@skaile/transform-proxy 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.2.1
+
+- Anthropic walker: the pipeline `instruction` is appended after the host's system prompt (last text block, or after a blank line for a string `system`) instead of being prepended. Claude Code gateways such as TeamClaude answer 429 `rate_limit_error` for Sonnet when the system prompt does not start with the Claude Code blocks; with the instruction first, omp and Claude Code requests for `claude-sonnet-4-5` through the proxy were refused.
+
 ## 0.2.0
 
 - OpenAI chat completions (`/chat/completions`) and OpenAI responses (`/responses`) walkers: text leaves, tool-call arguments and reasoning summaries are transformed outbound and restored in JSON and SSE replies; `image_url`, `input_audio`, `file`, `input_image` and `input_file` parts are refused with 400 `unsupported_content`. Responses reasoning summaries are cached by item id so a replayed reasoning item is sent back byte for byte.

package/README.md

@@ -21,10 +21,12 @@ The proxy strips all four headers before forwarding. Every other header, includi
 |---|---|
 | `POST …/messages` | Anthropic request and response: request rewritten, JSON reply and SSE stream restored. |
 | `POST …/messages/count_tokens` | Request rewritten; the response passes through untouched. |
+| `POST …/chat/completions` | OpenAI chat request and response: request rewritten, JSON reply and SSE stream restored. |
+| `POST …/responses` | OpenAI responses request and response: request rewritten, JSON reply and SSE stream restored. |
 | `GET …/models` | Passthrough. |
-| anything else (chat completions, responses, embeddings) | 404 `unsupported_route`. |
+| anything else (embeddings included) | 404 `unsupported_route`. |
 
-OpenAI chat and responses walkers are not implemented yet. Embeddings are refused on purpose: a vector of pseudonymized input cannot be restored.
+Embeddings are refused on purpose: a vector of pseudonymized input cannot be restored.
 
 ## Refusals
 
@@ -111,6 +113,8 @@ A module default-exports a `TransformModule`:
 - It returns a `TransformFactory`, which runs once per `(session, pipeline)`: `(ctx: { sessionId, facts, log }) => Transform`.
 - A `Transform` has `instruction?`, `outbound(text, leaf)`, `inbound(text)`, `inboundStream()` and `dispose?()`.
 
+The Anthropic walker appends the pipeline `instruction` after the host's system prompt: a string `system` gets it after a blank line, a block array gets it as one more text block at the end, and an absent `system` becomes the instruction. The host's leading blocks stay first, because Claude Code gateways (TeamClaude) refuse Sonnet requests with 429 `rate_limit_error` when the system prompt does not start with the Claude Code blocks. The OpenAI walkers still put the instruction first: a leading `system` message in chat completions, a prefix of `instructions` in responses.
+
 `inboundStream().push(c1) + … + flush()` must equal `inbound(c1 + … + cn)` for every chunking.
 
 Connectors publish facts through `proxy.session(id).publisher(source)`. Facts are in-process only.

package/dist/cli.d.mts

@@ -1,4 +1,4 @@
-import { i as TransformProxy } from "./server-D5nBnO7T.mjs";
+import { i as TransformProxy } from "./server-C_eKyCTV.mjs";
 /** Environment variable that supplies the client token when `--token` is absent. */
 export declare const TOKEN_ENV = "SKAILE_TRANSFORM_PROXY_TOKEN";
 export interface CliEnvironment {

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { d as createTransformProxy, o as resolveProxyConfig, v as errorMessage } from "./config-DQPsbYLi.mjs";
+import { d as createTransformProxy, o as resolveProxyConfig, v as errorMessage } from "./config-Xdn_LYpZ.mjs";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { homedir } from "node:os";

package/dist/{config-DQPsbYLi.mjs → config-Xdn_LYpZ.mjs}

@@ -434,13 +434,18 @@ function toolNamesById(messages) {
 	}
 	return names;
 }
+/**
+* Appends the instruction after the host's system prompt. Gateways that serve only Claude Code
+* traffic check that the system prompt starts with the Claude Code blocks (TeamClaude answers
+* 429 for Sonnet otherwise), so the host's leading blocks must stay first.
+*/
 function withInstruction(system, instruction) {
 	if (system === void 0) return instruction;
-	if (typeof system === "string") return `${instruction}\n\n${system}`;
-	if (Array.isArray(system)) return [{
+	if (typeof system === "string") return `${system}\n\n${instruction}`;
+	if (Array.isArray(system)) return [...system, {
 		type: "text",
 		text: instruction
-	}, ...system];
+	}];
 	return system;
 }
 function newBlockState(kind, transform) {

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { _ as TransformModule, a as TransformProxyOptions, c as TransformSpec, d as SessionFactPublisher, f as SessionFacts, g as TransformFactory, h as Transform, i as TransformProxy, l as Logger, m as TextLeafKind, n as SESSION_HEADER, o as UPSTREAM_HEADER, p as TextLeaf, r as TOKEN_HEADER, s as createTransformProxy, t as PIPELINE_HEADER, u as SessionFact, v as TransformSessionContext } from "./server-D5nBnO7T.mjs";
+import { _ as TransformModule, a as TransformProxyOptions, c as TransformSpec, d as SessionFactPublisher, f as SessionFacts, g as TransformFactory, h as Transform, i as TransformProxy, l as Logger, m as TextLeafKind, n as SESSION_HEADER, o as UPSTREAM_HEADER, p as TextLeaf, r as TOKEN_HEADER, s as createTransformProxy, t as PIPELINE_HEADER, u as SessionFact, v as TransformSessionContext } from "./server-C_eKyCTV.mjs";
 /** One stage's streamed inbound transformer, as returned by `Transform.inboundStream()`. */
 interface InboundStream {
   push(chunk: string): string;

package/dist/index.mjs

@@ -1 +1 @@
-export { t as CONFIG_FILE_NAME, s as PIPELINE_HEADER, c as SESSION_HEADER, l as TOKEN_HEADER, u as UPSTREAM_HEADER, h as UnsupportedContentError, m as anthropicWalker, _ as composeTransforms, n as configCandidates, g as createSessionFacts, d as createTransformProxy, r as findProxyConfig, i as loadProxyConfig, p as openaiChatWalker, f as openaiResponsesWalker, a as parseProxyConfig, o as resolveProxyConfig, y as silentLogger } from "./config-DQPsbYLi.mjs";
+export { t as CONFIG_FILE_NAME, s as PIPELINE_HEADER, c as SESSION_HEADER, l as TOKEN_HEADER, u as UPSTREAM_HEADER, h as UnsupportedContentError, m as anthropicWalker, _ as composeTransforms, n as configCandidates, g as createSessionFacts, d as createTransformProxy, r as findProxyConfig, i as loadProxyConfig, p as openaiChatWalker, f as openaiResponsesWalker, a as parseProxyConfig, o as resolveProxyConfig, y as silentLogger } from "./config-Xdn_LYpZ.mjs";

package/dist/omp/index.d.mts

@@ -1,4 +1,4 @@
-import { a as TransformProxyOptions, i as TransformProxy } from "../server-D5nBnO7T.mjs";
+import { a as TransformProxyOptions, i as TransformProxy } from "../server-C_eKyCTV.mjs";
 interface OmpModel {
   readonly provider: string;
   readonly id: string;

package/dist/omp/index.mjs

@@ -1,4 +1,4 @@
-import { c as SESSION_HEADER, d as createTransformProxy, i as loadProxyConfig, l as TOKEN_HEADER, n as configCandidates, r as findProxyConfig, u as UPSTREAM_HEADER, v as errorMessage, y as silentLogger } from "../config-DQPsbYLi.mjs";
+import { c as SESSION_HEADER, d as createTransformProxy, i as loadProxyConfig, l as TOKEN_HEADER, n as configCandidates, r as findProxyConfig, u as UPSTREAM_HEADER, v as errorMessage, y as silentLogger } from "../config-Xdn_LYpZ.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";

package/dist/{server-D5nBnO7T.d.mts → server-C_eKyCTV.d.mts}

@@ -12,7 +12,7 @@ interface TextLeaf {
 }
 /** One session's instance of one pipeline stage. */
 interface Transform {
-  /** Prepended to the system prompt; omit when the model needs no instruction. */
+  /** Added to the system prompt by each wire walker (Anthropic: appended last; OpenAI: placed first); omit when the model needs no instruction. */
   readonly instruction?: string;
   /** Host -> model, one text leaf. A throw refuses the request (502 `transform_failed`); nothing is sent. */
   outbound(text: string, leaf: TextLeaf): Promise<string>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skaile/transform-proxy",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "type": "module",
   "description": "Same-protocol passthrough proxy that runs model requests and replies through a chain of text transforms (Anthropic Messages, OpenAI chat, OpenAI responses)",
   "license": "MIT",