': `Bearer ${accessToken}` };
+}
 export async function startProxy(opts = {}) {
     const port = opts.port ?? DEFAULT_PORT;
     const host = opts.host ?? process.env.DARIO_HOST ?? DEFAULT_HOST;
     const verbose = opts.verbose ?? false;
     const passthrough = opts.passthrough ?? false;
+    // Upstream auth override: a per-token API key forwards to the standard API
+    // pool via `x-api-key`, bypassing OAuth/Max + the account pool entirely.
+    // Env-only so the key never lands in `ps`/argv. Default (empty) = OAuth/Max.
+    const upstreamApiKey = (opts.upstreamApiKey ?? process.env.ANTHROPIC_UPSTREAM_API_KEY ?? '').trim();
+    if (upstreamApiKey)
+        console.error('[dario] upstream auth: per-token API key (x-api-key) — OAuth/Max + account pool bypassed');
     // DNS result order — prefer IPv4 for the Anthropic upstream by default.
     // api.anthropic.com publishes both A and AAAA records. In a container with
     // no IPv6 egress (e.g. a default Docker bridge network), Node's `verbatim`
@@ -1218,7 +1234,13 @@ export async function startProxy(opts = {}) {
             // requests, not within a single 429 retry.
             let poolAccount = null;
             let accessToken;
-            if (pool) {
+            if (upstreamApiKey) {
+                // Per-token API-key mode: no OAuth, no pool. `poolAccount` stays null,
+                // so every pool-failover retry below is skipped; the x-api-key is set
+                // on the outbound headers instead of an Authorization bearer.
+                accessToken = '';
+            }
+            else if (pool) {
                 poolAccount = pool.select();
                 if (!poolAccount) {
                     res.writeHead(503, JSON_HEADERS);
@@ -1612,7 +1634,7 @@ export async function startProxy(opts = {}) {
             }
             const headers = {
                 ...staticHeaders,
-                'Authorization': `Bearer ${accessToken}`,
+                ...upstreamAuthHeaders(upstreamApiKey, accessToken),
                 'x-claude-code-session-id': outboundSessionId,
                 'anthropic-version': passthrough ? (req.headers['anthropic-version'] || '2023-06-01') : '2023-06-01',
                 'anthropic-beta': beta,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askalf/dario",
-  "version": "4.8.39",
+  "version": "4.8.40",
   "description": "Use your Claude Pro/Max subscription in any tool — Cursor, Cline, Aider, the Agent SDK, your scripts — at subscription pricing, not per-token API bills. One local Anthropic + OpenAI-compatible endpoint.",
   "type": "module",
   "bin": {