@pix3/agent-bridge 0.2.0 → 0.2.1

package/dist/index.js

@@ -0,0 +1,293 @@
+#!/usr/bin/env node
+/**
+ * Pix3AgentBridge — a LOCAL, personal bridge between the pix3 editor's in-editor agent and the LLM
+ * providers that a browser cannot reach directly.
+ *
+ * It does two jobs, both on 127.0.0.1:
+ *
+ *   1. Agent-SDK lane (`POST /v1/messages`, `GET /v1/models`): serves the Anthropic Messages wire
+ *      shape from a real Claude Agent SDK (Claude Code / Pro/MAX subscription) session — no API key,
+ *      usage draws from the subscription. This is the original bridge behaviour (see sessions.ts).
+ *
+ *   2. Provider proxy lane (`ALL /providers/:id/*`, `GET /v1/providers`): a credential-injecting
+ *      reverse proxy for metered providers (OpenAI, Anthropic API, OpenCode Zen, custom
+ *      OpenAI-compatible endpoints). The editor sends requests with only the pairing token; the
+ *      bridge injects the provider key it stores in `~/.pix3/agent-bridge.json` and forwards to the
+ *      fixed upstream. Keys never enter the browser. Providers are managed with the CLI:
+ *
+ *        pix3-agent-bridge provider add openai --key sk-...
+ *        pix3-agent-bridge provider list
+ *
+ * Usage:
+ *   npx @pix3/agent-bridge                       (requires a `claude login`-ed Claude Code for lane 1)
+ *   npx @pix3/agent-bridge provider add openai --key sk-...
+ *   Options: --port <n> (default 8484), --origin <url> (repeatable, extra allowed origins)
+ *
+ * Security model (defense in depth for a localhost service):
+ *   - binds to 127.0.0.1 only;
+ *   - pairing token (generated once, stored in ~/.pix3/agent-bridge.json, printed on start) must
+ *     accompany every API request (x-api-key / Authorization) — blocks other local processes/pages;
+ *   - browser `Origin` allowlist (editor.pix3.dev / cloud.pix3.dev + local dev) — anything else 403;
+ *   - `Host` header must be localhost — blocks DNS-rebinding;
+ *   - the proxy lane never takes the upstream host from the client (fixed per provider) → no SSRF,
+ *     and forwards only content-type + the injected key → the pairing token never leaks upstream;
+ *   - the Agent-SDK session runs with zero built-in tools — the model can only call pix3 editor
+ *     tools, never this machine's shell or filesystem.
+ */
+import http from 'node:http';
+import { SessionManager } from "./sessions.js";
+import { HttpError, parseMessagesRequest } from "./wire.js";
+import { loadConfig, RESERVED_PROVIDER_IDS } from "./config.js";
+import { runProviderCommand, usage } from "./cli.js";
+import { forwardToProvider } from "./proxy.js";
+const MAX_BODY_BYTES = 64 * 1024 * 1024;
+/** Discovery entry for the intrinsic Agent-SDK (subscription) lane — not part of the provider table. */
+const AGENT_SDK_PROVIDER = {
+    id: RESERVED_PROVIDER_IDS[0],
+    label: 'Claude Code (MAX)',
+    kind: 'agent-sdk',
+};
+function modelEntry(id, label, description, maxOutputTokens, contextWindow) {
+    return {
+        id,
+        label,
+        description,
+        capabilities: {
+            supportsTools: true,
+            supportsImages: true,
+            supportsSystemPrompt: true,
+            maxOutputTokens,
+            contextWindow,
+        },
+        pricing: { inputPer1M: 0, outputPer1M: 0 },
+    };
+}
+/** Static catalog served to the Agent-SDK lane's `GET /v1/models` — subscription models, $0 marginal cost. */
+const AGENT_SDK_MODELS = [
+    modelEntry('claude-fable-5', 'Claude Fable 5 (MAX)', 'Most capable — via Claude Code subscription.', 32000, 1_000_000),
+    modelEntry('claude-opus-4-8', 'Claude Opus 4.8 (MAX)', 'Highly capable — via Claude Code subscription.', 32000, 1_000_000),
+    modelEntry('claude-sonnet-5', 'Claude Sonnet 5 (MAX)', 'Balanced speed and quality — via Claude Code subscription.', 32000, 1_000_000),
+    modelEntry('claude-haiku-4-5', 'Claude Haiku 4.5 (MAX)', 'Fastest — via Claude Code subscription.', 16000, 200_000),
+];
+const log = (line) => {
+    console.log(`${new Date().toISOString().slice(11, 19)} ${line}`);
+};
+const hostAllowed = (req) => {
+    const host = (req.headers.host ?? '').toLowerCase();
+    return (host.startsWith('localhost:') ||
+        host.startsWith('127.0.0.1:') ||
+        host === 'localhost' ||
+        host === '127.0.0.1');
+};
+const readBody = (req) => new Promise((resolve, reject) => {
+    const chunks = [];
+    let size = 0;
+    req.on('data', (chunk) => {
+        size += chunk.length;
+        if (size > MAX_BODY_BYTES) {
+            reject(new HttpError(413, 'Request body too large.'));
+            req.destroy();
+            return;
+        }
+        chunks.push(chunk);
+    });
+    req.on('end', () => resolve(Buffer.concat(chunks)));
+    req.on('error', reject);
+});
+const startServer = (config) => {
+    const manager = new SessionManager(log);
+    const withCors = (corsOrigin, extra = {}) => {
+        const headers = { 'Cache-Control': 'no-store', ...extra };
+        if (corsOrigin) {
+            headers['Access-Control-Allow-Origin'] = corsOrigin;
+            headers['Vary'] = 'Origin';
+        }
+        return headers;
+    };
+    const sendJson = (res, status, body, corsOrigin) => {
+        res.writeHead(status, withCors(corsOrigin, { 'Content-Type': 'application/json; charset=utf-8' }));
+        res.end(JSON.stringify(body));
+    };
+    const sendError = (res, status, message, corsOrigin) => {
+        sendJson(res, status, { type: 'error', error: { type: 'invalid_request_error', message } }, corsOrigin);
+    };
+    const server = http.createServer(async (req, res) => {
+        const rawUrl = req.url ?? '/';
+        const qIndex = rawUrl.indexOf('?');
+        const pathname = qIndex >= 0 ? rawUrl.slice(0, qIndex) : rawUrl;
+        const query = qIndex >= 0 ? rawUrl.slice(qIndex) : '';
+        const origin = typeof req.headers.origin === 'string' ? req.headers.origin : null;
+        if (!hostAllowed(req)) {
+            sendError(res, 403, 'Forbidden host.', null);
+            return;
+        }
+        if (origin && !config.origins.includes(origin)) {
+            log(`403 rejected origin ${origin}`);
+            sendError(res, 403, 'Origin not allowed.', null);
+            return;
+        }
+        // CORS preflight (no auth — browsers strip credentials from preflights).
+        if (req.method === 'OPTIONS') {
+            const headers = {
+                'Access-Control-Allow-Methods': 'GET, POST, OPTIONS',
+                'Access-Control-Allow-Headers': req.headers['access-control-request-headers'] ??
+                    'content-type, x-api-key, authorization, x-pix3-bridge-token, anthropic-version, anthropic-dangerous-direct-browser-access',
+                'Access-Control-Max-Age': '86400',
+            };
+            if (origin) {
+                headers['Access-Control-Allow-Origin'] = origin;
+                headers['Vary'] = 'Origin';
+            }
+            // Chrome Private Network Access / Local Network Access preflight opt-in.
+            if (req.headers['access-control-request-private-network'] === 'true') {
+                headers['Access-Control-Allow-Private-Network'] = 'true';
+            }
+            res.writeHead(204, headers);
+            res.end();
+            return;
+        }
+        if (req.method === 'GET' && (pathname === '/' || pathname === '/health')) {
+            sendJson(res, 200, {
+                ok: true,
+                name: 'pix3-agent-bridge',
+                hint: 'Paste the pairing token from the bridge console into pix3 (Settings → AI Agent).',
+            }, origin);
+            return;
+        }
+        // Everything below requires the pairing token (dedicated header, x-api-key, or Authorization).
+        const auth = req.headers['x-pix3-bridge-token'] ??
+            req.headers['x-api-key'] ??
+            req.headers.authorization?.replace(/^Bearer\s+/i, '');
+        if (auth !== config.token) {
+            sendError(res, 401, 'Invalid or missing bridge pairing token.', origin);
+            return;
+        }
+        // Discovery: which providers this bridge can serve right now (enabled + keyed) + the SDK lane.
+        if (req.method === 'GET' && pathname === '/v1/providers') {
+            const providers = Object.entries(config.providers)
+                .filter(([, p]) => p.enabled && p.apiKey)
+                .map(([id, p]) => ({ id, label: p.label, kind: p.kind, enabled: true }));
+            sendJson(res, 200, { providers: [...providers, AGENT_SDK_PROVIDER] }, origin);
+            return;
+        }
+        // Provider proxy lane: /providers/:id/<rest>  →  {provider.baseUrl}/<rest>
+        if (pathname.startsWith('/providers/')) {
+            const rest = pathname.slice('/providers/'.length);
+            const slash = rest.indexOf('/');
+            const providerId = slash >= 0 ? rest.slice(0, slash) : rest;
+            const restPath = slash >= 0 ? rest.slice(slash) : '/';
+            const provider = config.providers[providerId];
+            if (!provider || !provider.enabled) {
+                sendError(res, 404, `Provider "${providerId}" is not configured or is disabled.`, origin);
+                return;
+            }
+            if (!provider.apiKey) {
+                sendError(res, 400, `Provider "${providerId}" has no API key. Run: pix3-agent-bridge provider set-key ${providerId} <key>`, origin);
+                return;
+            }
+            try {
+                const body = req.method === 'GET' || req.method === 'HEAD' ? null : await readBody(req);
+                const result = await forwardToProvider(provider, {
+                    method: req.method ?? 'GET',
+                    restPath,
+                    query,
+                    body,
+                });
+                res.writeHead(result.status, withCors(origin, { 'Content-Type': result.contentType }));
+                res.end(result.body);
+            }
+            catch (error) {
+                if (error instanceof HttpError) {
+                    sendError(res, error.status, error.message, origin);
+                }
+                else {
+                    log(`proxy error (${providerId}): ${error instanceof Error ? error.message : String(error)}`);
+                    sendError(res, 502, `Upstream request to "${providerId}" failed.`, origin);
+                }
+            }
+            return;
+        }
+        // Agent-SDK lane.
+        if (req.method === 'GET' && pathname === '/v1/models') {
+            sendJson(res, 200, { models: AGENT_SDK_MODELS }, origin);
+            return;
+        }
+        if (req.method === 'POST' && pathname === '/v1/messages') {
+            const abort = new AbortController();
+            res.on('close', () => {
+                if (!res.writableEnded)
+                    abort.abort();
+            });
+            try {
+                const body = (await readBody(req)).toString('utf8');
+                const request = parseMessagesRequest(JSON.parse(body));
+                const response = await manager.handle(request, abort.signal);
+                sendJson(res, response.status, response.body, origin);
+            }
+            catch (error) {
+                if (res.writableEnded || abort.signal.aborted)
+                    return;
+                if (error instanceof HttpError) {
+                    sendError(res, error.status === 499 ? 400 : error.status, error.message, origin);
+                }
+                else if (error instanceof SyntaxError) {
+                    sendError(res, 400, 'Request body is not valid JSON.', origin);
+                }
+                else {
+                    log(`500: ${error instanceof Error ? (error.stack ?? error.message) : String(error)}`);
+                    sendError(res, 500, error instanceof Error ? error.message : 'Internal bridge error.', origin);
+                }
+            }
+            return;
+        }
+        sendError(res, 404, `No route: ${req.method} ${pathname}`, origin);
+    });
+    // Long model turns must not be killed by Node's default 5-minute request timeout.
+    server.requestTimeout = 0;
+    server.headersTimeout = 60_000;
+    server.listen(config.port, '127.0.0.1', () => {
+        const enabled = Object.entries(config.providers)
+            .filter(([, p]) => p.enabled && p.apiKey)
+            .map(([id]) => id);
+        console.log('');
+        console.log(`  Pix3AgentBridge listening on http://127.0.0.1:${config.port}`);
+        console.log(`  Pairing token:   ${config.token}`);
+        console.log(`  Allowed origins: ${config.origins.join(', ')}`);
+        console.log(`  Proxy providers: ${enabled.length > 0 ? enabled.join(', ') : '(none — add one: pix3-agent-bridge provider add openai --key sk-...)'}`);
+        console.log('');
+        console.log('  In pix3: Settings → AI Agent → paste the pairing token; advanced providers appear when enabled here.');
+        console.log('  Agent-SDK (MAX) lane auth comes from your Claude Code login (`claude login`).');
+        console.log('');
+    });
+    const shutdown = () => {
+        log('shutting down');
+        manager.closeAll('bridge shutting down');
+        server.close(() => process.exit(0));
+        setTimeout(() => process.exit(0), 2000).unref();
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+};
+const main = () => {
+    const argv = process.argv.slice(2);
+    const command = argv[0];
+    if (command === 'provider') {
+        runProviderCommand(argv.slice(1));
+        return;
+    }
+    if (command === 'help' || command === '--help' || command === '-h') {
+        usage();
+        return;
+    }
+    const config = loadConfig();
+    // Serve-time flag overrides (not persisted): --port, --origin (repeatable).
+    for (let i = 0; i < argv.length; i += 1) {
+        if (argv[i] === '--port' && argv[i + 1])
+            config.port = Number(argv[i + 1]);
+        if (argv[i] === '--origin' && argv[i + 1])
+            config.origins.push(argv[i + 1]);
+    }
+    startServer(config);
+};
+main();
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAqB,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,wGAAwG;AACxG,MAAM,kBAAkB,GAAG;IACzB,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,mBAAmB;IAC1B,IAAI,EAAE,WAAoB;CAC3B,CAAC;AAEF,SAAS,UAAU,CACjB,EAAU,EACV,KAAa,EACb,WAAmB,EACnB,eAAuB,EACvB,aAAqB;IAErB,OAAO;QACL,EAAE;QACF,KAAK;QACL,WAAW;QACX,YAAY,EAAE;YACZ,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,IAAI;YAC1B,eAAe;YACf,aAAa;SACd;QACD,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED,8GAA8G;AAC9G,MAAM,gBAAgB,GAAG;IACvB,UAAU,CAAC,gBAAgB,EAAE,sBAAsB,EAAE,8CAA8C,EAAE,KAAK,EAAE,SAAS,CAAC;IACtH,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,gDAAgD,EAAE,KAAK,EAAE,SAAS,CAAC;IAC1H,UAAU,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,4DAA4D,EAAE,KAAK,EAAE,SAAS,CAAC;IACtI,UAAU,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,yCAAyC,EAAE,KAAK,EAAE,OAAO,CAAC;CACpH,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAQ,EAAE;IACjC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,GAAoB,EAAW,EAAE;IACpD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAC7B,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW,CACrB,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,GAAoB,EAAmB,EAAE,CACzD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,MAAoB,EAAQ,EAAE;IACjD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,CACf,UAAyB,EACzB,QAAgC,EAAE,EACV,EAAE;QAC1B,MAAM,OAAO,GAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,CAAC;QAClF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,6BAA6B,CAAC,GAAG,UAAU,CAAC;YACpD,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CACf,GAAmB,EACnB,MAAc,EACd,IAAa,EACb,UAAyB,EACnB,EAAE;QACR,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC;QACnG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,CAChB,GAAmB,EACnB,MAAc,EACd,OAAe,EACf,UAAyB,EACnB,EAAE;QACR,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAC1G,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QAElF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;YACrC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAA2B;gBACtC,8BAA8B,EAAE,oBAAoB;gBACpD,8BAA8B,EAC3B,GAAG,CAAC,OAAO,CAAC,gCAAgC,CAAwB;oBACrE,2HAA2H;gBAC7H,wBAAwB,EAAE,OAAO;aAClC,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;YAC7B,CAAC;YACD,yEAAyE;YACzE,IAAI,GAAG,CAAC,OAAO,CAAC,wCAAwC,CAAC,KAAK,MAAM,EAAE,CAAC;gBACrE,OAAO,CAAC,sCAAsC,CAAC,GAAG,MAAM,CAAC;YAC3D,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5B,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;YACzE,QAAQ,CACN,GAAG,EACH,GAAG,EACH;gBACE,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,kFAAkF;aACzF,EACD,MAAM,CACP,CAAC;YACF,OAAO;QACT,CAAC;QAED,+FAA+F;QAC/F,MAAM,IAAI,GACP,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAwB;YACzD,GAAG,CAAC,OAAO,CAAC,WAAW,CAAwB;YAChD,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,0CAA0C,EAAE,MAAM,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QAED,+FAA+F;QAC/F,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC/C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC;iBACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,EAAE,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,2EAA2E;QAC3E,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,UAAU,qCAAqC,EAAE,MAAM,CAAC,CAAC;gBAC1F,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACrB,SAAS,CACP,GAAG,EACH,GAAG,EACH,aAAa,UAAU,6DAA6D,UAAU,QAAQ,EACtG,MAAM,CACP,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxF,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE;oBAC/C,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;oBAC3B,QAAQ;oBACR,KAAK;oBACL,IAAI;iBACL,CAAC,CAAC;gBACH,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBACvF,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;oBAC/B,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,gBAAgB,UAAU,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAC9F,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,wBAAwB,UAAU,WAAW,EAAE,MAAM,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,kBAAkB;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YACtD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;YACpC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,IAAI,CAAC,GAAG,CAAC,aAAa;oBAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC7D,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACtD,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;oBAC/B,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACnF,CAAC;qBAAM,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;oBACxC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,EAAE,MAAM,CAAC,CAAC;gBACjE,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,QAAQ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBACvF,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;gBACjG,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,GAAG,CAAC,MAAM,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,kFAAkF;IAClF,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IAC1B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;IAE/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;aAC7C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,mDAAmD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CACT,sBAAsB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sEAAsE,EAAE,CACzI,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,wGAAwG,CAAC,CAAC;QACtH,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,GAAG,CAAC,eAAe,CAAC,CAAC;QACrB,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IAClD,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,GAAS,EAAE;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAExB,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnE,KAAK,EAAE,CAAC;QACR,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,4EAA4E;IAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC"}

package/dist/proxy.js

@@ -0,0 +1,45 @@
+/**
+ * Credential-injecting reverse proxy for the metered LLM providers. The editor talks to the bridge
+ * with the pairing token only; this module strips that token, builds a fresh upstream request with
+ * the provider's stored key, and forwards it to the fixed upstream base for that provider.
+ *
+ * Security properties:
+ *   - the upstream host is NEVER taken from the client request — it comes from the provider's stored
+ *     `baseUrl`, so this cannot be turned into an open relay / SSRF against arbitrary hosts;
+ *   - the outbound request carries ONLY `content-type` + the injected auth header — the pairing
+ *     token, cookies, Origin/Host and any other inbound headers are dropped, so the bridge token
+ *     never leaks upstream;
+ *   - the wire body is passed through verbatim, so the bridge stays agnostic to each provider's
+ *     request/response format (OpenAI Chat Completions vs Anthropic Messages).
+ */
+const ANTHROPIC_VERSION = '2023-06-01';
+const buildUpstreamHeaders = (provider) => {
+    const headers = { 'Content-Type': 'application/json' };
+    if (provider.kind === 'anthropic') {
+        headers['x-api-key'] = provider.apiKey;
+        headers['anthropic-version'] = ANTHROPIC_VERSION;
+    }
+    else {
+        headers['Authorization'] = `Bearer ${provider.apiKey}`;
+    }
+    return headers;
+};
+/** Forward one editor request to its provider's upstream, injecting the stored key. */
+export const forwardToProvider = async (provider, request) => {
+    const url = `${provider.baseUrl}${request.restPath}${request.query}`;
+    const init = {
+        method: request.method,
+        headers: buildUpstreamHeaders(provider),
+    };
+    if (request.body && request.method !== 'GET' && request.method !== 'HEAD') {
+        init.body = request.body;
+    }
+    const response = await fetch(url, init);
+    const body = Buffer.from(await response.arrayBuffer());
+    return {
+        status: response.status,
+        contentType: response.headers.get('content-type') ?? 'application/json',
+        body,
+    };
+};
+//# sourceMappingURL=proxy.js.map

package/dist/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAkBvC,MAAM,oBAAoB,GAAG,CAAC,QAAwB,EAA0B,EAAE;IAChF,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;QACvC,OAAO,CAAC,mBAAmB,CAAC,GAAG,iBAAiB,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,QAAwB,EACxB,OAAqB,EACC,EAAE;IACxB,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IACrE,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,oBAAoB,CAAC,QAAQ,CAAC;KACxC,CAAC;IACF,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB;QACvE,IAAI;KACL,CAAC;AACJ,CAAC,CAAC"}