@jeffreycao/copilot-api 2.7.13 → 2.7.14

package/dist/{start-Mpyr_cO_.js → start-COhhmcdU.js}

@@ -181,7 +181,7 @@ async function runServer(options) {
 	if (resolvedGitHubToken && isGitHubCopilotEnabled()) await setupCopilotMode(resolvedGitHubToken.token, resolvedGitHubToken.source);
 	else await setupProviderMode();
 	consola.box(`🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`);
-	const { createServer } = await import("./server-DqfE4x5m.js");
+	const { createServer } = await import("./server-CeyKV5sQ.js");
 	const server = createServer({ networkExposed: binding.networkExposed });
 	serve({
 		fetch: server.fetch,
@@ -243,4 +243,4 @@ const start = defineCommand({
 //#endregion
 export { start };
 
-//# sourceMappingURL=start-Mpyr_cO_.js.map
+//# sourceMappingURL=start-COhhmcdU.js.map

package/dist/{start-Mpyr_cO_.js.map → start-COhhmcdU.js.map}

@@ -1 +1 @@
-{"version":3,"file":"start-Mpyr_cO_.js","names":["get"],"sources":["../src/lib/proxy.ts","../src/lib/server-host-shared.ts","../src/lib/server-host.ts","../src/start.ts"],"sourcesContent":["import consola from \"consola\"\nimport { getProxyForUrl } from \"proxy-from-env\"\nimport { Agent, ProxyAgent, setGlobalDispatcher, type Dispatcher } from \"undici\"\n\nlet proxyEnvDispatcher: Dispatcher | undefined\n\nexport function getProxyEnvDispatcher(): Dispatcher | undefined {\n  return proxyEnvDispatcher\n}\n\nexport function initProxyFromEnv(): void {\n  try {\n    const direct = new Agent()\n    const proxies = new Map<string, ProxyAgent>()\n\n    // We only need a minimal dispatcher that implements `dispatch` at runtime.\n    // Typing the object as `Dispatcher` forces TypeScript to require many\n    // additional methods. Instead, keep a plain object and cast when passing\n    // to `setGlobalDispatcher`.\n    const dispatcher = {\n      dispatch(\n        options: Dispatcher.DispatchOptions,\n        handler: Dispatcher.DispatchHandler,\n      ) {\n        try {\n          const origin =\n            typeof options.origin === \"string\" ?\n              new URL(options.origin)\n            : (options.origin as URL)\n          const get = getProxyForUrl as unknown as (\n            u: string,\n          ) => string | undefined\n          const raw = get(origin.toString())\n          const proxyUrl = raw && raw.length > 0 ? raw : undefined\n          if (!proxyUrl) {\n            consola.debug(`HTTP proxy bypass: ${origin.hostname}`)\n            return (direct as unknown as Dispatcher).dispatch(options, handler)\n          }\n          let agent = proxies.get(proxyUrl)\n          if (!agent) {\n            agent = new ProxyAgent(proxyUrl)\n            proxies.set(proxyUrl, agent)\n          }\n          let label = proxyUrl\n          try {\n            const u = new URL(proxyUrl)\n            label = `${u.protocol}//${u.host}`\n          } catch {\n            /* noop */\n          }\n          consola.debug(`HTTP proxy route: ${origin.hostname} via ${label}`)\n          return (agent as unknown as Dispatcher).dispatch(options, handler)\n        } catch {\n          return (direct as unknown as Dispatcher).dispatch(options, handler)\n        }\n      },\n      close() {\n        return direct.close()\n      },\n      destroy() {\n        return direct.destroy()\n      },\n    }\n\n    proxyEnvDispatcher = dispatcher as unknown as Dispatcher\n\n    if (typeof Bun !== \"undefined\") {\n      consola.debug(\"WebSocket proxy configured from environment (per-URL)\")\n      return\n    }\n\n    setGlobalDispatcher(proxyEnvDispatcher)\n    consola.debug(\"HTTP proxy configured from environment (per-URL)\")\n  } catch (err) {\n    consola.debug(\"Proxy setup skipped:\", err)\n  }\n}\n","// Pure hostname helpers shared by the gateway server (Node) and the desktop\n// app (including the renderer bundle). This module must stay free of\n// `node:*` imports because the renderer cannot use `node:net`; all\n// address-family checks live in `server-host.ts`.\nexport const INVALID_HOST_CHARACTERS = /[\\s/?#]/\n\n// Bind hosts that listen on every interface, in normalized form (no\n// brackets, so \"[::]\" is covered via `stripIpv6Brackets`).\nexport const NORMALIZED_WILDCARD_HOSTS = new Set([\"0.0.0.0\", \"::\"])\n\nexport function stripIpv6Brackets(hostname: string): string {\n  if (hostname.startsWith(\"[\") && hostname.endsWith(\"]\")) {\n    return hostname.slice(1, -1)\n  }\n  return hostname\n}\n\nexport function normalizeHostnameBase(hostname: string): string {\n  const normalized = stripIpv6Brackets(hostname.trim())\n  if (!normalized || INVALID_HOST_CHARACTERS.test(normalized)) {\n    throw new Error(`Invalid server host: ${JSON.stringify(hostname)}`)\n  }\n  return normalized\n}\n\nexport function isWildcardHostname(hostname: string): boolean {\n  return NORMALIZED_WILDCARD_HOSTS.has(stripIpv6Brackets(hostname.trim()))\n}\n","import { isIP } from \"node:net\"\n\nimport { isWildcardHostname, normalizeHostnameBase } from \"./server-host-shared\"\n\nexport const DEFAULT_SERVER_HOST = \"127.0.0.1\"\n\n// Listen failures that mean the hostname itself cannot be bound, as opposed\n// to the port being occupied (EADDRINUSE) or forbidden (EACCES). ENOTFOUND\n// covers unresolvable names such as typos, EADDRNOTAVAIL covers valid IPs\n// that are not assigned to this machine.\nconst INVALID_BIND_ERROR_CODES = new Set([\n  \"ENOTFOUND\",\n  \"EADDRNOTAVAIL\",\n  \"EINVAL\",\n  \"EAFNOSUPPORT\",\n  \"ENXIO\",\n])\n\nexport function isInvalidBindErrorCode(code?: string): boolean {\n  return !!code && INVALID_BIND_ERROR_CODES.has(code)\n}\n\nexport interface ServerBinding {\n  hostname: string\n  clientHostname: string\n  networkExposed: boolean\n}\n\nfunction isLoopbackIpv4(hostname: string): boolean {\n  return isIP(hostname) === 4 && hostname.split(\".\", 1)[0] === \"127\"\n}\n\nfunction isLoopbackMappedIpv4(hostname: string): boolean {\n  try {\n    const canonicalHostname = new URL(`http://[${hostname}]/`).hostname.slice(\n      1,\n      -1,\n    )\n    const mappedIpv4 = canonicalHostname.match(\n      /^::ffff:([\\da-f]{1,4}):[\\da-f]{1,4}$/,\n    )\n    if (!mappedIpv4) {\n      return false\n    }\n\n    return (Number.parseInt(mappedIpv4[1], 16) & 0xff00) === 0x7f00\n  } catch {\n    return false\n  }\n}\n\nexport function normalizeServerHostname(hostname: string): string {\n  return normalizeHostnameBase(hostname)\n}\n\nexport function isLoopbackHostname(hostname: string): boolean {\n  const normalized = normalizeServerHostname(hostname).toLowerCase()\n  if (normalized === \"localhost\" || normalized === \"localhost.\") {\n    return true\n  }\n  if (isLoopbackIpv4(normalized)) {\n    return true\n  }\n  if (isIP(normalized) !== 6) {\n    return false\n  }\n\n  if (normalized === \"::1\" || normalized === \"0:0:0:0:0:0:0:1\") {\n    return true\n  }\n\n  return isLoopbackMappedIpv4(normalized)\n}\n\nexport function resolveServerBinding(\n  hostname: string,\n  hasApiKeys: boolean,\n): ServerBinding {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  const networkExposed = !isLoopbackHostname(normalizedHostname)\n\n  if (networkExposed && !hasApiKeys) {\n    throw new Error(\n      `Refusing to listen on non-loopback host ${JSON.stringify(normalizedHostname)} without gateway API keys. Run \\`npx @jeffreycao/copilot-api@latest auth keys --add <key>\\` first, or use \\`--host ${DEFAULT_SERVER_HOST}\\`.`,\n    )\n  }\n\n  return {\n    hostname: normalizedHostname,\n    clientHostname: resolveClientHostname(normalizedHostname),\n    networkExposed,\n  }\n}\n\nexport function resolveClientHostname(hostname: string): string {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  // Wildcard binds listen on every interface, which clients cannot dial\n  // directly (0.0.0.0 is not a routable destination).\n  return isWildcardHostname(normalizedHostname) ? DEFAULT_SERVER_HOST : (\n      normalizedHostname.toLowerCase()\n    )\n}\n\nexport function resolveClientHostnameOrDefault(\n  hostname: string | null | undefined,\n): string {\n  const normalizedHostname = hostname?.trim()\n  return normalizedHostname ?\n      resolveClientHostname(normalizedHostname)\n    : DEFAULT_SERVER_HOST\n}\n\nexport function formatServerUrl(hostname: string, port: number): string {\n  const urlHostname =\n    isIP(hostname) === 6 ? `[${hostname.replace(\"%\", \"%25\")}]` : hostname\n  return `http://${urlHostname}:${port}`\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\nimport { serve, type ServerHandler } from \"srvx\"\n\nimport { runProviderSetup } from \"./auth\"\nimport { isGitHubCopilotEnabled } from \"./lib/github-copilot-provider\"\nimport { listEnabledProviders, mergeConfigWithDefaults } from \"./lib/config\"\nimport { setupCopilotRuntime } from \"~/lib/copilot-runtime\"\nimport {\n  GITHUB_TOKEN_ENV,\n  readGitHubToken,\n  readGitHubTokenFromEnv,\n} from \"./lib/credential-store\"\nimport { startModelsDevCache } from \"./lib/models-dev-cache\"\nimport { initOpencodeVersion } from \"./lib/opencode\"\nimport { ensurePaths } from \"./lib/paths\"\nimport { initProxyFromEnv } from \"./lib/proxy\"\nimport {\n  getConfiguredApiKeys,\n  getMissingApiKeysMessage,\n} from \"./lib/request-auth\"\nimport {\n  DEFAULT_SERVER_HOST,\n  formatServerUrl,\n  resolveServerBinding,\n} from \"./lib/server-host\"\nimport { state } from \"./lib/state\"\n\ninterface RunServerOptions {\n  host: string\n  port: number\n  verbose: boolean\n  githubToken?: string\n  showToken: boolean\n  proxyEnv: boolean\n}\n\ntype GitHubTokenSource = \"cli\" | \"env\" | \"file\"\n\n// The environment is preferred over the token file so the token never has to\n// travel through the process list; --github-token stays first for callers that\n// opt in explicitly.\nasync function resolveGitHubToken(\n  cliToken: string | undefined,\n): Promise<{ token: string; source: GitHubTokenSource } | null> {\n  if (cliToken) return { token: cliToken, source: \"cli\" }\n\n  const envToken = readGitHubTokenFromEnv()\n  if (envToken) return { token: envToken, source: \"env\" }\n\n  const fileToken = await readGitHubToken()\n  if (fileToken) return { token: fileToken, source: \"file\" }\n\n  return null\n}\n\nasync function setupCopilotMode(\n  githubToken: string,\n  source: GitHubTokenSource,\n): Promise<void> {\n  state.githubTokenSource = source\n  consola.info(\n    source === \"cli\" ? \"Using provided GitHub token\"\n    : source === \"env\" ?\n      `Using GitHub token from the ${GITHUB_TOKEN_ENV} environment variable`\n    : \"Using GitHub token from local file\",\n  )\n\n  await setupCopilotRuntime(githubToken)\n}\n\nasync function setupProviderMode(): Promise<void> {\n  const enabledProviders = listEnabledProviders()\n\n  if (enabledProviders.length > 0) {\n    consola.info(`Using enabled providers: ${enabledProviders.join(\", \")}`)\n    return\n  }\n\n  if (!isGitHubCopilotEnabled()) {\n    throw new Error(\n      \"No enabled providers found. Enable GitHub Copilot with `copilot-api provider enable github-copilot`, or enable another configured provider.\",\n    )\n  }\n\n  consola.info(\"No enabled providers found. Setting one up...\")\n  await runProviderSetup()\n\n  if (state.githubToken && isGitHubCopilotEnabled()) {\n    // The setup flow persisted the token with the credential store.\n    await setupCopilotMode(state.githubToken, \"file\")\n    return\n  }\n\n  const providersAfterSetup = listEnabledProviders()\n  if (providersAfterSetup.length === 0) {\n    throw new Error(\n      \"Failed to configure any provider. Run `copilot-api auth login` to set one up.\",\n    )\n  }\n  consola.info(`Configured providers: ${providersAfterSetup.join(\", \")}`)\n}\n\nexport async function runServer(options: RunServerOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  consola.options.throttle = 0\n\n  mergeConfigWithDefaults()\n\n  const configuredApiKeys = getConfiguredApiKeys()\n  const binding = resolveServerBinding(\n    options.host,\n    configuredApiKeys.length > 0,\n  )\n\n  const missingApiKeysMessage = getMissingApiKeysMessage()\n  if (missingApiKeysMessage) {\n    consola.info(missingApiKeysMessage)\n  }\n\n  await initOpencodeVersion()\n\n  if (options.proxyEnv) {\n    initProxyFromEnv()\n  }\n\n  state.verbose = options.verbose\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await startModelsDevCache()\n\n  const serverUrl = formatServerUrl(binding.clientHostname, options.port)\n\n  const resolvedGitHubToken =\n    isGitHubCopilotEnabled() ?\n      await resolveGitHubToken(options.githubToken)\n    : null\n  if (resolvedGitHubToken && isGitHubCopilotEnabled()) {\n    await setupCopilotMode(\n      resolvedGitHubToken.token,\n      resolvedGitHubToken.source,\n    )\n  } else {\n    await setupProviderMode()\n  }\n\n  consola.box(\n    `🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`,\n  )\n\n  const { createServer } = await import(\"./server\")\n  const server = createServer({ networkExposed: binding.networkExposed })\n\n  serve({\n    fetch: server.fetch as ServerHandler,\n    hostname: binding.hostname,\n    port: options.port,\n    bun: {\n      idleTimeout: 0,\n    },\n  })\n}\n\nexport const start = defineCommand({\n  meta: {\n    name: \"start\",\n    description: \"Start the Copilot API server\",\n  },\n  args: {\n    host: {\n      type: \"string\",\n      default: process.env.HOST?.trim() || DEFAULT_SERVER_HOST,\n      description: \"Host to listen on\",\n    },\n    port: {\n      alias: \"p\",\n      type: \"string\",\n      default: \"4141\",\n      description: \"Port to listen on\",\n    },\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"github-token\": {\n      alias: \"g\",\n      type: \"string\",\n      description:\n        \"Provide GitHub token directly (must be generated using the `auth` subcommand)\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub and Copilot tokens on fetch and refresh\",\n    },\n    \"proxy-env\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Initialize proxy from environment variables\",\n    },\n  },\n  run({ args }) {\n    return runServer({\n      host: args.host,\n      port: Number.parseInt(args.port, 10),\n      verbose: args.verbose,\n      githubToken: args[\"github-token\"],\n      showToken: args[\"show-token\"],\n      proxyEnv: args[\"proxy-env\"],\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;AAIA,IAAI;AAMJ,SAAgB,mBAAyB;CACvC,IAAI;EACF,MAAM,SAAS,IAAI,MAAM;EACzB,MAAM,0BAAU,IAAI,IAAwB;EAmD5C,qBAAqB;GA5CnB,SACE,SACA,SACA;IACA,IAAI;KACF,MAAM,SACJ,OAAO,QAAQ,WAAW,WACxB,IAAI,IAAI,QAAQ,MAAM,IACrB,QAAQ;KAIb,MAAM,MAAMA,eAAI,OAAO,SAAS,CAAC;KACjC,MAAM,WAAW,OAAO,IAAI,SAAS,IAAI,MAAM,KAAA;KAC/C,IAAI,CAAC,UAAU;MACb,QAAQ,MAAM,sBAAsB,OAAO,UAAU;MACrD,OAAQ,OAAiC,SAAS,SAAS,OAAO;KACpE;KACA,IAAI,QAAQ,QAAQ,IAAI,QAAQ;KAChC,IAAI,CAAC,OAAO;MACV,QAAQ,IAAI,WAAW,QAAQ;MAC/B,QAAQ,IAAI,UAAU,KAAK;KAC7B;KACA,IAAI,QAAQ;KACZ,IAAI;MACF,MAAM,IAAI,IAAI,IAAI,QAAQ;MAC1B,QAAQ,GAAG,EAAE,SAAS,IAAI,EAAE;KAC9B,QAAQ,CAER;KACA,QAAQ,MAAM,qBAAqB,OAAO,SAAS,OAAO,OAAO;KACjE,OAAQ,MAAgC,SAAS,SAAS,OAAO;IACnE,QAAQ;KACN,OAAQ,OAAiC,SAAS,SAAS,OAAO;IACpE;GACF;GACA,QAAQ;IACN,OAAO,OAAO,MAAM;GACtB;GACA,UAAU;IACR,OAAO,OAAO,QAAQ;GACxB;EAG4B;EAE9B,IAAI,OAAO,QAAQ,aAAa;GAC9B,QAAQ,MAAM,uDAAuD;GACrE;EACF;EAEA,oBAAoB,kBAAkB;EACtC,QAAQ,MAAM,kDAAkD;CAClE,SAAS,KAAK;EACZ,QAAQ,MAAM,wBAAwB,GAAG;CAC3C;AACF;;;ACxEA,MAAa,0BAA0B;AAIvC,MAAa,4CAA4B,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;AAElE,SAAgB,kBAAkB,UAA0B;CAC1D,IAAI,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,GACnD,OAAO,SAAS,MAAM,GAAG,EAAE;CAE7B,OAAO;AACT;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,aAAa,kBAAkB,SAAS,KAAK,CAAC;CACpD,IAAI,CAAC,cAAc,wBAAwB,KAAK,UAAU,GACxD,MAAM,IAAI,MAAM,wBAAwB,KAAK,UAAU,QAAQ,GAAG;CAEpE,OAAO;AACT;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,OAAO,0BAA0B,IAAI,kBAAkB,SAAS,KAAK,CAAC,CAAC;AACzE;;;ACvBA,MAAa,sBAAsB;AAwBnC,SAAS,eAAe,UAA2B;CACjD,OAAO,KAAK,QAAQ,MAAM,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO;AAC/D;AAEA,SAAS,qBAAqB,UAA2B;CACvD,IAAI;EAKF,MAAM,aAJoB,IAAI,IAAI,WAAW,SAAS,GAAG,CAAC,CAAC,SAAS,MAClE,GACA,EAEiC,CAAC,CAAC,MACnC,sCACF;EACA,IAAI,CAAC,YACH,OAAO;EAGT,QAAQ,OAAO,SAAS,WAAW,IAAI,EAAE,IAAI,WAAY;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,wBAAwB,UAA0B;CAChE,OAAO,sBAAsB,QAAQ;AACvC;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,MAAM,aAAa,wBAAwB,QAAQ,CAAC,CAAC,YAAY;CACjE,IAAI,eAAe,eAAe,eAAe,cAC/C,OAAO;CAET,IAAI,eAAe,UAAU,GAC3B,OAAO;CAET,IAAI,KAAK,UAAU,MAAM,GACvB,OAAO;CAGT,IAAI,eAAe,SAAS,eAAe,mBACzC,OAAO;CAGT,OAAO,qBAAqB,UAAU;AACxC;AAEA,SAAgB,qBACd,UACA,YACe;CACf,MAAM,qBAAqB,wBAAwB,QAAQ;CAC3D,MAAM,iBAAiB,CAAC,mBAAmB,kBAAkB;CAE7D,IAAI,kBAAkB,CAAC,YACrB,MAAM,IAAI,MACR,2CAA2C,KAAK,UAAU,kBAAkB,EAAE,qHAAqH,oBAAoB,IACzN;CAGF,OAAO;EACL,UAAU;EACV,gBAAgB,sBAAsB,kBAAkB;EACxD;CACF;AACF;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,qBAAqB,wBAAwB,QAAQ;CAG3D,OAAO,mBAAmB,kBAAkB,IAAI,sBAC5C,mBAAmB,YAAY;AAErC;AAWA,SAAgB,gBAAgB,UAAkB,MAAsB;CAGtE,OAAO,UADL,KAAK,QAAQ,MAAM,IAAI,IAAI,SAAS,QAAQ,KAAK,KAAK,EAAE,KAAK,SAClC,GAAG;AAClC;;;ACxEA,eAAe,mBACb,UAC8D;CAC9D,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,WAAW,uBAAuB;CACxC,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,YAAY,MAAM,gBAAgB;CACxC,IAAI,WAAW,OAAO;EAAE,OAAO;EAAW,QAAQ;CAAO;CAEzD,OAAO;AACT;AAEA,eAAe,iBACb,aACA,QACe;CACf,MAAM,oBAAoB;CAC1B,QAAQ,KACN,WAAW,QAAQ,gCACjB,WAAW,QACX,+BAA+B,iBAAiB,yBAChD,oCACJ;CAEA,MAAM,oBAAoB,WAAW;AACvC;AAEA,eAAe,oBAAmC;CAChD,MAAM,mBAAmB,qBAAqB;CAE9C,IAAI,iBAAiB,SAAS,GAAG;EAC/B,QAAQ,KAAK,4BAA4B,iBAAiB,KAAK,IAAI,GAAG;EACtE;CACF;CAEA,IAAI,CAAC,uBAAuB,GAC1B,MAAM,IAAI,MACR,6IACF;CAGF,QAAQ,KAAK,+CAA+C;CAC5D,MAAM,iBAAiB;CAEvB,IAAI,MAAM,eAAe,uBAAuB,GAAG;EAEjD,MAAM,iBAAiB,MAAM,aAAa,MAAM;EAChD;CACF;CAEA,MAAM,sBAAsB,qBAAqB;CACjD,IAAI,oBAAoB,WAAW,GACjC,MAAM,IAAI,MACR,+EACF;CAEF,QAAQ,KAAK,yBAAyB,oBAAoB,KAAK,IAAI,GAAG;AACxE;AAEA,eAAsB,UAAU,SAA0C;CAExE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,QAAQ,QAAQ,WAAW;CAE3B,wBAAwB;CAExB,MAAM,oBAAoB,qBAAqB;CAC/C,MAAM,UAAU,qBACd,QAAQ,MACR,kBAAkB,SAAS,CAC7B;CAEA,MAAM,wBAAwB,yBAAyB;CACvD,IAAI,uBACF,QAAQ,KAAK,qBAAqB;CAGpC,MAAM,oBAAoB;CAE1B,IAAI,QAAQ,UACV,iBAAiB;CAGnB,MAAM,UAAU,QAAQ;CACxB,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,oBAAoB;CAE1B,MAAM,YAAY,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI;CAEtE,MAAM,sBACJ,uBAAuB,IACrB,MAAM,mBAAmB,QAAQ,WAAW,IAC5C;CACJ,IAAI,uBAAuB,uBAAuB,GAChD,MAAM,iBACJ,oBAAoB,OACpB,oBAAoB,MACtB;MAEA,MAAM,kBAAkB;CAG1B,QAAQ,IACN,wBAAwB,UAAU,yBAAyB,UAAU,OACvE;CAEA,MAAM,EAAE,iBAAiB,MAAM,OAAO;CACtC,MAAM,SAAS,aAAa,EAAE,gBAAgB,QAAQ,eAAe,CAAC;CAEtE,MAAM;EACJ,OAAO,OAAO;EACd,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,KAAK,EACH,aAAa,EACf;CACF,CAAC;AACH;AAEA,MAAa,QAAQ,cAAc;CACjC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,MAAM;GACJ,MAAM;GACN,SAAS,QAAQ,IAAI,MAAM,KAAK,KAAA;GAChC,aAAa;EACf;EACA,MAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,gBAAgB;GACd,OAAO;GACP,MAAM;GACN,aACE;EACJ;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,UAAU;GACf,MAAM,KAAK;GACX,MAAM,OAAO,SAAS,KAAK,MAAM,EAAE;GACnC,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,WAAW,KAAK;GAChB,UAAU,KAAK;EACjB,CAAC;CACH;AACF,CAAC"}
+{"version":3,"file":"start-COhhmcdU.js","names":["get"],"sources":["../src/lib/proxy.ts","../src/lib/server-host-shared.ts","../src/lib/server-host.ts","../src/start.ts"],"sourcesContent":["import consola from \"consola\"\nimport { getProxyForUrl } from \"proxy-from-env\"\nimport { Agent, ProxyAgent, setGlobalDispatcher, type Dispatcher } from \"undici\"\n\nlet proxyEnvDispatcher: Dispatcher | undefined\n\nexport function getProxyEnvDispatcher(): Dispatcher | undefined {\n  return proxyEnvDispatcher\n}\n\nexport function initProxyFromEnv(): void {\n  try {\n    const direct = new Agent()\n    const proxies = new Map<string, ProxyAgent>()\n\n    // We only need a minimal dispatcher that implements `dispatch` at runtime.\n    // Typing the object as `Dispatcher` forces TypeScript to require many\n    // additional methods. Instead, keep a plain object and cast when passing\n    // to `setGlobalDispatcher`.\n    const dispatcher = {\n      dispatch(\n        options: Dispatcher.DispatchOptions,\n        handler: Dispatcher.DispatchHandler,\n      ) {\n        try {\n          const origin =\n            typeof options.origin === \"string\" ?\n              new URL(options.origin)\n            : (options.origin as URL)\n          const get = getProxyForUrl as unknown as (\n            u: string,\n          ) => string | undefined\n          const raw = get(origin.toString())\n          const proxyUrl = raw && raw.length > 0 ? raw : undefined\n          if (!proxyUrl) {\n            consola.debug(`HTTP proxy bypass: ${origin.hostname}`)\n            return (direct as unknown as Dispatcher).dispatch(options, handler)\n          }\n          let agent = proxies.get(proxyUrl)\n          if (!agent) {\n            agent = new ProxyAgent(proxyUrl)\n            proxies.set(proxyUrl, agent)\n          }\n          let label = proxyUrl\n          try {\n            const u = new URL(proxyUrl)\n            label = `${u.protocol}//${u.host}`\n          } catch {\n            /* noop */\n          }\n          consola.debug(`HTTP proxy route: ${origin.hostname} via ${label}`)\n          return (agent as unknown as Dispatcher).dispatch(options, handler)\n        } catch {\n          return (direct as unknown as Dispatcher).dispatch(options, handler)\n        }\n      },\n      close() {\n        return direct.close()\n      },\n      destroy() {\n        return direct.destroy()\n      },\n    }\n\n    proxyEnvDispatcher = dispatcher as unknown as Dispatcher\n\n    if (typeof Bun !== \"undefined\") {\n      consola.debug(\"WebSocket proxy configured from environment (per-URL)\")\n      return\n    }\n\n    setGlobalDispatcher(proxyEnvDispatcher)\n    consola.debug(\"HTTP proxy configured from environment (per-URL)\")\n  } catch (err) {\n    consola.debug(\"Proxy setup skipped:\", err)\n  }\n}\n","// Pure hostname helpers shared by the gateway server (Node) and the desktop\n// app (including the renderer bundle). This module must stay free of\n// `node:*` imports because the renderer cannot use `node:net`; all\n// address-family checks live in `server-host.ts`.\nexport const INVALID_HOST_CHARACTERS = /[\\s/?#]/\n\n// Bind hosts that listen on every interface, in normalized form (no\n// brackets, so \"[::]\" is covered via `stripIpv6Brackets`).\nexport const NORMALIZED_WILDCARD_HOSTS = new Set([\"0.0.0.0\", \"::\"])\n\nexport function stripIpv6Brackets(hostname: string): string {\n  if (hostname.startsWith(\"[\") && hostname.endsWith(\"]\")) {\n    return hostname.slice(1, -1)\n  }\n  return hostname\n}\n\nexport function normalizeHostnameBase(hostname: string): string {\n  const normalized = stripIpv6Brackets(hostname.trim())\n  if (!normalized || INVALID_HOST_CHARACTERS.test(normalized)) {\n    throw new Error(`Invalid server host: ${JSON.stringify(hostname)}`)\n  }\n  return normalized\n}\n\nexport function isWildcardHostname(hostname: string): boolean {\n  return NORMALIZED_WILDCARD_HOSTS.has(stripIpv6Brackets(hostname.trim()))\n}\n","import { isIP } from \"node:net\"\n\nimport { isWildcardHostname, normalizeHostnameBase } from \"./server-host-shared\"\n\nexport const DEFAULT_SERVER_HOST = \"127.0.0.1\"\n\n// Listen failures that mean the hostname itself cannot be bound, as opposed\n// to the port being occupied (EADDRINUSE) or forbidden (EACCES). ENOTFOUND\n// covers unresolvable names such as typos, EADDRNOTAVAIL covers valid IPs\n// that are not assigned to this machine.\nconst INVALID_BIND_ERROR_CODES = new Set([\n  \"ENOTFOUND\",\n  \"EADDRNOTAVAIL\",\n  \"EINVAL\",\n  \"EAFNOSUPPORT\",\n  \"ENXIO\",\n])\n\nexport function isInvalidBindErrorCode(code?: string): boolean {\n  return !!code && INVALID_BIND_ERROR_CODES.has(code)\n}\n\nexport interface ServerBinding {\n  hostname: string\n  clientHostname: string\n  networkExposed: boolean\n}\n\nfunction isLoopbackIpv4(hostname: string): boolean {\n  return isIP(hostname) === 4 && hostname.split(\".\", 1)[0] === \"127\"\n}\n\nfunction isLoopbackMappedIpv4(hostname: string): boolean {\n  try {\n    const canonicalHostname = new URL(`http://[${hostname}]/`).hostname.slice(\n      1,\n      -1,\n    )\n    const mappedIpv4 = canonicalHostname.match(\n      /^::ffff:([\\da-f]{1,4}):[\\da-f]{1,4}$/,\n    )\n    if (!mappedIpv4) {\n      return false\n    }\n\n    return (Number.parseInt(mappedIpv4[1], 16) & 0xff00) === 0x7f00\n  } catch {\n    return false\n  }\n}\n\nexport function normalizeServerHostname(hostname: string): string {\n  return normalizeHostnameBase(hostname)\n}\n\nexport function isLoopbackHostname(hostname: string): boolean {\n  const normalized = normalizeServerHostname(hostname).toLowerCase()\n  if (normalized === \"localhost\" || normalized === \"localhost.\") {\n    return true\n  }\n  if (isLoopbackIpv4(normalized)) {\n    return true\n  }\n  if (isIP(normalized) !== 6) {\n    return false\n  }\n\n  if (normalized === \"::1\" || normalized === \"0:0:0:0:0:0:0:1\") {\n    return true\n  }\n\n  return isLoopbackMappedIpv4(normalized)\n}\n\nexport function resolveServerBinding(\n  hostname: string,\n  hasApiKeys: boolean,\n): ServerBinding {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  const networkExposed = !isLoopbackHostname(normalizedHostname)\n\n  if (networkExposed && !hasApiKeys) {\n    throw new Error(\n      `Refusing to listen on non-loopback host ${JSON.stringify(normalizedHostname)} without gateway API keys. Run \\`npx @jeffreycao/copilot-api@latest auth keys --add <key>\\` first, or use \\`--host ${DEFAULT_SERVER_HOST}\\`.`,\n    )\n  }\n\n  return {\n    hostname: normalizedHostname,\n    clientHostname: resolveClientHostname(normalizedHostname),\n    networkExposed,\n  }\n}\n\nexport function resolveClientHostname(hostname: string): string {\n  const normalizedHostname = normalizeServerHostname(hostname)\n  // Wildcard binds listen on every interface, which clients cannot dial\n  // directly (0.0.0.0 is not a routable destination).\n  return isWildcardHostname(normalizedHostname) ? DEFAULT_SERVER_HOST : (\n      normalizedHostname.toLowerCase()\n    )\n}\n\nexport function resolveClientHostnameOrDefault(\n  hostname: string | null | undefined,\n): string {\n  const normalizedHostname = hostname?.trim()\n  return normalizedHostname ?\n      resolveClientHostname(normalizedHostname)\n    : DEFAULT_SERVER_HOST\n}\n\nexport function formatServerUrl(hostname: string, port: number): string {\n  const urlHostname =\n    isIP(hostname) === 6 ? `[${hostname.replace(\"%\", \"%25\")}]` : hostname\n  return `http://${urlHostname}:${port}`\n}\n","#!/usr/bin/env node\n\nimport { defineCommand } from \"citty\"\nimport consola from \"consola\"\nimport { serve, type ServerHandler } from \"srvx\"\n\nimport { runProviderSetup } from \"./auth\"\nimport { isGitHubCopilotEnabled } from \"./lib/github-copilot-provider\"\nimport { listEnabledProviders, mergeConfigWithDefaults } from \"./lib/config\"\nimport { setupCopilotRuntime } from \"~/lib/copilot-runtime\"\nimport {\n  GITHUB_TOKEN_ENV,\n  readGitHubToken,\n  readGitHubTokenFromEnv,\n} from \"./lib/credential-store\"\nimport { startModelsDevCache } from \"./lib/models-dev-cache\"\nimport { initOpencodeVersion } from \"./lib/opencode\"\nimport { ensurePaths } from \"./lib/paths\"\nimport { initProxyFromEnv } from \"./lib/proxy\"\nimport {\n  getConfiguredApiKeys,\n  getMissingApiKeysMessage,\n} from \"./lib/request-auth\"\nimport {\n  DEFAULT_SERVER_HOST,\n  formatServerUrl,\n  resolveServerBinding,\n} from \"./lib/server-host\"\nimport { state } from \"./lib/state\"\n\ninterface RunServerOptions {\n  host: string\n  port: number\n  verbose: boolean\n  githubToken?: string\n  showToken: boolean\n  proxyEnv: boolean\n}\n\ntype GitHubTokenSource = \"cli\" | \"env\" | \"file\"\n\n// The environment is preferred over the token file so the token never has to\n// travel through the process list; --github-token stays first for callers that\n// opt in explicitly.\nasync function resolveGitHubToken(\n  cliToken: string | undefined,\n): Promise<{ token: string; source: GitHubTokenSource } | null> {\n  if (cliToken) return { token: cliToken, source: \"cli\" }\n\n  const envToken = readGitHubTokenFromEnv()\n  if (envToken) return { token: envToken, source: \"env\" }\n\n  const fileToken = await readGitHubToken()\n  if (fileToken) return { token: fileToken, source: \"file\" }\n\n  return null\n}\n\nasync function setupCopilotMode(\n  githubToken: string,\n  source: GitHubTokenSource,\n): Promise<void> {\n  state.githubTokenSource = source\n  consola.info(\n    source === \"cli\" ? \"Using provided GitHub token\"\n    : source === \"env\" ?\n      `Using GitHub token from the ${GITHUB_TOKEN_ENV} environment variable`\n    : \"Using GitHub token from local file\",\n  )\n\n  await setupCopilotRuntime(githubToken)\n}\n\nasync function setupProviderMode(): Promise<void> {\n  const enabledProviders = listEnabledProviders()\n\n  if (enabledProviders.length > 0) {\n    consola.info(`Using enabled providers: ${enabledProviders.join(\", \")}`)\n    return\n  }\n\n  if (!isGitHubCopilotEnabled()) {\n    throw new Error(\n      \"No enabled providers found. Enable GitHub Copilot with `copilot-api provider enable github-copilot`, or enable another configured provider.\",\n    )\n  }\n\n  consola.info(\"No enabled providers found. Setting one up...\")\n  await runProviderSetup()\n\n  if (state.githubToken && isGitHubCopilotEnabled()) {\n    // The setup flow persisted the token with the credential store.\n    await setupCopilotMode(state.githubToken, \"file\")\n    return\n  }\n\n  const providersAfterSetup = listEnabledProviders()\n  if (providersAfterSetup.length === 0) {\n    throw new Error(\n      \"Failed to configure any provider. Run `copilot-api auth login` to set one up.\",\n    )\n  }\n  consola.info(`Configured providers: ${providersAfterSetup.join(\", \")}`)\n}\n\nexport async function runServer(options: RunServerOptions): Promise<void> {\n  const tlsModule = await import(\"./lib/tls\")\n  tlsModule.enableSystemCACompat()\n\n  consola.options.throttle = 0\n\n  mergeConfigWithDefaults()\n\n  const configuredApiKeys = getConfiguredApiKeys()\n  const binding = resolveServerBinding(\n    options.host,\n    configuredApiKeys.length > 0,\n  )\n\n  const missingApiKeysMessage = getMissingApiKeysMessage()\n  if (missingApiKeysMessage) {\n    consola.info(missingApiKeysMessage)\n  }\n\n  await initOpencodeVersion()\n\n  if (options.proxyEnv) {\n    initProxyFromEnv()\n  }\n\n  state.verbose = options.verbose\n  if (options.verbose) {\n    consola.level = 5\n    consola.info(\"Verbose logging enabled\")\n  }\n\n  state.showToken = options.showToken\n\n  await ensurePaths()\n  await startModelsDevCache()\n\n  const serverUrl = formatServerUrl(binding.clientHostname, options.port)\n\n  const resolvedGitHubToken =\n    isGitHubCopilotEnabled() ?\n      await resolveGitHubToken(options.githubToken)\n    : null\n  if (resolvedGitHubToken && isGitHubCopilotEnabled()) {\n    await setupCopilotMode(\n      resolvedGitHubToken.token,\n      resolvedGitHubToken.source,\n    )\n  } else {\n    await setupProviderMode()\n  }\n\n  consola.box(\n    `🌐 Dashboard Viewer: ${serverUrl}/usage-viewer?endpoint=${serverUrl}/usage`,\n  )\n\n  const { createServer } = await import(\"./server\")\n  const server = createServer({ networkExposed: binding.networkExposed })\n\n  serve({\n    fetch: server.fetch as ServerHandler,\n    hostname: binding.hostname,\n    port: options.port,\n    bun: {\n      idleTimeout: 0,\n    },\n  })\n}\n\nexport const start = defineCommand({\n  meta: {\n    name: \"start\",\n    description: \"Start the Copilot API server\",\n  },\n  args: {\n    host: {\n      type: \"string\",\n      default: process.env.HOST?.trim() || DEFAULT_SERVER_HOST,\n      description: \"Host to listen on\",\n    },\n    port: {\n      alias: \"p\",\n      type: \"string\",\n      default: \"4141\",\n      description: \"Port to listen on\",\n    },\n    verbose: {\n      alias: \"v\",\n      type: \"boolean\",\n      default: false,\n      description: \"Enable verbose logging\",\n    },\n    \"github-token\": {\n      alias: \"g\",\n      type: \"string\",\n      description:\n        \"Provide GitHub token directly (must be generated using the `auth` subcommand)\",\n    },\n    \"show-token\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Show GitHub and Copilot tokens on fetch and refresh\",\n    },\n    \"proxy-env\": {\n      type: \"boolean\",\n      default: false,\n      description: \"Initialize proxy from environment variables\",\n    },\n  },\n  run({ args }) {\n    return runServer({\n      host: args.host,\n      port: Number.parseInt(args.port, 10),\n      verbose: args.verbose,\n      githubToken: args[\"github-token\"],\n      showToken: args[\"show-token\"],\n      proxyEnv: args[\"proxy-env\"],\n    })\n  },\n})\n"],"mappings":";;;;;;;;;;;;AAIA,IAAI;AAMJ,SAAgB,mBAAyB;CACvC,IAAI;EACF,MAAM,SAAS,IAAI,MAAM;EACzB,MAAM,0BAAU,IAAI,IAAwB;EAmD5C,qBAAqB;GA5CnB,SACE,SACA,SACA;IACA,IAAI;KACF,MAAM,SACJ,OAAO,QAAQ,WAAW,WACxB,IAAI,IAAI,QAAQ,MAAM,IACrB,QAAQ;KAIb,MAAM,MAAMA,eAAI,OAAO,SAAS,CAAC;KACjC,MAAM,WAAW,OAAO,IAAI,SAAS,IAAI,MAAM,KAAA;KAC/C,IAAI,CAAC,UAAU;MACb,QAAQ,MAAM,sBAAsB,OAAO,UAAU;MACrD,OAAQ,OAAiC,SAAS,SAAS,OAAO;KACpE;KACA,IAAI,QAAQ,QAAQ,IAAI,QAAQ;KAChC,IAAI,CAAC,OAAO;MACV,QAAQ,IAAI,WAAW,QAAQ;MAC/B,QAAQ,IAAI,UAAU,KAAK;KAC7B;KACA,IAAI,QAAQ;KACZ,IAAI;MACF,MAAM,IAAI,IAAI,IAAI,QAAQ;MAC1B,QAAQ,GAAG,EAAE,SAAS,IAAI,EAAE;KAC9B,QAAQ,CAER;KACA,QAAQ,MAAM,qBAAqB,OAAO,SAAS,OAAO,OAAO;KACjE,OAAQ,MAAgC,SAAS,SAAS,OAAO;IACnE,QAAQ;KACN,OAAQ,OAAiC,SAAS,SAAS,OAAO;IACpE;GACF;GACA,QAAQ;IACN,OAAO,OAAO,MAAM;GACtB;GACA,UAAU;IACR,OAAO,OAAO,QAAQ;GACxB;EAG4B;EAE9B,IAAI,OAAO,QAAQ,aAAa;GAC9B,QAAQ,MAAM,uDAAuD;GACrE;EACF;EAEA,oBAAoB,kBAAkB;EACtC,QAAQ,MAAM,kDAAkD;CAClE,SAAS,KAAK;EACZ,QAAQ,MAAM,wBAAwB,GAAG;CAC3C;AACF;;;ACxEA,MAAa,0BAA0B;AAIvC,MAAa,4CAA4B,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC;AAElE,SAAgB,kBAAkB,UAA0B;CAC1D,IAAI,SAAS,WAAW,GAAG,KAAK,SAAS,SAAS,GAAG,GACnD,OAAO,SAAS,MAAM,GAAG,EAAE;CAE7B,OAAO;AACT;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,aAAa,kBAAkB,SAAS,KAAK,CAAC;CACpD,IAAI,CAAC,cAAc,wBAAwB,KAAK,UAAU,GACxD,MAAM,IAAI,MAAM,wBAAwB,KAAK,UAAU,QAAQ,GAAG;CAEpE,OAAO;AACT;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,OAAO,0BAA0B,IAAI,kBAAkB,SAAS,KAAK,CAAC,CAAC;AACzE;;;ACvBA,MAAa,sBAAsB;AAwBnC,SAAS,eAAe,UAA2B;CACjD,OAAO,KAAK,QAAQ,MAAM,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC,CAAC,OAAO;AAC/D;AAEA,SAAS,qBAAqB,UAA2B;CACvD,IAAI;EAKF,MAAM,aAJoB,IAAI,IAAI,WAAW,SAAS,GAAG,CAAC,CAAC,SAAS,MAClE,GACA,EAEiC,CAAC,CAAC,MACnC,sCACF;EACA,IAAI,CAAC,YACH,OAAO;EAGT,QAAQ,OAAO,SAAS,WAAW,IAAI,EAAE,IAAI,WAAY;CAC3D,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,wBAAwB,UAA0B;CAChE,OAAO,sBAAsB,QAAQ;AACvC;AAEA,SAAgB,mBAAmB,UAA2B;CAC5D,MAAM,aAAa,wBAAwB,QAAQ,CAAC,CAAC,YAAY;CACjE,IAAI,eAAe,eAAe,eAAe,cAC/C,OAAO;CAET,IAAI,eAAe,UAAU,GAC3B,OAAO;CAET,IAAI,KAAK,UAAU,MAAM,GACvB,OAAO;CAGT,IAAI,eAAe,SAAS,eAAe,mBACzC,OAAO;CAGT,OAAO,qBAAqB,UAAU;AACxC;AAEA,SAAgB,qBACd,UACA,YACe;CACf,MAAM,qBAAqB,wBAAwB,QAAQ;CAC3D,MAAM,iBAAiB,CAAC,mBAAmB,kBAAkB;CAE7D,IAAI,kBAAkB,CAAC,YACrB,MAAM,IAAI,MACR,2CAA2C,KAAK,UAAU,kBAAkB,EAAE,qHAAqH,oBAAoB,IACzN;CAGF,OAAO;EACL,UAAU;EACV,gBAAgB,sBAAsB,kBAAkB;EACxD;CACF;AACF;AAEA,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,qBAAqB,wBAAwB,QAAQ;CAG3D,OAAO,mBAAmB,kBAAkB,IAAI,sBAC5C,mBAAmB,YAAY;AAErC;AAWA,SAAgB,gBAAgB,UAAkB,MAAsB;CAGtE,OAAO,UADL,KAAK,QAAQ,MAAM,IAAI,IAAI,SAAS,QAAQ,KAAK,KAAK,EAAE,KAAK,SAClC,GAAG;AAClC;;;ACxEA,eAAe,mBACb,UAC8D;CAC9D,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,WAAW,uBAAuB;CACxC,IAAI,UAAU,OAAO;EAAE,OAAO;EAAU,QAAQ;CAAM;CAEtD,MAAM,YAAY,MAAM,gBAAgB;CACxC,IAAI,WAAW,OAAO;EAAE,OAAO;EAAW,QAAQ;CAAO;CAEzD,OAAO;AACT;AAEA,eAAe,iBACb,aACA,QACe;CACf,MAAM,oBAAoB;CAC1B,QAAQ,KACN,WAAW,QAAQ,gCACjB,WAAW,QACX,+BAA+B,iBAAiB,yBAChD,oCACJ;CAEA,MAAM,oBAAoB,WAAW;AACvC;AAEA,eAAe,oBAAmC;CAChD,MAAM,mBAAmB,qBAAqB;CAE9C,IAAI,iBAAiB,SAAS,GAAG;EAC/B,QAAQ,KAAK,4BAA4B,iBAAiB,KAAK,IAAI,GAAG;EACtE;CACF;CAEA,IAAI,CAAC,uBAAuB,GAC1B,MAAM,IAAI,MACR,6IACF;CAGF,QAAQ,KAAK,+CAA+C;CAC5D,MAAM,iBAAiB;CAEvB,IAAI,MAAM,eAAe,uBAAuB,GAAG;EAEjD,MAAM,iBAAiB,MAAM,aAAa,MAAM;EAChD;CACF;CAEA,MAAM,sBAAsB,qBAAqB;CACjD,IAAI,oBAAoB,WAAW,GACjC,MAAM,IAAI,MACR,+EACF;CAEF,QAAQ,KAAK,yBAAyB,oBAAoB,KAAK,IAAI,GAAG;AACxE;AAEA,eAAsB,UAAU,SAA0C;CAExE,CAAA,MADwB,OAAO,qBAAA,CACrB,qBAAqB;CAE/B,QAAQ,QAAQ,WAAW;CAE3B,wBAAwB;CAExB,MAAM,oBAAoB,qBAAqB;CAC/C,MAAM,UAAU,qBACd,QAAQ,MACR,kBAAkB,SAAS,CAC7B;CAEA,MAAM,wBAAwB,yBAAyB;CACvD,IAAI,uBACF,QAAQ,KAAK,qBAAqB;CAGpC,MAAM,oBAAoB;CAE1B,IAAI,QAAQ,UACV,iBAAiB;CAGnB,MAAM,UAAU,QAAQ;CACxB,IAAI,QAAQ,SAAS;EACnB,QAAQ,QAAQ;EAChB,QAAQ,KAAK,yBAAyB;CACxC;CAEA,MAAM,YAAY,QAAQ;CAE1B,MAAM,YAAY;CAClB,MAAM,oBAAoB;CAE1B,MAAM,YAAY,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI;CAEtE,MAAM,sBACJ,uBAAuB,IACrB,MAAM,mBAAmB,QAAQ,WAAW,IAC5C;CACJ,IAAI,uBAAuB,uBAAuB,GAChD,MAAM,iBACJ,oBAAoB,OACpB,oBAAoB,MACtB;MAEA,MAAM,kBAAkB;CAG1B,QAAQ,IACN,wBAAwB,UAAU,yBAAyB,UAAU,OACvE;CAEA,MAAM,EAAE,iBAAiB,MAAM,OAAO;CACtC,MAAM,SAAS,aAAa,EAAE,gBAAgB,QAAQ,eAAe,CAAC;CAEtE,MAAM;EACJ,OAAO,OAAO;EACd,UAAU,QAAQ;EAClB,MAAM,QAAQ;EACd,KAAK,EACH,aAAa,EACf;CACF,CAAC;AACH;AAEA,MAAa,QAAQ,cAAc;CACjC,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;EACJ,MAAM;GACJ,MAAM;GACN,SAAS,QAAQ,IAAI,MAAM,KAAK,KAAA;GAChC,aAAa;EACf;EACA,MAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,SAAS;GACP,OAAO;GACP,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,gBAAgB;GACd,OAAO;GACP,MAAM;GACN,aACE;EACJ;EACA,cAAc;GACZ,MAAM;GACN,SAAS;GACT,aAAa;EACf;EACA,aAAa;GACX,MAAM;GACN,SAAS;GACT,aAAa;EACf;CACF;CACA,IAAI,EAAE,QAAQ;EACZ,OAAO,UAAU;GACf,MAAM,KAAK;GACX,MAAM,OAAO,SAAS,KAAK,MAAM,EAAE;GACnC,SAAS,KAAK;GACd,aAAa,KAAK;GAClB,WAAW,KAAK;GAChB,UAAU,KAAK;EACjB,CAAC;CACH;AACF,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@jeffreycao/copilot-api",
-  "version": "2.7.13",
+  "version": "2.7.14",
   "description": "GitHub Copilot, OpenAI Codex, OpenCode Go, and third-party AI provider gateway with OpenAI and Anthropic API compatibility.",
   "keywords": [
     "github-copilot",

package/pages/index.html

@@ -672,6 +672,7 @@
         };
 
         // --- State Management ---
+        const SESSION_PAGE_SIZE = 10;
         const state = {
           activeTab: "usage",
           models: null,
@@ -687,6 +688,10 @@
           data: null,
           tokenUsageDailySummary: null,
           tokenUsageSummary: null,
+          tokenUsageSessionsPage: null,
+          isSessionsLoading: false,
+          sessionsRequestId: 0,
+          tokenUsageSessionsError: null,
           tokenUsageEventsPage: null,
           tokenUsageDailyError: null,
           tokenUsageSummaryError: null,
@@ -939,15 +944,24 @@
           return url.toString();
         }
 
-        function buildTokenUsageEventsUrl(usageEndpoint, period, page) {
+        function buildTokenUsageEventsUrl(
+          usageEndpoint,
+          period,
+          page,
+          kind = "events"
+        ) {
           const url = new URL(
-            deriveEndpointUrl(usageEndpoint, "token-usage/events")
+            deriveEndpointUrl(usageEndpoint, `token-usage/${kind}`)
           );
           url.searchParams.set("period", period);
           url.searchParams.set("page", String(page));
           url.searchParams.set(
             "page_size",
-            String(DEFAULT_TOKEN_USAGE_EVENTS_PAGE_SIZE)
+            String(
+              kind === "sessions"
+                ? SESSION_PAGE_SIZE
+                : DEFAULT_TOKEN_USAGE_EVENTS_PAGE_SIZE
+            )
           );
           return url.toString();
         }
@@ -1635,6 +1649,7 @@
           const summary = state.tokenUsageSummary;
           const dailySummary = state.tokenUsageDailySummary;
           const eventsPage = state.tokenUsageEventsPage;
+          const sessionsPage = state.tokenUsageSessionsPage;
           const totals = summary?.totals || EMPTY_TOKEN_USAGE_TOTALS;
           const activeRange =
             summary?.range || dailySummary?.range || eventsPage?.range || null;
@@ -1783,6 +1798,28 @@
                   ${renderTokenUsageModelBreakdown(summary)}
                 </div>
 
+                <div class="panel">
+                  <div class="panel-header">
+                    <div>
+                      <p class="panel-title">Session Breakdown</p>
+                      <p class="panel-meta">${sessionsPage ? `Page ${sessionsPage.page} / ${sessionsPage.total_pages} - ${formatNumber(sessionsPage.total)} sessions` : "No session rows loaded."}</p>
+                    </div>
+                    <div class="flex items-center gap-2">
+                      <button type="button" data-session-page="-1" class="pill-button px-3 py-1.5 text-xs font-semibold" ${!sessionsPage || state.isSessionsLoading || sessionsPage.page <= 1 ? "disabled" : ""}>Previous</button>
+                      <button type="button" data-session-page="1" class="pill-button px-3 py-1.5 text-xs font-semibold" ${!sessionsPage || state.isSessionsLoading || sessionsPage.page >= sessionsPage.total_pages ? "disabled" : ""}>Next</button>
+                    </div>
+                  </div>
+                  ${
+                    state.tokenUsageSessionsError
+                      ? `<div class="p-4">${renderError(
+                          state.tokenUsageSessionsError,
+                          "Session breakdown failed"
+                        )}<button type="button" data-session-page="0" class="pill-button mt-2 px-3 py-1.5 text-xs font-semibold">Retry</button></div>`
+                      : ""
+                  }
+                  ${renderTokenUsageModelBreakdown({ bySession: sessionsPage?.items }, "session")}
+                </div>
+
                 <div class="panel">
                   <div class="panel-header flex-col items-start sm:flex-row sm:items-center">
                     <div>
@@ -2248,20 +2285,22 @@
           `;
         }
 
-        function renderTokenUsageModelBreakdown(summary) {
-          if (!summary || summary.byModel.length === 0) {
+        function renderTokenUsageModelBreakdown(summary, by = "model") {
+          const items = by === "session" ? summary?.bySession : summary?.byModel;
+          if (!items || items.length === 0) {
             return renderEmptyState(
               "No token usage recorded for the selected period."
             );
           }
 
-          const rows = summary.byModel
+          const rows = items
             .map((model) => {
+              const name = formatCellText(by === "session" ? model.session_id : model.model);
               return `
                 <tr class="border-b last:border-b-0" style="border-color: var(--color-bg-light-1);">
-                  <td class="px-4 py-2 max-w-[280px] truncate" style="color: var(--color-fg-lightest);" title="${escapeHtml(
-                    model.model
-                  )}">${escapeHtml(model.model)}</td>
+                  <td class="px-4 py-2 max-w-[280px] truncate${by === "session" ? " font-mono" : ""}" style="color: var(--color-fg-lightest);" title="${escapeHtml(
+                    name
+                  )}">${escapeHtml(name)}</td>
                   <td class="px-4 py-2 text-right" style="color: var(--color-fg-dark);">${formatNumber(
                     model.request_count
                   )}</td>
@@ -2296,7 +2335,7 @@
               <table class="data-table min-w-[960px] text-left">
                 <thead>
                   <tr>
-                    <th class="px-4 py-2 font-semibold">Model</th>
+                    <th class="px-4 py-2 font-semibold">${by === "session" ? "Session" : "Model"}</th>
                     <th class="px-4 py-2 text-right font-semibold">Requests</th>
                     <th class="px-4 py-2 text-right font-semibold">Input</th>
                     <th class="px-4 py-2 text-right font-semibold">Output</th>
@@ -2473,6 +2512,7 @@
          * Fetches usage data and token usage data from the specified API endpoint.
          */
         async function fetchData(page = 1) {
+          invalidateSessionsRequest();
           const endpoint = endpointUrlInput.value.trim();
           if (!endpoint) {
             state.data = null;
@@ -2516,6 +2556,7 @@
 
             if (summaryResult.status === "fulfilled") {
               state.tokenUsageSummary = summaryResult.value;
+              void fetchTokenUsageSessionsPage(1);
             } else if (
               isMissingTokenUsageEndpointError(summaryResult.reason)
             ) {
@@ -2572,6 +2613,7 @@
         }
 
         async function fetchTokenUsageSummaryAndEvents(page = 1) {
+          invalidateSessionsRequest();
           const endpoint = endpointUrlInput.value.trim();
           if (!endpoint) {
             state.tokenUsageDailySummary = null;
@@ -2607,6 +2649,7 @@
 
             if (summaryResult.status === "fulfilled") {
               state.tokenUsageSummary = summaryResult.value;
+              void fetchTokenUsageSessionsPage(1);
             } else if (
               isMissingTokenUsageEndpointError(summaryResult.reason)
             ) {
@@ -2692,6 +2735,56 @@
           }
         }
 
+        async function fetchTokenUsageSessionsPage(page) {
+          const endpoint = endpointUrlInput.value.trim();
+          if (!endpoint) {
+            return;
+          }
+
+          const requestId = ++state.sessionsRequestId;
+          state.isSessionsLoading = true;
+          state.tokenUsageSessionsError = null;
+          render();
+
+          try {
+            const result = await fetchJson(
+              buildTokenUsageEventsUrl(
+                resolveUsageUrl(endpoint),
+                getSelectedPeriod(),
+                page,
+                "sessions"
+              )
+            );
+            if (requestId !== state.sessionsRequestId) {
+              return;
+            }
+            state.tokenUsageSessionsPage = result;
+          } catch (error) {
+            if (requestId !== state.sessionsRequestId) {
+              return;
+            }
+            // Older servers have no sessions endpoint; show the empty state.
+            if (isMissingTokenUsageEndpointError(error)) {
+              state.tokenUsageSessionsPage = null;
+            } else {
+              console.error("Token usage sessions fetch error:", error);
+              state.tokenUsageSessionsError = getErrorMessage(error);
+            }
+          }
+
+          state.isSessionsLoading = false;
+          render("usage");
+        }
+
+        // Clears sessions when refreshing the endpoint or period and ignores
+        // late responses from the previous context.
+        function invalidateSessionsRequest() {
+          state.sessionsRequestId += 1;
+          state.isSessionsLoading = false;
+          state.tokenUsageSessionsPage = null;
+          state.tokenUsageSessionsError = null;
+        }
+
         // --- Event Handlers & Initialization ---
 
         /**
@@ -2753,6 +2846,18 @@
             return;
           }
 
+          const sessionButton = event.target.closest("[data-session-page]");
+          if (sessionButton) {
+            if (!state.isSessionsLoading) {
+              // Offset 0 is the error retry button: reload the current page.
+              void fetchTokenUsageSessionsPage(
+                (state.tokenUsageSessionsPage?.page ?? 1)
+                  + Number(sessionButton.getAttribute("data-session-page"))
+              );
+            }
+            return;
+          }
+
           const actionButton = event.target.closest("[data-page-action]");
           if (!actionButton || !state.tokenUsageEventsPage || state.isEventsLoading) {
             return;