@jeffreycao/copilot-api 2.4.2 → 2.5.1

package/dist/main.js

@@ -27,10 +27,10 @@ if (isMcpFastPath(process.argv)) {
 	if (process.platform === "win32" && process.stdout.isTTY && !process.env.WT_SESSION) process.env.WT_SESSION = "copilot-api";
 	const { bindElectronFetch } = await import("./electron-fetch-BRX-ug5E.js");
 	bindElectronFetch();
-	const { auth } = await import("./auth-BCZdnMmK.js");
-	const { debug } = await import("./debug-DwoWAiuC.js");
+	const { auth } = await import("./auth-DwBD3QBJ.js");
+	const { debug } = await import("./debug-Clt-tTwv.js");
 	const { mcp } = await import("./mcp-fpSlKZxK.js");
-	const { start } = await import("./start-BGY-GA8y.js");
+	const { start } = await import("./start-Br5i1XfC.js");
 	await runMain(defineCommand({
 		meta: {
 			name: "copilot-api",

package/dist/{models-DKNAPa_j.js → models-DvNveb2V.js}

@@ -1,4 +1,4 @@
-import { K as state } from "./token-D0GGk3E8.js";
+import { K as state } from "./token-DYqRXNhu.js";
 //#region src/lib/models.ts
 /**
 * Converts a Copilot upstream model ID to a client-friendly ID that Claude Code
@@ -87,4 +87,4 @@ const normalizeSdkModelId = (sdkModelId) => {
 //#endregion
 export { toClientModelId as i, getLatestModelForFamily as n, normalizeSdkModelId as r, findEndpointModel as t };
 
-//# sourceMappingURL=models-DKNAPa_j.js.map
+//# sourceMappingURL=models-DvNveb2V.js.map

package/dist/{models-DKNAPa_j.js.map → models-DvNveb2V.js.map}

@@ -1 +1 @@
-{"version":3,"file":"models-DKNAPa_j.js","names":[],"sources":["../src/lib/models.ts"],"sourcesContent":["import type { Model } from \"~/lib/types/models\"\n\nimport { state } from \"~/lib/state\"\n\n/**\n * Converts a Copilot upstream model ID to a client-friendly ID that Claude Code\n * and Claude Desktop recognize (dots in version replaced with hyphens).\n * e.g. \"claude-sonnet-4.6\" -> \"claude-sonnet-4-6\"\n * Non-Claude models are returned unchanged.\n */\nexport const toClientModelId = (modelId: string): string => {\n  const normalized = normalizeSdkModelId(modelId)\n  if (!normalized) return modelId\n  const versionHyphenated = normalized.version.replaceAll(\".\", \"-\")\n  return `claude-${normalized.family}-${versionHyphenated}`\n}\n\nexport interface NormalizedSdkModelId {\n  family: string\n  version: string\n}\n\nexport const findEndpointModel = (sdkModelId: string): Model | undefined => {\n  const models = state.models?.data ?? []\n  const exactMatch = models.find((m) => m.id === sdkModelId)\n  if (exactMatch) {\n    return exactMatch\n  }\n\n  const normalized = normalizeSdkModelId(sdkModelId)\n  if (!normalized) {\n    return undefined\n  }\n\n  const modelName = `claude-${normalized.family}-${normalized.version}`\n  const model = models.find((m) => m.id === modelName)\n  if (model) {\n    return model\n  }\n\n  return undefined\n}\n\n/**\n * Finds the latest available model for a given Claude family (e.g. \"opus\",\n * \"sonnet\", \"haiku\") among the models currently cached in `state.models`.\n * \"Latest\" is determined by the highest semantic version parsed from the model\n * ID. Returns `undefined` when no model of that family is available.\n */\nexport const getLatestModelForFamily = (family: string): Model | undefined => {\n  const models = state.models?.data ?? []\n\n  let best: { model: Model; major: number; minor: number } | undefined\n\n  for (const model of models) {\n    const normalized = normalizeSdkModelId(model.id)\n    if (!normalized || normalized.family !== family) {\n      continue\n    }\n\n    const [majorPart, minorPart = \"0\"] = normalized.version.split(\".\")\n    const major = Number.parseInt(majorPart, 10)\n    const minor = Number.parseInt(minorPart, 10)\n    if (Number.isNaN(major) || Number.isNaN(minor)) {\n      continue\n    }\n\n    if (\n      !best\n      || major > best.major\n      || (major === best.major && minor > best.minor)\n    ) {\n      best = { model, major, minor }\n    }\n  }\n\n  return best?.model\n}\n\n/**\n * Normalizes an SDK model ID to extract the model family and version.\n * this method from github copilot extension\n * Examples:\n * - \"claude-opus-4-5-20251101\" -> { family: \"opus\", version: \"4.5\" }\n * - \"claude-3-5-sonnet-20241022\" -> { family: \"sonnet\", version: \"3.5\" }\n * - \"claude-sonnet-4-20250514\" -> { family: \"sonnet\", version: \"4\" }\n * - \"claude-haiku-3-5-20250514\" -> { family: \"haiku\", version: \"3.5\" }\n * - \"claude-haiku-4.5\" -> { family: \"haiku\", version: \"4.5\" }\n */\nexport const normalizeSdkModelId = (\n  sdkModelId: string,\n): NormalizedSdkModelId | undefined => {\n  const lower = sdkModelId.toLowerCase()\n\n  // Strip date suffix (8 digits at the end)\n  const withoutDate = lower.replace(/-\\d{8}$/, \"\")\n\n  // Pattern 1: claude-{family}-{major}.{minor} (e.g., claude-haiku-4.5)\n  const pattern1 = withoutDate.match(/^claude-(\\w+)-(\\d+)\\.(\\d+)$/)\n  if (pattern1) {\n    return { family: pattern1[1], version: `${pattern1[2]}.${pattern1[3]}` }\n  }\n\n  // Pattern 2: claude-{family}-{major}-{minor} (e.g., claude-opus-4-5, claude-haiku-3-5)\n  const pattern2 = withoutDate.match(/^claude-(\\w+)-(\\d+)-(\\d+)$/)\n  if (pattern2) {\n    return { family: pattern2[1], version: `${pattern2[2]}.${pattern2[3]}` }\n  }\n\n  // Pattern 3: claude-{major}-{minor}-{family} (e.g., claude-3-5-sonnet)\n  const pattern3 = withoutDate.match(/^claude-(\\d+)-(\\d+)-(\\w+)$/)\n  if (pattern3) {\n    return { family: pattern3[3], version: `${pattern3[1]}.${pattern3[2]}` }\n  }\n\n  // Pattern 4: claude-{family}-{major} (e.g., claude-sonnet-4)\n  const pattern4 = withoutDate.match(/^claude-(\\w+)-(\\d+)$/)\n  if (pattern4) {\n    return { family: pattern4[1], version: pattern4[2] }\n  }\n\n  // Pattern 5: claude-{major}-{family} (e.g., claude-3-opus)\n  const pattern5 = withoutDate.match(/^claude-(\\d+)-(\\w+)$/)\n  if (pattern5) {\n    return { family: pattern5[2], version: pattern5[1] }\n  }\n\n  return undefined\n}\n"],"mappings":";;;;;;;;AAUA,MAAa,mBAAmB,YAA4B;CAC1D,MAAM,aAAa,oBAAoB,QAAQ;CAC/C,IAAI,CAAC,YAAY,OAAO;CACxB,MAAM,oBAAoB,WAAW,QAAQ,WAAW,KAAK,IAAI;CACjE,OAAO,UAAU,WAAW,OAAO,GAAG;;AAQxC,MAAa,qBAAqB,eAA0C;CAC1E,MAAM,SAAS,MAAM,QAAQ,QAAQ,EAAE;CACvC,MAAM,aAAa,OAAO,MAAM,MAAM,EAAE,OAAO,WAAW;CAC1D,IAAI,YACF,OAAO;CAGT,MAAM,aAAa,oBAAoB,WAAW;CAClD,IAAI,CAAC,YACH;CAGF,MAAM,YAAY,UAAU,WAAW,OAAO,GAAG,WAAW;CAC5D,MAAM,QAAQ,OAAO,MAAM,MAAM,EAAE,OAAO,UAAU;CACpD,IAAI,OACF,OAAO;;;;;;;;AAYX,MAAa,2BAA2B,WAAsC;CAC5E,MAAM,SAAS,MAAM,QAAQ,QAAQ,EAAE;CAEvC,IAAI;CAEJ,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,aAAa,oBAAoB,MAAM,GAAG;EAChD,IAAI,CAAC,cAAc,WAAW,WAAW,QACvC;EAGF,MAAM,CAAC,WAAW,YAAY,OAAO,WAAW,QAAQ,MAAM,IAAI;EAClE,MAAM,QAAQ,OAAO,SAAS,WAAW,GAAG;EAC5C,MAAM,QAAQ,OAAO,SAAS,WAAW,GAAG;EAC5C,IAAI,OAAO,MAAM,MAAM,IAAI,OAAO,MAAM,MAAM,EAC5C;EAGF,IACE,CAAC,QACE,QAAQ,KAAK,SACZ,UAAU,KAAK,SAAS,QAAQ,KAAK,OAEzC,OAAO;GAAE;GAAO;GAAO;GAAO;;CAIlC,OAAO,MAAM;;;;;;;;;;;;AAaf,MAAa,uBACX,eACqC;CAIrC,MAAM,cAHQ,WAAW,aAGA,CAAC,QAAQ,WAAW,GAAG;CAGhD,MAAM,WAAW,YAAY,MAAM,8BAA8B;CACjE,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;EAAM;CAI1E,MAAM,WAAW,YAAY,MAAM,6BAA6B;CAChE,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;EAAM;CAI1E,MAAM,WAAW,YAAY,MAAM,6BAA6B;CAChE,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;EAAM;CAI1E,MAAM,WAAW,YAAY,MAAM,uBAAuB;CAC1D,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,SAAS;EAAI;CAItD,MAAM,WAAW,YAAY,MAAM,uBAAuB;CAC1D,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,SAAS;EAAI"}
+{"version":3,"file":"models-DvNveb2V.js","names":[],"sources":["../src/lib/models.ts"],"sourcesContent":["import type { Model } from \"~/lib/types/models\"\n\nimport { state } from \"~/lib/state\"\n\n/**\n * Converts a Copilot upstream model ID to a client-friendly ID that Claude Code\n * and Claude Desktop recognize (dots in version replaced with hyphens).\n * e.g. \"claude-sonnet-4.6\" -> \"claude-sonnet-4-6\"\n * Non-Claude models are returned unchanged.\n */\nexport const toClientModelId = (modelId: string): string => {\n  const normalized = normalizeSdkModelId(modelId)\n  if (!normalized) return modelId\n  const versionHyphenated = normalized.version.replaceAll(\".\", \"-\")\n  return `claude-${normalized.family}-${versionHyphenated}`\n}\n\nexport interface NormalizedSdkModelId {\n  family: string\n  version: string\n}\n\nexport const findEndpointModel = (sdkModelId: string): Model | undefined => {\n  const models = state.models?.data ?? []\n  const exactMatch = models.find((m) => m.id === sdkModelId)\n  if (exactMatch) {\n    return exactMatch\n  }\n\n  const normalized = normalizeSdkModelId(sdkModelId)\n  if (!normalized) {\n    return undefined\n  }\n\n  const modelName = `claude-${normalized.family}-${normalized.version}`\n  const model = models.find((m) => m.id === modelName)\n  if (model) {\n    return model\n  }\n\n  return undefined\n}\n\n/**\n * Finds the latest available model for a given Claude family (e.g. \"opus\",\n * \"sonnet\", \"haiku\") among the models currently cached in `state.models`.\n * \"Latest\" is determined by the highest semantic version parsed from the model\n * ID. Returns `undefined` when no model of that family is available.\n */\nexport const getLatestModelForFamily = (family: string): Model | undefined => {\n  const models = state.models?.data ?? []\n\n  let best: { model: Model; major: number; minor: number } | undefined\n\n  for (const model of models) {\n    const normalized = normalizeSdkModelId(model.id)\n    if (!normalized || normalized.family !== family) {\n      continue\n    }\n\n    const [majorPart, minorPart = \"0\"] = normalized.version.split(\".\")\n    const major = Number.parseInt(majorPart, 10)\n    const minor = Number.parseInt(minorPart, 10)\n    if (Number.isNaN(major) || Number.isNaN(minor)) {\n      continue\n    }\n\n    if (\n      !best\n      || major > best.major\n      || (major === best.major && minor > best.minor)\n    ) {\n      best = { model, major, minor }\n    }\n  }\n\n  return best?.model\n}\n\n/**\n * Normalizes an SDK model ID to extract the model family and version.\n * this method from github copilot extension\n * Examples:\n * - \"claude-opus-4-5-20251101\" -> { family: \"opus\", version: \"4.5\" }\n * - \"claude-3-5-sonnet-20241022\" -> { family: \"sonnet\", version: \"3.5\" }\n * - \"claude-sonnet-4-20250514\" -> { family: \"sonnet\", version: \"4\" }\n * - \"claude-haiku-3-5-20250514\" -> { family: \"haiku\", version: \"3.5\" }\n * - \"claude-haiku-4.5\" -> { family: \"haiku\", version: \"4.5\" }\n */\nexport const normalizeSdkModelId = (\n  sdkModelId: string,\n): NormalizedSdkModelId | undefined => {\n  const lower = sdkModelId.toLowerCase()\n\n  // Strip date suffix (8 digits at the end)\n  const withoutDate = lower.replace(/-\\d{8}$/, \"\")\n\n  // Pattern 1: claude-{family}-{major}.{minor} (e.g., claude-haiku-4.5)\n  const pattern1 = withoutDate.match(/^claude-(\\w+)-(\\d+)\\.(\\d+)$/)\n  if (pattern1) {\n    return { family: pattern1[1], version: `${pattern1[2]}.${pattern1[3]}` }\n  }\n\n  // Pattern 2: claude-{family}-{major}-{minor} (e.g., claude-opus-4-5, claude-haiku-3-5)\n  const pattern2 = withoutDate.match(/^claude-(\\w+)-(\\d+)-(\\d+)$/)\n  if (pattern2) {\n    return { family: pattern2[1], version: `${pattern2[2]}.${pattern2[3]}` }\n  }\n\n  // Pattern 3: claude-{major}-{minor}-{family} (e.g., claude-3-5-sonnet)\n  const pattern3 = withoutDate.match(/^claude-(\\d+)-(\\d+)-(\\w+)$/)\n  if (pattern3) {\n    return { family: pattern3[3], version: `${pattern3[1]}.${pattern3[2]}` }\n  }\n\n  // Pattern 4: claude-{family}-{major} (e.g., claude-sonnet-4)\n  const pattern4 = withoutDate.match(/^claude-(\\w+)-(\\d+)$/)\n  if (pattern4) {\n    return { family: pattern4[1], version: pattern4[2] }\n  }\n\n  // Pattern 5: claude-{major}-{family} (e.g., claude-3-opus)\n  const pattern5 = withoutDate.match(/^claude-(\\d+)-(\\w+)$/)\n  if (pattern5) {\n    return { family: pattern5[2], version: pattern5[1] }\n  }\n\n  return undefined\n}\n"],"mappings":";;;;;;;;AAUA,MAAa,mBAAmB,YAA4B;CAC1D,MAAM,aAAa,oBAAoB,QAAQ;CAC/C,IAAI,CAAC,YAAY,OAAO;CACxB,MAAM,oBAAoB,WAAW,QAAQ,WAAW,KAAK,IAAI;CACjE,OAAO,UAAU,WAAW,OAAO,GAAG;;AAQxC,MAAa,qBAAqB,eAA0C;CAC1E,MAAM,SAAS,MAAM,QAAQ,QAAQ,EAAE;CACvC,MAAM,aAAa,OAAO,MAAM,MAAM,EAAE,OAAO,WAAW;CAC1D,IAAI,YACF,OAAO;CAGT,MAAM,aAAa,oBAAoB,WAAW;CAClD,IAAI,CAAC,YACH;CAGF,MAAM,YAAY,UAAU,WAAW,OAAO,GAAG,WAAW;CAC5D,MAAM,QAAQ,OAAO,MAAM,MAAM,EAAE,OAAO,UAAU;CACpD,IAAI,OACF,OAAO;;;;;;;;AAYX,MAAa,2BAA2B,WAAsC;CAC5E,MAAM,SAAS,MAAM,QAAQ,QAAQ,EAAE;CAEvC,IAAI;CAEJ,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,aAAa,oBAAoB,MAAM,GAAG;EAChD,IAAI,CAAC,cAAc,WAAW,WAAW,QACvC;EAGF,MAAM,CAAC,WAAW,YAAY,OAAO,WAAW,QAAQ,MAAM,IAAI;EAClE,MAAM,QAAQ,OAAO,SAAS,WAAW,GAAG;EAC5C,MAAM,QAAQ,OAAO,SAAS,WAAW,GAAG;EAC5C,IAAI,OAAO,MAAM,MAAM,IAAI,OAAO,MAAM,MAAM,EAC5C;EAGF,IACE,CAAC,QACE,QAAQ,KAAK,SACZ,UAAU,KAAK,SAAS,QAAQ,KAAK,OAEzC,OAAO;GAAE;GAAO;GAAO;GAAO;;CAIlC,OAAO,MAAM;;;;;;;;;;;;AAaf,MAAa,uBACX,eACqC;CAIrC,MAAM,cAHQ,WAAW,aAGA,CAAC,QAAQ,WAAW,GAAG;CAGhD,MAAM,WAAW,YAAY,MAAM,8BAA8B;CACjE,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;EAAM;CAI1E,MAAM,WAAW,YAAY,MAAM,6BAA6B;CAChE,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;EAAM;CAI1E,MAAM,WAAW,YAAY,MAAM,6BAA6B;CAChE,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,GAAG,SAAS,GAAG,GAAG,SAAS;EAAM;CAI1E,MAAM,WAAW,YAAY,MAAM,uBAAuB;CAC1D,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,SAAS;EAAI;CAItD,MAAM,WAAW,YAAY,MAAM,uBAAuB;CAC1D,IAAI,UACF,OAAO;EAAE,QAAQ,SAAS;EAAI,SAAS,SAAS;EAAI"}

package/dist/{server-BvDQf9Nd.js → server-D5XuGc4z.js}

@@ -1,7 +1,7 @@
-import { A as isResponsesApiWebSocketEnabled, C as getClaudeTokenMultiplier, D as isAlphaSearchCodexPriorityEnabled, E as getResponsesTransportConfig, N as PATHS, O as isMessagesApiEnabled, S as getClaudeAutoModel, T as getMessageApiWebSearchModel, _ as resolveMappedModel, b as getAlphaSearchModel, d as getModelResponsesApiCompactThreshold$1, f as getReasoningEffortForModel, g as isGpt56OrAbove, h as isContextManagementEnabledForResponses, i as listEnabledProviders, k as isResponsesApiWebSearchEnabled, l as getExtraPromptForModel, m as isContextManagementEnabledForMessages, n as getRawProviderConfig, o as resolveEffectiveProviderType, p as getSmallModel, s as resolveProviderAuthType, t as getProviderConfig, u as getModelMappings, v as setModelMappings, x as getAnthropicApiKey } from "./config-DVWu2hKk.js";
-import { B as fetchResponsesWithLifecycle, C as compactAutoContinuePromptStarts, D as compactTextOnlyGuard, E as compactSystemPromptStarts, F as forwardCodexResponses, G as createWebSocketUrl, H as encodePoolKeyPart, I as generateTraceId, J as forwardError, K as state, L as requestContext, N as CODEX_API_BASE_URL, O as createAuthMiddleware, P as buildCodexRequestHeaders, R as resolveTraceId$1, U as isTerminalResponsesStreamChunk, V as createResponsesSafeStream, W as createPooledWebSocketStream, b as prepareInteractionHeaders, c as getUUID, d as isResponsesStream, f as parseUserIdMetadata, g as copilotHeaders, h as copilotBaseUrl, k as getConfiguredAdminApiKeys, l as isAsyncIterable, o as generateRequestIdFromPayload, p as getCopilotUsage, q as HTTPError, r as setupCodexToken, s as getRootSessionId, u as isNullish, v as copilotWebSocketHeaders, w as compactMessageSections, x as prepareMessageProxyHeaders, y as prepareForCompact, z as createResponsesHttpEventStream } from "./token-D0GGk3E8.js";
+import { A as isResponsesApiWebSocketEnabled, C as getClaudeTokenMultiplier, D as isAlphaSearchCodexPriorityEnabled, E as getResponsesTransportConfig, N as PATHS, O as isMessagesApiEnabled, S as getClaudeAutoModel, T as getMessageApiWebSearchModel, _ as resolveMappedModel, b as getAlphaSearchModel, d as getModelResponsesApiCompactThreshold$1, f as getReasoningEffortForModel, g as isGpt56OrAbove, h as isContextManagementEnabledForResponses, i as listEnabledProviders, k as isResponsesApiWebSearchEnabled, l as getExtraPromptForModel, m as isContextManagementEnabledForMessages, n as getRawProviderConfig, o as resolveEffectiveProviderType, p as getSmallModel, s as resolveProviderAuthType, t as getProviderConfig, u as getModelMappings, v as setModelMappings, x as getAnthropicApiKey } from "./config-Cb0atQ6i.js";
+import { B as fetchResponsesWithLifecycle, C as compactAutoContinuePromptStarts, D as compactTextOnlyGuard, E as compactSystemPromptStarts, F as forwardCodexResponses, G as createWebSocketUrl, H as encodePoolKeyPart, I as generateTraceId, J as forwardError, K as state, L as requestContext, N as CODEX_API_BASE_URL, O as createAuthMiddleware, P as buildCodexRequestHeaders, R as resolveTraceId$1, U as isTerminalResponsesStreamChunk, V as createResponsesSafeStream, W as createPooledWebSocketStream, b as prepareInteractionHeaders, c as getUUID, d as isResponsesStream, f as parseUserIdMetadata, g as copilotHeaders, h as copilotBaseUrl, k as getConfiguredAdminApiKeys, l as isAsyncIterable, o as generateRequestIdFromPayload, p as getCopilotUsage, q as HTTPError, r as setupCodexToken, s as getRootSessionId, u as isNullish, v as copilotWebSocketHeaders, w as compactMessageSections, x as prepareMessageProxyHeaders, y as prepareForCompact, z as createResponsesHttpEventStream } from "./token-DYqRXNhu.js";
 import { a as isDeferredToolName, c as parseMcpToolSearchSentinel, d as shouldEnableResponsesToolSearch, i as isBridgeToolSearchName, l as resolveBridgeToolSearchName, o as listDeferredToolNames, r as formatToolSearchBridgeArguments, s as normalizeToolSearchBridgeArguments, t as BRIDGE_TOOL_SEARCH_NAME, u as selectDeferredToolsByNames } from "./tool-search-Ds1vbmGG.js";
-import { i as toClientModelId, r as normalizeSdkModelId, t as findEndpointModel } from "./models-DKNAPa_j.js";
+import { i as toClientModelId, r as normalizeSdkModelId, t as findEndpointModel } from "./models-DvNveb2V.js";
 import consola from "consola";
 import { createHash } from "node:crypto";
 import fs, { createWriteStream, readFileSync, rmSync } from "node:fs";
@@ -12377,55 +12377,70 @@ usageRoute.get("/", async (c) => {
 });
 //#endregion
 //#region src/server.ts
-const server = new Hono();
-server.use(traceIdMiddleware);
-server.use(logger());
-server.use(cors());
-server.use("*", createAuthMiddleware({
-	allowUnauthenticatedPaths: [
-		"/",
-		"/usage-viewer",
-		"/usage-viewer/"
-	],
-	shouldSkipPath: (path) => path.startsWith("/admin/")
-}));
-server.use("/admin/*", createAuthMiddleware({
-	getApiKeys: getConfiguredAdminApiKeys,
-	allowUnauthenticatedPaths: [],
-	allowWhenNoApiKeys: false
-}));
-server.get("/", (c) => c.text("Server running"));
-server.get("/usage-viewer", (c) => {
-	const usageViewerFileUrl = new URL("../pages/index.html", import.meta.url);
-	return c.html(readFileSync(usageViewerFileUrl, "utf8"));
-});
-server.get("/usage-viewer/", (c) => c.redirect("/usage-viewer", 301));
-server.route("/chat/completions", completionRoutes);
-server.route("/admin/config", configRoutes);
-server.route("/models", modelRoutes);
-server.route("/embeddings", embeddingRoutes);
-server.route("/usage", usageRoute);
-server.route("/token-usage", tokenUsageRoute);
-server.route("/responses", responsesRoutes);
-server.route("/alpha/search", alphaSearchRoutes);
-server.route("/images", imageRoutes);
-server.route("/v1/chat/completions", completionRoutes);
-server.route("/v1/models", modelRoutes);
-server.route("/v1/embeddings", embeddingRoutes);
-server.route("/v1/responses", responsesRoutes);
-server.route("/v1/alpha/search", alphaSearchRoutes);
-server.route("/v1/images", imageRoutes);
-server.route("/v1/messages", messageRoutes);
-server.route("/:provider/v1/messages", providerMessageRoutes);
-server.route("/:provider/v1/models", providerModelRoutes);
-server.route("/:provider/v1/responses", providerResponsesRoutes);
-server.route("/:provider/v1/alpha/search", providerAlphaSearchRoutes);
-server.route("/:provider/v1/images", providerImageRoutes);
-server.route("/:provider/models", providerModelRoutes);
-server.route("/:provider/responses", providerResponsesRoutes);
-server.route("/:provider/alpha/search", providerAlphaSearchRoutes);
-server.route("/:provider/images", providerImageRoutes);
+function resolveSameOriginCorsOrigin(origin, context) {
+	if (!origin) return null;
+	try {
+		return origin === new URL(context.req.url).origin ? origin : null;
+	} catch {
+		return null;
+	}
+}
+function createServer(options = {}) {
+	const server = new Hono();
+	const networkExposed = options.networkExposed ?? false;
+	server.use(traceIdMiddleware);
+	server.use(logger());
+	server.use(networkExposed ? cors({ origin: resolveSameOriginCorsOrigin }) : cors());
+	server.use("*", createAuthMiddleware({
+		getApiKeys: options.getApiKeys,
+		allowUnauthenticatedPaths: [
+			"/",
+			"/usage-viewer",
+			"/usage-viewer/"
+		],
+		shouldSkipPath: (path) => path.startsWith("/admin/"),
+		allowWhenNoApiKeys: !networkExposed
+	}));
+	server.use("/admin/*", createAuthMiddleware({
+		getApiKeys: getConfiguredAdminApiKeys,
+		allowUnauthenticatedPaths: [],
+		allowWhenNoApiKeys: false
+	}));
+	server.get("/", (c) => c.text("Server running"));
+	server.get("/usage-viewer", (c) => {
+		const usageViewerFileUrl = new URL("../pages/index.html", import.meta.url);
+		return c.html(readFileSync(usageViewerFileUrl, "utf8"));
+	});
+	server.get("/usage-viewer/", (c) => c.redirect("/usage-viewer", 301));
+	server.route("/chat/completions", completionRoutes);
+	server.route("/admin/config", configRoutes);
+	server.route("/models", modelRoutes);
+	server.route("/embeddings", embeddingRoutes);
+	server.route("/usage", usageRoute);
+	server.route("/token-usage", tokenUsageRoute);
+	server.route("/responses", responsesRoutes);
+	server.route("/alpha/search", alphaSearchRoutes);
+	server.route("/images", imageRoutes);
+	server.route("/v1/chat/completions", completionRoutes);
+	server.route("/v1/models", modelRoutes);
+	server.route("/v1/embeddings", embeddingRoutes);
+	server.route("/v1/responses", responsesRoutes);
+	server.route("/v1/alpha/search", alphaSearchRoutes);
+	server.route("/v1/images", imageRoutes);
+	server.route("/v1/messages", messageRoutes);
+	server.route("/:provider/v1/messages", providerMessageRoutes);
+	server.route("/:provider/v1/models", providerModelRoutes);
+	server.route("/:provider/v1/responses", providerResponsesRoutes);
+	server.route("/:provider/v1/alpha/search", providerAlphaSearchRoutes);
+	server.route("/:provider/v1/images", providerImageRoutes);
+	server.route("/:provider/models", providerModelRoutes);
+	server.route("/:provider/responses", providerResponsesRoutes);
+	server.route("/:provider/alpha/search", providerAlphaSearchRoutes);
+	server.route("/:provider/images", providerImageRoutes);
+	return server;
+}
+createServer();
 //#endregion
-export { server };
+export { createServer };
 
-//# sourceMappingURL=server-BvDQf9Nd.js.map
+//# sourceMappingURL=server-D5XuGc4z.js.map