@mathew-macharia/black-mamba 1.0.3 → 1.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mathew-macharia/black-mamba",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "OpenAI-compatible proxy that maps chat sessions onto DeepSeek web chat",
   "type": "module",
   "main": "index.js",

package/src/deepseek/classify.js

@@ -21,6 +21,21 @@ export function upstreamReason(jsonBody, rawText, status) {
   return jsonBody?.data?.biz_msg || jsonBody?.msg || (rawText ? rawText.slice(0, 200) : "") || `HTTP ${status}`;
 }
 
+/** Safe fields from an auth-failure response for account logs. */
+export function deepSeekAuthFacts(res, jsonBody = null) {
+  const facts = { http: res?.status ?? null };
+  const waf = res?.headers?.get?.("x-amzn-waf-action");
+  if (waf) facts.waf = waf;
+  if (jsonBody && typeof jsonBody === "object") {
+    if (jsonBody.code != null) facts.code = jsonBody.code;
+    if (jsonBody.msg != null) facts.msg = String(jsonBody.msg).slice(0, 300);
+    const data = jsonBody.data;
+    if (data?.biz_code != null) facts.biz_code = data.biz_code;
+    if (data?.biz_msg != null) facts.biz_msg = String(data.biz_msg).slice(0, 300);
+  }
+  return facts;
+}
+
 /**
  * True only when DeepSeek tells us the chat session or parent message we referenced is gone.
  * Deliberately narrow: anything else is a real failure that must surface to the client.

package/src/deepseek/client.js

@@ -3,6 +3,7 @@
 import { CONFIG } from "../config.js";
 import { DeepSeekAuthError, UpstreamContextRejectedError, UpstreamError } from "../errors.js";
 import {
+  deepSeekAuthFacts,
   isDeepSeekAuthFailure,
   isHumanChallengeRequired,
   isStaleContextRejection,
@@ -22,10 +23,12 @@ const SESSION_EXPIRED_NOTICE = "DeepSeek session expired. Paste a fresh cURL in
  * @param {(reason: string) => void} [deps.onAuthFailure]  Called once per detected credential failure.
  */
 export function createDeepSeekClient({ auth, powSolver, fetchImpl = fetch, config = CONFIG.deepseek, onAuthFailure = () => {} }) {
-  function authFailure(notice) {
+  function authFailure(notice, res, jsonBody = null) {
     auth.markInvalid();
-    onAuthFailure(notice);
-    return new DeepSeekAuthError(notice);
+    const facts = res ? deepSeekAuthFacts(res, jsonBody) : null;
+    if (facts) onAuthFailure(`${notice} ${JSON.stringify(facts)}`);
+    else onAuthFailure(notice);
+    return new DeepSeekAuthError(notice, facts ?? undefined);
   }
 
   function ensureCredentials() {
@@ -51,7 +54,7 @@ export function createDeepSeekClient({ auth, powSolver, fetchImpl = fetch, confi
     const json = await res.json().catch(() => null);
 
     if (isDeepSeekAuthFailure(res, json)) {
-      throw authFailure("DeepSeek session expired while creating chat session. " + SESSION_EXPIRED_NOTICE);
+      throw authFailure("DeepSeek session expired while creating chat session. " + SESSION_EXPIRED_NOTICE, res, json);
     }
     const remoteId = json?.data?.biz_data?.id || json?.data?.biz_data?.chat_session?.id;
     if (!res.ok || typeof remoteId !== "string" || !remoteId) {
@@ -67,7 +70,7 @@ export function createDeepSeekClient({ auth, powSolver, fetchImpl = fetch, confi
     const res = await postJson(config.powChallengeUrl, { target_path: config.powTargetPath });
 
     if (isWafChallengeResponse(res)) {
-      throw authFailure("AWS WAF cookie expired during PoW challenge. " + SESSION_EXPIRED_NOTICE);
+      throw authFailure("AWS WAF cookie expired during PoW challenge. " + SESSION_EXPIRED_NOTICE, res);
     }
     let json;
     try {
@@ -76,7 +79,11 @@ export function createDeepSeekClient({ auth, powSolver, fetchImpl = fetch, confi
       throw new UpstreamError(`Invalid PoW challenge response (HTTP ${res.status})`, { code: "pow_challenge_invalid" });
     }
     if (isDeepSeekAuthFailure(res, json)) {
-      throw authFailure(isHumanChallengeRequired(json) ? HUMAN_CHALLENGE_NOTICE : "DeepSeek session expired during PoW challenge. " + SESSION_EXPIRED_NOTICE);
+      throw authFailure(
+        isHumanChallengeRequired(json) ? HUMAN_CHALLENGE_NOTICE : "DeepSeek session expired during PoW challenge. " + SESSION_EXPIRED_NOTICE,
+        res,
+        json
+      );
     }
     const challenge = json?.data?.biz_data?.challenge;
     if (!res.ok || !challenge) {
@@ -117,7 +124,7 @@ export function createDeepSeekClient({ auth, powSolver, fetchImpl = fetch, confi
     );
 
     if (isWafChallengeResponse(res) || res.status === 401) {
-      throw authFailure("DeepSeek returned unauthorized / WAF challenge on chat completion. " + SESSION_EXPIRED_NOTICE);
+      throw authFailure("DeepSeek returned unauthorized / WAF challenge on chat completion. " + SESSION_EXPIRED_NOTICE, res);
     }
 
     const contentType = res.headers.get("content-type") || "";
@@ -130,7 +137,7 @@ export function createDeepSeekClient({ auth, powSolver, fetchImpl = fetch, confi
         // non-JSON body
       }
       if (isDeepSeekAuthFailure(res, errJson)) {
-        throw authFailure(isHumanChallengeRequired(errJson) ? HUMAN_CHALLENGE_NOTICE : SESSION_EXPIRED_NOTICE);
+        throw authFailure(isHumanChallengeRequired(errJson) ? HUMAN_CHALLENGE_NOTICE : SESSION_EXPIRED_NOTICE, res, errJson);
       }
       const details = { status: res.status, body: errJson ?? rawText.slice(0, 500), chat_session_id: chatSessionId, parent_message_id: parentMessageId };
       if (isStaleContextRejection(res, errJson, config.staleContextBizCodes)) {