@jheavenknows/bluerouter 1.0.26 → 1.0.28

package/app/public/i18n/literals/zh-TW.json

@@ -108,7 +108,7 @@
   "Manage your AI provider connections": "管理您的 AI 提供者連接",
   "Model combos with fallback": "具有備用的模型組合",
   "Monitor your API usage, token consumption, and request logs": "監控您的 API 使用、令牌消耗和請求日誌",
-  "Intercept CLI tool traffic and route through 9Router": "攔截 CLI 工具流量並通過 9Router 路由",
+  "Intercept CLI tool traffic and route through Bluerouter": "攔截 CLI 工具流量並通過 Bluerouter 路由",
   "Configure CLI tools": "配置 CLI 工具",
   "API endpoint configuration": "API 端點配置",
   "Manage your preferences": "管理您的首選項",
@@ -172,9 +172,9 @@
   "Cert": "證書",
   "Server": "服務器",
   "Purpose:": "目的：",
-  "Use Antigravity IDE & GitHub Copilot → with ANY provider/model from 9Router": "使用 Antigravity IDE 和 GitHub Copilot → 與 9Router 中的任何提供者/模型一起",
+  "Use Antigravity IDE & GitHub Copilot → with ANY provider/model from Bluerouter": "使用 Antigravity IDE 和 GitHub Copilot → 與 Bluerouter 中的任何提供者/模型一起",
   "How it works:": "工作原理：",
-  "Antigravity/Copilot IDE request → DNS redirect to localhost:443 → AI Traffic Proxy intercepts → 9Router → response to Antigravity/Copilot": "Antigravity/Copilot IDE 請求 → DNS 重定向到 localhost:443 → MITM 代理攔截 → 9Router → 响應到 Antigravity/Copilot",
+  "Antigravity/Copilot IDE request → DNS redirect to localhost:443 → AI Traffic Proxy intercepts → Bluerouter → response to Antigravity/Copilot": "Antigravity/Copilot IDE 請求 → DNS 重定向到 localhost:443 → MITM 代理攔截 → Bluerouter → 响應到 Antigravity/Copilot",
   "No API keys — create one in Keys page": "沒有 API 金鑰 — 在金鑰頁面中創建一個",
   "sk_bluerouter (default)": "sk_bluerouter（默認）",
   "Server started": "服務器已啟動",

package/app/src/mitm/server.js

@@ -23,7 +23,7 @@ Private-Lines: `+u+`\r
 `,s+=c;var S=xa("putty-private-key-file-mac-key",t),T=xe.util.createBuffer();Cr(T,r),Cr(T,n),Cr(T,a),T.putInt32(i.length()),T.putBuffer(i),T.putInt32(l.length()),T.putBuffer(l);var B=xe.hmac.create();return B.start("sha1",S),B.update(T.bytes()),s+=`\r
 Private-MAC: `+B.digest().toHex()+`\r
 `,s};Sa.publicKeyToOpenSSH=function(e,t){var a="ssh-rsa";t=t||"";var r=xe.util.createBuffer();return Cr(r,a),St(r,e.e),St(r,e.n),a+" "+xe.util.encode64(r.bytes())+" "+t};Sa.privateKeyToOpenSSH=function(e,t){return t?xe.pki.encryptRsaPrivateKey(e,t,{legacy:!0,algorithm:"aes128"}):xe.pki.privateKeyToPem(e)};Sa.getPublicKeyFingerprint=function(e,t){t=t||{};var a=t.md||xe.md.md5.create(),r="ssh-rsa",n=xe.util.createBuffer();Cr(n,r),St(n,e.e),St(n,e.n),a.start(),a.update(n.getBytes());var s=a.digest();if(t.encoding==="hex"){var i=s.toHex();return t.delimiter?i.match(/.{2}/g).join(t.delimiter):i}else{if(t.encoding==="binary")return s.getBytes();if(t.encoding)throw new Error('Unknown encoding "'+t.encoding+'".')}return s};function St(e,t){var a=t.toString(16);a[0]>="8"&&(a="00"+a);var r=xe.util.hexToBytes(a);e.putInt32(r.length),e.putBytes(r)}function Cr(e,t){e.putInt32(t.length),e.putString(t)}function xa(){for(var e=xe.md.sha1.create(),t=arguments.length,a=0;a<t;++a)e.update(arguments[a]);return e.digest()}});var So=K(($h,xo)=>{xo.exports=$();Lt();Ks();ft();Qr();br();no();or();uo();ho();yo();sn();aa();Yt();Za();ln();mo();fn();tn();za();ca();nt();ja();Eo();vn();ae()});var Bo=K((jh,Io)=>{var Mt=require("path"),j=require("fs"),ge=So(),{execFileSync:On}=require("child_process"),{MITM_DIR:qt}=nr(),Re=Mt.join(qt,"rootCA.key"),Te=Mt.join(qt,"rootCA.crt"),Tt=Mt.join(qt,"rootCA.csr"),Dn=Mt.join(qt,"rootCA.csr.cnf"),Xe=Mt.join(qt,"rootCA.pending.key"),Un=Mt.join(qt,"backup");function Kr(){j.existsSync(qt)||j.mkdirSync(qt,{recursive:!0})}function Fr(e,t){let a=String(e||"").trim();if(!a)throw new Error(`${t} is empty`);return`${a}
-`}function Vn(e){return ge.md.sha256.create().update(ge.pki.publicKeyToPem(e),"utf8").digest().toHex()}function bf(e){if(!e?.n||!e?.e)throw new Error("Only RSA private keys are supported for MITM Root CA");return ge.pki.setRsaPublicKey(e.n,e.e)}function Fn(e){let t=e.getExtension("basicConstraints"),a=e.getExtension("keyUsage");return!!t?.cA&&(!a||a.keyCertSign===!0)}function To(e,t){let a=Vn(e.publicKey),r=Vn(bf(t));if(a!==r)throw new Error("Certificate public key does not match private key")}function Ta(){Kr();let e=j.existsSync(Re),t=j.existsSync(Te);if(!e&&!t)return null;j.mkdirSync(Un,{recursive:!0});let a=new Date().toISOString().replace(/[:.]/g,"-"),r={key:Mt.join(Un,`rootCA.${a}.key`),cert:Mt.join(Un,`rootCA.${a}.crt`)};return e&&j.copyFileSync(Re,r.key),t&&j.copyFileSync(Te,r.cert),r}function Kn(e,t="Certificate"){try{return ge.pki.certificateFromPem(Fr(e,t))}catch(a){throw new Error(`${t} is not a valid PEM certificate: ${a.message}`)}}function Ao(e,t="Private key"){try{return ge.pki.privateKeyFromPem(Fr(e,t))}catch(a){throw new Error(`${t} is not a valid PEM private key: ${a.message}`)}}function Mn(e){try{let t=ge.pki.certificateFromPem(j.readFileSync(e,"utf8")),a=new Date(Date.now()+720*60*60*1e3);return t.validity.notAfter<a}catch{return!0}}function qn(){let e=j.existsSync(Te),t=j.existsSync(Re),a=j.existsSync(Tt),r=j.existsSync(Xe),n={certExists:e,keyExists:t,csrExists:a,pendingKeyExists:r,certPath:Te,keyPath:Re,csrPath:Tt,pendingKeyPath:Xe};if(!e)return n;try{let s=Kn(j.readFileSync(Te,"utf8")),i=s.subject.attributes.map(u=>`${u.shortName||u.name}=${u.value}`).join(", "),o=s.issuer.attributes.map(u=>`${u.shortName||u.name}=${u.value}`).join(", ");n.subject=i,n.issuer=o,n.serialNumber=s.serialNumber,n.notBefore=s.validity.notBefore.toISOString(),n.notAfter=s.validity.notAfter.toISOString(),n.expiredOrExpiringSoon=Mn(Te),n.isCa=Fn(s),n.isSelfSigned=i===o,n.fingerprint=Vn(s.publicKey)}catch(s){n.error=s.message}return n}async function _f(){let e=j.existsSync(Re)&&j.existsSync(Te);if(e&&!Mn(Te))return console.log("\u2705 Root CA already exists"),{key:Re,cert:Te};if(e){console.log("\u{1F510} Root CA expired or expiring soon \u2014 regenerating...");try{j.unlinkSync(Re)}catch{}try{j.unlinkSync(Te)}catch{}}Kr(),console.log("\u{1F510} Generating Root CA certificate...");let t=ge.pki.rsa.generateKeyPair(2048),a=ge.pki.createCertificate();a.publicKey=t.publicKey,a.serialNumber="01",a.validity.notBefore=new Date,a.validity.notAfter=new Date,a.validity.notAfter.setFullYear(a.validity.notBefore.getFullYear()+10);let r=[{name:"commonName",value:"Blue Router Gateway Root CA"},{name:"organizationName",value:"Blue Router Gateway"},{name:"countryName",value:"VN"}];a.setSubject(r),a.setIssuer(r),a.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),a.sign(t.privateKey,ge.md.sha256.create());let n=ge.pki.privateKeyToPem(t.privateKey),s=ge.pki.certificateToPem(a);return j.writeFileSync(Re,n,{mode:384}),j.writeFileSync(Te,s),console.log("\u2705 Root CA generated successfully"),{key:Re,cert:Te}}function Nf({certPem:e,keyPem:t}){Kr();let a=Fr(e,"Certificate"),r=Fr(t,"Private key"),n=Kn(a),s=Ao(r);if(To(n,s),!Fn(n))throw new Error("Certificate must be a CA certificate with basicConstraints CA:true and keyCertSign usage");if(n.validity.notAfter<new Date)throw new Error("Certificate is already expired");let i=Ta();j.writeFileSync(Re,r,{mode:384}),j.writeFileSync(Te,a);try{j.unlinkSync(Tt)}catch{}try{j.unlinkSync(Xe)}catch{}return{key:Re,cert:Te,backup:i,info:qn()}}function Pn(e,t){return String(e||t||"").replace(/[\r\n]+/g," ").replace(/[\\]/g,"\\\\").trim()||String(t||"")}function wf(){try{return On("openssl",["version"],{stdio:"ignore"}),!0}catch{return!1}}function Rf({commonName:e,organizationName:t,countryName:a}={}){let r=Pn(e,"Fujinet 9Router MITM CA"),n=Pn(t,"Fujinet"),i=`[ req ]
+`}function Vn(e){return ge.md.sha256.create().update(ge.pki.publicKeyToPem(e),"utf8").digest().toHex()}function bf(e){if(!e?.n||!e?.e)throw new Error("Only RSA private keys are supported for MITM Root CA");return ge.pki.setRsaPublicKey(e.n,e.e)}function Fn(e){let t=e.getExtension("basicConstraints"),a=e.getExtension("keyUsage");return!!t?.cA&&(!a||a.keyCertSign===!0)}function To(e,t){let a=Vn(e.publicKey),r=Vn(bf(t));if(a!==r)throw new Error("Certificate public key does not match private key")}function Ta(){Kr();let e=j.existsSync(Re),t=j.existsSync(Te);if(!e&&!t)return null;j.mkdirSync(Un,{recursive:!0});let a=new Date().toISOString().replace(/[:.]/g,"-"),r={key:Mt.join(Un,`rootCA.${a}.key`),cert:Mt.join(Un,`rootCA.${a}.crt`)};return e&&j.copyFileSync(Re,r.key),t&&j.copyFileSync(Te,r.cert),r}function Kn(e,t="Certificate"){try{return ge.pki.certificateFromPem(Fr(e,t))}catch(a){throw new Error(`${t} is not a valid PEM certificate: ${a.message}`)}}function Ao(e,t="Private key"){try{return ge.pki.privateKeyFromPem(Fr(e,t))}catch(a){throw new Error(`${t} is not a valid PEM private key: ${a.message}`)}}function Mn(e){try{let t=ge.pki.certificateFromPem(j.readFileSync(e,"utf8")),a=new Date(Date.now()+720*60*60*1e3);return t.validity.notAfter<a}catch{return!0}}function qn(){let e=j.existsSync(Te),t=j.existsSync(Re),a=j.existsSync(Tt),r=j.existsSync(Xe),n={certExists:e,keyExists:t,csrExists:a,pendingKeyExists:r,certPath:Te,keyPath:Re,csrPath:Tt,pendingKeyPath:Xe};if(!e)return n;try{let s=Kn(j.readFileSync(Te,"utf8")),i=s.subject.attributes.map(u=>`${u.shortName||u.name}=${u.value}`).join(", "),o=s.issuer.attributes.map(u=>`${u.shortName||u.name}=${u.value}`).join(", ");n.subject=i,n.issuer=o,n.serialNumber=s.serialNumber,n.notBefore=s.validity.notBefore.toISOString(),n.notAfter=s.validity.notAfter.toISOString(),n.expiredOrExpiringSoon=Mn(Te),n.isCa=Fn(s),n.isSelfSigned=i===o,n.fingerprint=Vn(s.publicKey)}catch(s){n.error=s.message}return n}async function _f(){let e=j.existsSync(Re)&&j.existsSync(Te);if(e&&!Mn(Te))return console.log("\u2705 Root CA already exists"),{key:Re,cert:Te};if(e){console.log("\u{1F510} Root CA expired or expiring soon \u2014 regenerating...");try{j.unlinkSync(Re)}catch{}try{j.unlinkSync(Te)}catch{}}Kr(),console.log("\u{1F510} Generating Root CA certificate...");let t=ge.pki.rsa.generateKeyPair(2048),a=ge.pki.createCertificate();a.publicKey=t.publicKey,a.serialNumber="01",a.validity.notBefore=new Date,a.validity.notAfter=new Date,a.validity.notAfter.setFullYear(a.validity.notBefore.getFullYear()+10);let r=[{name:"commonName",value:"Blue Router Gateway Root CA"},{name:"organizationName",value:"Blue Router Gateway"},{name:"countryName",value:"VN"}];a.setSubject(r),a.setIssuer(r),a.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),a.sign(t.privateKey,ge.md.sha256.create());let n=ge.pki.privateKeyToPem(t.privateKey),s=ge.pki.certificateToPem(a);return j.writeFileSync(Re,n,{mode:384}),j.writeFileSync(Te,s),console.log("\u2705 Root CA generated successfully"),{key:Re,cert:Te}}function Nf({certPem:e,keyPem:t}){Kr();let a=Fr(e,"Certificate"),r=Fr(t,"Private key"),n=Kn(a),s=Ao(r);if(To(n,s),!Fn(n))throw new Error("Certificate must be a CA certificate with basicConstraints CA:true and keyCertSign usage");if(n.validity.notAfter<new Date)throw new Error("Certificate is already expired");let i=Ta();j.writeFileSync(Re,r,{mode:384}),j.writeFileSync(Te,a);try{j.unlinkSync(Tt)}catch{}try{j.unlinkSync(Xe)}catch{}return{key:Re,cert:Te,backup:i,info:qn()}}function Pn(e,t){return String(e||t||"").replace(/[\r\n]+/g," ").replace(/[\\]/g,"\\\\").trim()||String(t||"")}function wf(){try{return On("openssl",["version"],{stdio:"ignore"}),!0}catch{return!1}}function Rf({commonName:e,organizationName:t,countryName:a}={}){let r=Pn(e,"Fujinet Bluerouter MITM CA"),n=Pn(t,"Fujinet"),i=`[ req ]
 default_bits       = 4096
 prompt             = no
 distinguished_name = dn
@@ -39,7 +39,7 @@ CN = ${r}
 basicConstraints = critical, CA:true, pathlen:0
 keyUsage = critical, keyCertSign, cRLSign
 subjectKeyIdentifier = hash
-`,o=Ta();j.writeFileSync(Dn,i,"utf8");try{On("openssl",["genrsa","-out",Xe,"4096"],{stdio:["ignore","pipe","pipe"]}),On("openssl",["req","-new","-key",Xe,"-out",Tt,"-config",Dn],{stdio:["ignore","pipe","pipe"]});try{j.chmodSync(Xe,384)}catch{}return{csr:Tt,pendingKey:Xe,config:Dn,backup:o}}catch(u){try{j.unlinkSync(Xe)}catch{}try{j.unlinkSync(Tt)}catch{}let l=u?.stderr?String(u.stderr).trim():"";throw new Error(`OpenSSL CSR generation failed${l?`: ${l}`:""}`)}}function Lf({commonName:e,organizationName:t,countryName:a}={}){if(Kr(),wf())return Rf({commonName:e,organizationName:t,countryName:a});let r=[{name:"commonName",value:String(e||"Fujinet 9Router MITM CA").trim()||"Fujinet 9Router MITM CA"},{name:"organizationName",value:String(t||"Fujinet").trim()||"Fujinet"},{name:"organizationalUnitName",value:"AI Gateway"}],n=String(a||"VN").trim().slice(0,2).toUpperCase();n&&r.push({name:"countryName",value:n});let s=ge.pki.rsa.generateKeyPair(4096),i=ge.pki.createCertificationRequest();if(i.publicKey=s.publicKey,i.setSubject(r),i.sign(s.privateKey,ge.md.sha256.create()),!i.verify())throw new Error("Generated CSR failed verification");let o=Ta(),u=ge.pki.certificationRequestToPem(i),l=ge.pki.privateKeyToPem(s.privateKey);return j.writeFileSync(Xe,l,{mode:384}),j.writeFileSync(Tt,u),{csr:Tt,pendingKey:Xe,backup:o}}function kf({certPem:e}){if(Kr(),!j.existsSync(Xe))throw new Error("No pending CSR private key found. Generate a CSR first.");let t=Fr(e,"Signed certificate"),a=Kn(t,"Signed certificate"),r=Ao(j.readFileSync(Xe,"utf8"),"Pending private key");if(To(a,r),!Fn(a))throw new Error("Signed certificate must be a CA certificate with CA:true and keyCertSign usage");if(a.validity.notAfter<new Date)throw new Error("Signed certificate is already expired");let n=Ta();j.copyFileSync(Xe,Re);try{j.chmodSync(Re,384)}catch{}j.writeFileSync(Te,t);try{j.unlinkSync(Tt)}catch{}try{j.unlinkSync(Xe)}catch{}return{key:Re,cert:Te,backup:n,info:qn()}}function Df(){if(!j.existsSync(Re)||!j.existsSync(Te))throw new Error("Root CA not found. Generate it first.");let e=j.readFileSync(Re,"utf8"),t=j.readFileSync(Te,"utf8");return{key:ge.pki.privateKeyFromPem(e),cert:ge.pki.certificateFromPem(t)}}function Uf(e,t){let a=ge.pki.rsa.generateKeyPair(2048),r=ge.pki.createCertificate();return r.publicKey=a.publicKey,r.serialNumber=Math.floor(Math.random()*1e6).toString(),r.validity.notBefore=new Date,r.validity.notAfter=new Date,r.validity.notAfter.setFullYear(r.validity.notBefore.getFullYear()+1),r.setSubject([{name:"commonName",value:e}]),r.setIssuer(t.cert.subject.attributes),r.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:e},{type:2,value:`*.${e}`}]}]),r.sign(t.key,ge.md.sha256.create()),{key:ge.pki.privateKeyToPem(a.privateKey),cert:ge.pki.certificateToPem(r)}}Io.exports={generateRootCA:_f,importRootCAPair:Nf,generateRootCACsr:Lf,importSignedRootCACert:kf,loadRootCA:Df,generateLeafCert:Uf,isCertExpired:Mn,readRootCAInfo:qn,ROOT_CA_CERT_PATH:Te,ROOT_CA_KEY_PATH:Re,ROOT_CA_CSR_PATH:Tt,ROOT_CA_PENDING_KEY_PATH:Xe}});var _o=K((Jh,bo)=>{var Yh=require("path"),Wh=require("fs"),{MITM_DIR:Xh}=nr(),{generateRootCA:Pf,loadRootCA:Of,generateLeafCert:Vf}=Bo();async function Ff(){return await Pf()}function Kf(e){try{let t=Of(),a=Vf(e,t);return{key:a.key,cert:a.cert}}catch(t){return console.error(`Failed to generate cert for ${e}:`,t.message),null}}bo.exports={generateCert:Ff,getCertForDomain:Kf}});var Lo=K((Zh,Ro)=>{var No=require("fs"),Mf=require("path"),{DATA_DIR:qf}=nr(),wo=Mf.join(qf,"mitm","aliases.json");function Hf(){try{return No.existsSync(wo)?JSON.parse(No.readFileSync(wo,"utf-8")):null}catch{return null}}function Gf(e){return Hf()?.[e]||null}Ro.exports={getMitmAlias:Gf}});var Aa=K((rp,Uo)=>{var{log:ep,err:tp}=$t(),ko="http://localhost:20128",zf=String(process.env.MITM_ROUTER_BASE||ko).trim().replace(/\/+$/,"")||ko,Do=process.env.ROUTER_API_KEY,Qf=new Set(["host","content-length","connection","transfer-encoding","content-type","authorization"]);async function $f(e,t="/v1/chat/completions",a={}){let r={};for(let[s,i]of Object.entries(a))Qf.has(s.toLowerCase())||(r[s]=i);return await fetch(`${zf}${t}`,{method:"POST",headers:{...r,"Content-Type":"application/json",...Do&&{Authorization:`Bearer ${Do}`}},body:JSON.stringify(e)})}async function jf(e,t,a){let r=e.headers.get("content-type")||"application/json",n=e.status||200,s={"Content-Type":r,"Cache-Control":"no-cache",Connection:"keep-alive"};if(r.includes("text/event-stream")&&(s["X-Accel-Buffering"]="no"),t.writeHead(n,s),a&&a.writeHeader(e.status,Object.fromEntries(e.headers)),!e.body){let u=await e.text().catch(()=>"");a&&(a.writeChunk(u),a.end()),t.end(u);return}let i=e.body.getReader(),o=new TextDecoder;for(;;){let{done:u,value:l}=await i.read();if(u){a&&a.end(),t.end();break}a&&a.writeChunk(l),t.write(o.decode(l,{stream:!0}))}}Uo.exports={fetchRouter:$f,pipeSSE:jf}});var Oo=K((ap,Po)=>{var{err:Yf,createResponseDumper:Wf}=$t(),{IS_DEV:Xf}=Sr(),{fetchRouter:Jf,pipeSSE:Zf}=Aa();async function ed(e,t,a,r){let n=Xf?Wf(e,"intercept-antigravity"):null,s=e.url.includes(":streamGenerateContent");try{let i=JSON.parse(a.toString());i.model&&(i.model=r);let o=await Jf(i,"/v1/chat/completions",e.headers);await Zf(o,t,n)}catch(i){Yf(`[antigravity] ${i.message}`),n&&(n.writeChunk(`
+`,o=Ta();j.writeFileSync(Dn,i,"utf8");try{On("openssl",["genrsa","-out",Xe,"4096"],{stdio:["ignore","pipe","pipe"]}),On("openssl",["req","-new","-key",Xe,"-out",Tt,"-config",Dn],{stdio:["ignore","pipe","pipe"]});try{j.chmodSync(Xe,384)}catch{}return{csr:Tt,pendingKey:Xe,config:Dn,backup:o}}catch(u){try{j.unlinkSync(Xe)}catch{}try{j.unlinkSync(Tt)}catch{}let l=u?.stderr?String(u.stderr).trim():"";throw new Error(`OpenSSL CSR generation failed${l?`: ${l}`:""}`)}}function Lf({commonName:e,organizationName:t,countryName:a}={}){if(Kr(),wf())return Rf({commonName:e,organizationName:t,countryName:a});let r=[{name:"commonName",value:String(e||"Fujinet Bluerouter MITM CA").trim()||"Fujinet Bluerouter MITM CA"},{name:"organizationName",value:String(t||"Fujinet").trim()||"Fujinet"},{name:"organizationalUnitName",value:"AI Gateway"}],n=String(a||"VN").trim().slice(0,2).toUpperCase();n&&r.push({name:"countryName",value:n});let s=ge.pki.rsa.generateKeyPair(4096),i=ge.pki.createCertificationRequest();if(i.publicKey=s.publicKey,i.setSubject(r),i.sign(s.privateKey,ge.md.sha256.create()),!i.verify())throw new Error("Generated CSR failed verification");let o=Ta(),u=ge.pki.certificationRequestToPem(i),l=ge.pki.privateKeyToPem(s.privateKey);return j.writeFileSync(Xe,l,{mode:384}),j.writeFileSync(Tt,u),{csr:Tt,pendingKey:Xe,backup:o}}function kf({certPem:e}){if(Kr(),!j.existsSync(Xe))throw new Error("No pending CSR private key found. Generate a CSR first.");let t=Fr(e,"Signed certificate"),a=Kn(t,"Signed certificate"),r=Ao(j.readFileSync(Xe,"utf8"),"Pending private key");if(To(a,r),!Fn(a))throw new Error("Signed certificate must be a CA certificate with CA:true and keyCertSign usage");if(a.validity.notAfter<new Date)throw new Error("Signed certificate is already expired");let n=Ta();j.copyFileSync(Xe,Re);try{j.chmodSync(Re,384)}catch{}j.writeFileSync(Te,t);try{j.unlinkSync(Tt)}catch{}try{j.unlinkSync(Xe)}catch{}return{key:Re,cert:Te,backup:n,info:qn()}}function Df(){if(!j.existsSync(Re)||!j.existsSync(Te))throw new Error("Root CA not found. Generate it first.");let e=j.readFileSync(Re,"utf8"),t=j.readFileSync(Te,"utf8");return{key:ge.pki.privateKeyFromPem(e),cert:ge.pki.certificateFromPem(t)}}function Uf(e,t){let a=ge.pki.rsa.generateKeyPair(2048),r=ge.pki.createCertificate();return r.publicKey=a.publicKey,r.serialNumber=Math.floor(Math.random()*1e6).toString(),r.validity.notBefore=new Date,r.validity.notAfter=new Date,r.validity.notAfter.setFullYear(r.validity.notBefore.getFullYear()+1),r.setSubject([{name:"commonName",value:e}]),r.setIssuer(t.cert.subject.attributes),r.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:e},{type:2,value:`*.${e}`}]}]),r.sign(t.key,ge.md.sha256.create()),{key:ge.pki.privateKeyToPem(a.privateKey),cert:ge.pki.certificateToPem(r)}}Io.exports={generateRootCA:_f,importRootCAPair:Nf,generateRootCACsr:Lf,importSignedRootCACert:kf,loadRootCA:Df,generateLeafCert:Uf,isCertExpired:Mn,readRootCAInfo:qn,ROOT_CA_CERT_PATH:Te,ROOT_CA_KEY_PATH:Re,ROOT_CA_CSR_PATH:Tt,ROOT_CA_PENDING_KEY_PATH:Xe}});var _o=K((Jh,bo)=>{var Yh=require("path"),Wh=require("fs"),{MITM_DIR:Xh}=nr(),{generateRootCA:Pf,loadRootCA:Of,generateLeafCert:Vf}=Bo();async function Ff(){return await Pf()}function Kf(e){try{let t=Of(),a=Vf(e,t);return{key:a.key,cert:a.cert}}catch(t){return console.error(`Failed to generate cert for ${e}:`,t.message),null}}bo.exports={generateCert:Ff,getCertForDomain:Kf}});var Lo=K((Zh,Ro)=>{var No=require("fs"),Mf=require("path"),{DATA_DIR:qf}=nr(),wo=Mf.join(qf,"mitm","aliases.json");function Hf(){try{return No.existsSync(wo)?JSON.parse(No.readFileSync(wo,"utf-8")):null}catch{return null}}function Gf(e){return Hf()?.[e]||null}Ro.exports={getMitmAlias:Gf}});var Aa=K((rp,Uo)=>{var{log:ep,err:tp}=$t(),ko="http://localhost:20128",zf=String(process.env.MITM_ROUTER_BASE||ko).trim().replace(/\/+$/,"")||ko,Do=process.env.ROUTER_API_KEY,Qf=new Set(["host","content-length","connection","transfer-encoding","content-type","authorization"]);async function $f(e,t="/v1/chat/completions",a={}){let r={};for(let[s,i]of Object.entries(a))Qf.has(s.toLowerCase())||(r[s]=i);return await fetch(`${zf}${t}`,{method:"POST",headers:{...r,"Content-Type":"application/json",...Do&&{Authorization:`Bearer ${Do}`}},body:JSON.stringify(e)})}async function jf(e,t,a){let r=e.headers.get("content-type")||"application/json",n=e.status||200,s={"Content-Type":r,"Cache-Control":"no-cache",Connection:"keep-alive"};if(r.includes("text/event-stream")&&(s["X-Accel-Buffering"]="no"),t.writeHead(n,s),a&&a.writeHeader(e.status,Object.fromEntries(e.headers)),!e.body){let u=await e.text().catch(()=>"");a&&(a.writeChunk(u),a.end()),t.end(u);return}let i=e.body.getReader(),o=new TextDecoder;for(;;){let{done:u,value:l}=await i.read();if(u){a&&a.end(),t.end();break}a&&a.writeChunk(l),t.write(o.decode(l,{stream:!0}))}}Uo.exports={fetchRouter:$f,pipeSSE:jf}});var Oo=K((ap,Po)=>{var{err:Yf,createResponseDumper:Wf}=$t(),{IS_DEV:Xf}=Sr(),{fetchRouter:Jf,pipeSSE:Zf}=Aa();async function ed(e,t,a,r){let n=Xf?Wf(e,"intercept-antigravity"):null,s=e.url.includes(":streamGenerateContent");try{let i=JSON.parse(a.toString());i.model&&(i.model=r);let o=await Jf(i,"/v1/chat/completions",e.headers);await Zf(o,t,n)}catch(i){Yf(`[antigravity] ${i.message}`),n&&(n.writeChunk(`
 [ERROR] ${i.message}
 `),n.end()),s?(t.headersSent||t.writeHead(200,{"Content-Type":"text/event-stream"}),t.end(`data: ${JSON.stringify({error:{message:i.message}})}\r
 \r

package/cli.js

@@ -196,7 +196,7 @@ for i in $(seq 1 "\${MAX_WAIT_SECONDS}"); do
 done
 
 if [[ "\${ready}" != "1" ]]; then
-  log "9Router API is not ready; skip MITM autostart"
+  log "Bluerouter API is not ready; skip MITM autostart"
   exit 0
 fi
 
@@ -492,7 +492,7 @@ function writeSystemdService({
     .join("\n");
 
   const unit = `[Unit]
-Description=9Router
+Description=Bluerouter
 After=network.target
 
 [Service]
@@ -1319,7 +1319,7 @@ function startServer(latestVersion) {
             process.on("SIGHUP", () => {});
 
             console.log(`\n⏳ Switching to tray mode... (icon already visible in menu bar)`);
-            console.log(`🔔 9Router is running in tray (PID: ${process.pid})`);
+            console.log(`🔔 Bluerouter is running in tray (PID: ${process.pid})`);
             console.log(`   Server: http://${displayHost}:${port}`);
             console.log(`\n💡 You can close this terminal. Right-click tray icon to quit.\n`);
 
@@ -1338,7 +1338,7 @@ function startServer(latestVersion) {
           });
           bgProcess.unref();
 
-          console.log(`🔔 9Router is now running in background (PID: ${bgProcess.pid})`);
+          console.log(`🔔 Bluerouter is now running in background (PID: ${bgProcess.pid})`);
           console.log(`   Server: http://${displayHost}:${port}`);
           console.log(`\n💡 You can close this terminal. Right-click tray icon to quit.\n`);
 

package/package.json

@@ -1,7 +1,7 @@
 {
  "name": "@jheavenknows/bluerouter",
- "version": "1.0.26",
- "description": "9Router CLI - Start and manage 9Router server",
+ "version": "1.0.28",
+ "description": "Bluerouter CLI - Start and manage Bluerouter server",
  "bin": {
   "bluerouter": "./cli.js"
  },

package/src/cli/api/client.js

@@ -364,7 +364,7 @@ async function deleteCombo(id) {
 /**
  * Get CLI tool settings
  * @param {string} tool - Tool name: claude | codex | droid | openclaw
- * @returns {Promise<Object>} { success, data: { installed, has9Router, ... } }
+ * @returns {Promise<Object>} { success, data: { installed, hasBluerouter, ... } }
  */
 async function getCliToolSettings(tool) {
   return makeRequest("GET", `/api/cli-tools/${tool}-settings`);

package/src/cli/menus/cliTools.js

@@ -179,10 +179,10 @@ async function buildCodexHeader() {
   const result = await api.getCliToolSettings("codex");
   if (!result.success) return `  ${COLORS.red}Failed to load settings${COLORS.reset}`;
 
-  const { installed, has9Router, config } = result.data;
+  const { installed, hasBluerouter, config } = result.data;
   if (!installed) return `Status:   ${COLORS.red}✗ Codex CLI not installed${COLORS.reset}`;
 
-  if (!has9Router) {
+  if (!hasBluerouter) {
     return [
       `Status:   ${COLORS.red}✗ Not configured${COLORS.reset}`,
       `${COLORS.dim}Run "Quick Setup" to configure${COLORS.reset}`
@@ -267,18 +267,18 @@ async function buildDroidHeader() {
   const result = await api.getCliToolSettings("droid");
   if (!result.success) return `  ${COLORS.red}Failed to load settings${COLORS.reset}`;
 
-  const { installed, has9Router, settings } = result.data;
+  const { installed, hasBluerouter, settings } = result.data;
   if (!installed) return `Status:   ${COLORS.red}✗ Factory Droid not installed${COLORS.reset}`;
 
-  if (!has9Router) {
+  if (!hasBluerouter) {
     return [
       `Status:   ${COLORS.red}✗ Not configured${COLORS.reset}`,
       `${COLORS.dim}Run "Quick Setup" to configure${COLORS.reset}`
     ].join("\n");
   }
 
-  // Extract 9Router custom model config
-  const custom = settings?.customModels?.find(m => m.id === "custom:9Router-0");
+  // Extract Bluerouter custom model config
+  const custom = settings?.customModels?.find(m => m.id === "custom:Bluerouter-0");
   const lines = [`Status:   ${COLORS.green}✓ Configured${COLORS.reset}`];
   if (custom?.baseUrl) lines.push(`Endpoint: ${COLORS.cyan}${custom.baseUrl}${COLORS.reset}`);
   if (custom?.model)   lines.push(`Model:    ${COLORS.dim}${custom.model}${COLORS.reset}`);
@@ -350,17 +350,17 @@ async function buildOpenClawHeader() {
   const result = await api.getCliToolSettings("openclaw");
   if (!result.success) return `  ${COLORS.red}Failed to load settings${COLORS.reset}`;
 
-  const { installed, has9Router, settings } = result.data;
+  const { installed, hasBluerouter, settings } = result.data;
   if (!installed) return `Status:   ${COLORS.red}✗ Open Claw not installed${COLORS.reset}`;
 
-  if (!has9Router) {
+  if (!hasBluerouter) {
     return [
       `Status:   ${COLORS.red}✗ Not configured${COLORS.reset}`,
       `${COLORS.dim}Run "Quick Setup" to configure${COLORS.reset}`
     ].join("\n");
   }
 
-  // Extract 9Router provider config
+  // Extract Bluerouter provider config
   const provider = settings?.models?.providers?.["bluerouter"];
   const primary = settings?.agents?.defaults?.model?.primary || "";
   const model = primary.startsWith("bluerouter/") ? primary.replace("bluerouter/", "") : (provider?.models?.[0]?.id || "");
@@ -431,10 +431,10 @@ async function buildOpenCodeHeader() {
   const result = await api.getCliToolSettings("opencode");
   if (!result.success) return `  ${COLORS.red}Failed to load settings${COLORS.reset}`;
 
-  const { installed, has9Router, opencode } = result.data;
+  const { installed, hasBluerouter, opencode } = result.data;
   if (!installed) return `Status:   ${COLORS.red}✗ OpenCode CLI not installed${COLORS.reset}`;
 
-  if (!has9Router) {
+  if (!hasBluerouter) {
     return [
       `Status:   ${COLORS.red}✗ Not configured${COLORS.reset}`,
       `${COLORS.dim}Run "Quick Setup" to configure${COLORS.reset}`
@@ -519,10 +519,10 @@ async function buildHermesHeader() {
   const result = await api.getCliToolSettings("hermes");
   if (!result.success) return `  ${COLORS.red}Failed to load settings${COLORS.reset}`;
 
-  const { installed, has9Router, settings } = result.data;
+  const { installed, hasBluerouter, settings } = result.data;
   if (!installed) return `Status:   ${COLORS.red}✗ Hermes Agent not installed${COLORS.reset}`;
 
-  if (!has9Router) {
+  if (!hasBluerouter) {
     return [
       `Status:   ${COLORS.red}✗ Not configured${COLORS.reset}`,
       `${COLORS.dim}Run "Quick Setup" to configure${COLORS.reset}`
@@ -585,7 +585,7 @@ async function showCliToolsMenu(port, breadcrumb = []) {
   await showMenuWithBack({
     title: "🔧 CLI Tools",
     breadcrumb,
-    headerContent: `Configure CLI tools to use 9Router\nEndpoint: ${endpoint}`,
+    headerContent: `Configure CLI tools to use Bluerouter\nEndpoint: ${endpoint}`,
     items: [
       {
         label: "Claude Code",

package/src/cli/terminalUI.js

@@ -67,14 +67,14 @@ async function startTerminalUI(port) {
   // Configure API client
   api.configure({ port });
 
-  const basePath = ["9Router"];
+  const basePath = ["Bluerouter"];
 
   // Prime header cache before first render
   await refreshHeaderBg(port);
 
   // Main menu
   await showMenuWithBack({
-    title: "📡 9Router Terminal UI",
+    title: "📡 Bluerouter Terminal UI",
     breadcrumb: basePath,
     headerContent: () => getHeader(port),
     items: [

package/src/cli/tray/autostart.js

@@ -280,8 +280,8 @@ function enableLinux(cliPath) {
 
   const desktopContent = `[Desktop Entry]
 Type=Application
-Name=9Router
-Comment=9Router API Proxy
+Name=Bluerouter
+Comment=Bluerouter API Proxy
 Exec=${nodePath} ${routerScript} --tray --skip-update
 Hidden=false
 NoDisplay=false

package/src/cli/tray/tray.js

@@ -58,7 +58,7 @@ function initTray(options) {
  */
 function buildMenuItems(port, autostartEnabled) {
   return [
-    { title: `9Router (Port ${port})`, tooltip: "Server is running", enabled: false },
+    { title: `Bluerouter (Port ${port})`, tooltip: "Server is running", enabled: false },
     { title: "Open Dashboard", tooltip: "Open in browser", enabled: true },
     {
       title: autostartEnabled ? "✓ Auto-start Enabled" : "Enable Auto-start",
@@ -121,7 +121,7 @@ function initWindowsTray(options) {
 
     trayInstance = initWinTray({
       iconPath,
-      tooltip: `9Router - Port ${port}`,
+      tooltip: `Bluerouter - Port ${port}`,
       items,
       onClick: (index) => {
         handleClick(index, options, (newEnabled) => {
@@ -204,7 +204,7 @@ function initUnixTray(options) {
       // because template mode only uses the alpha channel.
       isTemplateIcon: false,
       title: "",
-      tooltip: `9Router - Port ${port}`,
+      tooltip: `Bluerouter - Port ${port}`,
       items
     };
 

package/src/cli/tray/tray.ps1

@@ -1,4 +1,4 @@
-# 9Router tray icon for Windows using NotifyIcon
+# Bluerouter tray icon for Windows using NotifyIcon
 # IPC: stdin JSON commands, stdout JSON events
 param([string]$IconPath, [string]$Tooltip)