@georgedong32/ccs 7.66.0

package/dist/cliproxy/auth-token-manager.d.ts

@@ -0,0 +1,82 @@
+/**
+ * Auth Token Manager for CLIProxyAPI
+ *
+ * Manages API key and management secret resolution with inheritance:
+ * - Per-variant override → Global config → Default constants
+ *
+ * Provides secure token generation for user customization.
+ */
+/**
+ * Generate a cryptographically secure token.
+ * Uses CSPRNG (crypto.randomBytes) for proper entropy.
+ *
+ * @param length - Number of random bytes (default: 32 = 256-bit entropy)
+ * @returns Base64URL-encoded token (43 chars for 32 bytes)
+ */
+export declare function generateSecureToken(length?: number): string;
+/**
+ * Mask a token for display.
+ * Shows first 4 and last 4 chars: "ccs_...4f2a"
+ * Used by CLI commands and API routes.
+ */
+export declare function maskToken(token: string): string;
+/**
+ * Get effective API key with inheritance chain.
+ * Priority: variant auth → global cliproxy.auth → default constant
+ *
+ * @param variantName - Optional variant name for per-variant override
+ * @returns Resolved API key
+ */
+export declare function getEffectiveApiKey(variantName?: string): string;
+/**
+ * Get effective management secret.
+ * Priority: global cliproxy.auth → default constant
+ *
+ * Note: Management secret is global-only (no per-variant override)
+ * as it controls the Control Panel access for the entire CLIProxy instance.
+ *
+ * @returns Resolved management secret
+ */
+export declare function getEffectiveManagementSecret(): string;
+/**
+ * Set global API key.
+ * Updates cliproxy.auth.api_key in config.yaml.
+ *
+ * @param apiKey - New API key (or undefined to reset to default)
+ */
+export declare function setGlobalApiKey(apiKey: string | undefined): void;
+/**
+ * Set global management secret.
+ * Updates cliproxy.auth.management_secret in config.yaml.
+ *
+ * @param secret - New management secret (or undefined to reset to default)
+ */
+export declare function setGlobalManagementSecret(secret: string | undefined): void;
+/**
+ * Set per-variant API key override.
+ * Updates variants[variantName].auth.api_key in config.yaml.
+ *
+ * @param variantName - Variant name
+ * @param apiKey - New API key (or undefined to remove override)
+ */
+export declare function setVariantApiKey(variantName: string, apiKey: string | undefined): void;
+/**
+ * Reset all auth settings to defaults.
+ * Removes cliproxy.auth and all variant auth overrides.
+ */
+export declare function resetAuthToDefaults(): void;
+/**
+ * Get auth configuration summary for display.
+ * Returns current effective values and whether they're customized.
+ */
+export declare function getAuthSummary(): {
+    apiKey: {
+        value: string;
+        isCustom: boolean;
+    };
+    managementSecret: {
+        value: string;
+        isCustom: boolean;
+    };
+};
+//# sourceMappingURL=auth-token-manager.d.ts.map

package/dist/cliproxy/auth-token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-token-manager.d.ts","sourceRoot":"","sources":["../../src/cliproxy/auth-token-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,SAAK,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG/C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAkB/D;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,IAAI,MAAM,CAUrD;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAYhE;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAY1E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAqBtF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAW1C;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI;IAChC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7C,gBAAgB,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CACxD,CAgBA"}

package/dist/cliproxy/auth-token-manager.js

@@ -0,0 +1,184 @@
+"use strict";
+/**
+ * Auth Token Manager for CLIProxyAPI
+ *
+ * Manages API key and management secret resolution with inheritance:
+ * - Per-variant override → Global config → Default constants
+ *
+ * Provides secure token generation for user customization.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAuthSummary = exports.resetAuthToDefaults = exports.setVariantApiKey = exports.setGlobalManagementSecret = exports.setGlobalApiKey = exports.getEffectiveManagementSecret = exports.getEffectiveApiKey = exports.maskToken = exports.generateSecureToken = void 0;
+const crypto_1 = require("crypto");
+const unified_config_loader_1 = require("../config/unified-config-loader");
+const config_generator_1 = require("./config-generator");
+/**
+ * Generate a cryptographically secure token.
+ * Uses CSPRNG (crypto.randomBytes) for proper entropy.
+ *
+ * @param length - Number of random bytes (default: 32 = 256-bit entropy)
+ * @returns Base64URL-encoded token (43 chars for 32 bytes)
+ */
+function generateSecureToken(length = 32) {
+    return (0, crypto_1.randomBytes)(length).toString('base64url');
+}
+exports.generateSecureToken = generateSecureToken;
+/**
+ * Mask a token for display.
+ * Shows first 4 and last 4 chars: "ccs_...4f2a"
+ * Used by CLI commands and API routes.
+ */
+function maskToken(token) {
+    if (token.length <= 8)
+        return '****';
+    return `${token.slice(0, 4)}...${token.slice(-4)}`;
+}
+exports.maskToken = maskToken;
+/**
+ * Get effective API key with inheritance chain.
+ * Priority: variant auth → global cliproxy.auth → default constant
+ *
+ * @param variantName - Optional variant name for per-variant override
+ * @returns Resolved API key
+ */
+function getEffectiveApiKey(variantName) {
+    const config = (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+    // Priority 1: Per-variant override
+    if (variantName) {
+        const variant = config.cliproxy.variants[variantName];
+        if (variant?.auth?.api_key) {
+            return variant.auth.api_key;
+        }
+    }
+    // Priority 2: Global cliproxy.auth
+    if (config.cliproxy.auth?.api_key) {
+        return config.cliproxy.auth.api_key;
+    }
+    // Priority 3: Default constant (backwards compatible)
+    return config_generator_1.CCS_INTERNAL_API_KEY;
+}
+exports.getEffectiveApiKey = getEffectiveApiKey;
+/**
+ * Get effective management secret.
+ * Priority: global cliproxy.auth → default constant
+ *
+ * Note: Management secret is global-only (no per-variant override)
+ * as it controls the Control Panel access for the entire CLIProxy instance.
+ *
+ * @returns Resolved management secret
+ */
+function getEffectiveManagementSecret() {
+    const config = (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+    // Priority 1: Global cliproxy.auth
+    if (config.cliproxy.auth?.management_secret) {
+        return config.cliproxy.auth.management_secret;
+    }
+    // Priority 2: Default constant (backwards compatible)
+    return config_generator_1.CCS_CONTROL_PANEL_SECRET;
+}
+exports.getEffectiveManagementSecret = getEffectiveManagementSecret;
+/**
+ * Set global API key.
+ * Updates cliproxy.auth.api_key in config.yaml.
+ *
+ * @param apiKey - New API key (or undefined to reset to default)
+ */
+function setGlobalApiKey(apiKey) {
+    (0, unified_config_loader_1.mutateUnifiedConfig)((config) => {
+        if (!config.cliproxy.auth) {
+            config.cliproxy.auth = {};
+        }
+        if (apiKey === undefined) {
+            delete config.cliproxy.auth.api_key;
+        }
+        else {
+            config.cliproxy.auth.api_key = apiKey;
+        }
+    });
+}
+exports.setGlobalApiKey = setGlobalApiKey;
+/**
+ * Set global management secret.
+ * Updates cliproxy.auth.management_secret in config.yaml.
+ *
+ * @param secret - New management secret (or undefined to reset to default)
+ */
+function setGlobalManagementSecret(secret) {
+    (0, unified_config_loader_1.mutateUnifiedConfig)((config) => {
+        if (!config.cliproxy.auth) {
+            config.cliproxy.auth = {};
+        }
+        if (secret === undefined) {
+            delete config.cliproxy.auth.management_secret;
+        }
+        else {
+            config.cliproxy.auth.management_secret = secret;
+        }
+    });
+}
+exports.setGlobalManagementSecret = setGlobalManagementSecret;
+/**
+ * Set per-variant API key override.
+ * Updates variants[variantName].auth.api_key in config.yaml.
+ *
+ * @param variantName - Variant name
+ * @param apiKey - New API key (or undefined to remove override)
+ */
+function setVariantApiKey(variantName, apiKey) {
+    (0, unified_config_loader_1.mutateUnifiedConfig)((config) => {
+        const variant = config.cliproxy.variants[variantName];
+        if (!variant) {
+            throw new Error(`Variant '${variantName}' not found`);
+        }
+        if (!variant.auth) {
+            variant.auth = {};
+        }
+        if (apiKey === undefined) {
+            delete variant.auth.api_key;
+            if (Object.keys(variant.auth).length === 0) {
+                delete variant.auth;
+            }
+        }
+        else {
+            variant.auth.api_key = apiKey;
+        }
+    });
+}
+exports.setVariantApiKey = setVariantApiKey;
+/**
+ * Reset all auth settings to defaults.
+ * Removes cliproxy.auth and all variant auth overrides.
+ */
+function resetAuthToDefaults() {
+    (0, unified_config_loader_1.mutateUnifiedConfig)((config) => {
+        delete config.cliproxy.auth;
+        for (const variantName of Object.keys(config.cliproxy.variants)) {
+            const variant = config.cliproxy.variants[variantName];
+            if (variant.auth) {
+                delete variant.auth;
+            }
+        }
+    });
+}
+exports.resetAuthToDefaults = resetAuthToDefaults;
+/**
+ * Get auth configuration summary for display.
+ * Returns current effective values and whether they're customized.
+ */
+function getAuthSummary() {
+    const config = (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+    const customApiKey = config.cliproxy.auth?.api_key;
+    const customSecret = config.cliproxy.auth?.management_secret;
+    return {
+        apiKey: {
+            value: customApiKey || config_generator_1.CCS_INTERNAL_API_KEY,
+            isCustom: !!customApiKey,
+        },
+        managementSecret: {
+            value: customSecret || config_generator_1.CCS_CONTROL_PANEL_SECRET,
+            isCustom: !!customSecret,
+        },
+    };
+}
+exports.getAuthSummary = getAuthSummary;
+//# sourceMappingURL=auth-token-manager.js.map

package/dist/cliproxy/auth-token-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-token-manager.js","sourceRoot":"","sources":["../../src/cliproxy/auth-token-manager.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,mCAAqC;AACrC,2EAAiG;AACjG,yDAAoF;AAEpF;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,MAAM,GAAG,EAAE;IAC7C,OAAO,IAAA,oBAAW,EAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACnD,CAAC;AAFD,kDAEC;AAED;;;;GAIG;AACH,SAAgB,SAAS,CAAC,KAAa;IACrC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrD,CAAC;AAHD,8BAGC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,WAAoB;IACrD,MAAM,MAAM,GAAG,IAAA,iDAAyB,GAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;IACtC,CAAC;IAED,sDAAsD;IACtD,OAAO,uCAAoB,CAAC;AAC9B,CAAC;AAlBD,gDAkBC;AAED;;;;;;;;GAQG;AACH,SAAgB,4BAA4B;IAC1C,MAAM,MAAM,GAAG,IAAA,iDAAyB,GAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAChD,CAAC;IAED,sDAAsD;IACtD,OAAO,2CAAwB,CAAC;AAClC,CAAC;AAVD,oEAUC;AAED;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,MAA0B;IACxD,IAAA,2CAAmB,EAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAZD,0CAYC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB,CAAC,MAA0B;IAClE,IAAA,2CAAmB,EAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAZD,8DAYC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,WAAmB,EAAE,MAA0B;IAC9E,IAAA,2CAAmB,EAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,aAAa,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3C,OAAO,OAAO,CAAC,IAAI,CAAC;YACtB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AArBD,4CAqBC;AAED;;;GAGG;AACH,SAAgB,mBAAmB;IACjC,IAAA,2CAAmB,EAAC,CAAC,MAAM,EAAE,EAAE;QAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAE5B,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,OAAO,CAAC,IAAI,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAXD,kDAWC;AAED;;;GAGG;AACH,SAAgB,cAAc;IAI5B,MAAM,MAAM,GAAG,IAAA,iDAAyB,GAAE,CAAC;IAE3C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAE7D,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE,YAAY,IAAI,uCAAoB;YAC3C,QAAQ,EAAE,CAAC,CAAC,YAAY;SACzB;QACD,gBAAgB,EAAE;YAChB,KAAK,EAAE,YAAY,IAAI,2CAAwB;YAC/C,QAAQ,EAAE,CAAC,CAAC,YAAY;SACzB;KACF,CAAC;AACJ,CAAC;AAnBD,wCAmBC"}

package/dist/cliproxy/auth-utils.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Shared Authentication Utilities
+ *
+ * Common functions for OAuth token handling across quota fetchers.
+ */
+/**
+ * Sanitize email to match CLIProxyAPI auth file naming convention.
+ * Replaces @ and . with underscores for filesystem compatibility.
+ */
+export declare function sanitizeEmail(email: string): string;
+/**
+ * Check if token is expired based on the expired timestamp.
+ * Returns false if timestamp is missing or invalid (fail-open for quota display).
+ */
+export declare function isTokenExpired(expiredStr?: string): boolean;
+//# sourceMappingURL=auth-utils.d.ts.map

package/dist/cliproxy/auth-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-utils.d.ts","sourceRoot":"","sources":["../../src/cliproxy/auth-utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAQ3D"}

package/dist/cliproxy/auth-utils.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * Shared Authentication Utilities
+ *
+ * Common functions for OAuth token handling across quota fetchers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isTokenExpired = exports.sanitizeEmail = void 0;
+/**
+ * Sanitize email to match CLIProxyAPI auth file naming convention.
+ * Replaces @ and . with underscores for filesystem compatibility.
+ */
+function sanitizeEmail(email) {
+    return email.replace(/@/g, '_').replace(/\./g, '_');
+}
+exports.sanitizeEmail = sanitizeEmail;
+/**
+ * Check if token is expired based on the expired timestamp.
+ * Returns false if timestamp is missing or invalid (fail-open for quota display).
+ */
+function isTokenExpired(expiredStr) {
+    if (!expiredStr)
+        return false;
+    try {
+        const expiredDate = new Date(expiredStr);
+        return expiredDate.getTime() < Date.now();
+    }
+    catch {
+        return false;
+    }
+}
+exports.isTokenExpired = isTokenExpired;
+//# sourceMappingURL=auth-utils.js.map

package/dist/cliproxy/auth-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-utils.js","sourceRoot":"","sources":["../../src/cliproxy/auth-utils.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC;AAFD,sCAEC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,UAAmB;IAChD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AARD,wCAQC"}

package/dist/cliproxy/base-config-loader.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Base Config Loader for CLIProxy Providers
+ *
+ * Loads provider configurations from config/base-{provider}.settings.json files.
+ * This allows model mappings to be easily updated without digging into code.
+ *
+ * Config files are bundled with the npm package and read at runtime.
+ */
+/// <reference types="node" />
+import type { CLIProxyProvider, ProviderModelMapping } from './types';
+/** Base settings file structure */
+interface BaseSettings {
+    env: {
+        ANTHROPIC_BASE_URL: string;
+        ANTHROPIC_AUTH_TOKEN: string;
+        ANTHROPIC_MODEL: string;
+        ANTHROPIC_DEFAULT_OPUS_MODEL: string;
+        ANTHROPIC_DEFAULT_SONNET_MODEL: string;
+        ANTHROPIC_DEFAULT_HAIKU_MODEL: string;
+    };
+}
+/**
+ * Load base config for a provider
+ * Returns parsed settings from config/base-{provider}.settings.json
+ */
+export declare function loadBaseConfig(provider: CLIProxyProvider): BaseSettings;
+/**
+ * Get model mapping from base config
+ * Extracts model names from env vars
+ */
+export declare function getModelMappingFromConfig(provider: CLIProxyProvider): ProviderModelMapping;
+/**
+ * Get full env vars from base config
+ * Returns the complete env object for Claude CLI
+ */
+export declare function getEnvVarsFromConfig(provider: CLIProxyProvider): NodeJS.ProcessEnv;
+/**
+ * Clear config cache (useful for testing)
+ */
+export declare function clearConfigCache(): void;
+export {};
+//# sourceMappingURL=base-config-loader.d.ts.map

package/dist/cliproxy/base-config-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-config-loader.d.ts","sourceRoot":"","sources":["../../src/cliproxy/base-config-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAEtE,mCAAmC;AACnC,UAAU,YAAY;IACpB,GAAG,EAAE;QACH,kBAAkB,EAAE,MAAM,CAAC;QAC3B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,eAAe,EAAE,MAAM,CAAC;QACxB,4BAA4B,EAAE,MAAM,CAAC;QACrC,8BAA8B,EAAE,MAAM,CAAC;QACvC,6BAA6B,EAAE,MAAM,CAAC;KACvC,CAAC;CACH;AAgBD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,gBAAgB,GAAG,YAAY,CA6CvE;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,oBAAoB,CAU1F;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAGlF;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/cliproxy/base-config-loader.js

@@ -0,0 +1,123 @@
+"use strict";
+/**
+ * Base Config Loader for CLIProxy Providers
+ *
+ * Loads provider configurations from config/base-{provider}.settings.json files.
+ * This allows model mappings to be easily updated without digging into code.
+ *
+ * Config files are bundled with the npm package and read at runtime.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearConfigCache = exports.getEnvVarsFromConfig = exports.getModelMappingFromConfig = exports.loadBaseConfig = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/** Cached configs to avoid repeated file reads */
+const configCache = new Map();
+/**
+ * Get path to base config file for provider
+ * Config files are in the config/ directory relative to package root
+ */
+function getBaseConfigPath(provider) {
+    // __dirname points to dist/cliproxy at runtime
+    // Config files are at package root: ../config/
+    const configDir = path.join(__dirname, '..', '..', 'config');
+    return path.join(configDir, `base-${provider}.settings.json`);
+}
+/**
+ * Load base config for a provider
+ * Returns parsed settings from config/base-{provider}.settings.json
+ */
+function loadBaseConfig(provider) {
+    // Check cache first
+    const cached = configCache.get(provider);
+    if (cached) {
+        return cached;
+    }
+    const configPath = getBaseConfigPath(provider);
+    if (!fs.existsSync(configPath)) {
+        throw new Error(`Base config not found for provider '${provider}': ${configPath}\n` +
+            `Expected file: config/base-${provider}.settings.json`);
+    }
+    try {
+        const content = fs.readFileSync(configPath, 'utf-8');
+        const settings = JSON.parse(content);
+        // Validate required fields
+        if (!settings.env || typeof settings.env !== 'object') {
+            throw new Error('Missing or invalid "env" object');
+        }
+        const required = [
+            'ANTHROPIC_MODEL',
+            'ANTHROPIC_DEFAULT_OPUS_MODEL',
+            'ANTHROPIC_DEFAULT_SONNET_MODEL',
+            'ANTHROPIC_DEFAULT_HAIKU_MODEL',
+        ];
+        for (const field of required) {
+            if (!settings.env[field]) {
+                throw new Error(`Missing required field: env.${field}`);
+            }
+        }
+        // Cache and return
+        configCache.set(provider, settings);
+        return settings;
+    }
+    catch (error) {
+        const err = error;
+        throw new Error(`Failed to load base config for '${provider}': ${err.message}`);
+    }
+}
+exports.loadBaseConfig = loadBaseConfig;
+/**
+ * Get model mapping from base config
+ * Extracts model names from env vars
+ */
+function getModelMappingFromConfig(provider) {
+    const config = loadBaseConfig(provider);
+    return {
+        defaultModel: config.env.ANTHROPIC_MODEL,
+        claudeModel: config.env.ANTHROPIC_MODEL,
+        opusModel: config.env.ANTHROPIC_DEFAULT_OPUS_MODEL,
+        sonnetModel: config.env.ANTHROPIC_DEFAULT_SONNET_MODEL,
+        haikuModel: config.env.ANTHROPIC_DEFAULT_HAIKU_MODEL,
+    };
+}
+exports.getModelMappingFromConfig = getModelMappingFromConfig;
+/**
+ * Get full env vars from base config
+ * Returns the complete env object for Claude CLI
+ */
+function getEnvVarsFromConfig(provider) {
+    const config = loadBaseConfig(provider);
+    return config.env;
+}
+exports.getEnvVarsFromConfig = getEnvVarsFromConfig;
+/**
+ * Clear config cache (useful for testing)
+ */
+function clearConfigCache() {
+    configCache.clear();
+}
+exports.clearConfigCache = clearConfigCache;
+//# sourceMappingURL=base-config-loader.js.map

package/dist/cliproxy/base-config-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-config-loader.js","sourceRoot":"","sources":["../../src/cliproxy/base-config-loader.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAe7B,kDAAkD;AAClD,MAAM,WAAW,GAAwC,IAAI,GAAG,EAAE,CAAC;AAEnE;;;GAGG;AACH,SAAS,iBAAiB,CAAC,QAA0B;IACnD,+CAA+C;IAC/C,+CAA+C;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,QAAQ,gBAAgB,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,QAA0B;IACvD,oBAAoB;IACpB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAE/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,uCAAuC,QAAQ,MAAM,UAAU,IAAI;YACjE,8BAA8B,QAAQ,gBAAgB,CACzD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEnD,2BAA2B;QAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,QAAQ,GAAG;YACf,iBAAiB;YACjB,8BAA8B;YAC9B,gCAAgC;YAChC,+BAA+B;SAChC,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAkC,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AA7CD,wCA6CC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,QAA0B;IAClE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAExC,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe;QACxC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe;QACvC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,4BAA4B;QAClD,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,8BAA8B;QACtD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,6BAA6B;KACrD,CAAC;AACJ,CAAC;AAVD,8DAUC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,QAA0B;IAC7D,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,GAAmC,CAAC;AACpD,CAAC;AAHD,oDAGC;AAED;;GAEG;AACH,SAAgB,gBAAgB;IAC9B,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAFD,4CAEC"}

package/dist/cliproxy/binary/downloader.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Binary Downloader
+ * Handles downloading files with retry logic, progress tracking, and redirect following.
+ * Robust handling for transient network errors (socket hang up, ECONNRESET, etc.)
+ * Respects http_proxy, https_proxy, and all_proxy environment variables.
+ */
+/// <reference types="node" />
+/// <reference types="node" />
+import * as https from 'https';
+import * as http from 'http';
+import { DownloadResult, ProgressCallback } from '../types';
+import { getProxyUrl, shouldBypassProxy } from '../../utils/proxy-env';
+/**
+ * Extract hostname from URL.
+ * @param url The URL to parse
+ * @returns Hostname or empty string if invalid
+ */
+declare function getHostname(url: string): string;
+/**
+ * Create appropriate proxy agent based on URL protocol.
+ * Respects NO_PROXY/no_proxy for bypassing specific hosts.
+ * @param url Target URL to determine protocol
+ * @returns Proxy agent or false (no agent/pooling disabled)
+ */
+declare function getProxyAgent(url: string): http.Agent | https.Agent | false;
+/** Default configuration for downloader */
+export interface DownloaderConfig {
+    /** Maximum retry attempts */
+    maxRetries: number;
+    /** Enable verbose logging */
+    verbose: boolean;
+    /** Timeout in milliseconds (default: 120000 for large files) */
+    timeout?: number;
+}
+/** Error types for categorized handling */
+export type NetworkErrorType = 'socket' | 'timeout' | 'http' | 'redirect' | 'unknown';
+/** Categorize error for appropriate retry/reporting */
+export declare function categorizeError(error: Error): NetworkErrorType;
+/** Get user-friendly error message */
+export declare function getErrorMessage(error: Error, attempt: number, maxAttempts: number): string;
+/** Check if error is retryable */
+export declare function isRetryableError(error: Error): boolean;
+/**
+ * Download file from URL with progress tracking
+ * @param timeout Timeout in ms (default 120000 for large files)
+ * @param maxRedirects Maximum number of redirects to follow (default 10)
+ */
+export declare function downloadFile(url: string, destPath: string, onProgress?: ProgressCallback, verbose?: boolean, timeout?: number, maxRedirects?: number): Promise<void>;
+/**
+ * Download file with retry logic and exponential backoff
+ * Uses smarter backoff for socket errors (longer delays)
+ */
+export declare function downloadWithRetry(url: string, destPath: string, config?: Partial<DownloaderConfig>): Promise<DownloadResult>;
+/**
+ * Fetch text content from URL with retry logic
+ */
+export declare function fetchText(url: string, verbose?: boolean, maxRetries?: number): Promise<string>;
+/**
+ * Fetch JSON from URL (for GitHub API) with retry logic
+ */
+export declare function fetchJson(url: string, verbose?: boolean, maxRetries?: number): Promise<Record<string, unknown>>;
+export declare const __testExports: {
+    getProxyUrl: typeof getProxyUrl;
+    shouldBypassProxy: typeof shouldBypassProxy;
+    getHostname: typeof getHostname;
+    getProxyAgent: typeof getProxyAgent;
+};
+export {};
+//# sourceMappingURL=downloader.d.ts.map

package/dist/cliproxy/binary/downloader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"downloader.d.ts","sourceRoot":"","sources":["../../../src/cliproxy/binary/downloader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;;;AAGH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;GAIG;AACH,iBAAS,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMxC;AAED;;;;;GAKG;AACH,iBAAS,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAyBpE;AAED,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAC/B,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,2CAA2C;AAC3C,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtF,uDAAuD;AACvD,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,CAe9D;AAED,sCAAsC;AACtC,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAgB1F;AAED,kCAAkC;AAClC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAYtD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,gBAAgB,EAC7B,OAAO,UAAQ,EACf,OAAO,SAAS,EAChB,YAAY,SAAK,GAChB,OAAO,CAAC,IAAI,CAAC,CA2Ff;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACrC,OAAO,CAAC,cAAc,CAAC,CAsDzB;AA8ED;;GAEG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,UAAQ,EAAE,UAAU,SAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB7F;AAgFD;;GAEG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,UAAQ,EACf,UAAU,SAAI,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAuBlC;AAUD,eAAO,MAAM,aAAa;;;;;CAKzB,CAAC"}