@ljoukov/llm 7.0.19 → 7.0.21

package/README.md

@@ -108,7 +108,7 @@ refresh-token rotation and serves short-lived access tokens.
 - `CHATGPT_AUTH_TOKEN_PROVIDER_URL` (example: `https://chatgpt-auth.<your-domain>`)
 - `CHATGPT_AUTH_API_KEY` (shared secret; sent as `Authorization: Bearer ...` and `x-chatgpt-auth: ...`)
 - `CHATGPT_AUTH_TOKEN_PROVIDER_STORE` (`kv` or `d1`, defaults to `kv`)
-- `CHATGPT_CODEX_PROXY_URL` (optional Vercel proxy endpoint, for example `https://<project>.vercel.app/api/codex/responses`)
+- `CHATGPT_CODEX_PROXY_URL` (optional Vercel proxy endpoint; accepts either `https://<project>.vercel.app` or `https://<project>.vercel.app/api/codex/responses`)
 - `CHATGPT_CODEX_PROXY_API_KEY` (bearer token for `CHATGPT_CODEX_PROXY_URL`)
 - `CHATGPT_CODEX_ENDPOINT` (optional direct endpoint override; defaults to `https://chatgpt.com/backend-api/codex/responses`)
 - `CHATGPT_RESPONSES_WEBSOCKET_MODE` (`auto` | `off` | `only`, default: `auto`)
@@ -122,7 +122,7 @@ token provider and will not read the local Codex auth store.
 If `CHATGPT_CODEX_PROXY_URL` + `CHATGPT_CODEX_PROXY_API_KEY` are set, `chatgpt-*` text requests are sent through that
 proxy and the local process does not need access to the Codex auth store or token provider. The Vercel proxy fetches
 short-lived ChatGPT access tokens from `workers/chatgpt-auth` and streams the upstream Codex response body back to the
-caller.
+caller. These proxy bearer tokens should be server-side environment variables; do not expose them in browser bundles.
 
 ### Responses transport
 

package/dist/index.cjs

@@ -65,6 +65,7 @@ __export(index_exports, {
   OPENAI_MODEL_IDS: () => OPENAI_MODEL_IDS,
   appendMarkdownSourcesSection: () => appendMarkdownSourcesSection,
   applyPatch: () => applyPatch,
+  configureChatGptCodexProxy: () => configureChatGptCodexProxy,
   configureGemini: () => configureGemini,
   configureModelConcurrency: () => configureModelConcurrency,
   configureTelemetry: () => configureTelemetry,
@@ -1724,7 +1725,8 @@ var CHATGPT_CODEX_PROXY_API_KEY_ENV = "CHATGPT_CODEX_PROXY_API_KEY";
 var CHATGPT_RESPONSES_EXPERIMENTAL_HEADER = "responses=experimental";
 var chatGptCodexState = getRuntimeSingleton(/* @__PURE__ */ Symbol.for("@ljoukov/llm.chatGptCodexState"), () => ({
   cachedResponsesWebSocketMode: null,
-  chatGptResponsesWebSocketDisabled: false
+  chatGptResponsesWebSocketDisabled: false,
+  configuredProxy: null
 }));
 async function streamChatGptCodexResponse(options) {
   const endpointConfig = await resolveChatGptCodexEndpointConfig();
@@ -1772,6 +1774,13 @@ async function streamChatGptCodexResponse(options) {
     }
   });
 }
+function configureChatGptCodexProxy(configuration) {
+  chatGptCodexState.configuredProxy = configuration ? {
+    url: normalizeChatGptCodexProxyUrl(configuration.url),
+    apiKey: configuration.apiKey
+  } : null;
+  chatGptCodexState.cachedResponsesWebSocketMode = null;
+}
 async function streamChatGptCodexResponseSse(options) {
   const headers = buildChatGptCodexHeaders({
     endpointConfig: options.endpointConfig,
@@ -1826,9 +1835,16 @@ function resolveChatGptCodexEndpoint() {
   return process.env[CHATGPT_CODEX_ENDPOINT_ENV]?.trim() || CHATGPT_CODEX_ENDPOINT;
 }
 function resolveChatGptCodexProxyConfig() {
+  if (chatGptCodexState.configuredProxy) {
+    return {
+      kind: "proxy",
+      url: chatGptCodexState.configuredProxy.url,
+      apiKey: chatGptCodexState.configuredProxy.apiKey
+    };
+  }
   loadLocalEnv();
-  const url = process.env[CHATGPT_CODEX_PROXY_URL_ENV]?.trim();
-  if (!url) {
+  const rawUrl = process.env[CHATGPT_CODEX_PROXY_URL_ENV]?.trim();
+  if (!rawUrl) {
     return null;
   }
   const apiKey = process.env[CHATGPT_CODEX_PROXY_API_KEY_ENV]?.trim();
@@ -1839,10 +1855,21 @@ function resolveChatGptCodexProxyConfig() {
   }
   return {
     kind: "proxy",
-    url,
+    url: normalizeChatGptCodexProxyUrl(rawUrl),
     apiKey
   };
 }
+function normalizeChatGptCodexProxyUrl(rawUrl) {
+  try {
+    const url = new URL(rawUrl);
+    if (url.pathname === "" || url.pathname === "/") {
+      url.pathname = "/api/codex/responses";
+    }
+    return url.toString();
+  } catch {
+    return rawUrl;
+  }
+}
 function buildChatGptCodexHeaders(options) {
   const openAiBeta = options.useWebSocket ? mergeOpenAiBetaHeader(
     CHATGPT_RESPONSES_EXPERIMENTAL_HEADER,
@@ -15107,6 +15134,7 @@ async function runCandidateEvolution(options) {
   OPENAI_MODEL_IDS,
   appendMarkdownSourcesSection,
   applyPatch,
+  configureChatGptCodexProxy,
   configureGemini,
   configureModelConcurrency,
   configureTelemetry,