@lllanyard/proxy 0.0.0-stage → 0.1.0

package/LICENSE.md

@@ -0,0 +1,91 @@
+License text copyright (c) 2020 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+Parameters
+
+Licensor:             Ethan Askew T/A LLLanyard
+Licensed Work:        LLLanyard (all versions). The Licensed Work is (c) 2026
+                      Ethan Askew T/A LLLanyard.
+Additional Use Grant: You may make production use of the Licensed Work only if
+                      BOTH of the following are true:
+
+                      (1) Integrity. You use the Licensed Work's license-key
+                      verification and usage limits as published. You do not
+                      remove, disable, bypass, weaken, forge or tamper with any
+                      license-key check, signature check, or limit on keys,
+                      agents, users, seats, tiers or features, and you do not
+                      help anyone else do so, whether by modifying the Licensed
+                      Work, by providing modified copies, or by distributing
+                      license keys or tools that produce them.
+
+                      (2) Entitlement. Your use is either
+                        (a) within the free-tier limits of the version you are
+                        using (the limits defined in packages/core/src/limits.ts
+                        of that version, and without the shared or remote
+                        serving, dashboard or other features that version
+                        reserves for paid tiers); or
+                        (b) covered by a valid, unexpired paid license key
+                        issued to you by the Licensor, used within its terms
+                        (including its tier and seat count).
+
+                      In addition, you may not offer the Licensed Work, or a
+                      product derived from it, to third parties on a hosted,
+                      managed or embedded basis where it competes with paid
+                      versions of the Licensed Work offered by the Licensor.
+                      Using the Licensed Work for the internal purposes of your
+                      own organization is not such an offering.
+
+                      Non-production use (evaluation, testing, development,
+                      research) is permitted by the Terms below without
+                      restriction as to limits.
+Change Date:          Four years from the date the Licensed Work is published.
+Change License:       Apache License, Version 2.0
+
+For information about alternative licensing arrangements for the Licensed Work,
+or to buy a paid license key, please contact Ethan Askew T/A LLLanyard
+(licensing contact: sales@lllanyard.co.uk).
+
+Notice
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.

package/README.md

@@ -1,3 +1,11 @@
-# Temporary Holding Version
+# @lllanyard/proxy
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+LLLanyard proxy: swaps placeholder tokens for real API keys on the way out.
+
+This is an internal part of LLLanyard. Install the command-line tool instead:
+
+```
+npm install -g @lllanyard/cli
+```
+
+See https://lllanyard.app and the [main README](https://github.com/EthAsk/LLLanyard#readme). Licensed under the Business Source License 1.1 (see LICENSE.md).

package/dist/egress.d.ts

@@ -0,0 +1,26 @@
+import { safeLookup } from './netguard.js';
+export declare function hostAllowed(host: string, allow: string[]): boolean;
+export interface EgressOptions {
+    allow: string[];
+    ports?: number[];
+    log?: (rec: Record<string, unknown>) => void;
+    label?: string;
+    lookup?: typeof safeLookup;
+    unixSocket?: string;
+}
+export interface EgressProxy {
+    env: Record<string, string>;
+    port: number;
+    password: string;
+    socketPath?: string;
+    close: () => void;
+}
+/**
+ * A tiny CONNECT-only forward proxy on loopback. A tool started with HTTPS_PROXY pointing here can only open
+ * HTTPS tunnels to allowlisted hosts, and only to public IP addresses. It needs a per-run password so other local
+ * programs can't borrow it.
+ *
+ * LIMIT: this is best-effort. Tools that honour proxy settings are constrained; a deliberately malicious tool can
+ * ignore them. Hard enforcement needs an OS sandbox or container (see README).
+ */
+export declare function startEgressProxy(opts: EgressOptions): Promise<EgressProxy>;

package/dist/egress.js

@@ -0,0 +1,105 @@
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { chmodSync } from 'node:fs';
+import http from 'node:http';
+import net from 'node:net';
+import { safeLookup } from './netguard.js';
+export function hostAllowed(host, allow) {
+    const h = host.toLowerCase().replace(/\.$/, '');
+    return allow.some((a) => (a.startsWith('*.') ? h.length > a.length - 1 && h.endsWith(a.slice(1)) : h === a));
+}
+// Same variables as core's proxyEnv(); duplicated so this package keeps no runtime dependency on core.
+function proxyEnv(url) {
+    const env = {};
+    for (const k of ['HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'http_proxy', 'https_proxy', 'all_proxy'])
+        env[k] = url;
+    env.NO_PROXY = '';
+    env.no_proxy = '';
+    env.NODE_USE_ENV_PROXY = '1';
+    return env;
+}
+const digest = (s) => createHash('sha256').update(s).digest();
+/**
+ * A tiny CONNECT-only forward proxy on loopback. A tool started with HTTPS_PROXY pointing here can only open
+ * HTTPS tunnels to allowlisted hosts, and only to public IP addresses. It needs a per-run password so other local
+ * programs can't borrow it.
+ *
+ * LIMIT: this is best-effort. Tools that honour proxy settings are constrained; a deliberately malicious tool can
+ * ignore them. Hard enforcement needs an OS sandbox or container (see README).
+ */
+export function startEgressProxy(opts) {
+    const ports = new Set(opts.ports ?? [443]);
+    const log = opts.log ?? (() => { });
+    const lookup = opts.lookup ?? safeLookup;
+    const secret = randomBytes(18).toString('base64url');
+    const wantAuth = digest('Basic ' + Buffer.from(`lly:${secret}`).toString('base64'));
+    const sockets = new Set();
+    const note = (decision, host, port, reason) => log({ ts: new Date().toISOString(), event: 'egress', tool: opts.label, decision, host, port, ...(reason ? { reason } : {}) });
+    const server = http.createServer((req, res) => {
+        note('deny', String(req.headers.host ?? ''), 80, 'plain-http');
+        res.writeHead(403, { 'content-type': 'text/plain' });
+        res.end('LLLanyard egress: only HTTPS tunnels to approved hosts are allowed.\n');
+    });
+    server.on('connect', (req, client, head) => {
+        sockets.add(client);
+        client.once('close', () => sockets.delete(client));
+        client.on('error', () => client.destroy());
+        const reply = (code, msg) => { client.end(`HTTP/1.1 ${code} ${msg}\r\nConnection: close\r\n\r\n`); };
+        const given = digest(String(req.headers['proxy-authorization'] ?? ''));
+        if (!timingSafeEqual(given, wantAuth))
+            return reply(407, 'Proxy Authentication Required');
+        const m = /^(?:\[([^\]]+)\]|([^:]+)):(\d{1,5})$/.exec(req.url ?? '');
+        if (!m)
+            return reply(400, 'Bad Request');
+        const host = (m[1] ?? m[2]).toLowerCase();
+        const port = Number(m[3]);
+        if (net.isIP(host)) {
+            note('deny', host, port, 'ip-literal');
+            return reply(403, 'Forbidden');
+        }
+        if (!ports.has(port)) {
+            note('deny', host, port, 'port');
+            return reply(403, 'Forbidden');
+        }
+        if (!hostAllowed(host, opts.allow)) {
+            note('deny', host, port, 'host-not-allowed');
+            return reply(403, 'Forbidden');
+        }
+        const upstream = net.connect({ host, port, lookup: lookup });
+        sockets.add(upstream);
+        upstream.once('close', () => sockets.delete(upstream));
+        upstream.setTimeout(300_000, () => upstream.destroy());
+        upstream.on('error', () => { if (!client.destroyed && !client.writableEnded)
+            reply(502, 'Bad Gateway'); upstream.destroy(); });
+        upstream.once('connect', () => {
+            note('allow', host, port);
+            client.write('HTTP/1.1 200 Connection Established\r\n\r\n');
+            if (head.length)
+                upstream.write(head);
+            upstream.pipe(client);
+            client.pipe(upstream);
+            client.once('close', () => upstream.destroy());
+            upstream.once('close', () => client.destroy());
+        });
+    });
+    const close = () => { server.close(); for (const s of sockets)
+        s.destroy(); };
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        if (opts.unixSocket) {
+            const socketPath = opts.unixSocket;
+            server.listen(socketPath, () => {
+                try {
+                    chmodSync(socketPath, 0o600);
+                }
+                catch { /* best effort; the directory is private */ }
+                resolve({ env: {}, port: 0, password: secret, socketPath, close });
+            });
+            return;
+        }
+        server.listen(0, '127.0.0.1', () => {
+            const port = server.address().port;
+            resolve({ env: proxyEnv(`http://lly:${secret}@127.0.0.1:${port}`), port, password: secret, close });
+        });
+    });
+}
+//# sourceMappingURL=egress.js.map

package/dist/egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress.js","sourceRoot":"","sources":["../src/egress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAe;IACvD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/G,CAAC;AAmBD,uGAAuG;AACvG,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;IACnH,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrC,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,QAA0B,EAAE,IAAY,EAAE,IAAqB,EAAE,MAAe,EAAE,EAAE,CAChG,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAEhI,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;QAC/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAkB,EAAE,IAAY,EAAE,EAAE;QAC7D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,GAAW,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,GAAG,+BAA+B,CAAC,CAAC,CAAC,CAAC,CAAC;QAErH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;QAE1F,MAAM,CAAC,GAAG,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;QAC/F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;QAC3F,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAC,CAAC;QAErH,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAa,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvD,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/H,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC5B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,MAAM;gBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE;gBAC7B,IAAI,CAAC;oBAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;gBAC3F,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAsB,CAAC,IAAI,CAAC;YACxD,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,cAAc,MAAM,cAAc,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+export { createProxy } from './server.js';
+export { fromConfig } from './providers.js';
+export { isPublicAddress } from './netguard.js';
+export { startEgressProxy, hostAllowed } from './egress.js';
+export { AuthGuard } from './ratelimit.js';
+export { checkServeOptions } from './serve-options.js';
+export type { ServeOptions } from './serve-options.js';
+export type { EgressProxy, EgressOptions } from './egress.js';
+export type { ProxyDeps, ProviderDef, ProviderSource } from './server.js';
+import { type ServeOptions } from './serve-options.js';
+/** Starts the proxy. By default loopback only; a non-loopback host needs a Pro license, TLS and --allow-host. */
+export declare function startProxy(opts?: ServeOptions): Promise<{
+    port: number;
+    close: () => void;
+}>;

package/dist/index.js

@@ -0,0 +1,55 @@
+import { AgentStore, DEFAULT_PORT, LicenseStore, createUsageLog, KeyringStore, ProviderStore, allProviders, } from '@lllanyard/core';
+import { createProxy } from './server.js';
+import { fromConfig } from './providers.js';
+export { createProxy } from './server.js';
+export { fromConfig } from './providers.js';
+export { isPublicAddress } from './netguard.js';
+export { startEgressProxy, hostAllowed } from './egress.js';
+export { AuthGuard } from './ratelimit.js';
+export { checkServeOptions } from './serve-options.js';
+import { checkServeOptions } from './serve-options.js';
+/** Starts the proxy. By default loopback only; a non-loopback host needs a Pro license, TLS and --allow-host. */
+export function startProxy(opts = {}) {
+    const host = opts.host ?? '127.0.0.1';
+    checkServeOptions(opts, new LicenseStore().status().tier);
+    const port = opts.port ?? Number(process.env.LLLANYARD_PORT ?? DEFAULT_PORT);
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new Error('Invalid port');
+    const agents = new AgentStore();
+    const providerStore = new ProviderStore();
+    const build = () => {
+        const m = new Map();
+        const cfgs = allProviders(providerStore);
+        for (const [id, c] of Object.entries(cfgs))
+            m.set(id, fromConfig(c));
+        return m;
+    };
+    let verify = agents.verifier();
+    let providers = build();
+    // Picks up new/revoked agents and provider changes within ~10s without a keychain read per request.
+    const timer = setInterval(() => {
+        try {
+            verify = agents.verifier();
+            providers = build();
+        }
+        catch (e) {
+            process.stderr.write(`refresh failed: ${e.message}\n`);
+        }
+    }, 10_000);
+    timer.unref();
+    const usage = createUsageLog();
+    const server = createProxy({
+        store: new KeyringStore(),
+        log: (r) => { process.stdout.write(JSON.stringify(r) + '\n'); usage.write(r); },
+        verify: (t) => verify(t),
+        providers: (id) => providers.get(id),
+        rpm: Number(process.env.LLLANYARD_RPM ?? 120),
+        allowOrigin: process.env.LLLANYARD_ALLOW_ORIGIN === '1',
+        tls: opts.tls, allowedHosts: opts.allowedHosts,
+    });
+    return new Promise((resolve, reject) => {
+        server.once('error', (e) => reject(new Error(e.code === 'EADDRINUSE' ? `Port ${port} is already in use (set --port or LLLANYARD_PORT)` : e.message)));
+        server.listen(port, host, () => resolve({ port, close: () => { clearInterval(timer); server.close(); } }));
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,GAClG,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAoB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAKvD,OAAO,EAAE,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAE1E,iHAAiH;AACjH,MAAM,UAAU,UAAU,CAAC,OAAqB,EAAE;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;IACtC,iBAAiB,CAAC,IAAI,EAAE,IAAI,YAAY,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,YAAY,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IAEzF,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,GAA6B,EAAE;QAC3C,MAAM,CAAC,GAAG,IAAI,GAAG,EAAuB,CAAC;QACzC,MAAM,IAAI,GAAmC,YAAY,CAAC,aAAa,CAAC,CAAC;QACzE,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,IAAI,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,EAAE,CAAC;IACxB,oGAAoG;IACpG,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAAC,SAAS,GAAG,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAoB,CAAW,CAAC,OAAO,IAAI,CAAC,CAAC;QAAC,CAAC;IAC3I,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,WAAW,CAAC;QACzB,KAAK,EAAE,IAAI,YAAY,EAAE;QACzB,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACxB,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC;QAC7C,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG;QACvD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;KAC/C,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAwB,EAAE,EAAE,CAChD,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,IAAI,mDAAmD,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5H,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/netguard.d.ts

@@ -0,0 +1,4 @@
+/** True only for globally routable addresses. Loopback, private, link-local (cloud metadata), CGNAT etc. are false. */
+export declare function isPublicAddress(addr: string): boolean;
+/** dns.lookup replacement that refuses to connect to non-public addresses (SSRF / DNS-rebinding defence). */
+export declare function safeLookup(hostname: string, options: any, callback: any): void;

package/dist/netguard.js

@@ -0,0 +1,65 @@
+import dns from 'node:dns';
+import { isIP } from 'node:net';
+/** True only for globally routable addresses. Loopback, private, link-local (cloud metadata), CGNAT etc. are false. */
+export function isPublicAddress(addr) {
+    const ip = addr.replace(/^\[|\]$/g, '').toLowerCase();
+    const fam = isIP(ip);
+    if (fam === 4) {
+        const [a, b] = ip.split('.').map(Number);
+        if (a === 0 || a === 10 || a === 127)
+            return false;
+        if (a === 169 && b === 254)
+            return false;
+        if (a === 172 && b >= 16 && b <= 31)
+            return false;
+        if (a === 192 && b === 168)
+            return false;
+        if (a === 100 && b >= 64 && b <= 127)
+            return false;
+        if (a >= 224)
+            return false; // multicast + reserved
+        if (a === 192 && b === 0)
+            return false;
+        if (a === 198 && (b === 18 || b === 19))
+            return false;
+        return true;
+    }
+    if (fam === 6) {
+        if (ip === '::' || ip === '::1')
+            return false;
+        const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/.exec(ip);
+        if (mapped)
+            return isPublicAddress(mapped[1]);
+        const hex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(ip);
+        if (hex) {
+            const hi = parseInt(hex[1], 16), lo = parseInt(hex[2], 16);
+            return isPublicAddress(`${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`);
+        }
+        const first = parseInt(ip.split(':')[0] || '0', 16);
+        if ((first & 0xfe00) === 0xfc00)
+            return false; // fc00::/7 unique local
+        if ((first & 0xffc0) === 0xfe80)
+            return false; // fe80::/10 link-local
+        if ((first & 0xff00) === 0xff00)
+            return false; // multicast
+        return true;
+    }
+    return false;
+}
+/** dns.lookup replacement that refuses to connect to non-public addresses (SSRF / DNS-rebinding defence). */
+export function safeLookup(hostname, options, callback) {
+    const opts = typeof options === 'function' ? {} : options;
+    const cb = typeof options === 'function' ? options : callback;
+    dns.lookup(hostname, opts, (err, address, family) => {
+        if (err)
+            return cb(err, address, family);
+        const list = Array.isArray(address) ? address : [{ address }];
+        if (!list.length || list.some((a) => !isPublicAddress(a.address))) {
+            const e = new Error(`Blocked: ${hostname} resolves to a non-public address`);
+            e.code = 'EBLOCKED';
+            return cb(e, address, family);
+        }
+        cb(null, address, family);
+    });
+}
+//# sourceMappingURL=netguard.js.map

package/dist/netguard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"netguard.js","sourceRoot":"","sources":["../src/netguard.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC,uHAAuH;AACvH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAqB,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,KAAK,CAAC,CAAC,uBAAuB;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,0CAA0C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,GAAG,EAAE,CAAC;YAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YAAC,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAAC,CAAC;QACnJ,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,wBAAwB;QACvE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,uBAAuB;QACtE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,YAAY;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,OAAY,EAAE,QAAa;IACtE,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,MAAM,EAAE,GAAG,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAQ,EAAE,OAAY,EAAE,MAAW,EAAE,EAAE;QACjE,IAAI,GAAG;YAAE,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAA0B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,GAA0B,IAAI,KAAK,CAAC,YAAY,QAAQ,mCAAmC,CAAC,CAAC;YACpG,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC;YACpB,OAAO,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/providers.d.ts

@@ -0,0 +1,4 @@
+import type { ProviderConfig } from '@lllanyard/core';
+import type { ProviderDef } from './server.js';
+/** Turns a stored provider config into the proxy's runtime definition. */
+export declare function fromConfig(c: ProviderConfig): ProviderDef;

package/dist/providers.js

@@ -0,0 +1,12 @@
+/** Turns a stored provider config into the proxy's runtime definition. */
+export function fromConfig(c) {
+    const a = c.auth;
+    return {
+        upstream: c.upstream,
+        allowLocal: c.allowLocal,
+        inject: a.type === 'bearer'
+            ? (h, k) => { h['authorization'] = `Bearer ${k}`; }
+            : (h, k) => { h[a.name.toLowerCase()] = (a.prefix ?? '') + k; },
+    };
+}
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAGA,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,CAAiB;IAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IACjB,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,QAAQ;YACzB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAClE,CAAC;AACJ,CAAC"}

package/dist/ratelimit.d.ts

@@ -0,0 +1,29 @@
+export type Verdict = 'ok' | 'limited' | 'killed';
+/**
+ * Fixed-window limiter with a kill switch: exceed `limit` requests/minute and you get 429s;
+ * exceed limit x killMultiplier and the agent is blocked outright for killMs (or until restart).
+ */
+export declare class RateLimiter {
+    private limit;
+    private opts;
+    private windows;
+    private killed;
+    constructor(limit: number, opts?: {
+        killMultiplier?: number;
+        killMs?: number;
+        now?: () => number;
+    });
+    hit(id: string): Verdict;
+}
+/** Locks out a remote address after repeated failed logins, so tokens can't be guessed at network speed. */
+export declare class AuthGuard {
+    private max;
+    private windowMs;
+    private lockMs;
+    private now;
+    private m;
+    constructor(max?: number, windowMs?: number, lockMs?: number, now?: () => number);
+    blocked(ip: string): boolean;
+    fail(ip: string): void;
+    ok(ip: string): void;
+}

package/dist/ratelimit.js

@@ -0,0 +1,68 @@
+/**
+ * Fixed-window limiter with a kill switch: exceed `limit` requests/minute and you get 429s;
+ * exceed limit x killMultiplier and the agent is blocked outright for killMs (or until restart).
+ */
+export class RateLimiter {
+    limit;
+    opts;
+    windows = new Map();
+    killed = new Map();
+    constructor(limit, opts = {}) {
+        this.limit = limit;
+        this.opts = opts;
+    }
+    hit(id) {
+        const now = (this.opts.now ?? Date.now)();
+        const until = this.killed.get(id);
+        if (until !== undefined) {
+            if (now < until)
+                return 'killed';
+            this.killed.delete(id);
+        }
+        let w = this.windows.get(id);
+        if (!w || now - w.start >= 60_000) {
+            w = { start: now, n: 0 };
+            this.windows.set(id, w);
+        }
+        w.n++;
+        if (w.n > this.limit * (this.opts.killMultiplier ?? 3)) {
+            this.killed.set(id, now + (this.opts.killMs ?? 15 * 60_000));
+            return 'killed';
+        }
+        return w.n > this.limit ? 'limited' : 'ok';
+    }
+}
+/** Locks out a remote address after repeated failed logins, so tokens can't be guessed at network speed. */
+export class AuthGuard {
+    max;
+    windowMs;
+    lockMs;
+    now;
+    m = new Map();
+    constructor(max = 10, windowMs = 10 * 60_000, lockMs = 15 * 60_000, now = Date.now) {
+        this.max = max;
+        this.windowMs = windowMs;
+        this.lockMs = lockMs;
+        this.now = now;
+    }
+    blocked(ip) { const e = this.m.get(ip); return !!e && e.lockedUntil > this.now(); }
+    fail(ip) {
+        const t = this.now();
+        if (this.m.size > 10_000) {
+            for (const [k, v] of this.m)
+                if (v.lockedUntil <= t && t - v.start > this.windowMs)
+                    this.m.delete(k);
+            if (this.m.size > 10_000)
+                this.m.clear();
+        }
+        let e = this.m.get(ip);
+        if (!e || t - e.start > this.windowMs) {
+            e = { n: 0, start: t, lockedUntil: 0 };
+            this.m.set(ip, e);
+        }
+        if (++e.n >= this.max)
+            e.lockedUntil = t + this.lockMs;
+    }
+    ok(ip) { this.m.delete(ip); }
+}
+//# sourceMappingURL=ratelimit.js.map

package/dist/ratelimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimit.js","sourceRoot":"","sources":["../src/ratelimit.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,OAAO,WAAW;IAIZ;IACA;IAJF,OAAO,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC1D,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,YACU,KAAa,EACb,OAAyE,EAAE;QAD3E,UAAK,GAAL,KAAK,CAAQ;QACb,SAAI,GAAJ,IAAI,CAAuE;IAClF,CAAC;IAEJ,GAAG,CAAC,EAAU;QACZ,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,GAAG,GAAG,KAAK;gBAAE,OAAO,QAAQ,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC;YAAC,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACzF,CAAC,CAAC,CAAC,EAAE,CAAC;QACN,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;YAC7D,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;CACF;AAED,4GAA4G;AAC5G,MAAM,OAAO,SAAS;IAEA;IAAkB;IAAgC;IAA8B;IAD5F,CAAC,GAAG,IAAI,GAAG,EAA6D,CAAC;IACjF,YAAoB,MAAM,EAAE,EAAU,WAAW,EAAE,GAAG,MAAM,EAAU,SAAS,EAAE,GAAG,MAAM,EAAU,MAAoB,IAAI,CAAC,GAAG;QAA5G,QAAG,GAAH,GAAG,CAAK;QAAU,aAAQ,GAAR,QAAQ,CAAc;QAAU,WAAM,GAAN,MAAM,CAAc;QAAU,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IACpI,OAAO,CAAC,EAAU,IAAa,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpG,IAAI,CAAC,EAAU;QACb,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBAAE,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM;gBAAE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QACrG,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG;YAAE,CAAC,CAAC,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACzD,CAAC;IACD,EAAE,CAAC,EAAU,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;CACtC"}

package/dist/serve-options.d.ts

@@ -0,0 +1,11 @@
+export interface ServeOptions {
+    port?: number;
+    host?: string;
+    tls?: {
+        cert: string | Buffer;
+        key: string | Buffer;
+    };
+    allowedHosts?: string[];
+}
+/** Rules for exposing the proxy beyond this machine. Pure so it can be tested; startProxy enforces it. */
+export declare function checkServeOptions(o: ServeOptions, tier: 'free' | 'pro' | 'team'): void;

package/dist/serve-options.js

@@ -0,0 +1,13 @@
+const LOOPBACK = new Set(['127.0.0.1', '::1', 'localhost']);
+/** Rules for exposing the proxy beyond this machine. Pure so it can be tested; startProxy enforces it. */
+export function checkServeOptions(o, tier) {
+    if (!o.host || LOOPBACK.has(o.host))
+        return;
+    if (tier === 'free')
+        throw new Error('Sharing the proxy beyond this computer is a Pro feature (lllanyard license activate).');
+    if (!o.tls)
+        throw new Error('A shared proxy must use TLS: pass --tls-cert and --tls-key. Plain HTTP would expose agent tokens on the network.');
+    if (!o.allowedHosts?.length)
+        throw new Error('Pass --allow-host <name> with the DNS name your team uses to reach this server.');
+}
+//# sourceMappingURL=serve-options.js.map

package/dist/serve-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-options.js","sourceRoot":"","sources":["../src/serve-options.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AAI5D,0GAA0G;AAC1G,MAAM,UAAU,iBAAiB,CAAC,CAAe,EAAE,IAA6B;IAC9E,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO;IAC5C,IAAI,IAAI,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC9H,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kHAAkH,CAAC,CAAC;IAChJ,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;AAClI,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,27 @@
+import http from 'node:http';
+import https from 'node:https';
+import type { AgentIdentity, SecureStore } from '@lllanyard/core';
+import { AuthGuard } from './ratelimit.js';
+export interface ProviderDef {
+    upstream: string;
+    inject(headers: http.OutgoingHttpHeaders, key: string): void;
+    allowLocal?: boolean;
+}
+export type ProviderSource = Record<string, ProviderDef> | ((id: string) => ProviderDef | undefined);
+export interface ProxyDeps {
+    store: Pick<SecureStore, 'get'>;
+    verify: (token: string) => AgentIdentity | null;
+    providers: ProviderSource;
+    rpm?: number;
+    allowOrigin?: boolean;
+    keyCacheMs?: number;
+    log?: (rec: Record<string, unknown>) => void;
+    now?: () => number;
+    allowedHosts?: string[];
+    tls?: {
+        cert: string | Buffer;
+        key: string | Buffer;
+    };
+    authGuard?: AuthGuard;
+}
+export declare function createProxy(deps: ProxyDeps): http.Server | https.Server;

package/dist/server.js

@@ -0,0 +1,151 @@
+import http from 'node:http';
+import https from 'node:https';
+import { isIP } from 'node:net';
+import { isPublicAddress, safeLookup } from './netguard.js';
+import { AuthGuard, RateLimiter } from './ratelimit.js';
+const DROP_REQ = new Set([
+    'host', 'connection', 'keep-alive', 'proxy-authorization', 'proxy-connection', 'te', 'trailer',
+    'transfer-encoding', 'upgrade', 'expect', 'authorization', 'x-api-key', 'cookie',
+]);
+const DROP_RES = new Set(['connection', 'keep-alive', 'transfer-encoding', 'proxy-authenticate', 'upgrade', 'set-cookie']);
+export function createProxy(deps) {
+    const lookupProvider = (id) => {
+        const src = deps.providers;
+        if (typeof src === 'function')
+            return src(id);
+        return Object.prototype.hasOwnProperty.call(src, id) ? src[id] : undefined; // "constructor" etc. are not providers
+    };
+    const now = deps.now ?? Date.now;
+    const limiter = new RateLimiter(deps.rpm ?? 120, { now });
+    const log = deps.log ?? ((r) => process.stdout.write(JSON.stringify(r) + '\n'));
+    const cache = new Map();
+    const guard = deps.authGuard ?? new AuthGuard(10, 10 * 60_000, 15 * 60_000, now);
+    const extraHosts = new Set((deps.allowedHosts ?? []).map((h) => h.toLowerCase()));
+    const keyFor = (provider, client) => {
+        const ck = `${provider}:${client}`;
+        const hit = cache.get(ck);
+        if (hit && hit.exp > now())
+            return hit.key;
+        const key = deps.store.get(provider, client);
+        if (key)
+            cache.set(ck, { key, exp: now() + (deps.keyCacheMs ?? 30_000) });
+        else
+            cache.delete(ck);
+        return key;
+    };
+    const send = (res, code, msg) => {
+        if (res.headersSent) {
+            res.destroy();
+            return;
+        }
+        const body = JSON.stringify({ error: msg });
+        res.writeHead(code, { 'content-type': 'application/json', 'content-length': Buffer.byteLength(body) });
+        res.end(body);
+    };
+    const handler = (req, res) => {
+        const started = now();
+        const ip = req.socket.remoteAddress ?? 'unknown';
+        // Defence against DNS rebinding and drive-by web pages: only loopback Host values, no browser Origin.
+        const port = req.socket.localPort;
+        const host = String(req.headers.host ?? '').toLowerCase();
+        if (![`127.0.0.1:${port}`, `localhost:${port}`, `[::1]:${port}`].includes(host) && !extraHosts.has(host) && !extraHosts.has(host.replace(/:\d+$/, '')))
+            return send(res, 403, 'Forbidden host');
+        if (req.headers.origin && !deps.allowOrigin)
+            return send(res, 403, 'Browser-origin requests are not allowed');
+        const m = /^\/([A-Za-z0-9-]+)(.*)$/s.exec(req.url ?? '/');
+        if (!m)
+            return send(res, 404, 'Not found');
+        const provider = m[1].toLowerCase();
+        let rest = m[2] ?? '';
+        const def = lookupProvider(provider);
+        if (!def)
+            return send(res, 404, 'Unknown provider');
+        if (rest === '')
+            rest = '/';
+        else if (rest.startsWith('?'))
+            rest = '/' + rest;
+        else if (!rest.startsWith('/'))
+            return send(res, 404, 'Not found'); // blocks "/openai@evil.com"
+        // Agent authentication: the placeholder token arrives as the agent's "API key".
+        const bearer = /^Bearer\s+(.+)$/i.exec(String(req.headers.authorization ?? ''))?.[1];
+        const xkey = typeof req.headers['x-api-key'] === 'string' ? req.headers['x-api-key'] : undefined;
+        const token = bearer ?? xkey;
+        if (guard.blocked(ip)) {
+            log({ ts: new Date().toISOString(), ip, provider, status: 429, reason: 'auth-lockout' });
+            res.setHeader('retry-after', '900');
+            return send(res, 429, 'Too many failed attempts');
+        }
+        const agent = token ? deps.verify(token) : null;
+        if (!agent) {
+            guard.fail(ip);
+            log({ ts: new Date().toISOString(), ip, provider, status: 401, reason: 'bad-token' });
+            return send(res, 401, 'Invalid or missing agent token');
+        }
+        guard.ok(ip);
+        // Least privilege: an agent created with --providers may only reach those.
+        if (agent.providers && !agent.providers.includes(provider)) {
+            log({ ts: new Date().toISOString(), agent: agent.name, provider, status: 403, reason: 'provider-not-allowed' });
+            return send(res, 403, 'This agent is not allowed to use that provider');
+        }
+        const verdict = limiter.hit(agent.name);
+        if (verdict !== 'ok') {
+            log({ ts: new Date().toISOString(), agent: agent.name, provider, status: 429, killed: verdict === 'killed' });
+            res.setHeader('retry-after', '60');
+            return send(res, 429, verdict === 'killed' ? 'Agent blocked by kill switch' : 'Rate limit exceeded');
+        }
+        let key;
+        try {
+            key = keyFor(provider, agent.client);
+        }
+        catch {
+            return send(res, 503, 'Key store unavailable');
+        }
+        if (!key)
+            return send(res, 503, `No ${provider} key stored for client "${agent.client}"`);
+        // Never let the request path change the destination host.
+        let target;
+        try {
+            target = new URL(def.upstream + rest);
+        }
+        catch {
+            return send(res, 400, 'Bad request path');
+        }
+        if (target.origin !== new URL(def.upstream).origin)
+            return send(res, 400, 'Bad request path');
+        // SSRF guard: literal private/loopback IPs are refused here; hostnames are checked at connect time (safeLookup).
+        const hostname = target.hostname.replace(/^\[|\]$/g, '');
+        if (!def.allowLocal && isIP(hostname) && !isPublicAddress(hostname))
+            return send(res, 403, 'Upstream address not allowed');
+        const headers = {};
+        for (const [k, v] of Object.entries(req.headers))
+            if (!DROP_REQ.has(k) && v !== undefined)
+                headers[k] = v;
+        def.inject(headers, key);
+        let up;
+        res.on('close', () => {
+            log({ ts: new Date().toISOString(), agent: agent.name, client: agent.client, ip, provider, method: req.method,
+                path: target.pathname, status: res.statusCode, ms: now() - started }); // no query string, no bodies
+            up?.destroy();
+        });
+        // Redirects are never followed, so the key can't be forwarded to a third party.
+        const lib = target.protocol === 'https:' ? https : http;
+        try {
+            up = lib.request(target, { method: req.method, headers, timeout: 300_000, ...(def.allowLocal ? {} : { lookup: safeLookup }) }, (ures) => {
+                const rh = {};
+                for (const [k, v] of Object.entries(ures.headers))
+                    if (!DROP_RES.has(k) && v !== undefined)
+                        rh[k] = v;
+                res.writeHead(ures.statusCode ?? 502, rh);
+                ures.pipe(res); // streams SSE untouched
+            });
+        }
+        catch {
+            return send(res, 502, 'Upstream request failed');
+        }
+        up.on('timeout', () => up.destroy(new Error('upstream timeout')));
+        up.on('error', () => send(res, 502, 'Upstream request failed'));
+        req.pipe(up);
+    };
+    return deps.tls ? https.createServer({ ...deps.tls, minVersion: 'TLSv1.2' }, handler) : http.createServer(handler);
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAE/B,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAUxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS;IAC9F,mBAAmB,EAAE,SAAS,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ;CACjF,CAAC,CAAC;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAgB3H,MAAM,UAAU,WAAW,CAAC,IAAe;IACzC,MAAM,cAAc,GAAG,CAAC,EAAU,EAA2B,EAAE;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,UAAU;YAAE,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,uCAAuC;IACrH,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAElF,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAiB,EAAE;QACjE,MAAM,EAAE,GAAG,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,GAAG;YAAE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;;YACrE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAwB,EAAE,IAAY,EAAE,GAAW,EAAE,EAAE;QACnE,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAyB,EAAE,GAAwB,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QAEjD,sGAAsG;QACtG,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,CAAC,CAAC,aAAa,IAAI,EAAE,EAAE,aAAa,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAChM,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,yCAAyC,CAAC,CAAC;QAE9G,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACpD,IAAI,IAAI,KAAK,EAAE;YAAE,IAAI,GAAG,GAAG,CAAC;aACvB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;aAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,4BAA4B;QAEhG,gFAAgF;QAChF,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,MAAM,KAAK,GAAG,MAAM,IAAI,IAAI,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACzF,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YACtF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,gCAAgC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAEb,2EAA2E;QAC3E,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;YAChH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,gDAAgD,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC,CAAC;YAC9G,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QACvG,CAAC;QAED,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAAC,CAAC;QACvG,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,QAAQ,2BAA2B,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAE1F,0DAA0D;QAC1D,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAE9F,iHAAiH;QACjH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,8BAA8B,CAAC,CAAC;QAE3H,MAAM,OAAO,GAA6B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1G,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAEzB,IAAI,EAAkC,CAAC;QACvC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;gBACvG,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,6BAA6B;YAC1G,EAAE,EAAE,OAAO,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,gFAAgF;QAChF,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,IAAI,CAAC;YACH,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;gBACtI,MAAM,EAAE,GAA6B,EAAE,CAAC;gBACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS;wBAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACtG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;QAAC,CAAC;QAC7D,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAClE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;AACrH,CAAC"}

package/package.json

@@ -1,6 +1,39 @@
 {
   "name": "@lllanyard/proxy",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "LLLanyard proxy: swaps placeholder tokens for real API keys on the way out.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@lllanyard/core": "^0.1.0"
+  },
+  "license": "BUSL-1.1",
+  "engines": {
+    "node": ">=22"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/EthAsk/LLLanyard.git",
+    "directory": "packages/proxy"
+  },
+  "homepage": "https://lllanyard.app",
+  "bugs": {
+    "url": "https://github.com/EthAsk/LLLanyard/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "prepack": "cp ../../LICENSE.md ."
+  }
+}