@jonnyhoo/ccs 1.0.0

package/dist/cliproxy/remote-auth-fetcher.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Remote Auth Fetcher
+ * Fetches and transforms auth data from remote CLIProxyAPI.
+ */
+import { ProxyTarget } from './proxy-target-resolver';
+/** Account info for UI display */
+export interface RemoteAccountInfo {
+    id: string;
+    email: string;
+    isDefault: boolean;
+    status: 'active' | 'disabled' | 'unavailable';
+}
+/** Auth status for a provider (UI format) */
+export interface RemoteAuthStatus {
+    provider: string;
+    displayName: string;
+    authenticated: boolean;
+    tokenFiles: number;
+    accounts: RemoteAccountInfo[];
+    defaultAccount: string | null;
+    source: 'remote';
+}
+/**
+ * Fetch auth status from remote CLIProxyAPI
+ * @throws Error if remote is unreachable or returns error
+ */
+export declare function fetchRemoteAuthStatus(target?: ProxyTarget): Promise<RemoteAuthStatus[]>;
+//# sourceMappingURL=remote-auth-fetcher.d.ts.map

package/dist/cliproxy/remote-auth-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-auth-fetcher.d.ts","sourceRoot":"","sources":["../../src/cliproxy/remote-auth-fetcher.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAIL,WAAW,EACZ,MAAM,yBAAyB,CAAC;AAgBjC,kCAAkC;AAClC,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,aAAa,CAAC;CAC/C;AAED,6CAA6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,QAAQ,CAAC;CAClB;AA4BD;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CA4C7F"}

package/dist/cliproxy/remote-auth-fetcher.js

@@ -0,0 +1,117 @@
+"use strict";
+/**
+ * Remote Auth Fetcher
+ * Fetches and transforms auth data from remote CLIProxyAPI.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchRemoteAuthStatus = void 0;
+const proxy_target_resolver_1 = require("./proxy-target-resolver");
+/** Timeout for remote fetch requests (ms) */
+const REMOTE_FETCH_TIMEOUT_MS = 5000;
+/** Map CLIProxyAPI provider names to CCS internal names */
+const PROVIDER_MAP = {
+    gemini: 'gemini',
+    'gemini-cli': 'gemini', // CLIProxyAPI uses 'gemini-cli' for Gemini CLI auth
+    antigravity: 'agy',
+    codex: 'codex',
+    qwen: 'qwen',
+    iflow: 'iflow',
+    kiro: 'kiro',
+    codewhisperer: 'kiro', // CLIProxyAPI may use 'codewhisperer' for Kiro
+    ghcp: 'ghcp',
+    'github-copilot': 'ghcp',
+    copilot: 'ghcp',
+};
+/** Display names for providers */
+const PROVIDER_DISPLAY_NAMES = {
+    gemini: 'Google Gemini',
+    agy: 'AntiGravity',
+    codex: 'Codex',
+    qwen: 'Qwen',
+    iflow: 'iFlow',
+    kiro: 'Kiro (AWS)',
+    ghcp: 'GitHub Copilot (OAuth)',
+};
+/**
+ * Fetch auth status from remote CLIProxyAPI
+ * @throws Error if remote is unreachable or returns error
+ */
+async function fetchRemoteAuthStatus(target) {
+    const proxyTarget = target ?? (0, proxy_target_resolver_1.getProxyTarget)();
+    if (!proxyTarget.isRemote) {
+        throw new Error('fetchRemoteAuthStatus called but remote mode not enabled');
+    }
+    const url = (0, proxy_target_resolver_1.buildProxyUrl)(proxyTarget, '/v0/management/auth-files');
+    const headers = (0, proxy_target_resolver_1.buildManagementHeaders)(proxyTarget);
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), REMOTE_FETCH_TIMEOUT_MS);
+    try {
+        const response = await fetch(url, {
+            signal: controller.signal,
+            headers,
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok) {
+            if (response.status === 401 || response.status === 403) {
+                throw new Error('Authentication failed - check auth token in settings');
+            }
+            throw new Error(`Remote returned ${response.status}: ${response.statusText}`);
+        }
+        const data = await response.json();
+        // Validate response structure
+        if (!data || typeof data !== 'object' || !('files' in data) || !Array.isArray(data.files)) {
+            throw new Error('Invalid response format from remote auth endpoint');
+        }
+        return transformRemoteAuthFiles(data.files);
+    }
+    catch (error) {
+        clearTimeout(timeoutId);
+        if (error instanceof Error && error.name === 'AbortError') {
+            throw new Error('Remote proxy connection timed out');
+        }
+        throw error;
+    }
+}
+exports.fetchRemoteAuthStatus = fetchRemoteAuthStatus;
+/**
+ * Transform CLIProxyAPI auth files to CCS AuthStatus format
+ * @param files Array of auth files from remote API
+ */
+function transformRemoteAuthFiles(files) {
+    const byProvider = new Map();
+    for (const file of files) {
+        const provider = PROVIDER_MAP[file.provider.toLowerCase()];
+        if (!provider) {
+            // Unknown provider, skip (could add logging in debug mode)
+            continue;
+        }
+        const existing = byProvider.get(provider);
+        if (existing) {
+            existing.push(file);
+        }
+        else {
+            byProvider.set(provider, [file]);
+        }
+    }
+    const result = [];
+    for (const [provider, providerFiles] of byProvider) {
+        const activeFiles = providerFiles.filter((f) => f.status === 'active');
+        const accounts = providerFiles.map((f, idx) => ({
+            id: f.id,
+            email: f.email || f.name || 'Unknown',
+            isDefault: idx === 0,
+            status: f.status,
+        }));
+        result.push({
+            provider,
+            displayName: PROVIDER_DISPLAY_NAMES[provider] || provider,
+            authenticated: activeFiles.length > 0,
+            tokenFiles: providerFiles.length,
+            accounts,
+            defaultAccount: accounts.find((a) => a.isDefault)?.id || null,
+            source: 'remote',
+        });
+    }
+    return result;
+}
+//# sourceMappingURL=remote-auth-fetcher.js.map

package/dist/cliproxy/remote-auth-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-auth-fetcher.js","sourceRoot":"","sources":["../../src/cliproxy/remote-auth-fetcher.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,mEAKiC;AAEjC,6CAA6C;AAC7C,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAgCrC,2DAA2D;AAC3D,MAAM,YAAY,GAA2B;IAC3C,MAAM,EAAE,QAAQ;IAChB,YAAY,EAAE,QAAQ,EAAE,oDAAoD;IAC5E,WAAW,EAAE,KAAK;IAClB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,aAAa,EAAE,MAAM,EAAE,+CAA+C;IACtE,IAAI,EAAE,MAAM;IACZ,gBAAgB,EAAE,MAAM;IACxB,OAAO,EAAE,MAAM;CAChB,CAAC;AAEF,kCAAkC;AAClC,MAAM,sBAAsB,GAA2B;IACrD,MAAM,EAAE,eAAe;IACvB,GAAG,EAAE,aAAa;IAClB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,wBAAwB;CAC/B,CAAC;AAEF;;;GAGG;AACI,KAAK,UAAU,qBAAqB,CAAC,MAAoB;IAC9D,MAAM,WAAW,GAAG,MAAM,IAAI,IAAA,sCAAc,GAAE,CAAC;IAE/C,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,GAAG,GAAG,IAAA,qCAAa,EAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAA,8CAAsB,EAAC,WAAW,CAAC,CAAC;IAEpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAEhF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO;SACR,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE5C,8BAA8B;QAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAyB,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AA5CD,sDA4CC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAAC,KAAuB;IACvD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IAEvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,2DAA2D;YAC3D,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAuB,EAAE,CAAC;IAEtC,KAAK,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,UAAU,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAwB,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACnE,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,SAAS;YACrC,SAAS,EAAE,GAAG,KAAK,CAAC;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAC;QAEJ,MAAM,CAAC,IAAI,CAAC;YACV,QAAQ;YACR,WAAW,EAAE,sBAAsB,CAAC,QAAQ,CAAC,IAAI,QAAQ;YACzD,aAAa,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;YACrC,UAAU,EAAE,aAAa,CAAC,MAAM;YAChC,QAAQ;YACR,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,IAAI;YAC7D,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cliproxy/remote-proxy-client.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Remote Proxy Client for CLIProxyAPI
+ *
+ * HTTP client for health checks and connection testing against remote CLIProxyAPI instances.
+ * Uses native fetch API with aggressive timeout for CLI responsiveness.
+ */
+/** Error codes for remote proxy status */
+export type RemoteProxyErrorCode = 'CONNECTION_REFUSED' | 'TIMEOUT' | 'AUTH_FAILED' | 'DNS_FAILED' | 'NETWORK_UNREACHABLE' | 'UNKNOWN';
+/** Status returned from remote proxy health check */
+export interface RemoteProxyStatus {
+    /** Whether the remote proxy is reachable */
+    reachable: boolean;
+    /** Latency in milliseconds (only set if reachable) */
+    latencyMs?: number;
+    /** Error message (only set if not reachable) */
+    error?: string;
+    /** Error code for programmatic handling */
+    errorCode?: RemoteProxyErrorCode;
+}
+/** Configuration for remote proxy client */
+export interface RemoteProxyClientConfig {
+    /** Remote proxy host (IP or hostname) */
+    host: string;
+    /**
+     * Remote proxy port.
+     * Optional - defaults based on protocol:
+     * - HTTPS: 443
+     * - HTTP: 8317 (CLIProxyAPI default)
+     */
+    port?: number;
+    /** Protocol to use (http or https) */
+    protocol: 'http' | 'https';
+    /** Optional auth token for Authorization header */
+    authToken?: string;
+    /** Request timeout in ms (default: 2000) */
+    timeout?: number;
+    /** Allow self-signed certificates (default: false) */
+    allowSelfSigned?: boolean;
+}
+/**
+ * Check health of remote CLIProxyAPI instance
+ *
+ * Uses /v1/models endpoint for health check since CLIProxyAPI doesn't expose /health.
+ * This endpoint is always available and returns 200 when the server is operational.
+ *
+ * @param config Remote proxy client configuration
+ * @returns RemoteProxyStatus with reachability and latency
+ */
+export declare function checkRemoteProxy(config: RemoteProxyClientConfig): Promise<RemoteProxyStatus>;
+/**
+ * Test connection to remote CLIProxyAPI (alias for dashboard use)
+ *
+ * This is an alias for checkRemoteProxy() for semantic clarity in UI contexts.
+ *
+ * @param config Remote proxy client configuration
+ * @returns RemoteProxyStatus with reachability and latency
+ */
+export declare function testConnection(config: RemoteProxyClientConfig): Promise<RemoteProxyStatus>;
+//# sourceMappingURL=remote-proxy-client.d.ts.map

package/dist/cliproxy/remote-proxy-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-proxy-client.d.ts","sourceRoot":"","sources":["../../src/cliproxy/remote-proxy-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,0CAA0C;AAC1C,MAAM,MAAM,oBAAoB,GAC5B,oBAAoB,GACpB,SAAS,GACT,aAAa,GACb,YAAY,GACZ,qBAAqB,GACrB,SAAS,CAAC;AAEd,qDAAqD;AACrD,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,SAAS,EAAE,OAAO,CAAC;IACnB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,4CAA4C;AAC5C,MAAM,WAAW,uBAAuB;IACtC,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sCAAsC;IACtC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAiJD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CA6H5B;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAEhG"}

package/dist/cliproxy/remote-proxy-client.js

@@ -0,0 +1,278 @@
+"use strict";
+/**
+ * Remote Proxy Client for CLIProxyAPI
+ *
+ * HTTP client for health checks and connection testing against remote CLIProxyAPI instances.
+ * Uses native fetch API with aggressive timeout for CLI responsiveness.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.testConnection = exports.checkRemoteProxy = void 0;
+const https = __importStar(require("https"));
+const config_generator_1 = require("./config-generator");
+/** Default timeout for remote proxy requests (aggressive for CLI UX) */
+const DEFAULT_TIMEOUT_MS = 2000;
+/**
+ * Get standard web port for protocol (for URL display omission)
+ * These are the ports that browsers/HTTP clients use by default.
+ * HTTP: 80, HTTPS: 443
+ */
+function getStandardWebPort(protocol) {
+    return protocol === 'https' ? 443 : 80;
+}
+/**
+ * Get effective port for CLIProxyAPI connection.
+ * Validates port and uses protocol-based default for invalid/undefined values.
+ */
+function getEffectivePort(port, protocol) {
+    const validatedPort = (0, config_generator_1.validateRemotePort)(port);
+    return validatedPort ?? (0, config_generator_1.getRemoteDefaultPort)(protocol);
+}
+/**
+ * Build URL for remote proxy
+ * Only omits port from URL if it matches standard web ports (80/443),
+ * otherwise always includes the port for clarity.
+ */
+function buildProxyUrl(host, port, protocol, path) {
+    const effectivePort = getEffectivePort(port, protocol);
+    const standardWebPort = getStandardWebPort(protocol);
+    // Only omit port from URL if it matches the standard web port for the protocol
+    // e.g., HTTP on port 80 or HTTPS on port 443
+    if (effectivePort === standardWebPort) {
+        return `${protocol}://${host}${path}`;
+    }
+    return `${protocol}://${host}:${effectivePort}${path}`;
+}
+/**
+ * Map error to RemoteProxyErrorCode
+ *
+ * Handles various error types including:
+ * - NodeJS.ErrnoException (ECONNREFUSED, ETIMEDOUT, ENOTFOUND, ENETUNREACH)
+ * - Fetch errors (AbortError, TypeError, "fetch failed")
+ * - HTTP status codes (401, 403)
+ */
+function mapErrorToCode(error, statusCode) {
+    const message = error.message.toLowerCase();
+    // Handle error.code safely - it may be string, number, or undefined
+    const rawCode = error.code;
+    const code = typeof rawCode === 'string' ? rawCode.toLowerCase() : undefined;
+    // DNS resolution failed
+    if (code === 'enotfound' ||
+        code === 'eai_again' ||
+        message.includes('getaddrinfo') ||
+        message.includes('dns')) {
+        return 'DNS_FAILED';
+    }
+    // Network unreachable / host unreachable
+    if (code === 'enetunreach' ||
+        code === 'ehostunreach' ||
+        code === 'enetdown' ||
+        message.includes('network') ||
+        message.includes('unreachable')) {
+        return 'NETWORK_UNREACHABLE';
+    }
+    // Connection refused
+    if (code === 'econnrefused' || message.includes('connection refused')) {
+        return 'CONNECTION_REFUSED';
+    }
+    // Timeout
+    if (code === 'etimedout' ||
+        code === 'timeout' ||
+        message.includes('timeout') ||
+        message.includes('aborted')) {
+        return 'TIMEOUT';
+    }
+    // Auth failed (401/403)
+    if (statusCode === 401 || statusCode === 403) {
+        return 'AUTH_FAILED';
+    }
+    // Generic "fetch failed" - try to extract cause
+    if (message.includes('fetch failed') || message.includes('failed to fetch')) {
+        // Check if there's a cause property (Node.js 18+)
+        const cause = error.cause;
+        if (cause) {
+            return mapErrorToCode(cause);
+        }
+        // Likely network/DNS issue if no specific cause
+        return 'NETWORK_UNREACHABLE';
+    }
+    return 'UNKNOWN';
+}
+/**
+ * Get human-readable error message from error code
+ */
+function getErrorMessage(errorCode, rawError) {
+    switch (errorCode) {
+        case 'CONNECTION_REFUSED':
+            return 'Connection refused - is the proxy running?';
+        case 'TIMEOUT':
+            return 'Connection timed out - server may be slow or unreachable';
+        case 'AUTH_FAILED':
+            return 'Authentication failed - check auth token';
+        case 'DNS_FAILED':
+            return 'DNS lookup failed - check hostname';
+        case 'NETWORK_UNREACHABLE':
+            return 'Network unreachable - check if host is on same network';
+        default:
+            return rawError || 'Connection failed';
+    }
+}
+/**
+ * Create a custom HTTPS agent for self-signed certificate support
+ */
+function createHttpsAgent(allowSelfSigned) {
+    if (!allowSelfSigned)
+        return undefined;
+    return new https.Agent({
+        rejectUnauthorized: false,
+    });
+}
+/**
+ * Check health of remote CLIProxyAPI instance
+ *
+ * Uses /v1/models endpoint for health check since CLIProxyAPI doesn't expose /health.
+ * This endpoint is always available and returns 200 when the server is operational.
+ *
+ * @param config Remote proxy client configuration
+ * @returns RemoteProxyStatus with reachability and latency
+ */
+async function checkRemoteProxy(config) {
+    const { host, port, protocol, authToken, allowSelfSigned = false } = config;
+    const timeout = config.timeout ?? DEFAULT_TIMEOUT_MS;
+    // Validate host is provided
+    if (!host || host.trim() === '') {
+        return {
+            reachable: false,
+            error: 'Host is required',
+            errorCode: 'UNKNOWN',
+        };
+    }
+    // Use /v1/models as health check - CLIProxyAPI doesn't have /health endpoint
+    const url = buildProxyUrl(host, port, protocol, '/v1/models');
+    const startTime = Date.now();
+    try {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), timeout);
+        // Build request options
+        const headers = {
+            Accept: 'application/json',
+        };
+        if (authToken) {
+            headers['Authorization'] = `Bearer ${authToken}`;
+        }
+        // For HTTPS with self-signed certs, we need to use native https module
+        // Bun's fetch doesn't support custom agents
+        let response;
+        if (protocol === 'https' && allowSelfSigned) {
+            // Warn about security implications
+            console.error('[!] Allowing self-signed certificate - not recommended for production');
+            // Use native https module for self-signed cert support
+            response = await new Promise((resolve, reject) => {
+                const agent = createHttpsAgent(true);
+                const reqTimeout = setTimeout(() => {
+                    reject(new Error('Request timeout'));
+                }, timeout);
+                const req = https.request(url, {
+                    method: 'GET',
+                    headers,
+                    agent,
+                    timeout,
+                }, (res) => {
+                    clearTimeout(reqTimeout);
+                    let data = '';
+                    res.on('data', (chunk) => (data += chunk));
+                    res.on('end', () => {
+                        resolve(new Response(data, {
+                            status: res.statusCode || 500,
+                            statusText: res.statusMessage,
+                        }));
+                    });
+                });
+                req.on('error', (err) => {
+                    clearTimeout(reqTimeout);
+                    reject(err);
+                });
+                req.on('timeout', () => {
+                    req.destroy();
+                    reject(new Error('Request timeout'));
+                });
+                req.end();
+            });
+        }
+        else {
+            // Standard fetch for HTTP or HTTPS without self-signed
+            response = await fetch(url, {
+                signal: controller.signal,
+                headers,
+            });
+        }
+        clearTimeout(timeoutId);
+        const latencyMs = Date.now() - startTime;
+        // Check for auth failure
+        if (response.status === 401 || response.status === 403) {
+            return {
+                reachable: false,
+                error: getErrorMessage('AUTH_FAILED'),
+                errorCode: 'AUTH_FAILED',
+            };
+        }
+        // 200 OK = healthy
+        if (response.ok) {
+            return {
+                reachable: true,
+                latencyMs,
+            };
+        }
+        // Non-200 but connected
+        return {
+            reachable: false,
+            error: `Unexpected status: ${response.status}`,
+            errorCode: 'UNKNOWN',
+        };
+    }
+    catch (error) {
+        const err = error;
+        const errorCode = mapErrorToCode(err);
+        return {
+            reachable: false,
+            error: getErrorMessage(errorCode, err.message),
+            errorCode,
+        };
+    }
+}
+exports.checkRemoteProxy = checkRemoteProxy;
+/**
+ * Test connection to remote CLIProxyAPI (alias for dashboard use)
+ *
+ * This is an alias for checkRemoteProxy() for semantic clarity in UI contexts.
+ *
+ * @param config Remote proxy client configuration
+ * @returns RemoteProxyStatus with reachability and latency
+ */
+async function testConnection(config) {
+    return checkRemoteProxy(config);
+}
+exports.testConnection = testConnection;
+//# sourceMappingURL=remote-proxy-client.js.map

package/dist/cliproxy/remote-proxy-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-proxy-client.js","sourceRoot":"","sources":["../../src/cliproxy/remote-proxy-client.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,6CAA+B;AAC/B,yDAA8E;AA4C9E,wEAAwE;AACxE,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,QAA0B;IACpD,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,IAAwB,EAAE,QAA0B;IAC5E,MAAM,aAAa,GAAG,IAAA,qCAAkB,EAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,aAAa,IAAI,IAAA,uCAAoB,EAAC,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,IAAY,EACZ,IAAwB,EACxB,QAA0B,EAC1B,IAAY;IAEZ,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAErD,+EAA+E;IAC/E,6CAA6C;IAC7C,IAAI,aAAa,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,GAAG,QAAQ,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,QAAQ,MAAM,IAAI,IAAI,aAAa,GAAG,IAAI,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,KAAY,EAAE,UAAmB;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;IAC5C,oEAAoE;IACpE,MAAM,OAAO,GAAI,KAA+B,CAAC,IAAI,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7E,wBAAwB;IACxB,IACE,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EACvB,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,yCAAyC;IACzC,IACE,IAAI,KAAK,aAAa;QACtB,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,UAAU;QACnB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAC/B,CAAC;QACD,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACtE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,UAAU;IACV,IACE,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,SAAS;QAClB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC3B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,wBAAwB;IACxB,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,gDAAgD;IAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5E,kDAAkD;QAClD,MAAM,KAAK,GAAI,KAAmC,CAAC,KAAK,CAAC;QACzD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,gDAAgD;QAChD,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,SAA+B,EAAE,QAAiB;IACzE,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,oBAAoB;YACvB,OAAO,4CAA4C,CAAC;QACtD,KAAK,SAAS;YACZ,OAAO,0DAA0D,CAAC;QACpE,KAAK,aAAa;YAChB,OAAO,0CAA0C,CAAC;QACpD,KAAK,YAAY;YACf,OAAO,oCAAoC,CAAC;QAC9C,KAAK,qBAAqB;YACxB,OAAO,wDAAwD,CAAC;QAClE;YACE,OAAO,QAAQ,IAAI,mBAAmB,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,eAAwB;IAChD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAEvC,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC;QACrB,kBAAkB,EAAE,KAAK;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,gBAAgB,CACpC,MAA+B;IAE/B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC;IAErD,4BAA4B;IAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,kBAAkB;YACzB,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QAEhE,wBAAwB;QACxB,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QAEF,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,SAAS,EAAE,CAAC;QACnD,CAAC;QAED,uEAAuE;QACvE,4CAA4C;QAC5C,IAAI,QAAkB,CAAC;QAEvB,IAAI,QAAQ,KAAK,OAAO,IAAI,eAAe,EAAE,CAAC;YAC5C,mCAAmC;YACnC,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;YAEvF,uDAAuD;YACvD,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACzD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;oBACjC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACvC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAEZ,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB,GAAG,EACH;oBACE,MAAM,EAAE,KAAK;oBACb,OAAO;oBACP,KAAK;oBACL,OAAO;iBACR,EACD,CAAC,GAAG,EAAE,EAAE;oBACN,YAAY,CAAC,UAAU,CAAC,CAAC;oBACzB,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;oBAC3C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACjB,OAAO,CACL,IAAI,QAAQ,CAAC,IAAI,EAAE;4BACjB,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,GAAG;4BAC7B,UAAU,EAAE,GAAG,CAAC,aAAa;yBAC9B,CAAC,CACH,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC,CACF,CAAC;gBAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACtB,YAAY,CAAC,UAAU,CAAC,CAAC;oBACzB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACvC,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,uDAAuD;YACvD,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEzC,yBAAyB;QACzB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,eAAe,CAAC,aAAa,CAAC;gBACrC,SAAS,EAAE,aAAa;aACzB,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO;gBACL,SAAS,EAAE,IAAI;gBACf,SAAS;aACV,CAAC;QACJ,CAAC;QAED,wBAAwB;QACxB,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,sBAAsB,QAAQ,CAAC,MAAM,EAAE;YAC9C,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAEtC,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,KAAK,EAAE,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC;YAC9C,SAAS;SACV,CAAC;IACJ,CAAC;AACH,CAAC;AA/HD,4CA+HC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc,CAAC,MAA+B;IAClE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAFD,wCAEC"}

package/dist/cliproxy/remote-token-uploader.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Remote Token Uploader
+ *
+ * Uploads OAuth tokens to remote CLIProxyAPI server after local authentication.
+ * Enables multi-device access to the same OAuth accounts.
+ */
+/**
+ * Upload a token file to remote CLIProxyAPI server.
+ * Uses multipart/form-data as required by CLIProxyAPI.
+ *
+ * @param tokenFilePath - Path to local token JSON file
+ * @param verbose - Enable verbose logging
+ * @returns true if upload succeeded
+ */
+export declare function uploadTokenToRemote(tokenFilePath: string, verbose?: boolean): Promise<boolean>;
+/**
+ * Upload all tokens from a provider directory to remote server.
+ *
+ * @param tokenDir - Directory containing token files
+ * @param verbose - Enable verbose logging
+ * @returns Number of successfully uploaded tokens
+ */
+export declare function uploadAllTokensToRemote(tokenDir: string, verbose?: boolean): Promise<number>;
+/**
+ * Check if remote upload is enabled and configured.
+ */
+export declare function isRemoteUploadEnabled(): boolean;
+//# sourceMappingURL=remote-token-uploader.d.ts.map

package/dist/cliproxy/remote-token-uploader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-token-uploader.d.ts","sourceRoot":"","sources":["../../src/cliproxy/remote-token-uploader.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,aAAa,EAAE,MAAM,EACrB,OAAO,UAAQ,GACd,OAAO,CAAC,OAAO,CAAC,CAqFlB;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CA4ChG;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,OAAO,CAG/C"}